Spyware / Malware / Virus Removal

AnLogRpt and other exe pop ups [Solved]

21 min read

Looking for the outcome? Ask AI

wil1571

Post #16May 15, 2015, 2:25 PM UTC

Rogue KIller report:

RogueKiller V10.6.3.0 (x64) [May 11 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Daddy [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller.exe
Mode : Scan – Date : 05/15/2015 18:19:09

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 24 ¤¤¤
[Orphan] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad | WebCheck : {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad | WebCheck : {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 1 (GFS Unread Stub) | (default) : {99FD978C-D287-4F50-827F-B2C658EDA8E7} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2 (GFS Stub) | (default) : {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) | (default) : {920E6DB1-9907-4370-B3A0-BAFC03D81399} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 3 (GFS Folder) | (default) : {16F3DD56-1AF5-4347-846D-7C10C4192619} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 4 (GFS Unread Mark) | (default) : {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077} -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar | {47833539-D0C5-4125-9FA8-0819E2EAAC93} :   -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar | {eec0f710-38b5-4aba-99bf-ec87564a4e13} : Bing -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar | {2318C2B1-4965-11d4-9B18-009027A5CD4F} :   -> Found
[Orphan] (X64) HKEY_USERS\S-1-5-21-1055236318-1379152274-1924446089-1005\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {47833539-D0C5-4125-9FA8-0819E2EAAC93} :   -> Found
[Orphan] (X86) HKEY_USERS\S-1-5-21-1055236318-1379152274-1924446089-1005\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {47833539-D0C5-4125-9FA8-0819E2EAAC93} :   -> Found
[Orphan] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263} | CLSID : {E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : [removed] [removed] [(Unknown Country?) (XX)][(Unknown Country?) (XX)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : [removed] [removed] [(Unknown Country?) (XX)][(Unknown Country?) (XX)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : [removed] [removed] [(Unknown Country?) (XX)][(Unknown Country?) (XX)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{22B8E0EF-348D-4B3C-B7B5-4824B76341EA} | DhcpNameServer : [removed] [removed] [(Unknown Country?) (XX)][(Unknown Country?) (XX)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{22B8E0EF-348D-4B3C-B7B5-4824B76341EA} | DhcpNameServer : [removed] [removed] [(Unknown Country?) (XX)][(Unknown Country?) (XX)] -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{22B8E0EF-348D-4B3C-B7B5-4824B76341EA} | DhcpNameServer : [removed] [removed] [(Unknown Country?) (XX)][(Unknown Country?) (XX)] -> Found

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 [Too big!] ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ATA ST1000DM003-1CH1 SCSI Disk Device +++++
— User —
[MBR] a5710b2975fd7c4f14622fc698bce7d5
[BSP] ec641bc2dbd88af78b7cf108d03952a4 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 953767 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 … OK
User = LL2 … OK

+++++ PhysicalDrive1: ATA WDC WD2500JS-00S SCSI Disk Device +++++
— User —
[MBR] f93bff52020a0c6abb59010cf216aaba
[BSP] 28d8b9f3a63a9949f0d5bd75df6ae018 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 99997 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 204795904 | Size: 138474 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 … OK
User = LL2 … OK

============================================
RKreport_SCN_05092015_134420.log - RKreport_DEL_05092015_134438.log - RKreport_DEL_05092015_134439.log - RKreport_DEL_05092015_134441.log
RKreport_SCN_05092015_134724.log - RKreport_DEL_05092015_134920.log - RKreport_DEL_05092015_134922.log - RKreport_DEL_05092015_134924.log
RKreport_DEL_05092015_134926.log - RKreport_DEL_05092015_134932.log - RKreport_DEL_05092015_134941.log - RKreport_DEL_05092015_134943.log
RKreport_DEL_05092015_134945.log - RKreport_DEL_05092015_134955.log - RKreport_DEL_05092015_135002.log - RKreport_DEL_05092015_135011.log
RKreport_DEL_05092015_135013.log - RKreport_DEL_05092015_135020.log - RKreport_DEL_05092015_135024.log - RKreport_DEL_05092015_135035.log
RKreport_DEL_05092015_135051.log - RKreport_DEL_05092015_135057.log - RKreport_DEL_05092015_135104.log - RKreport_DEL_05092015_135106.log
RKreport_DEL_05092015_135113.log - RKreport_DEL_05092015_135116.log - RKreport_DEL_05092015_135119.log - RKreport_DEL_05092015_135124.log
RKreport_SCN_05092015_135336.log - RKreport_DEL_05092015_135411.log

wil1571

Post #17May 15, 2015, 2:32 PM UTC

Also just this morning there was a windows update failure - reverting message after automatic updates.

Satchfan

Post #18May 15, 2015, 2:54 PM UTC

That log was clean.

Please post the other, (checkup.txt), log.

wil1571

Post #19May 15, 2015, 3:03 PM UTC

Security Check report:

Results of screen317's Security Check version 1.001
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Webroot SecureAnywhere
Spybot - Search and Destroy
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
Spybot - Search & Destroy
Java 8 Update 31
Java version 32-bit out of Date!
Adobe Flash Player 16.0.0.257 Flash Player out of Date!
Adobe Reader XI
Mozilla Firefox (37.0.2)
````````Process Check: objlist.exe by Laurent````````
Spybot Teatimer.exe is disabled!
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 2%
````````````````````End of Log``````````````````````

Satchfan

Post #20May 15, 2015, 3:20 PM UTC

The last FRST log you sent was run some time ago. Please send an up-to-date one so that I can see what is happening.

Have to go out for a while now so may not reply for a while.

Satchfan

wil1571

Post #21May 15, 2015, 4:14 PM UTC

FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-05-2015 02
Ran by [removed] (administrator) on USER-PC on 15-05-2015 20:06:05
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Webroot) C:\Program Files\Webroot\WRSA.exe
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\…\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\…\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\…\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\…\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291128 2013-03-06] (Intel Corporation)
HKLM-x32\…\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
HKLM-x32\…\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\…\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\…\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585048 2014-05-31] (Razer Inc.)
HKLM-x32\…\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)
HKLM-x32\…\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\…\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\…\Run: [] => [X]
HKLM-x32\…\Run: [WRSVC] => C:\Program Files\Webroot\WRSA.exe [817072 2015-05-06] (Webroot)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Run: [Spybot-S&D; Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Run: [HP Photosmart 5510d series (NET)] => C:\Program Files\HP\HP Photosmart 5510d series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [41200 2015-05-04] (Overwolf LTD)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil64_14_0_0_145_ActiveX.exe [538288 2014-11-30] (Adobe Systems Incorporated)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175880 2015-04-09] (NVIDIA Corporation)
AppInit_DLLs: acaptuser64.dll => C:\Windows\system32\acaptuser64.dll [119160 2008-06-11] (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013-10-19]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Daddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Photosmart 5510d series.lnk [2013-11-14]
ShortcutTarget: Monitor Ink Alerts - HP Photosmart 5510d series.lnk -> C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uae.msn.com/?rd=1&ucc;=AE&dcc;=AE&opt;=0
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll No File
BHO: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax64\wrflt.dll [2015-04-18] (Webroot)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-27] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax86\wrflt.dll [2015-04-18] (Webroot)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-27] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
Toolbar: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] [removed] [removed]

FireFox:
========
FF ProfilePath: C:\Users\Daddy\AppData\Roaming\Mozilla\Firefox\Profiles\553pyx0k.default
FF SelectedSearchEngine:
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll [2015-01-20] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll [2015-01-20] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-09-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\ProgramData\WRData\PKG\FIREFOX\WebrootSecure_SocketServer
FF Extension: Webroot Filtering Extension - C:\ProgramData\WRData\PKG\FIREFOX\WebrootSecure_SocketServer [2015-04-18]
FF HKLM-x32\…\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome:
=======
CHR Profile: C:\Users\Daddy\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\…\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2014-01-25] (Macrovision Europe Ltd.) [File not signed]
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S2 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-15] () [File not signed]
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [999152 2015-05-04] (Overwolf LTD)
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4250624 2014-05-23] (A-Volute) [File not signed]
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 WPSHWPBC; C:\Program Files (x86)\D-Link\DWA-132\WPSHWPBC.exe [318976 2013-01-17] ()
R2 WRSVC; C:\Program Files\Webroot\WRSA.exe [817072 2015-05-06] (Webroot)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S1 A2DDA; C:\EEK\bin\a2ddax64.sys [26176 2015-05-09] (Emsisoft GmbH)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
S1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
S3 cleanhlp; C:\EEK\bin\cleanhlp64.sys [57024 2015-05-09] (Emsisoft GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [32768 2014-05-23] (Windows (R) Win 7 DDK provider)
S1 SDHookDriver; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys [63904 2013-10-10] ()
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21584 2013-05-06] ()
R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [116224 2015-05-06] (Webroot)
S3 wrUrlFlt; C:\Windows\system32\DRIVERS\wrUrlFlt.sys [41040 2015-04-18] (Webroot)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-15 18:28 - 2015-05-15 18:28 - 00007355 _____ () C:\Users\Daddy\Desktop\RKreport_SCN_05152015_181909.log
2015-05-15 18:12 - 2015-05-15 18:12 - 00000848 _____ () C:\Users\Public\Desktop\RogueKiller.lnk
2015-05-15 18:12 - 2015-05-15 18:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2015-05-15 18:12 - 2015-05-15 18:12 - 00000000 ____D () C:\Program Files\RogueKiller
2015-05-15 18:11 - 2015-05-15 18:11 - 18974568 _____ (Adlice Software ) C:\Users\Daddy\Downloads\setup.exe
2015-05-15 18:08 - 2015-05-15 18:08 - 00852630 _____ () C:\Users\Daddy\Desktop\SecurityCheck.exe
2015-05-15 08:03 - 2015-05-01 17:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 08:03 - 2015-05-01 17:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 07:16 - 2015-02-18 11:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-15 07:16 - 2015-02-18 11:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-15 07:08 - 2015-05-15 07:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-05-11 22:05 - 2015-05-11 22:05 - 00456984 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150511.220513.1704.log
2015-05-11 22:05 - 2015-05-11 22:05 - 00000022 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150511.220513.1704.zip
2015-05-10 20:15 - 2015-05-15 20:05 - 00000000 ____D () C:\Users\Daddy\Desktop\FRST-OlderVersion
2015-05-09 16:45 - 2015-05-09 16:45 - 00000000 ____D () C:\Users\Daddy\AppData\Local\CrashDumps
2015-05-09 13:54 - 2015-05-11 22:07 - 00000000 ____D () C:\EEK
2015-05-09 13:54 - 2015-05-09 13:55 - 00000743 _____ () C:\Users\Daddy\Desktop\Start Emsisoft Emergency Kit.lnk
2015-05-09 13:40 - 2015-05-15 18:12 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-05-09 13:40 - 2015-05-09 13:54 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-05-09 13:39 - 2015-05-09 13:40 - 20688472 _____ () C:\Users\Daddy\Desktop\RogueKillerX64.exe
2015-05-09 13:28 - 2015-05-09 13:28 - 00003324 _____ () C:\Windows\system32\.crusader
2015-05-09 13:20 - 2015-05-09 13:21 - 00096639 _____ () C:\Users\Daddy\Desktop\Addition.txt
2015-05-09 13:19 - 2015-05-15 20:06 - 00000888 _____ () C:\Users\Daddy\Desktop\FRST.txt
2015-05-09 13:19 - 2015-05-15 20:06 - 00000000 ____D () C:\FRST
2015-05-09 13:19 - 2015-05-15 20:05 - 02106368 _____ (Farbar) C:\Users\Daddy\Desktop\FRST64.exe
2015-05-09 13:09 - 2015-05-09 13:28 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-05-09 12:43 - 2015-05-09 12:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-09 12:41 - 2015-05-09 12:41 - 00495366 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150509.124149.8808.log
2015-05-09 12:41 - 2015-05-09 12:41 - 00000022 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150509.124149.8808.zip
2015-05-09 12:41 - 2015-05-09 12:39 - 157101768 _____ () C:\Users\Daddy\Desktop\EmsisoftEmergencyKit.exe
2015-05-09 12:41 - 2015-05-09 12:29 - 11024496 _____ (SurfRight B.V.) C:\Users\Daddy\Desktop\HitmanPro_x64.exe
2015-05-09 12:41 - 2015-05-09 12:22 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Daddy\Desktop\mbam-setup-2.1.6.1022.exe
2015-05-09 12:41 - 2015-05-09 12:10 - 00221384 _____ (ESET) C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe
2015-05-09 10:46 - 2015-05-09 10:47 - 05198336 _____ (AVAST Software) C:\Users\Daddy\Desktop\aswMBR.exe
2015-05-06 19:58 - 2015-05-06 19:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-02 12:07 - 2015-05-02 12:07 - 00000000 ____D () C:\Users\Public\Documents\PC Faster
2015-05-02 11:19 - 2015-05-02 11:19 - 00000000 ____D () C:\Users\Daddy\Documents\ProcAlyzer Dumps
2015-05-02 10:28 - 2015-05-02 10:28 - 00986624 _____ () C:\Users\Daddy\Downloads\MicrosoftFixit50850 (1).msi
2015-05-01 11:31 - 2015-05-01 11:31 - 00016225 _____ () C:\Users\Daddy\Documents\My Movie.wlmp
2015-05-01 10:56 - 2015-05-01 10:56 - 00000000 ____D () C:\Users\Daddy\Tracing
2015-05-01 10:54 - 2015-05-01 10:54 - 00001500 _____ () C:\Users\Public\Desktop\Free Video Flip and Rotate.lnk
2015-05-01 10:54 - 2015-05-01 10:54 - 00001245 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-05-01 10:54 - 2015-05-01 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-05-01 10:54 - 2015-05-01 10:54 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-05-01 10:50 - 2015-05-01 10:50 - 00001374 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-05-01 10:50 - 2015-05-01 10:50 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-05-01 10:50 - 2015-05-01 10:50 - 00000000 ____D () C:\Windows\en
2015-05-01 10:49 - 2015-05-01 10:49 - 00002486 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-05-01 10:49 - 2015-05-01 10:49 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-05-01 10:49 - 2015-05-01 10:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-05-01 10:48 - 2015-05-01 10:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-05-01 10:48 - 2015-05-01 10:48 - 00000000 ____D () C:\Program Files\Windows Live
2015-05-01 10:48 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2015-05-01 10:47 - 2015-05-01 10:55 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\DVDVideoSoft
2015-05-01 10:47 - 2015-05-01 10:49 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-05-01 10:45 - 2015-05-01 10:46 - 30138712 _____ (DVDVideoSoft Ltd. ) C:\Users\Daddy\Downloads\FreeVideoFlipAndRotate.exe
2015-05-01 10:44 - 2015-05-01 10:44 - 00000360 _____ () C:\Windows\DirectX.log
2015-05-01 10:43 - 2015-05-01 10:43 - 00002177 _____ () C:\Users\Daddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-05-01 10:43 - 2015-05-01 10:43 - 00002104 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-05-01 10:43 - 2015-05-01 10:43 - 00002104 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-05-01 10:43 - 2015-05-01 10:43 - 00000000 ___RD () C:\Users\Daddy\OneDrive
2015-05-01 10:43 - 2015-05-01 10:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2015-05-01 10:42 - 2015-05-01 10:42 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-05-01 10:41 - 2015-05-01 11:07 - 00000000 ____D () C:\Users\Daddy\AppData\Local\Windows Live
2015-05-01 10:41 - 2015-05-01 10:41 - 01239752 _____ (Microsoft Corporation) C:\Users\Daddy\Downloads\wlsetup-web.exe
2015-04-25 14:28 - 2015-05-09 15:14 - 00000000 ____D () C:\ProgramData\SecTaskMan
2015-04-25 14:28 - 2015-04-25 14:28 - 00001162 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk
2015-04-25 14:28 - 2015-04-25 14:28 - 00001151 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk
2015-04-25 14:28 - 2015-04-25 14:28 - 00001139 _____ () C:\Users\Public\Desktop\Security Task Manager.lnk
2015-04-25 14:28 - 2015-04-25 14:28 - 00000000 ____D () C:\Users\Daddy\AppData\Local\SecTaskMan
2015-04-25 14:28 - 2015-04-25 14:28 - 00000000 ____D () C:\Program Files (x86)\Security Task Manager
2015-04-25 14:24 - 2015-04-25 14:24 - 00000000 ____D () C:\Users\Daddy\Downloads\exe-fix-twc
2015-04-21 22:12 - 2015-04-18 10:39 - 00010752 _____ () C:\Users\Daddy\Desktop\exefix_xp.com
2015-04-21 22:08 - 2015-04-21 22:08 - 00000000 ____D () C:\Utilities
2015-04-21 22:05 - 2015-04-18 08:51 - 00002127 _____ () C:\Users\Daddy\Desktop\win7-regfix.reg
2015-04-21 21:58 - 2015-04-18 08:51 - 00002127 _____ () C:\Users\Bianca\Desktop\win7-regfix.reg
2015-04-21 21:57 - 2015-04-18 10:39 - 00010752 _____ () C:\Users\Bianca\Desktop\exefix_xp.com
2015-04-21 21:23 - 2015-04-21 21:24 - 00001293 _____ () C:\Users\Daddy\Downloads\exe-fix-twc.zip
2015-04-18 10:52 - 2015-05-15 20:06 - 00000000 ____D () C:\ProgramData\WRData
2015-04-18 10:52 - 2015-05-06 19:39 - 00166128 _____ (Webroot) C:\Windows\SysWOW64\WRusr.dll
2015-04-18 10:52 - 2015-05-06 19:39 - 00116224 _____ (Webroot) C:\Windows\system32\Drivers\WRkrn.sys
2015-04-18 10:52 - 2015-05-06 19:39 - 00103816 _____ (Webroot) C:\Windows\system32\WRusr.dll
2015-04-18 10:52 - 2015-04-18 10:52 - 00041040 ____T (Webroot) C:\Windows\system32\Drivers\wrUrlFlt.sys
2015-04-18 10:52 - 2015-04-18 10:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webroot SecureAnywhere
2015-04-18 10:52 - 2015-04-18 10:52 - 00000000 ____D () C:\Program Files\Webroot
2015-04-18 08:14 - 2015-04-18 08:14 - 00000000 ____D () C:\Users\Mom\.swt
2015-04-18 08:13 - 2015-04-18 08:16 - 00000000 ____D () C:\Users\Mom\AppData\Roaming\Azureus
2015-04-17 17:53 - 2015-04-17 17:53 - 00986624 _____ () C:\Users\Daddy\Downloads\MicrosoftFixit50850.msi
2015-04-17 17:46 - 2015-04-17 17:46 - 00986624 _____ () C:\Users\Mom\Downloads\MicrosoftFixit50850(1).msi
2015-04-17 17:44 - 2015-04-17 17:44 - 00986624 _____ () C:\Users\Mom\Downloads\MicrosoftFixit50850.msi
2015-04-17 15:09 - 2015-04-17 15:09 - 00072008 _____ (Azureus Software, Inc.) C:\Users\Daddy\Downloads\VuzeBittorrentClientInstaller.exe
2015-04-17 15:08 - 2015-04-17 15:08 - 00012498 _____ () C:\Users\Daddy\Downloads\Game+of+Thrones+S05E01+HDTV+x264-Xclusive+mp4 (1).torrent
2015-04-17 15:07 - 2015-04-17 15:07 - 00012498 _____ () C:\Users\Daddy\Downloads\Game+of+Thrones+S05E01+HDTV+x264-Xclusive+mp4.torrent
2015-04-16 21:53 - 2015-04-09 00:32 - 00560968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-04-16 21:50 - 2015-04-09 04:58 - 31570064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 30397072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 25375048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 24053576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 15818528 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 15716232 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 14617288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 14006752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 12852784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 11380728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 10423952 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-04-16 21:50 - 2015-04-09 04:58 - 02896528 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 02573456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01895568 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435012.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435012.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01086424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01047368 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01037640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00970568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00962192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00927440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-04-16 09:09 - 2015-04-16 09:09 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-15 15:19 - 2015-04-15 15:19 - 00000000 ____D () C:\Users\Mom\AppData\Local\Apple
2015-04-15 12:31 - 2015-04-02 04:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 12:31 - 2015-04-02 03:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 12:31 - 2015-03-25 07:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 12:31 - 2015-03-25 07:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 12:31 - 2015-03-25 07:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 12:31 - 2015-03-25 07:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 12:31 - 2015-03-25 07:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 12:31 - 2015-03-25 07:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 12:31 - 2015-03-25 07:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 12:31 - 2015-03-25 07:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 12:31 - 2015-03-25 07:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 12:31 - 2015-03-23 07:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 12:31 - 2015-03-23 07:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 12:31 - 2015-03-23 07:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 12:31 - 2015-03-23 07:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 12:31 - 2015-03-23 07:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 12:31 - 2015-03-23 07:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 12:31 - 2015-03-23 07:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 12:31 - 2015-03-23 07:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 12:31 - 2015-03-17 09:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 12:31 - 2015-03-17 09:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 12:31 - 2015-03-17 09:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 12:31 - 2015-03-17 09:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 12:31 - 2015-03-17 09:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 12:31 - 2015-03-17 09:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 12:31 - 2015-03-17 09:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 12:31 - 2015-03-17 09:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 12:31 - 2015-03-17 09:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 12:31 - 2015-03-17 09:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 12:31 - 2015-03-17 09:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-15 12:31 - 2015-03-17 09:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 12:31 - 2015-03-17 09:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 12:31 - 2015-03-17 09:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 12:31 - 2015-03-17 09:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 09:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 12:31 - 2015-03-17 09:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 12:31 - 2015-03-17 08:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 12:31 - 2015-03-17 08:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 12:31 - 2015-03-17 08:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 12:31 - 2015-03-17 08:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 12:31 - 2015-03-17 08:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 12:31 - 2015-03-17 08:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 12:31 - 2015-03-17 08:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 12:31 - 2015-03-17 08:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 12:31 - 2015-03-17 08:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 12:31 - 2015-03-17 08:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 12:31 - 2015-03-17 08:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 08:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 07:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 12:31 - 2015-03-17 07:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 12:31 - 2015-03-17 07:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 07:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 07:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 12:31 - 2015-03-17 07:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 12:31 - 2015-03-13 08:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 12:31 - 2015-03-13 08:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 12:31 - 2015-03-13 08:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 12:31 - 2015-03-13 08:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 12:31 - 2015-03-13 08:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 12:31 - 2015-03-13 08:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 12:31 - 2015-03-13 08:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 12:31 - 2015-03-13 08:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 12:31 - 2015-03-13 07:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 12:31 - 2015-03-13 07:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 12:31 - 2015-03-13 07:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 12:31 - 2015-03-13 07:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 12:31 - 2015-03-13 07:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 12:31 - 2015-03-13 07:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 12:31 - 2015-03-13 07:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 12:31 - 2015-03-13 07:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 12:31 - 2015-03-13 07:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-15 12:31 - 2015-03-13 07:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 12:31 - 2015-03-13 07:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 12:31 - 2015-03-13 07:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 12:31 - 2015-03-13 07:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-15 12:31 - 2015-03-13 07:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-15 12:31 - 2015-03-13 07:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-15 12:31 - 2015-03-13 07:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 12:31 - 2015-03-13 07:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-15 12:31 - 2015-03-13 07:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 12:31 - 2015-03-13 07:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 12:31 - 2015-03-13 07:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-15 12:31 - 2015-03-13 07:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-15 12:31 - 2015-03-13 07:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-15 12:31 - 2015-03-13 07:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-15 12:31 - 2015-03-13 07:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-15 12:31 - 2015-03-13 07:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 12:31 - 2015-03-13 07:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 12:31 - 2015-03-13 07:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-15 12:31 - 2015-03-13 07:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 12:31 - 2015-03-13 07:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 12:31 - 2015-03-13 07:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 12:31 - 2015-03-13 07:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 12:31 - 2015-03-13 06:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-15 12:31 - 2015-03-13 06:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-15 12:31 - 2015-03-13 06:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-15 12:31 - 2015-03-13 06:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 12:31 - 2015-03-13 06:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 12:31 - 2015-03-13 06:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 12:31 - 2015-03-13 06:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-15 12:31 - 2015-03-13 06:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-15 12:31 - 2015-03-13 06:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 12:31 - 2015-03-13 06:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 12:31 - 2015-03-13 06:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 12:31 - 2015-03-13 06:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 12:31 - 2015-03-13 06:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 12:31 - 2015-03-13 06:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 12:31 - 2015-03-10 07:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 12:31 - 2015-03-10 07:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 12:31 - 2015-03-10 07:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 12:31 - 2015-03-10 07:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 12:31 - 2015-03-05 09:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 12:31 - 2015-03-05 08:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 12:31 - 2015-02-25 07:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 12:31 - 2015-01-28 03:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-04-15 12:30 - 2015-03-13 08:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 12:30 - 2015-03-13 08:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 12:30 - 2015-03-13 07:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 12:30 - 2015-03-04 08:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 12:30 - 2015-03-04 08:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 12:30 - 2015-03-04 08:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 07:46 - 2015-04-15 07:46 - 00000000 __SHD () C:\Users\Mom\AppData\Local\EmieBrowserModeList
2015-04-15 07:37 - 2015-04-15 07:37 - 00000000 ____D () C:\Users\Mom\AppData\Roaming\Real
2015-04-15 07:37 - 2015-04-15 07:37 - 00000000 ____D () C:\Users\Mom\AppData\Local\NVIDIA Corporation
2015-04-15 07:36 - 2015-04-15 07:36 - 00000000 ____D () C:\Users\Mom\AppData\Local\NVIDIA
2015-04-15 07:35 - 2015-04-15 07:37 - 00000000 ____D () C:\Users\Mom\AppData\Roaming\PC App Store

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-15 20:03 - 2013-10-13 21:46 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-15 20:01 - 2013-10-13 21:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-15 19:59 - 2014-10-17 15:23 - 00060810 _____ () C:\Windows\setupact.log
2015-05-15 19:59 - 2013-10-12 15:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-15 19:59 - 2009-07-14 09:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-15 19:18 - 2013-10-12 15:17 - 01995745 _____ () C:\Windows\WindowsUpdate.log
2015-05-15 19:09 - 2013-10-18 08:54 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-05-15 18:10 - 2009-07-14 08:45 - 00022096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-15 18:10 - 2009-07-14 08:45 - 00022096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-15 18:07 - 2009-07-14 09:13 - 00788438 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-15 18:05 - 2015-01-13 17:00 - 00000000 ___RD () C:\Users\Daddy\iCloudDrive
2015-05-15 18:04 - 2014-08-01 10:17 - 00000000 ____D () C:\Users\Daddy\AppData\Local\Overwolf
2015-05-15 18:01 - 2009-07-14 08:45 - 05081288 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-15 17:57 - 2011-04-12 12:28 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-15 17:57 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-15 17:34 - 2015-01-17 21:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-15 17:34 - 2015-01-17 21:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-15 08:11 - 2013-10-13 19:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-15 08:11 - 2013-10-12 21:39 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-15 08:06 - 2013-10-12 21:39 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-15 08:03 - 2015-01-17 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-15 07:02 - 2014-08-01 10:30 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2015-05-12 19:26 - 2014-07-30 20:57 - 05539456 _____ () C:\Users\Daddy\Downloads\noname (1).eml
2015-05-11 23:10 - 2014-07-30 20:57 - 05648049 _____ () C:\Users\Daddy\Downloads\noname.eml
2015-05-10 20:00 - 2014-11-06 16:12 - 00019388 _____ () C:\Windows\PFRO.log
2015-05-10 19:53 - 2013-10-12 17:53 - 00000000 ____D () C:\Program Files\Vuze
2015-05-09 15:20 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-09 12:58 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\TAPI
2015-05-09 10:40 - 2013-10-26 08:43 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-05-09 10:01 - 2013-11-02 20:57 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\Azureus
2015-05-07 21:07 - 2015-01-18 12:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-07 17:50 - 2014-08-06 07:32 - 00002066 _____ () C:\Users\Daddy\Desktop\PC App Store.lnk
2015-05-05 15:14 - 2009-07-14 09:08 - 00032582 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-02 12:17 - 2013-10-26 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-05-02 12:15 - 2014-06-07 12:41 - 00000000 ____D () C:\Program Files (x86)\Real
2015-05-02 12:15 - 2014-06-07 12:40 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\Real
2015-05-02 12:15 - 2014-06-07 12:13 - 00000000 ____D () C:\ProgramData\Real
2015-05-02 12:12 - 2013-10-13 21:46 - 00000000 ____D () C:\Program Files (x86)\Google
2015-05-02 11:19 - 2013-10-18 09:23 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-05-02 10:16 - 2015-03-02 19:48 - 00003338 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1055236318-1379152274-1924446089-1005
2015-05-02 10:16 - 2015-03-02 19:48 - 00003204 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1055236318-1379152274-1924446089-1005
2015-05-01 10:56 - 2013-10-30 22:02 - 00000000 ____D () C:\Users\Daddy
2015-05-01 10:48 - 2009-07-14 07:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-04-25 23:31 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-23 19:42 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\rescache
2015-04-23 18:34 - 2013-11-09 07:46 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\vlc
2015-04-18 08:14 - 2013-10-18 08:18 - 00000000 ____D () C:\Users\Mom
2015-04-16 21:54 - 2014-12-27 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-16 21:54 - 2013-10-12 15:48 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-04-16 21:36 - 2014-12-27 00:56 - 00001381 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-04-16 09:09 - 2014-05-07 00:04 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 22:12 - 2013-10-12 15:21 - 00780560 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 07:53 - 2013-12-18 14:30 - 00000000 ____D () C:\Users\Mom\AppData\Local\Mozilla
2015-04-15 07:53 - 2013-10-18 08:18 - 00000000 ____D () C:\Users\Mom\AppData\Roaming\Adobe
2015-04-15 07:53 - 2013-10-18 08:18 - 00000000 ____D () C:\Users\Mom\AppData\Local\Adobe

==================== Files in the root of some directories =======

2013-10-21 21:24 - 2013-10-21 21:24 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-11-21 20:54 - 2013-11-21 20:54 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some content of TEMP:
====================
C:\Users\Daddy\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-05-15 07:44

==================== End Of Log ============================

ADDITION LOG:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-05-2015 01
Ran by [removed] at 2015-05-09 13:20:49
Running from C:\Users\[removed]\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1055236318-1379152274-1924446089-500 - Administrator - Disabled)
Bianca (S-1-5-21-1055236318-1379152274-1924446089-1004 - Administrator - Enabled) => C:\Users\Bianca
Daddy (S-1-5-21-1055236318-1379152274-1924446089-1005 - Administrator - Enabled) => C:\Users\Daddy
Guest (S-1-5-21-1055236318-1379152274-1924446089-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1055236318-1379152274-1924446089-1002 - Limited - Enabled)
Mom (S-1-5-21-1055236318-1379152274-1924446089-1003 - Administrator - Enabled) => C:\Users\Mom

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Webroot SecureAnywhere (Enabled - Up to date) {66A6FE14-08CB-F415-3742-517201416109}
AV: Spybot - Search and Destroy (Enabled - Up to date) {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D}
AS: Webroot SecureAnywhere (Enabled - Up to date) {DDC71FF0-2EF1-FB9B-0DF2-6A007AC62BB4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat 9 Pro Extended - English, Français, Deutsch (HKLM-x32\…\{AC76BA86-1033-F400-7761-000000000004}{AC76BA86-1033-F400-7761-000000000004}) (Version: 9.0.0 - Adobe Systems)
Adobe Acrobat 9 Pro Extended 64-bit Add-On (HKLM\…\{AC76BA86-1033-0000-0064-0003D0000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\…\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\…\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Master Collection (HKLM-x32\…\{288DB08D-0708-4A94-B055-55B99E39EB62}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 14 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\…\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Apple Application Support (32-bit) (HKLM-x32\…\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\…\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\…\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\…\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AutoCAD 2011 - English (HKLM\…\AutoCAD 2011 - English) (Version: 18.1.49.0 - Autodesk)
AutoCAD 2011 - English (Version: 18.1.49.0 - Autodesk) Hidden
AutoCAD 2011 Language Pack - English (Version: 18.1.49.0 - Autodesk) Hidden
AutoCAD 2014 - English (Version: 19.1.18.0 - Autodesk) Hidden
AutoCAD 2014 Language Pack - English (Version: 19.1.18.0 - Autodesk) Hidden
Autodesk 3ds Max 2014 (HKLM\…\Autodesk 3ds Max 2014) (Version: 16.0.420.0 - Autodesk)
Autodesk 3ds Max 2014 (Version: 16.0.420.0 - Autodesk) Hidden
Autodesk 3ds Max 2014 64-bit Populate Data (HKLM\…\{7491836B-659E-47DD-ABBF-F875AD48FD10}) (Version: 1.0.0.1 - Autodesk)
Autodesk AutoCAD 2014 - English (HKLM\…\AutoCAD 2014 - English) (Version: 19.1.18.0 - Autodesk)
Autodesk Backburner 2014 (HKLM-x32\…\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 14.0.0.0 - Autodesk, Inc.)
Autodesk Composite 2014 (HKLM\…\Autodesk Composite 2014) (Version: 9.0.0.0 - Autodesk)
Autodesk Composite 2014 (Version: 9.0.0.0 - Autodesk) Hidden
Autodesk Content Service (HKLM-x32\…\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Design Review 2013 (HKLM-x32\…\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.)
Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden
Autodesk DirectConnect 2014 64-bit (HKLM\…\Autodesk DirectConnect 2014 64-bit) (Version: 8.0.56.1 - Autodesk)
Autodesk DirectConnect 2014 64-bit (Version: 8.0.56.1 - Autodesk) Hidden
Autodesk DWG TrueView 2014 (HKLM\…\DWG TrueView 2014) (Version: 19.1.18.0 - Autodesk)
Autodesk Essential Skills Movies for 3ds Max 2014 64-bit (HKLM\…\{E8814D63-BB76-4C89-A25E-264ECF11D00D}) (Version: 1.2.0.0 - Autodesk)
Autodesk Inventor 2014 - English (HKLM\…\Autodesk Inventor 2014) (Version: 18.0.17000.0000 - Autodesk)
Autodesk Inventor 2014 (Version: 18.0.17000.0000 - Autodesk) Hidden
Autodesk Inventor 2014 English Language Pack (Version: 18.0.17000.0000 - Autodesk) Hidden
Autodesk Inventor Server Engine for 3ds Max 2014 64-bit (HKLM\…\{009751C6-22D7-4548-A313-AD48FA57076F}) (Version: 16.0 - Autodesk)
Autodesk Material Library 2011 (HKLM-x32\…\{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}) (Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2011 Base Image library (HKLM-x32\…\{CD1E078C-A6B9-47DA-B035-6365C85C7832}) (Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2011 Medium Image library (HKLM-x32\…\{975951E7-14D0-49AF-A630-89680D12D7F6}) (Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2014 (HKLM-x32\…\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\…\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2014 (HKLM-x32\…\{5C29CC1F-218F-4C30-948A-11066CAC59FB}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2014 (HKLM-x32\…\{A0633D4E-5AF2-4E3E-A70A-FE9C2BD8A958}) (Version: 4.0.32.600 - Autodesk)
Autodesk Navisworks 2014 64 bit Exporter Plug-ins (HKLM\…\Autodesk Navisworks 2014 64 bit Exporter Plug-ins) (Version: 11.0.983.73 - Autodesk)
Autodesk Navisworks 2014 64 bit Exporter Plug-ins (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks 2014 64 bit Exporter Plug-ins English Language Pack (HKLM\…\Autodesk Navisworks 2014 64 bit Exporter Plug-ins English Language Pack (SP1)) (Version: 11.0.983.73 - Autodesk)
Autodesk Navisworks 2014 64 bit Exporter Plug-ins English Language Pack (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 - 2008 DWG File Reader (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 - 2009 DWG File Reader (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 - 2010 DWG File Reader (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 - 2011 DWG File Reader (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 - 2012 DWG File Reader (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 - 2013 DWG File Reader (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 - 2014 DWG File Reader (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 (HKLM\…\Autodesk Navisworks Manage 2014) (Version: 11.0.983.73 - Autodesk)
Autodesk Navisworks Manage 2014 (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk Navisworks Manage 2014 English Language Pack (HKLM\…\Autodesk Navisworks Manage 2014 English Language Pack) (Version: 11.0.983.73 - Autodesk)
Autodesk Navisworks Manage 2014 English Language Pack (Version: 11.0.983.73 - Autodesk) Hidden
Autodesk ReCap (HKLM\…\Autodesk ReCap) (Version: 1.0.43.24 - Autodesk)
Autodesk ReCap (Version: 1.0.43.24 - Autodesk) Hidden
Autodesk ReCap Language Pack-English (Version: 1.0.43.24 - Autodesk) Hidden
Autodesk Revit 2014 (HKLM\…\Autodesk Revit 2014) (Version: 13.03.08151 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2014 (HKLM\…\Autodesk Revit Interoperability for 3ds Max 2014) (Version: 13.02.15161 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2014 (Version: 13.02.15161 - Autodesk) Hidden
Autodesk Revit Interoperability for Inventor 2014 (HKLM\…\Autodesk Revit Interoperability for Inventor 2014) (Version: 13.02.15161 - Autodesk)
Autodesk Revit Interoperability for Inventor 2014 (Version: 13.02.15161 - Autodesk) Hidden
Autodesk Workflows 2014 (HKLM\…\{11672AB2-3D48-4D38-9123-719E5FF93333}) (Version: 4.0.19.0 - Autodesk, Inc.)
Bing Bar (HKLM-x32\…\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bonjour (HKLM\…\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brorsoft Video Converter Ver 1.4.0.5345 (HKLM-x32\…\{3231B80A-455C-497a-8425-3E44C006D76C}_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DWA-132 (HKLM-x32\…\{9899B8B5-C656-4816-903C-29C4185BF674}) (Version: 1.00.0000 - D-Link)
DWG TrueView 2014 (Version: 19.1.18.0 - Autodesk) Hidden
Eco Materials Adviser for Autodesk Inventor 2014 (64-bit) (HKLM\…\{530B8614-C5DE-475B-AF6F-71BED461552C}) (Version: 4.4.1.0 - Granta Design Limited)
FARO LS 1.1.406.58 (HKLM-x32\…\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FARO LS 1.1.408.2 (HKLM-x32\…\{91221AAC-F2A0-4028-8016-C7DAF63CB6CC}) (Version: 4.8.2.25521 - FARO Scanner Production)
FARO LS 1.1.501.0 (64bit) (HKLM-x32\…\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production)
FARO LS 4.8.2.25521 (HKLM-x32\…\FARO LS_is1) (Version: - FARO Technologies)
Free Video Flip and Rotate version 1.0.10.415 (HKLM-x32\…\Free Video Flip and Rotate_is1) (Version: 1.0.10.415 - DVDVideoSoft Ltd.)
Google Earth (HKLM-x32\…\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google SketchUp Pro 7 (HKLM-x32\…\{48E15C9C-E25C-40AD-A46B-AB270729B9B9}) (Version: 2.0.8657 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\…\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
HP Photo Creations (HKLM-x32\…\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 5510 series Basic Device Software (HKLM\…\{CFF43B48-42A1-4967-9506-7E341BBD075F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5510 series Help (HKLM-x32\…\{E02964EA-0E1B-4620-A26E-CBAB0341B1BB}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photosmart 5510 series Product Improvement Study (HKLM\…\{CBB98874-7884-4CC1-A78C-CB53C62BC77B}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5510d series Basic Device Software (HKLM\…\{8800943A-4158-4B5B-8E6B-A0AC63E10A91}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5510d series Help (HKLM-x32\…\{E59ADA18-03DB-44F5-9EF5-0FA25E4D4384}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photosmart 5510d series Product Improvement Study (HKLM\…\{A1D10BB4-412F-4BA5-9A90-43DB2870D989}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\…\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
iCloud (HKLM\…\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32\…\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\…\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3071 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\…\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\…\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\…\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
iTunes (HKLM\…\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Lenovo Smart Assistant 1.03 (HKLM-x32\…\VibeRomFlash) (Version: 1.03.0.0 - Lenovo)
Magic ISO Maker v5.5 (build 0281) (HKLM-x32\…\Magic ISO Maker v5.5 (build 0281)) (Version: - )
Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\…\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\…\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
MechWarrior Online (HKLM-x32\…\{73bcb521-8936-42d7-ad00-ec2bb399e26c}) (Version: 1.4.3.0 - Piranha Games Inc.)
MechWarrior Online (x32 Version: 1.4.3.0 - Piranha Games Inc.) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\…\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\…\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\…\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\…\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Project 2007 Service Pack 3 (SP3) (HKLM-x32\…\{90120000-003B-0000-0000-0000000FF1CE}_PRJPRO_{8446EB22-A746-46DC-B1BD-E0DFA1F3CDDA}) (Version: - Microsoft)
Microsoft Office Project Professional 2007 (HKLM-x32\…\PRJPRO) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM-x32\…\{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version: - Microsoft)
Microsoft Office Visio Professional 2007 (HKLM-x32\…\VISPRO) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\…\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\…\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mobile Assistant (HKLM-x32\…\{21CE63F5-ECA1-4FE8-983E-D83E74970D8A}) (Version: 1.4.1.10038 - Lenovo)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 37.0.2 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 37.0.2 (x86 en-US)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 35.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\…\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\…\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller Driver 349.95 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 350.12 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Graphics Driver 350.12 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.33.0 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0324 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
ON_OFF Charge 2 B13.0506.1 (HKLM-x32\…\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)
ON_OFF Charge 2 B13.0506.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Overwolf (HKLM-x32\…\Overwolf) (Version: 0.84.95.0 - Overwolf Ltd.)
PC App Store (HKLM-x32\…\PC App Store 5.0.1.8490) (Version: 5.0.1.8490 - Baidu, Inc.)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
QuickTime 7 (HKLM-x32\…\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Razer Surround (HKLM-x32\…\Razer Surround) (Version: 1.05.08 - Razer Inc.)
Razer Synapse 2.0 (HKLM-x32\…\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.13 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\…\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.)
Revit 2014 (Version: 13.03.08151 - Autodesk) Hidden
Revit 2014 Language Pack - English (Version: 13.03.08151 - Autodesk) Hidden
Scratch (HKLM-x32\…\Scratch) (Version: 1.4.0.0 - MIT Media Lab Lifelong Kindergarten Group)
Security Task Manager 2.0d (HKLM-x32\…\Security Task Manager) (Version: 2.0d - Neuber Software)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
SketchUp Import for AutoCAD 2014 (HKLM-x32\…\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk)
Spybot - Search & Destroy (HKLM-x32\…\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
TeamSpeak 3 Client (HKLM-x32\…\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\…\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\…\{90120000-003B-0000-0000-0000000FF1CE}_PRJPRO_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\…\{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
VLC media player 2.1.0 (HKLM-x32\…\VLC media player) (Version: 2.1.0 - VideoLAN)
Vuze (HKLM\…\8461-7759-5462-8226) (Version: 5.6.0.0 - Azureus Software, Inc.)
Webroot SecureAnywhere (HKLM-x32\…\WRUNINST) (Version: 8.0.8.88 - Webroot)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (12/06/2010 4.0.0000.00000) (HKLM\…\30B2813B1F17EF6D99360A190E7F0D3BA2F0DC3C) (Version: 12/06/2010 4.0.0000.00000 - Google, Inc.)
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.00 (64-bit) (HKLM\…\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
YTD Video Downloader 4.8.9 (HKLM-x32\…\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.9 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{205D755D-D3DF-4C9A-9741-690E23986A50}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\lcodieD.dll (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\iDrop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\TI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3023B2DC-C93E-4FD8-9C20-FF18F1462052}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3BD6B418-9394-4CF8-9A41-A028B8D0F7C3}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\lcodieD.dll (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2014\en-US\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{43DB29DA-D3A0-460E-98AA-2A6C1026EC9B}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{4B4D9AC4-CF47-4080-978A-B632E36323B6}\localserver32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\Roamer.exe (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\RxTest.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{5DA73FA5-D291-41BF-80A1-8CD7D8BD8949}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6324BEFA-CF14-43CF-BE51-52CB862CA634}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\lcodieD.dll (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2011\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtCp.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{899FE301-0751-11D5-A066-00B0D011BBC8}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\lcodieD.dll (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{8A75ADC4-D3D6-4511-93F9-37BD4B3A13FE}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\lcodieD.dll (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\BodyReceiver.dll ()
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C30F5AC5-34BD-4B89-A9EF-79B63AD314D6}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\lcodieD.dll (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\RxApprenticeServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2011\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2011\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\AcInetUI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\RxInventorUtilities.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E951A5CB-B799-4223-B767-581BC79C6F10}\InprocServer32 -> C:\Program Files\Autodesk\Navisworks Manage 2014\lcodieD.dll (Autodesk Ltd.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\InvResc.dll (Autodesk)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2014\Bin\InvTXTStack.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll No File
CustomCLSID: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll No File

==================== Restore Points =========================

28-04-2015 20:22:40 Windows Backup
30-04-2015 20:57:15 Windows Update
01-05-2015 10:42:07 Windows Live Essentials
01-05-2015 10:43:43 Installed DirectX
01-05-2015 10:44:35 Installed DirectX
01-05-2015 10:45:23 Installed DirectX
01-05-2015 10:47:46 WLSetup
02-05-2015 10:29:15 Installed Microsoft Fix it 50850
02-05-2015 12:17:13 Removed Autodesk 360
07-05-2015 14:49:52 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 06:34 - 2013-10-26 11:30 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com

There are 1000 more lines.

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0B40E87F-5708-4CE4-BD29-96ABF1ACD04E} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {10822C8D-6A28-403E-A118-B2AF12CD1A95} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {1692021E-388C-4B6E-B015-72AB1B0CEB41} - System32\Tasks\{EC832BFD-7FEE-4F03-9985-BC1366F6DAF9} => C:\Users\User\Downloads\kis14.0.0.4651aEN_4879.exe
Task: {21076C16-2FBA-41E5-A5E0-BFD9C0B3E4C5} - System32\Tasks\{34578967-F02F-4F6B-B63C-1622D99A2730} => C:\Users\User\Downloads\spybotsd2-license.exe
Task: {30F9376A-1904-42A5-8DEC-27513A6CCB16} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {329E6CB7-9E68-44A5-BB83-06771E265418} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-04-05] (Overwolf LTD)
Task: {4612F17F-BB7C-466C-A24C-40DD0511D4A3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2013-09-20] (Safer-Networking Ltd.)
Task: {6EB83BE9-2E3B-47F2-BBE3-39FFC6136DF1} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Duplicaterecord.js" <==== ATTENTION
Task: {77273338-1C45-4534-B334-E1C7C29AEBBA} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1055236318-1379152274-1924446089-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {796CDFA0-4615-490A-82A8-CD44D5387F93} - System32\Tasks\{67F0FFD1-7B17-434D-B34D-995C9463D967} => C:\Users\User\Downloads\kis14.0.0.4651aEN_4879.exe
Task: {9724EE73-36B5-4202-ABE6-EB20B47C1642} - System32\Tasks\{A5F2E496-CF47-41FB-A777-CC9DFB8198DC} => C:\Program Files (x86)\Piranha Games\MechWarrior Online\MWORepairTool.exe
Task: {9D6CC647-9031-4A71-9E03-12C3436A44AE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {A1C77105-1E54-48C3-A960-27A235143F3C} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-Bianca => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {A2139E9A-26A3-4186-B05F-19EB2F204C4A} - System32\Tasks\{CA6CCCF9-7CEE-4F44-A2AC-1C38648CC8C2} => C:\Users\User\Downloads\kis14.0.0.4651aEN_4879.exe
Task: {A2BC3250-C294-42A0-A807-D0BEC35F697A} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-User => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {BF161E92-381E-4756-AA18-F036201D9441} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.)
Task: {C6F70DBD-1C1B-4C0F-B9F8-FA363AAD9A1F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {CD1A5BCB-A347-4B4C-A3D6-FA5158E2FE81} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2013-09-20] (Safer-Networking Ltd.)
Task: {D73AA852-2296-4D04-B13F-3BEE71E17E5D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2013-09-20] (Safer-Networking Ltd.)
Task: {DEA649EE-C670-4A82-953F-674203B35059} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {E632C7EB-BF75-42B6-9926-28FD480AD683} - System32\Tasks\HPCustParticipation HP Photosmart 5510 series => C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {E9E526ED-9B0E-42BA-99ED-60F9A10AD120} - System32\Tasks\HPCustParticipation HP Photosmart 5510d series => C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {EC9F4D4A-8175-4402-B96A-60B04E959501} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {EDC595E3-E8CD-482D-BC52-D5381E8DA192} - System32\Tasks\{FE7B244F-17A1-4206-8190-AC4DDE87D7F5} => C:\Users\User\Downloads\install_flashplayer11x32ax_gtba_chra_dy_awc_aih.exe
Task: {F185ADF4-A042-4133-9021-6E1146C50E86} - System32\Tasks\{51A2BD56-EF0F-4580-B245-9DA2A57218EA} => C:\Users\User\Downloads\spybotsd2-license.exe
Task: {F5A7AF61-AE47-4109-B64D-51C2A8D19A26} - System32\Tasks\lenovo mobile auto run => C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe [2013-11-22] (Lenovo)
Task: {F9461036-5D18-43F8-BDAF-585EE9CE1401} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FE75DC8E-CA3B-4390-949A-4E976F5CB418} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1055236318-1379152274-1924446089-1005 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Daddy\Downloads\noname (1).eml:OECustomProperty
AlternateDataStreams: C:\Users\Daddy\Downloads\noname.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Software\Classes\exefile: "%1" %* <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\…\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\…\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\…\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\…\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\…\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\…\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\…\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\…\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\…\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\…\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\…\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\…\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\…\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\…\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\…\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\…\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\…\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\…\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\…\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\…\123simsen.com -> www.123simsen.com

There are 7866 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1055236318-1379152274-1924446089-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Mom\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1055236318-1379152274-1924446089-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Daddy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: [removed] - [removed]

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{CFAE6C79-D6E4-464C-B3F5-ED868701D26A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F756989F-DAEE-43EF-8817-B42F1C2C7680}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D7A32C1A-EDCB-4A21-B3B0-CBC92E932810}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{782A5B26-1446-4BAE-B855-DDB64E2B3B86}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{DE2D5924-38C6-4B4A-8306-BE8604C79ED3}C:\users\user\downloads\kis14.0.0.4651aen_4879.exe] => (Allow) C:\users\user\downloads\kis14.0.0.4651aen_4879.exe
FirewallRules: [UDP Query User{6ADA216B-AC47-479C-853C-D12DF733E61E}C:\users\user\downloads\kis14.0.0.4651aen_4879.exe] => (Allow) C:\users\user\downloads\kis14.0.0.4651aen_4879.exe
FirewallRules: [TCP Query User{FF445C86-78E3-417C-ADA0-C506984EF484}C:\users\user\appdata\local\temp\nsg229e.tmp\setup.exe] => (Allow) C:\users\user\appdata\local\temp\nsg229e.tmp\setup.exe
FirewallRules: [UDP Query User{2E960765-EDB2-4167-A5F3-53DE92AD14DE}C:\users\user\appdata\local\temp\nsg229e.tmp\setup.exe] => (Allow) C:\users\user\appdata\local\temp\nsg229e.tmp\setup.exe
FirewallRules: [{3FCF54AC-57FC-4EB1-AC6E-3124206171DB}] => (Allow) C:\Program Files (x86)\Piranha Games\MechWarrior Online\Bin32\MechWarriorOnline.exe
FirewallRules: [{05F7E94D-636F-45AD-B097-3001B7629908}] => (Allow) C:\Program Files (x86)\Piranha Games\MechWarrior Online\Bin32\MechWarriorOnline.exe
FirewallRules: [{706780D0-A9A5-4D17-9A0C-58D3854CD5C6}] => (Allow) C:\Program Files (x86)\Piranha Games\MechWarrior Online\Bin32\MechWarriorOnline.exe
FirewallRules: [{FF3AFDC1-AFC6-4FF7-806A-DA894CDB5188}] => (Allow) C:\Program Files (x86)\Piranha Games\MechWarrior Online\Bin32\MechWarriorOnline.exe
FirewallRules: [{B80FF4A3-AD52-49D1-BA55-A08C20F9CFAD}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
FirewallRules: [{46D14BC7-96CA-4FED-B8F4-5F4F5B37DC72}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
FirewallRules: [{A79D4D05-41C9-4B68-88FD-9CFD42DD9C68}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
FirewallRules: [{EF0D5512-E7C3-4A74-B2B5-1A87740192AA}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
FirewallRules: [{486BE9C6-73FF-481B-B06C-1BF77AECC56C}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe
FirewallRules: [{17DE8799-1B28-423C-87AB-ECD6BF58FE94}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe
FirewallRules: [{00507251-F4EC-42D2-A620-C9E2F1DE75DB}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe
FirewallRules: [{4C08EF49-E162-46A1-AE45-2F0BEC2550F6}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe
FirewallRules: [{380E72C5-FA9B-446F-9DC0-99BF870FAFBE}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
FirewallRules: [{9D04DE42-2CE7-4E8B-8E93-B0BAF1C26D12}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
FirewallRules: [{80C1B001-ED0B-449C-ACD4-35D28D499000}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
FirewallRules: [{E6D3FB2E-A869-4DCD-A3D1-2B5A7068BA3E}] => (Allow) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
FirewallRules: [TCP Query User{FC60C45D-0206-4AA7-B7DC-7EC7D50E0BEA}C:\program files (x86)\torntv.com\torntv downloader.exe] => (Block) C:\program files (x86)\torntv.com\torntv downloader.exe
FirewallRules: [UDP Query User{E54B6D88-4159-4870-BE93-964FA5C548CF}C:\program files (x86)\torntv.com\torntv downloader.exe] => (Block) C:\program files (x86)\torntv.com\torntv downloader.exe
FirewallRules: [{FE4116DB-6DDE-4E49-997F-314C9AD62E9B}] => (Allow) C:\Users\Daddy\AppData\Local\Temp\7zS27F8\hppiw.exe
FirewallRules: [{8ED101B0-9B46-4F96-9BE7-38D33D75499B}] => (Allow) C:\Users\Daddy\AppData\Local\Temp\7zS27F8\hppiw.exe
FirewallRules: [{28882430-AEAA-4D2D-9FAC-1FEFC72A1903}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\DeviceSetup.exe
FirewallRules: [{6B4EEA7C-E3F8-4537-A831-5D92E80364F5}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{76237B24-0C23-414C-B3A4-42EA5C5B1430}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{4E7C789B-4E53-46EA-8230-C3EFB634AAC7}] => (Allow) C:\Users\Daddy\AppData\Local\Temp\7zS30C5\hppiw.exe
FirewallRules: [{B24A445B-5403-412A-80ED-52A68D97F45C}] => (Allow) C:\Users\Daddy\AppData\Local\Temp\7zS30C5\hppiw.exe
FirewallRules: [{15306B81-A697-4A99-821E-A5C5C5097E9C}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\DeviceSetup.exe
FirewallRules: [{8477B3D4-E646-4FB8-9173-86EF1FA7A06C}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{59340B64-5ECC-4F14-92AC-C06D1186E8EE}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{C4B7D5B1-77F4-4C0D-90B6-C3E8D00C7FE7}] => (Allow) LPort=50248
FirewallRules: [TCP Query User{EA8EA3EF-3056-4B03-9AE6-951D3CF95ECD}C:\program files (x86)\google\google sketchup 7\sketchup.exe] => (Allow) C:\program files (x86)\google\google sketchup 7\sketchup.exe
FirewallRules: [UDP Query User{837DE6FB-F44E-4928-92FB-437D3C29A526}C:\program files (x86)\google\google sketchup 7\sketchup.exe] => (Allow) C:\program files (x86)\google\google sketchup 7\sketchup.exe
FirewallRules: [TCP Query User{D8F30B2A-149E-446F-801A-DA46EABD0FC3}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [UDP Query User{44B1EBF0-848A-491B-B54B-BEE4C8FADB2A}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [TCP Query User{11490FFA-A8FE-4023-9907-56940DD73A3B}C:\program files (x86)\magicplus\magicplus.exe] => (Allow) C:\program files (x86)\magicplus\magicplus.exe
FirewallRules: [UDP Query User{A72AFC8E-0D92-45F9-8B61-11FE098791DB}C:\program files (x86)\magicplus\magicplus.exe] => (Allow) C:\program files (x86)\magicplus\magicplus.exe
FirewallRules: [{A15301F5-55B3-44D7-B134-32BA2EE338E1}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{AE116A4D-C8FB-431D-B412-52A2829DC445}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{26D0DDC2-685F-489E-9A5A-89BDE198578F}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{F5B7CAF5-FFC4-4057-A92B-DCF66A24626E}] => (Allow) C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{C411BFD5-3316-43E8-A2A8-F4CE502EAE66}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{E2B21950-AA07-4B4E-AB71-902A16009F39}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{60350FB3-0EE3-4A8A-A35D-D253F86B6398}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{8865A717-5F85-45FF-935B-E115AAB6B480}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{54C7E3E4-EA31-452A-A726-4F455FCF0C76}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [{9A6080F8-6D88-47EC-B6C7-E1E744DCA027}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [{2C76C863-37A6-447F-9679-AA22D9B44E95}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{0C09CF0A-6E09-4C6E-A4AE-E177B139959A}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{E71B501F-73FA-4D51-94E6-4289F719E62B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5BECB8A8-7770-448D-895D-84EE7016498F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8426FF49-8DB6-47A0-8324-A3B6B845C520}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5145A126-3369-404F-94C3-0FEA7B0EAAFE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E683C646-1917-4B4A-80CB-47330440F38C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{76B930F3-49D8-490F-A5D3-91A291A8DD64}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1F1742EA-D9D6-45A4-A8A0-960BB1A663F2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B09B9E49-F8ED-412D-AAE4-8C2BF86990F1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2D44617D-2879-4D0D-BEF8-844F57D1A3C8}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\Streaming Video Recorder.exe
FirewallRules: [{94B6630B-FF6C-44D3-94F0-CF18FF9F311C}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\Streaming Video Recorder.exe
FirewallRules: [{F5C72B25-9203-49F3-AFB0-CECF6B7CE85D}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftSrv.dll
FirewallRules: [{2AD0D62C-3708-4CA5-A351-0B13693CA015}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftSrv.dll
FirewallRules: [{1FE470D9-65E3-4F8D-9B8D-8C70FF226520}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDump.dll
FirewallRules: [{1925FF69-9244-466F-ACA2-BA6E618E3CED}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDump.dll
FirewallRules: [{2D615AC9-A3B7-4949-B2B8-BA16D0402DAF}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftAC.dll
FirewallRules: [{E09BE06B-5440-4ED7-995E-4B86EF4FD9CE}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftAC.dll
FirewallRules: [{0FD0072F-ADD3-45CC-9C1E-61E05115A99B}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftPlayer.dll
FirewallRules: [{DBE543A3-6BC2-4A42-ACD1-E318506EB3E2}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftPlayer.dll
FirewallRules: [{35F35531-3999-436E-BDB5-A2A7340AC2DE}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDownloaderHelp.dll
FirewallRules: [{7CE3D328-E242-4905-88A8-E9D59C70A7E7}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDownloaderHelp.dll
FirewallRules: [{C85014CD-E2E7-4C65-80FE-6847B4A227EE}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftHDSDump.dll
FirewallRules: [{539294FB-84E6-4C7F-858D-5C916D3AE34B}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftHDSDump.dll
FirewallRules: [TCP Query User{553C5260-E1E1-490C-A313-035790D20697}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [UDP Query User{73AA8566-BFD3-4305-8A22-615AA087334E}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [TCP Query User{C6EE3D75-8C3F-47E1-A5C4-E181538EA673}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{3621B8DF-39FA-4415-868E-12B158E1CDDC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{89DA03E9-0CAA-4A84-B7DF-CFF324F6D7B6}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{7DF6726A-74A0-493C-AC00-3FC35E10EC61}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{CED10975-3CBA-4C85-B65E-ADD6B1A9BCFD}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{CE1E983A-C5CA-4778-837A-D553A02BB6D2}C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe
FirewallRules: [UDP Query User{F72D2EDE-D499-4701-958D-0B6A39FE26C4}C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe
FirewallRules: [{B6CD02E6-1431-421B-93F8-871C2506F29D}] => (Allow) C:\Users\Daddy\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{95361EFE-F32F-4366-82E6-4ABE7C259DB3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4E92162B-EFC0-41CF-A06E-12A473F48C0F}] => (Allow) LPort=2869
FirewallRules: [{A4494E1E-A6A9-412C-917B-83FB7832B269}] => (Allow) LPort=1900
FirewallRules: [{55E05958-4273-4D6E-A666-EC83AB0AD298}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot-S&D; 2 Tray Icon
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D; 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D; 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D; 2 Background update service

==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (05/09/2015 01:09:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/09/2015 01:09:10 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/09/2015 01:05:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/09/2015 01:04:33 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/09/2015 01:04:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvStreamNetworkService.exe, version: 4.1.1943.6202, time stamp: 0x551399be
Faulting module name: NvStreamNetworkService.exe, version: 4.1.1943.6202, time stamp: 0x551399be
Exception code: 0xc0000005
Fault offset: 0x00000000004e920f
Faulting process id: 0xa5c
Faulting application start time: 0xNvStreamNetworkService.exe0
Faulting application path: NvStreamNetworkService.exe1
Faulting module path: NvStreamNetworkService.exe2
Report Id: NvStreamNetworkService.exe3

Error: (05/09/2015 01:02:08 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/09/2015 00:59:38 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

System errors:
=============
Error: (05/09/2015 01:19:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (05/09/2015 01:19:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (05/09/2015 01:17:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (05/09/2015 01:15:53 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2015-03-31 20:23:50.438
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-03-31 19:35:39.010
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-01-18 09:58:02.651
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2014-10-01 16:34:01.662
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2014-10-01 16:18:09.650
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2014-10-01 15:40:41.675
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2014-06-27 13:23:51.039
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2014-01-08 22:54:38.748
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-12-18 15:21:54.024
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

Date: 2013-12-18 14:55:55.917
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
Percentage of memory in use: 22%
Total physical RAM: 8079.14 MB
Available physical RAM: 6288.79 MB
Total Pagefile: 16156.46 MB
Available Pagefile: 14498.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:425.48 GB) NTFS
Drive e: (KIDS) (Fixed) (Total:97.65 GB) (Free:89.89 GB) NTFS
Drive f: () (Removable) (Total:7.26 GB) (Free:7.08 GB) FAT32
Drive h: (MOM) (Fixed) (Total:135.23 GB) (Free:62.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A07EB539)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 41D241D1)
Partition 1: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=135.2 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 7.3 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.3 GB) - (Type=0C)

==================== End Of Log ============================

Satchfan

Post #22May 15, 2015, 10:15 PM UTC

Some settings that we fixed have appeared again so I need another look.

Please run these in the order requested.

Run TDSSKiller

Please download TDSSKiller.zip

extract it to your desktop
double click TDSSKiller.exe
press Start Scan
- only if Malicious objects are found then ensure Cure is selected. Do not change it to Delete or Quarantine as it may delete infected files that are required for Windows to operate properly.
- then click Continue > Reboot now
copy and paste the log in your next reply.
- A copy of the log will be saved automatically to the root of the drive (typically C:\) called TDSSKiller_*** (*** denotes version & date)

======================================================

Download and run ComboFix

Download Combofix from either of the links below, and save it to your desktop.

Link 1
Link 2

**Note: It MUST be saved directly to your desktop. Choose save as and then make sure you choose Desktop

——————————————————————–

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

——————————————————————–

Double click on ComboFix.exe & follow the prompts.

when finished, it will produce a report for you.
please post the C:\ComboFix.txt in your next post.

Please also remember to include the TDSSKiller log

Thanks

Satchfan

wil1571

Post #23May 16, 2015, 10:51 AM UTC

TDSSKiller Log:

14:25:54.0984 0x1580 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
14:26:01.0958 0x1580 ============================================================
14:26:01.0958 0x1580 Current date / time: 2015/05/16 14:26:01.0958
14:26:01.0958 0x1580 SystemInfo:
14:26:01.0958 0x1580
14:26:01.0958 0x1580 OS Version: 6.1.7601 ServicePack: 1.0
14:26:01.0958 0x1580 Product type: Workstation
14:26:01.0958 0x1580 ComputerName: USER-PC
14:26:01.0958 0x1580 UserName: Daddy
14:26:01.0958 0x1580 Windows directory: C:\Windows
14:26:01.0958 0x1580 System windows directory: C:\Windows
14:26:01.0958 0x1580 Running under WOW64
14:26:01.0958 0x1580 Processor architecture: Intel x64
14:26:01.0958 0x1580 Number of processors: 4
14:26:01.0958 0x1580 Page size: 0x1000
14:26:01.0958 0x1580 Boot type: Normal boot
14:26:01.0958 0x1580 ============================================================
14:26:10.0366 0x1580 KLMD registered as C:\Windows\system32\drivers\36958934.sys
14:26:10.0943 0x1580 System UUID: {04BBEE75-80CF-D0BC-5B6F-AB643A3F441D}
14:26:11.0567 0x1580 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:26:11.0598 0x1580 Drive \Device\Harddisk1\DR1 - Size: 0x3A38A25E00 ( 232.88 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:26:11.0598 0x1580 ============================================================
14:26:11.0598 0x1580 \Device\Harddisk0\DR0:
14:26:11.0598 0x1580 MBR partitions:
14:26:11.0598 0x1580 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:26:11.0598 0x1580 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3800
14:26:11.0598 0x1580 \Device\Harddisk1\DR1:
14:26:11.0598 0x1580 MBR partitions:
14:26:11.0598 0x1580 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xC34E800
14:26:11.0598 0x1580 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0xC34F000, BlocksNum 0x10E75000
14:26:11.0598 0x1580 ============================================================
14:26:11.0708 0x1580 C: <-> \Device\Harddisk0\DR0\Partition2
14:26:11.0708 0x1580 E: <-> \Device\Harddisk1\DR1\Partition1
14:26:11.0739 0x1580 H: <-> \Device\Harddisk1\DR1\Partition2
14:26:11.0739 0x1580 ============================================================
14:26:11.0739 0x1580 Initialize success
14:26:11.0739 0x1580 ============================================================
14:26:50.0474 0x15c8 ============================================================
14:26:50.0474 0x15c8 Scan started
14:26:50.0474 0x15c8 Mode: Manual;
14:26:50.0474 0x15c8 ============================================================
14:26:50.0474 0x15c8 KSN ping started
14:26:53.0594 0x15c8 KSN ping finished: true
14:26:59.0210 0x15c8 ================ Scan system memory ========================
14:26:59.0210 0x15c8 System memory - ok
14:26:59.0225 0x15c8 ================ Scan services =============================
14:26:59.0381 0x15c8 [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
14:26:59.0381 0x15c8 1394ohci - ok
14:26:59.0475 0x15c8 [ D27A8B7BB0E15DFBFC6B4E774EE17AD9, CBAD45B3FFFD30C34AF918009F699B65F89043D0799FC25D2472381912F86F93 ] A2DDA           C:\EEK\bin\a2ddax64.sys
14:26:59.0475 0x15c8 A2DDA - ok
14:26:59.0506 0x15c8 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
14:26:59.0506 0x15c8 ACPI - ok
14:26:59.0522 0x15c8 [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
14:26:59.0522 0x15c8 AcpiPmi - ok
14:26:59.0803 0x15c8 [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:26:59.0803 0x15c8 AdobeARMservice - ok
14:26:59.0943 0x15c8 [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
14:26:59.0974 0x15c8 adp94xx - ok
14:27:00.0005 0x15c8 [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
14:27:00.0021 0x15c8 adpahci - ok
14:27:00.0037 0x15c8 [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
14:27:00.0052 0x15c8 adpu320 - ok
14:27:00.0099 0x15c8 [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
14:27:00.0115 0x15c8 AeLookupSvc - ok
14:27:00.0193 0x15c8 [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
14:27:00.0208 0x15c8 AFD - ok
14:27:00.0255 0x15c8 [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
14:27:00.0255 0x15c8 agp440 - ok
14:27:00.0271 0x15c8 [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
14:27:00.0286 0x15c8 ALG - ok
14:27:00.0302 0x15c8 [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
14:27:00.0302 0x15c8 aliide - ok
14:27:00.0349 0x15c8 [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
14:27:00.0349 0x15c8 amdide - ok
14:27:00.0364 0x15c8 [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
14:27:00.0380 0x15c8 AmdK8 - ok
14:27:00.0395 0x15c8 [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
14:27:00.0395 0x15c8 AmdPPM - ok
14:27:00.0442 0x15c8 [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
14:27:00.0458 0x15c8 amdsata - ok
14:27:00.0473 0x15c8 [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
14:27:00.0489 0x15c8 amdsbs - ok
14:27:00.0505 0x15c8 [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
14:27:00.0505 0x15c8 amdxata - ok
14:27:00.0551 0x15c8 [ 4542CC17440E85D2D2D73A7D40FAED0A, F157F9A137DEACFC5A1A982265F5CE05A79C0CF8F13291773E2351BEFCB94E08 ] Apowersoft_AudioDevice C:\Windows\system32\drivers\Apowersoft_AudioDevice.sys
14:27:00.0567 0x15c8 Apowersoft_AudioDevice - ok
14:27:00.0614 0x15c8 [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID           C:\Windows\system32\drivers\appid.sys
14:27:00.0629 0x15c8 AppID - ok
14:27:00.0629 0x15c8 [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
14:27:00.0645 0x15c8 AppIDSvc - ok
14:27:00.0676 0x15c8 [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
14:27:00.0692 0x15c8 Appinfo - ok
14:27:00.0988 0x15c8 [ 612CB66D93ED0F2F21BB109840C7D813, 75484123DA27B8942B13148FCF061C75A08A50386A095143736B593E9C772173 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14:27:01.0004 0x15c8 Apple Mobile Device Service - ok
14:27:01.0051 0x15c8 [ 1C726705935E89FD59E652E4F09148D0, 5D72DB5C493ED48ACBD1A520283C7B16E656FB1E8B00885696C79A09FC37487D ] AppleCharger    C:\Windows\system32\DRIVERS\AppleCharger.sys
14:27:01.0051 0x15c8 AppleCharger - ok
14:27:01.0082 0x15c8 [ 95EF7247C50C7241FDAE39A9B3AFF4AE, 6E08FB095C04B2E217B139D6431336C0F24C128A2A83082A3085DC8C44AA247D ] AppleChargerSrv C:\Windows\system32\AppleChargerSrv.exe
14:27:01.0097 0x15c8 AppleChargerSrv - ok
14:27:01.0253 0x15c8 [ 4ABA3E75A76195A3E38ED2766C962899, E2001ACD44DA270B8289DA362D26416676301773AB22616C211F31CF2E7869AA ] AppMgmt         C:\Windows\System32\appmgmts.dll
14:27:01.0269 0x15c8 AppMgmt - ok
14:27:01.0331 0x15c8 [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
14:27:01.0347 0x15c8 arc - ok
14:27:01.0394 0x15c8 [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
14:27:01.0394 0x15c8 arcsas - ok
14:27:02.0002 0x15c8 [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:27:02.0236 0x15c8 aspnet_state - ok
14:27:02.0361 0x15c8 [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
14:27:02.0361 0x15c8 AsyncMac - ok
14:27:02.0486 0x15c8 [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
14:27:02.0486 0x15c8 atapi - ok
14:27:02.0860 0x15c8 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:27:03.0079 0x15c8 AudioEndpointBuilder - ok
14:27:03.0188 0x15c8 [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
14:27:03.0203 0x15c8 AudioSrv - ok
14:27:03.0562 0x15c8 [ 3817558D8D5BBC8B0F190CF0D7C4720F, 7CD250DD22BE0E6CF6BEA639EA8220E46158CA7DF33FF803967CEAEA7FBD14E5 ] Autodesk Content Service C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
14:27:03.0593 0x15c8 Autodesk Content Service - ok
14:27:03.0781 0x15c8 [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
14:27:03.0796 0x15c8 AxInstSV - ok
14:27:04.0030 0x15c8 [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
14:27:04.0124 0x15c8 b06bdrv - ok
14:27:04.0311 0x15c8 [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
14:27:04.0373 0x15c8 b57nd60a - ok
14:27:04.0685 0x15c8 [ 5F685973740F289BE3C809952DB8408B, 4C0A0C06BB2B6B1879A860B0D68289A55F80CF74947FCCE7815F1D8121232F62 ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
14:27:04.0701 0x15c8 BBSvc - ok
14:27:04.0779 0x15c8 [ 76F78018F45E7F92164CEA5020176933, 76E1CA6E198417F3749864721C43913189A7EA07B5ED320DE543B2037CEA3D65 ] BBUpdate        C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe
14:27:04.0857 0x15c8 BBUpdate - ok
14:27:04.0997 0x15c8 [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
14:27:04.0997 0x15c8 BDESVC - ok
14:27:05.0060 0x15c8 [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
14:27:05.0060 0x15c8 Beep - ok
14:27:05.0419 0x15c8 [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
14:27:05.0465 0x15c8 BFE - ok
14:27:05.0746 0x15c8 [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
14:27:05.0777 0x15c8 BITS - ok
14:27:05.0840 0x15c8 [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
14:27:05.0840 0x15c8 blbdrive - ok
14:27:06.0058 0x15c8 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
14:27:06.0089 0x15c8 Bonjour Service - ok
14:27:06.0152 0x15c8 [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
14:27:06.0167 0x15c8 bowser - ok
14:27:06.0230 0x15c8 [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
14:27:06.0230 0x15c8 BrFiltLo - ok
14:27:06.0245 0x15c8 [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
14:27:06.0245 0x15c8 BrFiltUp - ok
14:27:06.0339 0x15c8 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
14:27:06.0355 0x15c8 Browser - ok
14:27:06.0464 0x15c8 [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
14:27:06.0495 0x15c8 Brserid - ok
14:27:06.0557 0x15c8 [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
14:27:06.0557 0x15c8 BrSerWdm - ok
14:27:06.0573 0x15c8 [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
14:27:06.0573 0x15c8 BrUsbMdm - ok
14:27:06.0589 0x15c8 [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
14:27:06.0589 0x15c8 BrUsbSer - ok
14:27:06.0620 0x15c8 [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
14:27:06.0620 0x15c8 BTHMODEM - ok
14:27:06.0729 0x15c8 [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
14:27:06.0729 0x15c8 bthserv - ok
14:27:06.0807 0x15c8 [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
14:27:06.0807 0x15c8 cdfs - ok
14:27:06.0947 0x15c8 [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
14:27:06.0963 0x15c8 cdrom - ok
14:27:07.0088 0x15c8 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
14:27:07.0088 0x15c8 CertPropSvc - ok
14:27:07.0119 0x15c8 [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
14:27:07.0119 0x15c8 circlass - ok
14:27:07.0306 0x15c8 [ B794DCF38C965FA2F93C45A7C3D582C5, 0E483EAF835B85AA4B6F449F9BB68AF0A3EE4192D29CD72F4B812F1E4D9E9A7C ] cleanhlp        C:\EEK\bin\cleanhlp64.sys
14:27:07.0306 0x15c8 cleanhlp - ok
14:27:07.0478 0x15c8 [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
14:27:07.0525 0x15c8 CLFS - ok
14:27:07.0805 0x15c8 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:27:07.0868 0x15c8 clr_optimization_v2.0.50727_32 - ok
14:27:08.0024 0x15c8 [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
14:27:08.0117 0x15c8 clr_optimization_v2.0.50727_64 - ok
14:27:08.0414 0x15c8 [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:27:08.0788 0x15c8 clr_optimization_v4.0.30319_32 - ok
14:27:08.0819 0x15c8 [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
14:27:08.0960 0x15c8 clr_optimization_v4.0.30319_64 - ok
14:27:08.0991 0x15c8 [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
14:27:08.0991 0x15c8 CmBatt - ok
14:27:09.0038 0x15c8 [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
14:27:09.0053 0x15c8 cmdide - ok
14:27:09.0163 0x15c8 [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys
14:27:09.0178 0x15c8 CNG - ok
14:27:09.0241 0x15c8 [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
14:27:09.0256 0x15c8 Compbatt - ok
14:27:09.0287 0x15c8 [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
14:27:09.0287 0x15c8 CompositeBus - ok
14:27:09.0303 0x15c8 COMSysApp - ok
14:27:09.0693 0x15c8 [ E41C4FB1D9971409E17D61F45A228121, 5EC6139D26B7198EED2D7FF5F2E7C50E4605313C4047C4CC81F59FF147235C02 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
14:27:09.0709 0x15c8 cphs - ok
14:27:09.0787 0x15c8 [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
14:27:09.0787 0x15c8 crcdisk - ok
14:27:09.0865 0x15c8 [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc        C:\Windows\system32\cryptsvc.dll
14:27:09.0880 0x15c8 CryptSvc - ok
14:27:09.0989 0x15c8 [ 54DA3DFD29ED9F1619B6F53F3CE55E49, 9177C6907A983296BF188892A894B668A09FFA058FD56B50FE12940D54B0FA5E ] CSC             C:\Windows\system32\drivers\csc.sys
14:27:10.0021 0x15c8 CSC - ok
14:27:10.0114 0x15c8 [ 3AB183AB4D2C79DCF459CD2C1266B043, 72B0187EBA9DC74E61EC5CB3DC24058DDB768843E865801894AAEAA211610C56 ] CscService      C:\Windows\System32\cscsvc.dll
14:27:10.0145 0x15c8 CscService - ok
14:27:10.0208 0x15c8 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
14:27:10.0239 0x15c8 DcomLaunch - ok
14:27:10.0333 0x15c8 [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
14:27:10.0348 0x15c8 defragsvc - ok
14:27:10.0379 0x15c8 [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
14:27:10.0395 0x15c8 DfsC - ok
14:27:10.0442 0x15c8 [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
14:27:10.0457 0x15c8 Dhcp - ok
14:27:10.0613 0x15c8 [ EA8A3E8C674B03CB4AFA1D344DBD7BC1, 564D9370AE4D12973647997684B9637B2A5A7480F66B87018F789CE4E43C8191 ] DiagTrack       C:\Windows\system32\diagtrack.dll
14:27:10.0660 0x15c8 DiagTrack - ok
14:27:10.0676 0x15c8 [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
14:27:10.0691 0x15c8 discache - ok
14:27:10.0769 0x15c8 [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
14:27:10.0769 0x15c8 Disk - ok
14:27:10.0863 0x15c8 [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys
14:27:10.0863 0x15c8 dmvsc - ok
14:27:10.0925 0x15c8 [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
14:27:10.0941 0x15c8 Dnscache - ok
14:27:10.0972 0x15c8 [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
14:27:10.0988 0x15c8 dot3svc - ok
14:27:11.0050 0x15c8 [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
14:27:11.0050 0x15c8 DPS - ok
14:27:11.0097 0x15c8 [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
14:27:11.0113 0x15c8 drmkaud - ok
14:27:11.0237 0x15c8 [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
14:27:11.0253 0x15c8 DXGKrnl - ok
14:27:11.0269 0x15c8 [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
14:27:11.0269 0x15c8 EapHost - ok
14:27:11.0581 0x15c8 [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
14:27:11.0627 0x15c8 ebdrv - ok
14:27:11.0737 0x15c8 [ 9262D6E2C239EDD6D87B080F2BCCEC9F, 4947F2C3DD9D2D08CBB03FCA822C78B24F841464FF52FDBFF7D34AC7EB484104 ] EFS             C:\Windows\System32\lsass.exe
14:27:11.0737 0x15c8 EFS - ok
14:27:11.0877 0x15c8 [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
14:27:11.0924 0x15c8 ehRecvr - ok
14:27:11.0971 0x15c8 [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
14:27:11.0986 0x15c8 ehSched - ok
14:27:12.0080 0x15c8 [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
14:27:12.0111 0x15c8 elxstor - ok
14:27:12.0127 0x15c8 [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
14:27:12.0127 0x15c8 ErrDev - ok
14:27:12.0189 0x15c8 [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
14:27:12.0205 0x15c8 EventSystem - ok
14:27:12.0236 0x15c8 [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
14:27:12.0236 0x15c8 exfat - ok
14:27:12.0267 0x15c8 [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
14:27:12.0283 0x15c8 fastfat - ok
14:27:12.0407 0x15c8 [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
14:27:12.0454 0x15c8 Fax - ok
14:27:12.0501 0x15c8 [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
14:27:12.0501 0x15c8 fdc - ok
14:27:12.0532 0x15c8 [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
14:27:12.0532 0x15c8 fdPHost - ok
14:27:12.0579 0x15c8 [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
14:27:12.0579 0x15c8 FDResPub - ok
14:27:12.0595 0x15c8 [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
14:27:12.0610 0x15c8 FileInfo - ok
14:27:12.0641 0x15c8 [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
14:27:12.0641 0x15c8 Filetrace - ok
14:27:12.0782 0x15c8 [ F76D04F7413B07DAA029F6520B64B4E8, 3EB13C0EFE737880853FB8952381E7A57723F9472E0E4ED7CDA8A0D7DE8DC90D ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
14:27:12.0797 0x15c8 FLEXnet Licensing Service - ok
14:27:13.0047 0x15c8 [ ECC329F6104EE208C24C4A8C1B4A9D14, E120DAAB58C4083577A8445230DBB841984818188BFD0609576BC704C836DF3F ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
14:27:13.0078 0x15c8 FLEXnet Licensing Service 64 - ok
14:27:13.0125 0x15c8 [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
14:27:13.0125 0x15c8 flpydisk - ok
14:27:13.0203 0x15c8 [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
14:27:13.0203 0x15c8 FltMgr - ok
14:27:13.0328 0x15c8 [ E612E86FA15EA1EF9A52433A2743C447, 8A66164541D2EE2334B6DE3995C31138EA85E3A06BC7FD901E60D345E4E1E8A8 ] FontCache       C:\Windows\system32\FntCache.dll
14:27:13.0359 0x15c8 FontCache - ok
14:27:13.0437 0x15c8 [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:27:13.0437 0x15c8 FontCache3.0.0.0 - ok
14:27:13.0453 0x15c8 [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
14:27:13.0468 0x15c8 FsDepends - ok
14:27:13.0531 0x15c8 [ 8DE1B4F579F8F8897409856F3BB7A7D2, F6F6B2450951E875C3C236F7798F960FD4433EE6B0C57132CB3D32126BEE34E0 ] fssfltr         C:\Windows\system32\DRIVERS\fssfltr.sys
14:27:13.0546 0x15c8 fssfltr - ok
14:27:13.0827 0x15c8 [ 7B4C82899A967A7EB22DAB502770AE8E, 209FB59669070FCAAACB24B0CE81C375362BF1C519B15FDB5AA3EC2C87E2069B ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
14:27:13.0967 0x15c8 fsssvc - ok
14:27:14.0045 0x15c8 [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
14:27:14.0045 0x15c8 Fs_Rec - ok
14:27:14.0123 0x15c8 [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
14:27:14.0139 0x15c8 fvevol - ok
14:27:14.0170 0x15c8 [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
14:27:14.0170 0x15c8 gagp30kx - ok
14:27:14.0201 0x15c8 [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
14:27:14.0201 0x15c8 GEARAspiWDM - ok
14:27:14.0701 0x15c8 [ EBF714703106C1D5BC3E7B4C389A5828, D09472BCF71B58CF8F463131AD778F4D2E189047EE6B9AF088BCDE7B25398682 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
14:27:14.0716 0x15c8 GfExperienceService - ok
14:27:14.0919 0x15c8 [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
14:27:14.0935 0x15c8 gpsvc - ok
14:27:15.0044 0x15c8 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:27:15.0059 0x15c8 gupdate - ok
14:27:15.0059 0x15c8 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:27:15.0075 0x15c8 gupdatem - ok
14:27:15.0184 0x15c8 [ 5D4BC124FAAE6730AC002CDB67BF1A1C, 00294F4DC7D17F6DD2A22B9C3299BED40146BA45C972367154D20DB502472551 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
14:27:15.0200 0x15c8 gusvc - ok
14:27:15.0262 0x15c8 [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
14:27:15.0262 0x15c8 hcw85cir - ok
14:27:15.0309 0x15c8 [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:27:15.0309 0x15c8 HdAudAddService - ok
14:27:15.0356 0x15c8 [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
14:27:15.0356 0x15c8 HDAudBus - ok
14:27:15.0371 0x15c8 [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
14:27:15.0371 0x15c8 HidBatt - ok
14:27:15.0387 0x15c8 [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
14:27:15.0387 0x15c8 HidBth - ok
14:27:15.0403 0x15c8 [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
14:27:15.0418 0x15c8 HidIr - ok
14:27:15.0434 0x15c8 [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
14:27:15.0434 0x15c8 hidserv - ok
14:27:15.0512 0x15c8 [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
14:27:15.0512 0x15c8 HidUsb - ok
14:27:15.0559 0x15c8 [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
14:27:15.0559 0x15c8 hkmsvc - ok
14:27:15.0590 0x15c8 [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:27:15.0605 0x15c8 HomeGroupListener - ok
14:27:15.0683 0x15c8 [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:27:15.0699 0x15c8 HomeGroupProvider - ok
14:27:15.0761 0x15c8 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
14:27:15.0761 0x15c8 HpSAMD - ok
14:27:15.0995 0x15c8 [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
14:27:16.0073 0x15c8 HTTP - ok
14:27:16.0089 0x15c8 [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
14:27:16.0089 0x15c8 hwpolicy - ok
14:27:16.0120 0x15c8 [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
14:27:16.0120 0x15c8 i8042prt - ok
14:27:16.0214 0x15c8 [ FA4C48E36F0B24E7E33D3E7E1844B9C9, F61F448B8E305DEFDDA5D4A6FC4E57C798C11ED4DA0ACB885847DC8A9A7B4E98 ] iaStorA         C:\Windows\system32\DRIVERS\iaStorA.sys
14:27:16.0229 0x15c8 iaStorA - ok
14:27:16.0385 0x15c8 [ D5854F77CEEAFC5A8405F8ECCBEC09DF, 06D94EAF55787F807FB40E95011E90B0A719AC1A1529C2C110C1EABC5BE02C5B ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
14:27:16.0385 0x15c8 IAStorDataMgrSvc - ok
14:27:16.0417 0x15c8 [ 05E24E2CA39C0D2FAADE8FC603345A7D, 01C519CABD3B1F003AAD1B6F1CE79C1A49408DFC2CE5A8008A7BD0A1266D783C ] iaStorF         C:\Windows\system32\DRIVERS\iaStorF.sys
14:27:16.0417 0x15c8 iaStorF - ok
14:27:16.0510 0x15c8 [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
14:27:16.0526 0x15c8 iaStorV - ok
14:27:16.0807 0x15c8 [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
14:27:16.0838 0x15c8 idsvc - ok
14:27:16.0869 0x15c8 IEEtwCollectorService - ok
14:27:17.0197 0x15c8 [ 7209139C75C6765DFA42912B98672F0B, 7FAD24F4BD91F1192BED1C66DEA079830D7DA6D651298037E5E383EC62B53632 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
14:27:17.0290 0x15c8 igfx - ok
14:27:17.0337 0x15c8 [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
14:27:17.0337 0x15c8 iirsp - ok
14:27:17.0415 0x15c8 [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
14:27:17.0446 0x15c8 IKEEXT - ok
14:27:17.0743 0x15c8 [ 6CB00AE4D2CEF52995D420656E02C30A, EDE13D7A650022CB75318159C57161F5FF9A128DB80D055555E6CB4F5F469EA4 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
14:27:17.0774 0x15c8 IntcAzAudAddService - ok
14:27:18.0039 0x15c8 [ 0E0B99617ED3FDB6C5F0E2D62709B5DF, A656CA3A60E62BE16A015150B23136CE150F9876B4035E9E8D8E73D1707B37A4 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
14:27:18.0055 0x15c8 IntcDAud - ok
14:27:18.0211 0x15c8 [ DDA8E5AD97231AB50B81FED04C28F64C, 5C9E8F7CC45A9AE7FF12A02641562E271D84894DFA7C50218AC2AAA298251B60 ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
14:27:18.0257 0x15c8 Intel(R) Capability Licensing Service Interface - ok
14:27:18.0367 0x15c8 [ 86FE509640D77FB0998FC8B1FF5523C6, 13E895DEB9B84379251699D7E52C5E3FD888994425DE01B6C4634F9E959D5584 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
14:27:18.0398 0x15c8 Intel(R) Capability Licensing Service TCP IP Interface - ok
14:27:18.0460 0x15c8 [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
14:27:18.0460 0x15c8 intelide - ok
14:27:18.0491 0x15c8 [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
14:27:18.0507 0x15c8 intelppm - ok
14:27:18.0538 0x15c8 [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
14:27:18.0554 0x15c8 IPBusEnum - ok
14:27:18.0569 0x15c8 [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:27:18.0569 0x15c8 IpFilterDriver - ok
14:27:18.0679 0x15c8 [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
14:27:18.0725 0x15c8 iphlpsvc - ok
14:27:18.0757 0x15c8 [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
14:27:18.0819 0x15c8 IPMIDRV - ok
14:27:18.0866 0x15c8 [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
14:27:18.0866 0x15c8 IPNAT - ok
14:27:19.0022 0x15c8 [ E61BB95A7CB49696D25A0C4EBD108156, 65D95A0DBC408AD18D5E344A5E875551E6CC044038DE438E4EA1102A234FC529 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
14:27:19.0037 0x15c8 iPod Service - ok
14:27:19.0084 0x15c8 [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
14:27:19.0084 0x15c8 IRENUM - ok
14:27:19.0100 0x15c8 [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
14:27:19.0100 0x15c8 isapnp - ok
14:27:19.0193 0x15c8 [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
14:27:19.0193 0x15c8 iScsiPrt - ok
14:27:19.0240 0x15c8 [ 897B93573F07C9CB1140516DAC44BC7E, C80665FEA4913DDC72F2140EC92CD4FA5D693BD8D0E4029A99DB96D63172E3D1 ] iusb3hcs        C:\Windows\system32\DRIVERS\iusb3hcs.sys
14:27:19.0240 0x15c8 iusb3hcs - ok
14:27:19.0287 0x15c8 [ 2D15CEDF619796002E8640F73A4BF920, FCC0137CB5AE32266A550EE46106B80F431F0B55342599951B9D032F8EA10649 ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys
14:27:19.0303 0x15c8 iusb3hub - ok
14:27:19.0443 0x15c8 [ F1E93FE111924D0BC853155AADF8048B, 2DFD5B3D042286A0FD5E482C81FAE339E4F05C0A6DFF43061D8502C4551125F7 ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys
14:27:19.0459 0x15c8 iusb3xhc - ok
14:27:19.0552 0x15c8 [ BF5D3A2624177C413680DEF19A465AF8, B9909D3E6CB6F9971293116387865AD15CB9D47513C7FAA9C36BE4D2847A41EB ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
14:27:19.0568 0x15c8 jhi_service - ok
14:27:19.0599 0x15c8 [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
14:27:19.0599 0x15c8 kbdclass - ok
14:27:19.0615 0x15c8 [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
14:27:19.0630 0x15c8 kbdhid - ok
14:27:19.0661 0x15c8 [ 9262D6E2C239EDD6D87B080F2BCCEC9F, 4947F2C3DD9D2D08CBB03FCA822C78B24F841464FF52FDBFF7D34AC7EB484104 ] KeyIso          C:\Windows\system32\lsass.exe
14:27:19.0661 0x15c8 KeyIso - ok
14:27:19.0724 0x15c8 [ F7DFAE6040AC910B7C64EE208A34157D, AEF1100F12391692D9DB78519D843A90C97E199A80DDC4D43E3AF1919A9E8E56 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
14:27:19.0739 0x15c8 KSecDD - ok
14:27:19.0786 0x15c8 [ 8FE94F2EF9BF444E93E35D87E210D02F, 78E8F6FD7C1EA3556194947707BE6893538A9E25A550C22045866C5B30251D14 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
14:27:19.0802 0x15c8 KSecPkg - ok
14:27:19.0817 0x15c8 [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
14:27:19.0817 0x15c8 ksthunk - ok
14:27:19.0895 0x15c8 [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
14:27:19.0911 0x15c8 KtmRm - ok
14:27:19.0927 0x15c8 [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
14:27:19.0927 0x15c8 LanmanServer - ok
14:27:19.0973 0x15c8 [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:27:19.0973 0x15c8 LanmanWorkstation - ok
14:27:20.0051 0x15c8 [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
14:27:20.0051 0x15c8 lltdio - ok
14:27:20.0114 0x15c8 [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
14:27:20.0129 0x15c8 lltdsvc - ok
14:27:20.0145 0x15c8 [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
14:27:20.0145 0x15c8 lmhosts - ok
14:27:20.0317 0x15c8 [ 3EA307C51069BC72DD74A4964F2A30A9, EB8F9C936AE43B7E31CB6C46F76FB918509D529E897C0E82B865A2854458996A ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
14:27:20.0441 0x15c8 LMS - ok
14:27:20.0519 0x15c8 [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
14:27:20.0519 0x15c8 LSI_FC - ok
14:27:20.0629 0x15c8 [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
14:27:20.0629 0x15c8 LSI_SAS - ok
14:27:20.0660 0x15c8 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
14:27:20.0660 0x15c8 LSI_SAS2 - ok
14:27:20.0707 0x15c8 [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
14:27:20.0707 0x15c8 LSI_SCSI - ok
14:27:20.0738 0x15c8 [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
14:27:20.0753 0x15c8 luafv - ok
14:27:20.0987 0x15c8 [ 1704A8189EE5580AB147CFD25C5C8770, DFA076FD36B5CC844D4BE3B865E9A1F809E14CCB1D78D82A2D8D8EE38210E6EB ] McComponentHostService C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
14:27:21.0003 0x15c8 McComponentHostService - ok
14:27:21.0034 0x15c8 [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
14:27:21.0034 0x15c8 Mcx2Svc - ok
14:27:21.0050 0x15c8 [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
14:27:21.0050 0x15c8 megasas - ok
14:27:21.0128 0x15c8 [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
14:27:21.0159 0x15c8 MegaSR - ok
14:27:21.0175 0x15c8 [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
14:27:21.0175 0x15c8 MEIx64 - ok
14:27:21.0627 0x15c8 [ 0AF89452A8CE3928168F4E5B2208C68B, 571F1A9F1F0B31DB5FFAE7FB7F98C16958439D6666A9F2131B0F2E496BF3D2AC ] mi-raysat_3dsmax2014_64 C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
14:27:21.0658 0x15c8 mi-raysat_3dsmax2014_64 - ok
14:27:21.0783 0x15c8 [ 123271BD5237AB991DC5C21FDF8835EB, 004F8F9228EE291A0E36CE33078D572D61733516F9AA5CFC832AF204C6869E89 ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
14:27:22.0033 0x15c8 Microsoft Office Groove Audit Service - ok
14:27:22.0079 0x15c8 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
14:27:22.0079 0x15c8 MMCSS - ok
14:27:22.0095 0x15c8 [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
14:27:22.0095 0x15c8 Modem - ok
14:27:22.0157 0x15c8 [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
14:27:22.0157 0x15c8 monitor - ok
14:27:22.0189 0x15c8 [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
14:27:22.0189 0x15c8 mouclass - ok
14:27:22.0235 0x15c8 [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
14:27:22.0235 0x15c8 mouhid - ok
14:27:22.0313 0x15c8 [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
14:27:22.0329 0x15c8 mountmgr - ok
14:27:22.0469 0x15c8 [ 03D14BF1DC59130002F6B8BA3AD89DB9, 1729CCD8AAF51CDB86ED67569974D0B6B1CFFA5F90EF6E6004B0D8A305D88C27 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:27:22.0469 0x15c8 MozillaMaintenance - ok
14:27:22.0516 0x15c8 [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
14:27:22.0532 0x15c8 mpio - ok
14:27:22.0579 0x15c8 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
14:27:22.0579 0x15c8 mpsdrv - ok
14:27:22.0641 0x15c8 [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
14:27:22.0657 0x15c8 MpsSvc - ok
14:27:22.0766 0x15c8 [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
14:27:22.0781 0x15c8 MRxDAV - ok
14:27:22.0828 0x15c8 [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
14:27:22.0844 0x15c8 mrxsmb - ok
14:27:22.0875 0x15c8 [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:27:22.0891 0x15c8 mrxsmb10 - ok
14:27:22.0922 0x15c8 [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:27:22.0922 0x15c8 mrxsmb20 - ok
14:27:22.0969 0x15c8 [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
14:27:22.0969 0x15c8 msahci - ok
14:27:23.0015 0x15c8 [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
14:27:23.0015 0x15c8 msdsm - ok
14:27:23.0078 0x15c8 [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
14:27:23.0078 0x15c8 MSDTC - ok
14:27:23.0109 0x15c8 [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
14:27:23.0125 0x15c8 Msfs - ok
14:27:23.0140 0x15c8 [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
14:27:23.0140 0x15c8 mshidkmdf - ok
14:27:23.0171 0x15c8 [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
14:27:23.0171 0x15c8 msisadrv - ok
14:27:23.0203 0x15c8 [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
14:27:23.0218 0x15c8 MSiSCSI - ok
14:27:23.0218 0x15c8 msiserver - ok
14:27:23.0249 0x15c8 [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
14:27:23.0249 0x15c8 MSKSSRV - ok
14:27:23.0265 0x15c8 [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
14:27:23.0265 0x15c8 MSPCLOCK - ok
14:27:23.0281 0x15c8 [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
14:27:23.0281 0x15c8 MSPQM - ok
14:27:23.0312 0x15c8 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
14:27:23.0327 0x15c8 MsRPC - ok
14:27:23.0343 0x15c8 [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
14:27:23.0343 0x15c8 mssmbios - ok
14:27:23.0359 0x15c8 [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
14:27:23.0359 0x15c8 MSTEE - ok
14:27:23.0374 0x15c8 [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
14:27:23.0374 0x15c8 MTConfig - ok
14:27:23.0390 0x15c8 [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
14:27:23.0390 0x15c8 Mup - ok
14:27:23.0452 0x15c8 [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
14:27:23.0468 0x15c8 napagent - ok
14:27:23.0561 0x15c8 [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
14:27:23.0593 0x15c8 NativeWifiP - ok
14:27:23.0717 0x15c8 [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
14:27:23.0795 0x15c8 NDIS - ok
14:27:23.0858 0x15c8 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
14:27:23.0858 0x15c8 NdisCap - ok
14:27:23.0936 0x15c8 [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
14:27:23.0936 0x15c8 NdisTapi - ok
14:27:23.0998 0x15c8 [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
14:27:23.0998 0x15c8 Ndisuio - ok
14:27:24.0045 0x15c8 [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
14:27:24.0061 0x15c8 NdisWan - ok
14:27:24.0092 0x15c8 [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
14:27:24.0092 0x15c8 NDProxy - ok
14:27:24.0170 0x15c8 [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl         C:\Windows\system32\DRIVERS\netaapl64.sys
14:27:24.0170 0x15c8 Netaapl - ok
14:27:24.0295 0x15c8 [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
14:27:24.0295 0x15c8 NetBIOS - ok
14:27:24.0388 0x15c8 [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
14:27:24.0482 0x15c8 NetBT - ok
14:27:24.0529 0x15c8 [ 9262D6E2C239EDD6D87B080F2BCCEC9F, 4947F2C3DD9D2D08CBB03FCA822C78B24F841464FF52FDBFF7D34AC7EB484104 ] Netlogon        C:\Windows\system32\lsass.exe
14:27:24.0544 0x15c8 Netlogon - ok
14:27:24.0591 0x15c8 [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
14:27:24.0607 0x15c8 Netman - ok
14:27:24.0669 0x15c8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:27:24.0685 0x15c8 NetMsmqActivator - ok
14:27:24.0716 0x15c8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:27:24.0716 0x15c8 NetPipeActivator - ok
14:27:24.0794 0x15c8 [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
14:27:24.0841 0x15c8 netprofm - ok
14:27:25.0075 0x15c8 [ BC0D96EE0949903E77519633D42FEEA6, 84756651CEEDD67A1CD07D45BEA12C04DA2DA18E8D1C3477AE5F810885F40716 ] netr28ux        C:\Windows\system32\DRIVERS\netr28ux.sys
14:27:25.0106 0x15c8 netr28ux - ok
14:27:25.0137 0x15c8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:27:25.0137 0x15c8 NetTcpActivator - ok
14:27:25.0153 0x15c8 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:27:25.0153 0x15c8 NetTcpPortSharing - ok
14:27:25.0199 0x15c8 [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
14:27:25.0199 0x15c8 nfrd960 - ok
14:27:25.0262 0x15c8 [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
14:27:25.0277 0x15c8 NlaSvc - ok
14:27:25.0293 0x15c8 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
14:27:25.0293 0x15c8 Npfs - ok
14:27:25.0309 0x15c8 [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
14:27:25.0309 0x15c8 nsi - ok
14:27:25.0324 0x15c8 [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
14:27:25.0324 0x15c8 nsiproxy - ok
14:27:25.0480 0x15c8 [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
14:27:25.0527 0x15c8 Ntfs - ok
14:27:25.0543 0x15c8 [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
14:27:25.0558 0x15c8 Null - ok
14:27:25.0605 0x15c8 [ 7E4355930B28C2798D9F09AB9F81151F, 941C730F3B75BDF99639E76350031EDD15F18D8D860F3B1282C28B62096E7717 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
14:27:25.0621 0x15c8 NVHDA - ok
14:27:25.0886 0x15c8 [ 7C28BA74B766F3470128107DA764F711, 43738B3B7F7A493D2B0102B889612A1E91545F38BA82CD911D63361F08048314 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:27:25.0995 0x15c8 nvlddmkm - ok
14:27:26.0120 0x15c8 [ F758A5752CA282925CE3324FDBBADBED, E9DE21AE4509BC401FE7BD717E1585BDEAF2E016A4DC8BB829DD43F54101923F ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
14:27:26.0151 0x15c8 NvNetworkService - ok
14:27:26.0198 0x15c8 [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
14:27:26.0198 0x15c8 nvraid - ok
14:27:26.0213 0x15c8 [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
14:27:26.0213 0x15c8 nvstor - ok
14:27:26.0291 0x15c8 [ 0772513BF441995A61A6C6F87BE12174, 308203FACAAFC87AA18765F0F358ADF5F99D0CAA9ADE51C14C43416FAB68FA18 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
14:27:26.0291 0x15c8 NvStreamKms - ok
14:27:26.0307 0x15c8 NvStreamSvc - ok
14:27:26.0338 0x15c8 [ 2A4F832243E869FD7564AA90402D74BD, E730A517EB6D49036B6FC196BFC930ED93EDB4FD4FA7EB1EB69A434BB94AE3C0 ] nvsvc           C:\Windows\system32\nvvsvc.exe
14:27:26.0354 0x15c8 nvsvc - ok
14:27:26.0401 0x15c8 [ DBFE7B2DF103F74AE51840B3C5F25FE9, 436CAA417FD24BA870F117FA4BABA2AB694825795508BCFCC8C927CC2D5BBC5E ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
14:27:26.0401 0x15c8 nvvad_WaveExtensible - ok
14:27:26.0447 0x15c8 [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
14:27:26.0447 0x15c8 nv_agp - ok
14:27:26.0525 0x15c8 [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:27:26.0541 0x15c8 odserv - ok
14:27:26.0557 0x15c8 [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
14:27:26.0557 0x15c8 ohci1394 - ok
14:27:26.0572 0x15c8 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:27:26.0572 0x15c8 ose - ok
14:27:26.0681 0x15c8 [ B4F3E62D206CEC7F558325E54FB97433, 6C3D61DC62602338A942D1EB7667C874E6EFFD9105764721274D157DCD52DA2E ] OverwolfUpdater C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
14:27:26.0697 0x15c8 OverwolfUpdater - ok
14:27:26.0728 0x15c8 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
14:27:26.0728 0x15c8 p2pimsvc - ok
14:27:26.0759 0x15c8 [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
14:27:26.0759 0x15c8 p2psvc - ok
14:27:26.0775 0x15c8 [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
14:27:26.0791 0x15c8 Parport - ok
14:27:26.0822 0x15c8 [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
14:27:26.0822 0x15c8 partmgr - ok
14:27:26.0853 0x15c8 [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
14:27:26.0869 0x15c8 PcaSvc - ok
14:27:26.0884 0x15c8 [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
14:27:26.0884 0x15c8 pci - ok
14:27:26.0900 0x15c8 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
14:27:26.0900 0x15c8 pciide - ok
14:27:26.0915 0x15c8 [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
14:27:26.0915 0x15c8 pcmcia - ok
14:27:26.0931 0x15c8 [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
14:27:26.0931 0x15c8 pcw - ok
14:27:27.0040 0x15c8 [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
14:27:27.0056 0x15c8 PEAUTH - ok
14:27:27.0149 0x15c8 [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
14:27:27.0181 0x15c8 PeerDistSvc - ok
14:27:27.0227 0x15c8 [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
14:27:27.0227 0x15c8 PerfHost - ok
14:27:27.0274 0x15c8 [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
14:27:27.0305 0x15c8 pla - ok
14:27:27.0430 0x15c8 [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
14:27:27.0461 0x15c8 PlugPlay - ok
14:27:27.0477 0x15c8 [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
14:27:27.0477 0x15c8 PNRPAutoReg - ok
14:27:27.0539 0x15c8 [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
14:27:27.0555 0x15c8 PNRPsvc - ok
14:27:27.0649 0x15c8 [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
14:27:27.0695 0x15c8 PolicyAgent - ok
14:27:27.0773 0x15c8 [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
14:27:27.0773 0x15c8 Power - ok
14:27:27.0836 0x15c8 [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
14:27:27.0851 0x15c8 PptpMiniport - ok
14:27:27.0867 0x15c8 [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
14:27:27.0867 0x15c8 Processor - ok
14:27:27.0929 0x15c8 [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
14:27:27.0945 0x15c8 ProfSvc - ok
14:27:27.0961 0x15c8 [ 9262D6E2C239EDD6D87B080F2BCCEC9F, 4947F2C3DD9D2D08CBB03FCA822C78B24F841464FF52FDBFF7D34AC7EB484104 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:27:27.0976 0x15c8 ProtectedStorage - ok
14:27:28.0007 0x15c8 [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
14:27:28.0007 0x15c8 Psched - ok
14:27:28.0273 0x15c8 [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
14:27:28.0319 0x15c8 ql2300 - ok
14:27:28.0351 0x15c8 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
14:27:28.0366 0x15c8 ql40xx - ok
14:27:28.0429 0x15c8 [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
14:27:28.0444 0x15c8 QWAVE - ok
14:27:28.0460 0x15c8 [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
14:27:28.0460 0x15c8 QWAVEdrv - ok
14:27:28.0475 0x15c8 [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
14:27:28.0475 0x15c8 RasAcd - ok
14:27:28.0522 0x15c8 [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
14:27:28.0522 0x15c8 RasAgileVpn - ok
14:27:28.0538 0x15c8 [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
14:27:28.0553 0x15c8 RasAuto - ok
14:27:28.0569 0x15c8 [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
14:27:28.0585 0x15c8 Rasl2tp - ok
14:27:28.0631 0x15c8 [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
14:27:28.0663 0x15c8 RasMan - ok
14:27:28.0678 0x15c8 [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
14:27:28.0678 0x15c8 RasPppoe - ok
14:27:28.0709 0x15c8 [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
14:27:28.0709 0x15c8 RasSstp - ok
14:27:28.0756 0x15c8 [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
14:27:28.0772 0x15c8 rdbss - ok
14:27:28.0787 0x15c8 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
14:27:28.0787 0x15c8 rdpbus - ok
14:27:28.0850 0x15c8 [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
14:27:28.0850 0x15c8 RDPCDD - ok
14:27:28.0912 0x15c8 [ 1B6163C503398B23FF8B939C67747683, 339A5AA7970FF34FAAB213B655860C5B0DEC5F983A4A11A088017D849F320ACE ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
14:27:28.0912 0x15c8 RDPDR - ok
14:27:28.0928 0x15c8 [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
14:27:28.0928 0x15c8 RDPENCDD - ok
14:27:28.0959 0x15c8 [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
14:27:28.0959 0x15c8 RDPREFMP - ok
14:27:29.0162 0x15c8 [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
14:27:29.0193 0x15c8 RdpVideoMiniport - ok
14:27:29.0302 0x15c8 [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
14:27:29.0302 0x15c8 RDPWD - ok
14:27:29.0365 0x15c8 [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
14:27:29.0380 0x15c8 rdyboost - ok
14:27:29.0443 0x15c8 [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
14:27:29.0458 0x15c8 RemoteAccess - ok
14:27:29.0521 0x15c8 [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
14:27:29.0536 0x15c8 RemoteRegistry - ok
14:27:29.0552 0x15c8 [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
14:27:29.0552 0x15c8 RpcEptMapper - ok
14:27:29.0567 0x15c8 [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
14:27:29.0567 0x15c8 RpcLocator - ok
14:27:29.0614 0x15c8 [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
14:27:29.0630 0x15c8 RpcSs - ok
14:27:29.0723 0x15c8 [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
14:27:29.0723 0x15c8 rspndr - ok
14:27:29.0879 0x15c8 [ B358C047E081AC70035017BD1D7ED818, D52455156F2913C5A88B18EC76C4C10B3589FE95F9735DD687A0307FA00FF500 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
14:27:29.0895 0x15c8 RTL8167 - ok
14:27:29.0973 0x15c8 [ 2ADA9F126235A56EDC9F90C888E4D142, 4CE692D045F6F8A7A1D309376648E81066F6EBAF94580F2ED0B0FFC1FE6FE44E ] RZMAELSTROMVADService C:\Windows\system32\drivers\RzMaelstromVAD.sys
14:27:29.0989 0x15c8 RZMAELSTROMVADService - ok
14:27:30.0550 0x15c8 [ 0436A7489D3FB6D2BACB37415A6BF4C4, 2938240D828F7F67D51BAB2ACF9B6808013511B98C1AEC0D3755B66655329D31 ] RzMaelstromVADStreamingService C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
14:27:30.0878 0x15c8 RzMaelstromVADStreamingService - ok
14:27:30.0909 0x15c8 [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
14:27:30.0909 0x15c8 s3cap - ok
14:27:30.0925 0x15c8 [ 9262D6E2C239EDD6D87B080F2BCCEC9F, 4947F2C3DD9D2D08CBB03FCA822C78B24F841464FF52FDBFF7D34AC7EB484104 ] SamSs           C:\Windows\system32\lsass.exe
14:27:30.0925 0x15c8 SamSs - ok
14:27:30.0971 0x15c8 [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
14:27:30.0971 0x15c8 sbp2port - ok
14:27:31.0018 0x15c8 [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
14:27:31.0034 0x15c8 SCardSvr - ok
14:27:31.0049 0x15c8 [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
14:27:31.0049 0x15c8 scfilter - ok
14:27:31.0159 0x15c8 [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
14:27:31.0190 0x15c8 Schedule - ok
14:27:31.0221 0x15c8 [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
14:27:31.0221 0x15c8 SCPolicySvc - ok
14:27:31.0299 0x15c8 [ 0C367AA7298EA68EFB110CA2C6C59C22, D94F2BB9B79677971704193B84BF4D4279F98D772D59F513BBE45EDCD608220F ] SDHookDriver    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys
14:27:31.0299 0x15c8 SDHookDriver - ok
14:27:31.0330 0x15c8 [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
14:27:31.0346 0x15c8 SDRSVC - ok
14:27:31.0783 0x15c8 [ 98EF79CC2B07398AC525F9EA1AE0366F, D0D5D69696ED339F363024AF3271867F4C55572C67FD0F2AA27D24B37982E39A ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
14:27:31.0907 0x15c8 SDScannerService - ok
14:27:32.0110 0x15c8 [ 14BF6B3AB327D519ED007CDDC56F6900, 4E5DC4AF45347C885E0E87F205EE1F95BB4713A0B581CD7317FBEEE2A9628982 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
14:27:32.0204 0x15c8 SDUpdateService - ok
14:27:32.0251 0x15c8 [ 820EBE67AB99F033FDE25B2692157991, A9E86FE6EFD3CFD4EA1A26121C706335A6791CC6F81EE98AE2BE7EA566ECFEBB ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
14:27:32.0266 0x15c8 SDWSCService - ok
14:27:32.0297 0x15c8 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
14:27:32.0313 0x15c8 secdrv - ok
14:27:32.0344 0x15c8 [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
14:27:32.0344 0x15c8 seclogon - ok
14:27:32.0375 0x15c8 [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
14:27:32.0375 0x15c8 SENS - ok
14:27:32.0391 0x15c8 [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
14:27:32.0407 0x15c8 SensrSvc - ok
14:27:32.0453 0x15c8 [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
14:27:32.0453 0x15c8 Serenum - ok
14:27:32.0485 0x15c8 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
14:27:32.0500 0x15c8 Serial - ok
14:27:32.0500 0x15c8 [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
14:27:32.0516 0x15c8 sermouse - ok
14:27:32.0547 0x15c8 [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
14:27:32.0547 0x15c8 SessionEnv - ok
14:27:32.0563 0x15c8 [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
14:27:32.0563 0x15c8 sffdisk - ok
14:27:32.0563 0x15c8 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
14:27:32.0563 0x15c8 sffp_mmc - ok
14:27:32.0578 0x15c8 [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
14:27:32.0578 0x15c8 sffp_sd - ok
14:27:32.0578 0x15c8 [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
14:27:32.0578 0x15c8 sfloppy - ok
14:27:32.0656 0x15c8 [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
14:27:32.0672 0x15c8 SharedAccess - ok
14:27:32.0719 0x15c8 [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:27:32.0765 0x15c8 ShellHWDetection - ok
14:27:32.0812 0x15c8 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
14:27:32.0812 0x15c8 SiSRaid2 - ok
14:27:32.0843 0x15c8 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
14:27:32.0843 0x15c8 SiSRaid4 - ok
14:27:32.0984 0x15c8 [ 704B4F81729F676BBF034529FC334D82, 1E50DAF97836807A500284385D99272780A8B69CA88761250451060B207824F8 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
14:27:32.0984 0x15c8 SkypeUpdate - ok
14:27:33.0062 0x15c8 [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
14:27:33.0062 0x15c8 Smb - ok
14:27:33.0093 0x15c8 [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
14:27:33.0093 0x15c8 SNMPTRAP - ok
14:27:33.0093 0x15c8 [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
14:27:33.0093 0x15c8 spldr - ok
14:27:33.0140 0x15c8 [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
14:27:33.0155 0x15c8 Spooler - ok
14:27:33.0218 0x15c8 [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
14:27:33.0280 0x15c8 sppsvc - ok
14:27:33.0311 0x15c8 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
14:27:33.0311 0x15c8 sppuinotify - ok
14:27:33.0358 0x15c8 [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
14:27:33.0358 0x15c8 srv - ok
14:27:33.0374 0x15c8 [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
14:27:33.0389 0x15c8 srv2 - ok
14:27:33.0421 0x15c8 [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
14:27:33.0421 0x15c8 srvnet - ok
14:27:33.0436 0x15c8 [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
14:27:33.0436 0x15c8 SSDPSRV - ok
14:27:33.0436 0x15c8 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
14:27:33.0452 0x15c8 SstpSvc - ok
14:27:33.0561 0x15c8 [ F82B2FC221CA0E408874884787491667, A9C7FB9C4719484BDA4FB69A8F948DC556CFEA19DFE89D2E63536F2C42725E66 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
14:27:33.0561 0x15c8 Stereo Service - ok
14:27:33.0577 0x15c8 [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
14:27:33.0577 0x15c8 stexstor - ok
14:27:33.0623 0x15c8 [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys
14:27:33.0623 0x15c8 StillCam - ok
14:27:33.0701 0x15c8 [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
14:27:33.0717 0x15c8 stisvc - ok
14:27:33.0748 0x15c8 [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
14:27:33.0748 0x15c8 storflt - ok
14:27:33.0764 0x15c8 [ C40841817EF57D491F22EB103DA587CC, 5FAA2DE43BADC16A898C0C290C44C41E4411D919A95FE8C6FF45EA7A34495079 ] StorSvc         C:\Windows\system32\storsvc.dll
14:27:33.0764 0x15c8 StorSvc - ok
14:27:33.0795 0x15c8 [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys
14:27:33.0795 0x15c8 storvsc - ok
14:27:33.0795 0x15c8 [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
14:27:33.0795 0x15c8 swenum - ok
14:27:33.0920 0x15c8 [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
14:27:33.0935 0x15c8 SwitchBoard - ok
14:27:33.0951 0x15c8 [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
14:27:33.0951 0x15c8 swprv - ok
14:27:33.0998 0x15c8 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
14:27:34.0029 0x15c8 SysMain - ok
14:27:34.0029 0x15c8 [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
14:27:34.0045 0x15c8 TabletInputService - ok
14:27:34.0045 0x15c8 [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
14:27:34.0060 0x15c8 TapiSrv - ok
14:27:34.0060 0x15c8 [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
14:27:34.0060 0x15c8 TBS - ok
14:27:34.0138 0x15c8 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
14:27:34.0154 0x15c8 Tcpip - ok
14:27:34.0185 0x15c8 [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
14:27:34.0216 0x15c8 TCPIP6 - ok
14:27:34.0263 0x15c8 [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
14:27:34.0263 0x15c8 tcpipreg - ok
14:27:34.0279 0x15c8 [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
14:27:34.0279 0x15c8 TDPIPE - ok
14:27:34.0325 0x15c8 [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
14:27:34.0325 0x15c8 TDTCP - ok
14:27:34.0372 0x15c8 [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
14:27:34.0372 0x15c8 tdx - ok
14:27:34.0388 0x15c8 [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
14:27:34.0388 0x15c8 TermDD - ok
14:27:34.0544 0x15c8 [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
14:27:34.0575 0x15c8 TermService - ok
14:27:34.0591 0x15c8 [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
14:27:34.0606 0x15c8 Themes - ok
14:27:34.0622 0x15c8 [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
14:27:34.0622 0x15c8 THREADORDER - ok
14:27:34.0637 0x15c8 [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
14:27:34.0637 0x15c8 TrkWks - ok
14:27:34.0684 0x15c8 [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:27:34.0684 0x15c8 TrustedInstaller - ok
14:27:34.0731 0x15c8 [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
14:27:34.0731 0x15c8 tssecsrv - ok
14:27:34.0778 0x15c8 [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
14:27:34.0778 0x15c8 TsUsbFlt - ok
14:27:34.0825 0x15c8 [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
14:27:34.0825 0x15c8 TsUsbGD - ok
14:27:34.0840 0x15c8 [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
14:27:34.0840 0x15c8 tunnel - ok
14:27:34.0856 0x15c8 [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
14:27:34.0856 0x15c8 uagp35 - ok
14:27:34.0871 0x15c8 [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
14:27:34.0871 0x15c8 udfs - ok
14:27:34.0887 0x15c8 [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
14:27:34.0887 0x15c8 UI0Detect - ok
14:27:34.0903 0x15c8 [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
14:27:34.0903 0x15c8 uliagpkx - ok
14:27:34.0918 0x15c8 [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
14:27:34.0918 0x15c8 umbus - ok
14:27:34.0934 0x15c8 [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
14:27:34.0934 0x15c8 UmPass - ok
14:27:34.0965 0x15c8 [ A293DCD756D04D8492A750D03B9A297C, 203600ED0B7F8BA4C6D6F4ED810F4DF5AB70928B06EC4131C5D8ADF628444ED1 ] UmRdpService    C:\Windows\System32\umrdp.dll
14:27:34.0981 0x15c8 UmRdpService - ok
14:27:34.0996 0x15c8 [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
14:27:34.0996 0x15c8 upnphost - ok
14:27:35.0027 0x15c8 [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
14:27:35.0043 0x15c8 USBAAPL64 - ok
14:27:35.0090 0x15c8 [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
14:27:35.0090 0x15c8 usbaudio - ok
14:27:35.0152 0x15c8 [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
14:27:35.0152 0x15c8 usbccgp - ok
14:27:35.0168 0x15c8 [ C02500A0EE2A47804077060DEEA26F92, 516187FE7060E8DA4DE4EB031649FAF47B155F6A00AB424DA663B4F0FEC266F3 ] UsbCharger      C:\Windows\system32\DRIVERS\UsbCharger.sys
14:27:35.0168 0x15c8 UsbCharger - ok
14:27:35.0215 0x15c8 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
14:27:35.0215 0x15c8 usbcir - ok
14:27:35.0215 0x15c8 [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\drivers\usbehci.sys
14:27:35.0230 0x15c8 usbehci - ok
14:27:35.0246 0x15c8 [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
14:27:35.0246 0x15c8 usbhub - ok
14:27:35.0261 0x15c8 [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
14:27:35.0261 0x15c8 usbohci - ok
14:27:35.0277 0x15c8 [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
14:27:35.0277 0x15c8 usbprint - ok
14:27:35.0324 0x15c8 [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
14:27:35.0324 0x15c8 usbscan - ok
14:27:35.0339 0x15c8 [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:27:35.0339 0x15c8 USBSTOR - ok
14:27:35.0371 0x15c8 [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
14:27:35.0371 0x15c8 usbuhci - ok
14:27:35.0386 0x15c8 [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
14:27:35.0386 0x15c8 UxSms - ok
14:27:35.0386 0x15c8 [ 9262D6E2C239EDD6D87B080F2BCCEC9F, 4947F2C3DD9D2D08CBB03FCA822C78B24F841464FF52FDBFF7D34AC7EB484104 ] VaultSvc        C:\Windows\system32\lsass.exe
14:27:35.0386 0x15c8 VaultSvc - ok
14:27:35.0402 0x15c8 [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
14:27:35.0402 0x15c8 vdrvroot - ok
14:27:35.0417 0x15c8 [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
14:27:35.0433 0x15c8 vds - ok
14:27:35.0449 0x15c8 [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
14:27:35.0449 0x15c8 vga - ok
14:27:35.0449 0x15c8 [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
14:27:35.0449 0x15c8 VgaSave - ok
14:27:35.0464 0x15c8 [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
14:27:35.0464 0x15c8 vhdmp - ok
14:27:35.0511 0x15c8 [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
14:27:35.0511 0x15c8 viaide - ok
14:27:35.0527 0x15c8 [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
14:27:35.0527 0x15c8 vmbus - ok
14:27:35.0542 0x15c8 [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
14:27:35.0542 0x15c8 VMBusHID - ok
14:27:35.0558 0x15c8 [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
14:27:35.0558 0x15c8 volmgr - ok
14:27:35.0573 0x15c8 [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
14:27:35.0573 0x15c8 volmgrx - ok
14:27:35.0589 0x15c8 [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
14:27:35.0589 0x15c8 volsnap - ok
14:27:35.0605 0x15c8 [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
14:27:35.0605 0x15c8 vsmraid - ok
14:27:35.0714 0x15c8 [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
14:27:35.0792 0x15c8 VSS - ok
14:27:35.0807 0x15c8 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
14:27:35.0807 0x15c8 vwifibus - ok
14:27:35.0823 0x15c8 [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
14:27:35.0823 0x15c8 vwififlt - ok
14:27:35.0839 0x15c8 [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
14:27:35.0839 0x15c8 vwifimp - ok
14:27:35.0854 0x15c8 [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
14:27:35.0870 0x15c8 W32Time - ok
14:27:35.0870 0x15c8 [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
14:27:35.0870 0x15c8 WacomPen - ok
14:27:35.0901 0x15c8 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
14:27:35.0901 0x15c8 WANARP - ok
14:27:35.0901 0x15c8 [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
14:27:35.0901 0x15c8 Wanarpv6 - ok
14:27:35.0995 0x15c8 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
14:27:36.0010 0x15c8 WatAdminSvc - ok
14:27:36.0041 0x15c8 [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
14:27:36.0073 0x15c8 wbengine - ok
14:27:36.0104 0x15c8 [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
14:27:36.0104 0x15c8 WbioSrvc - ok
14:27:36.0119 0x15c8 [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
14:27:36.0119 0x15c8 wcncsvc - ok
14:27:36.0135 0x15c8 [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:27:36.0135 0x15c8 WcsPlugInService - ok
14:27:36.0151 0x15c8 [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
14:27:36.0151 0x15c8 Wd - ok
14:27:36.0197 0x15c8 [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
14:27:36.0213 0x15c8 Wdf01000 - ok
14:27:36.0260 0x15c8 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost C:\Windows\system32\wdi.dll
14:27:36.0260 0x15c8 WdiServiceHost - ok
14:27:36.0260 0x15c8 [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
14:27:36.0275 0x15c8 WdiSystemHost - ok
14:27:36.0307 0x15c8 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
14:27:36.0307 0x15c8 WebClient - ok
14:27:36.0322 0x15c8 [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
14:27:36.0322 0x15c8 Wecsvc - ok
14:27:36.0338 0x15c8 [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
14:27:36.0338 0x15c8 wercplsupport - ok
14:27:36.0353 0x15c8 [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
14:27:36.0353 0x15c8 WerSvc - ok
14:27:36.0369 0x15c8 [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
14:27:36.0369 0x15c8 WfpLwf - ok
14:27:36.0385 0x15c8 [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
14:27:36.0385 0x15c8 WIMMount - ok
14:27:36.0416 0x15c8 WinDefend - ok
14:27:36.0416 0x15c8 WinHttpAutoProxySvc - ok
14:27:36.0463 0x15c8 [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
14:27:36.0463 0x15c8 Winmgmt - ok
14:27:36.0541 0x15c8 [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
14:27:36.0572 0x15c8 WinRM - ok
14:27:36.0619 0x15c8 [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
14:27:36.0619 0x15c8 WinUsb - ok
14:27:36.0650 0x15c8 [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
14:27:36.0650 0x15c8 Wlansvc - ok
14:27:36.0806 0x15c8 [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
14:27:36.0853 0x15c8 wlidsvc - ok
14:27:36.0868 0x15c8 [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
14:27:36.0868 0x15c8 WmiAcpi - ok
14:27:36.0884 0x15c8 [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
14:27:36.0884 0x15c8 wmiApSrv - ok
14:27:36.0915 0x15c8 WMPNetworkSvc - ok
14:27:36.0931 0x15c8 [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
14:27:36.0931 0x15c8 WPCSvc - ok
14:27:36.0946 0x15c8 [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
14:27:36.0946 0x15c8 WPDBusEnum - ok
14:27:37.0055 0x15c8 [ 51B2B7F176BFEAC0955CA4F3A09EAC1E, D4A36F02A8C6852A576B4BD917BC3F3BE1EAD152CC22F8A713DF4B62D6455801 ] WPSHWPBC        C:\Program Files (x86)\D-Link\DWA-132\WPSHWPBC.exe
14:27:37.0071 0x15c8 WPSHWPBC - ok
14:27:37.0087 0x15c8 [ 9D453861D4C7064A4B446D09D46DBA0F, 3B47E843C131354AD381DB7F7C876DD1A88C800D7158AE5D250450F2D7488019 ] WRkrn           C:\Windows\system32\drivers\WRkrn.sys
14:27:37.0087 0x15c8 WRkrn - ok
14:27:37.0133 0x15c8 [ D333570D17B4BF438168D9380EC1DC24, C56D5997D0397D4EE89E7409E75108D957739A686938CC790330A80B04BE80A2 ] WRSVC           C:\Program Files\Webroot\WRSA.exe
14:27:37.0133 0x15c8 WRSVC - ok
14:27:37.0180 0x15c8 [ 22C7AB222E19865659E412A43A9FB216, 1681780A3C6BCBA4619291A3B1F16BC6DCF84A3B619F89D0C262416441DBD01C ] wrUrlFlt        C:\Windows\system32\DRIVERS\wrUrlFlt.sys
14:27:37.0180 0x15c8 wrUrlFlt - ok
14:27:37.0196 0x15c8 [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
14:27:37.0196 0x15c8 ws2ifsl - ok
14:27:37.0211 0x15c8 [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
14:27:37.0211 0x15c8 wscsvc - ok
14:27:37.0243 0x15c8 [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
14:27:37.0243 0x15c8 WSDPrintDevice - ok
14:27:37.0243 0x15c8 WSearch - ok
14:27:37.0336 0x15c8 [ 0814A74C853F50B354F08F83DDA9F7FB, 0A63BAA8DE451B8C2C71FEF961718E769B9BAC305C76D24048C664CB27D0DF28 ] wuauserv        C:\Windows\system32\wuaueng.dll
14:27:37.0383 0x15c8 wuauserv - ok
14:27:37.0414 0x15c8 [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
14:27:37.0430 0x15c8 WudfPf - ok
14:27:37.0445 0x15c8 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\drivers\WUDFRd.sys
14:27:37.0445 0x15c8 WUDFRd - ok
14:27:37.0461 0x15c8 [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
14:27:37.0477 0x15c8 wudfsvc - ok
14:27:37.0523 0x15c8 [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
14:27:37.0523 0x15c8 WwanSvc - ok
14:27:37.0539 0x15c8 ================ Scan global ===============================
14:27:37.0539 0x15c8 [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
14:27:37.0586 0x15c8 [ D17DD01601460F5899E5C154B3FD0BFA, B2FCFDE4B6F87634EA1F6D8AEA6D9B3C641D41D999C68B76F95491539B19D422 ] C:\Windows\system32\winsrv.dll
14:27:37.0586 0x15c8 [ D17DD01601460F5899E5C154B3FD0BFA, B2FCFDE4B6F87634EA1F6D8AEA6D9B3C641D41D999C68B76F95491539B19D422 ] C:\Windows\system32\winsrv.dll
14:27:37.0601 0x15c8 [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
14:27:37.0679 0x15c8 [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
14:27:37.0679 0x15c8 [ Global ] - ok
14:27:37.0679 0x15c8 ================ Scan MBR ==================================
14:27:37.0711 0x15c8 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:27:37.0820 0x15c8 \Device\Harddisk0\DR0 - ok
14:27:37.0820 0x15c8 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
14:27:37.0820 0x15c8 \Device\Harddisk1\DR1 - ok
14:27:37.0820 0x15c8 ================ Scan VBR ==================================
14:27:37.0835 0x15c8 [ 68903F47DDE8610F28EC31CEB6C9E2FE ] \Device\Harddisk0\DR0\Partition1
14:27:37.0867 0x15c8 \Device\Harddisk0\DR0\Partition1 - ok
14:27:37.0867 0x15c8 [ 6283747B91D8071C89CF0F71F0D080F5 ] \Device\Harddisk0\DR0\Partition2
14:27:37.0898 0x15c8 \Device\Harddisk0\DR0\Partition2 - ok
14:27:37.0898 0x15c8 [ 959AEFDCB95811F8EA4C53FD10A10BBC ] \Device\Harddisk1\DR1\Partition1
14:27:37.0898 0x15c8 \Device\Harddisk1\DR1\Partition1 - ok
14:27:37.0898 0x15c8 [ 2869F5B3BB3B52E2A4BD3059B48B29F4 ] \Device\Harddisk1\DR1\Partition2
14:27:37.0913 0x15c8 \Device\Harddisk1\DR1\Partition2 - ok
14:27:37.0913 0x15c8 ================ Scan generic autorun ======================
14:27:37.0976 0x15c8 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
14:27:37.0991 0x15c8 Sidebar - ok
14:27:38.0023 0x15c8 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
14:27:38.0023 0x15c8 mctadmin - ok
14:27:38.0038 0x15c8 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
14:27:38.0054 0x15c8 Sidebar - ok
14:27:38.0054 0x15c8 [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
14:27:38.0054 0x15c8 mctadmin - ok
14:27:38.0085 0x15c8 Skype - ok
14:27:38.0101 0x15c8 Waiting for KSN requests completion. In queue: 123
14:27:39.0115 0x15c8 Waiting for KSN requests completion. In queue: 123
14:27:40.0129 0x15c8 Waiting for KSN requests completion. In queue: 123
14:27:41.0143 0x15c8 Waiting for KSN requests completion. In queue: 123
14:27:42.0157 0x15c8 AV detected via SS2: Webroot SecureAnywhere, C:\Program Files\Webroot\WRSA.exe ( 8.0.8.88 ), 0x40000 ( disabled : updated )
14:27:42.0172 0x15c8 AV detected via SS2: Spybot - Search and Destroy, C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe ( 2.2.22.0 ), 0x60000 ( disabled : updated )
14:27:42.0203 0x15c8 Win FW state via NFP2: enabled
14:27:45.0152 0x15c8 ============================================================
14:27:45.0152 0x15c8 Scan finished
14:27:45.0152 0x15c8 ============================================================
14:27:45.0152 0x15a8 Detected object count: 0
14:27:45.0152 0x15a8 Actual detected object count: 0
14:29:39.0438 0x1598 Deinitialize success

Combofix log:

ComboFix 15-05-13.01 - Daddy 05/16/2015 14:33:21.1.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.8079.6107 [GMT 4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: Spybot - Search and Destroy *Disabled/Updated* {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D}
AV: Webroot SecureAnywhere *Disabled/Updated* {66A6FE14-08CB-F415-3742-517201416109}
SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Webroot SecureAnywhere *Disabled/Updated* {DDC71FF0-2EF1-FB9B-0DF2-6A007AC62BB4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Downloaded Program Files\IDropPTB.dll
c:\windows\msdownld.tmp
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((((   Files Created from 2015-04-16 to 2015-05-16 )))))))))))))))))))))))))))))))
.
.
2015-05-16 06:02 . 2014-08-29 02:07 3179520 —-a-w- c:\windows\system32\rdpcorets.dll
2015-05-16 06:02 . 2014-05-08 09:32 16384 —-a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2015-05-16 06:01 . 2014-09-05 02:11 6584320 —-a-w- c:\windows\system32\mstscax.dll
2015-05-16 06:01 . 2014-09-05 01:52 5703168 —-a-w- c:\windows\SysWow64\mstscax.dll
2015-05-16 06:00 . 2015-04-04 06:25 12032440 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8EE89CFC-94BA-44B0-B5AC-63106CCC4CBB}\mpengine.dll
2015-05-15 16:31 . 2012-08-23 14:10 19456 —-a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2015-05-15 16:31 . 2012-08-23 14:08 30208 —-a-w- c:\windows\system32\drivers\TsUsbGD.sys
2015-05-15 16:31 . 2012-08-23 11:12 192000 —-a-w- c:\windows\SysWow64\rdpendp_winip.dll
2015-05-15 16:31 . 2012-08-23 14:13 243200 —-a-w- c:\windows\system32\rdpudd.dll
2015-05-15 16:31 . 2012-08-23 10:51 228864 —-a-w- c:\windows\system32\rdpendp_winip.dll
2015-05-15 16:30 . 2015-03-14 03:21 82944 —-a-w- c:\windows\system32\dwmapi.dll
2015-05-15 16:30 . 2015-03-14 03:21 1632768 —-a-w- c:\windows\system32\dwmcore.dll
2015-05-15 16:30 . 2015-03-14 03:04 67584 —-a-w- c:\windows\SysWow64\dwmapi.dll
2015-05-15 16:30 . 2015-03-14 03:04 1372160 —-a-w- c:\windows\SysWow64\dwmcore.dll
2015-05-15 14:12 . 2015-05-15 14:12 ——– d—–w- c:\program files\RogueKiller
2015-05-15 04:03 . 2015-05-01 13:17 124112 —-a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 04:03 . 2015-05-01 13:16 102608 —-a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 03:17 . 2015-04-13 03:28 328704 —-a-w- c:\windows\system32\services.exe
2015-05-15 03:16 . 2015-04-20 03:17 1647104 —-a-w- c:\windows\system32\DWrite.dll
2015-05-09 12:45 . 2015-05-09 12:45 ——– d—–w- c:\users\Daddy\AppData\Local\CrashDumps
2015-05-09 09:54 . 2015-05-11 18:07 ——– d—–w- C:\EEK
2015-05-09 09:40 . 2015-05-15 14:12 37624 —-a-w- c:\windows\system32\drivers\TrueSight.sys
2015-05-09 09:40 . 2015-05-09 09:54 ——– d—–w- c:\programdata\RogueKiller
2015-05-09 09:19 . 2015-05-15 16:07 ——– d—–w- C:\FRST
2015-05-09 09:09 . 2015-05-09 09:28 ——– d—–w- c:\programdata\HitmanPro
2015-05-09 08:43 . 2015-05-09 08:43 ——– d—–w- c:\programdata\Malwarebytes
2015-05-01 06:56 . 2015-05-01 06:56 ——– d—–w- c:\users\Daddy\Tracing
2015-05-01 06:54 . 2015-05-01 06:54 ——– d—–w- c:\program files (x86)\DVDVideoSoft
2015-05-01 06:54 . 2015-05-01 06:54 ——– d—–w- c:\program files (x86)\Common Files\DVDVideoSoft
2015-05-01 06:50 . 2015-05-01 06:50 ——– d—–w- c:\windows\en
2015-05-01 06:49 . 2015-05-01 06:49 ——– d—–w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2015-05-01 06:48 . 2014-03-31 17:06 58056 —-a-w- c:\windows\system32\drivers\fssfltr.sys
2015-05-01 06:48 . 2015-05-01 06:48 ——– d—–w- c:\program files\Windows Live
2015-05-01 06:47 . 2015-05-01 06:55 ——– d—–w- c:\users\Daddy\AppData\Roaming\DVDVideoSoft
2015-05-01 06:47 . 2015-05-01 06:49 ——– d—–w- c:\program files (x86)\Windows Live
2015-05-01 06:43 . 2015-05-01 06:43 ——– d—–w- c:\program files (x86)\Microsoft OneDrive
2015-05-01 06:43 . 2015-05-01 06:43 ——– d—–r- c:\users\Daddy\OneDrive
2015-05-01 06:42 . 2015-05-01 06:42 ——– d—–w- c:\programdata\Microsoft OneDrive
2015-05-01 06:41 . 2015-05-01 07:07 ——– d—–w- c:\users\Daddy\AppData\Local\Windows Live
2015-05-01 06:41 . 2015-05-01 06:41 ——– d—–w- c:\program files (x86)\Common Files\Windows Live
2015-04-25 10:28 . 2015-05-15 17:07 ——– d—–w- c:\programdata\SecTaskMan
2015-04-25 10:28 . 2015-04-25 10:28 ——– d—–w- c:\users\Daddy\AppData\Local\SecTaskMan
2015-04-25 10:28 . 2015-04-25 10:28 ——– d—–w- c:\program files (x86)\Security Task Manager
2015-04-21 18:08 . 2015-04-21 18:08 ——– d—–w- C:\Utilities
2015-04-18 06:52 . 2015-04-18 06:52 41040 —-atw- c:\windows\system32\drivers\wrUrlFlt.sys
2015-04-18 06:52 . 2015-05-06 15:39 166128 —-a-w- c:\windows\SysWow64\WRusr.dll
2015-04-18 06:52 . 2015-05-06 15:39 116224 —-a-w- c:\windows\system32\drivers\WRkrn.sys
2015-04-18 06:52 . 2015-05-06 15:39 103816 —-a-w- c:\windows\system32\WRusr.dll
2015-04-18 06:52 . 2015-04-18 06:52 ——– d—–w- c:\program files\Webroot
2015-04-18 06:52 . 2015-05-16 04:30 ——– d—–w- c:\programdata\WRData
2015-04-18 04:14 . 2015-04-18 04:14 ——– d—–w- c:\users\Mom\.swt
2015-04-18 04:13 . 2015-04-18 04:16 ——– d—–w- c:\users\Mom\AppData\Roaming\Azureus
2015-04-16 17:53 . 2015-04-08 20:32 560968 —-a-w- c:\windows\SysWow64\nvStreaming.exe
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-15 04:06 . 2013-10-12 17:39 140425016 —-a-w- c:\windows\system32\MRT.exe
2015-05-01 06:47 . 2012-07-17 10:37 23776 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2015-04-27 19:04 . 2015-05-15 03:17 44032 —-a-w- c:\windows\apppatch\acwow64.dll
2015-04-09 00:58 . 2014-12-26 20:49 3317344 —-a-w- c:\windows\system32\nvapi64.dll
2015-04-09 00:58 . 2014-12-26 20:49 2935416 —-a-w- c:\windows\SysWow64\nvapi.dll
2015-04-09 00:58 . 2013-10-12 11:47 175880 —-a-w- c:\windows\system32\nvinitx.dll
2015-04-09 00:58 . 2013-10-12 11:47 17176128 —-a-w- c:\windows\system32\nvwgf2umx.dll
2015-04-09 00:58 . 2013-10-12 11:47 154256 —-a-w- c:\windows\SysWow64\nvinit.dll
2015-04-09 00:58 . 2013-10-12 11:47 12689592 —-a-w- c:\windows\SysWow64\nvd3dum.dll
2015-04-08 21:30 . 2013-10-12 11:48 6841488 —-a-w- c:\windows\system32\nvcpl.dll
2015-04-08 21:30 . 2013-10-12 11:48 3478344 —-a-w- c:\windows\system32\nvsvc64.dll
2015-04-08 21:30 . 2014-12-26 20:51 2558608 —-a-w- c:\windows\system32\nvsvcr.dll
2015-04-08 21:30 . 2013-10-12 11:48 936264 —-a-w- c:\windows\system32\nvvsvc.exe
2015-04-08 21:30 . 2013-10-12 11:48 62608 —-a-w- c:\windows\system32\nvshext.dll
2015-04-08 21:30 . 2013-10-12 11:48 385168 —-a-w- c:\windows\system32\nvmctray.dll
2015-04-08 17:52 . 2013-10-12 11:48 4336074 —-a-w- c:\windows\system32\nvcoproc.bin
2015-03-28 03:44 . 2014-12-26 20:54 1316000 —-a-w- c:\windows\SysWow64\nvspcap.dll
2015-03-28 03:44 . 2014-12-26 20:54 1316000 —-a-w- c:\windows\SysWow64\nvspbridge.dll
2015-03-28 03:43 . 2014-12-26 20:54 1756424 —-a-w- c:\windows\system32\nvspbridge64.dll
2015-03-28 03:43 . 2014-12-26 20:54 1570672 —-a-w- c:\windows\system32\nvspcap64.dll
2015-03-25 03:24 . 2015-04-15 08:31 98304 —-a-w- c:\windows\system32\wudriver.dll
2015-03-25 03:24 . 2015-04-15 08:31 37376 —-a-w- c:\windows\system32\wups2.dll
2015-03-25 03:24 . 2015-04-15 08:31 35328 —-a-w- c:\windows\system32\wups.dll
2015-03-25 03:24 . 2015-04-15 08:31 3298816 —-a-w- c:\windows\system32\wucltux.dll
2015-03-25 03:24 . 2015-04-15 08:31 2553856 —-a-w- c:\windows\system32\wuaueng.dll
2015-03-25 03:24 . 2015-04-15 08:31 191488 —-a-w- c:\windows\system32\wuwebv.dll
2015-03-25 03:24 . 2015-04-15 08:31 696320 —-a-w- c:\windows\system32\wuapi.dll
2015-03-25 03:24 . 2015-04-15 08:31 60416 —-a-w- c:\windows\system32\WinSetupUI.dll
2015-03-25 03:23 . 2015-04-15 08:31 12288 —-a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:23 . 2015-04-15 08:31 36864 —-a-w- c:\windows\system32\wuapp.exe
2015-03-25 03:23 . 2015-04-15 08:31 135168 —-a-w- c:\windows\system32\wuauclt.exe
2015-03-25 03:00 . 2015-04-15 08:31 92672 —-a-w- c:\windows\SysWow64\wudriver.dll
2015-03-25 03:00 . 2015-04-15 08:31 566784 —-a-w- c:\windows\SysWow64\wuapi.dll
2015-03-25 03:00 . 2015-04-15 08:31 29696 —-a-w- c:\windows\SysWow64\wups.dll
2015-03-25 03:00 . 2015-04-15 08:31 173056 —-a-w- c:\windows\SysWow64\wuwebv.dll
2015-03-25 03:00 . 2015-04-15 08:31 33792 —-a-w- c:\windows\SysWow64\wuapp.exe
2015-03-23 03:25 . 2015-04-15 08:31 726528 —-a-w- c:\windows\system32\generaltel.dll
2015-03-23 03:25 . 2015-04-15 08:31 769536 —-a-w- c:\windows\system32\invagent.dll
2015-03-23 03:24 . 2015-04-15 08:31 419840 —-a-w- c:\windows\system32\devinv.dll
2015-03-23 03:24 . 2015-04-15 08:31 957952 —-a-w- c:\windows\system32\appraiser.dll
2015-03-23 03:24 . 2015-04-15 08:31 30720 —-a-w- c:\windows\system32\acmigration.dll
2015-03-23 03:24 . 2015-04-15 08:31 227328 —-a-w- c:\windows\system32\aepdu.dll
2015-03-23 03:24 . 2015-04-15 08:31 192000 —-a-w- c:\windows\system32\aepic.dll
2015-03-23 03:17 . 2015-04-15 08:31 1111552 —-a-w- c:\windows\system32\aeinv.dll
2015-03-13 19:41 . 2015-03-20 12:47 1896136 —-a-w- c:\windows\system32\nvdispco6434788.dll
2015-03-13 19:41 . 2015-03-20 12:47 1557648 —-a-w- c:\windows\system32\nvdispgenco6434788.dll
2015-03-10 03:25 . 2015-04-15 08:31 1882624 —-a-w- c:\windows\system32\msxml3.dll
2015-03-10 03:21 . 2015-04-15 08:31 2048 —-a-w- c:\windows\system32\msxml3r.dll
2015-03-10 03:08 . 2015-04-15 08:31 1237504 —-a-w- c:\windows\SysWow64\msxml3.dll
2015-03-10 03:05 . 2015-04-15 08:31 2048 —-a-w- c:\windows\SysWow64\msxml3r.dll
2015-03-05 05:12 . 2015-04-15 08:31 404480 —-a-w- c:\windows\system32\gdi32.dll
2015-03-05 04:05 . 2015-04-15 08:31 311808 —-a-w- c:\windows\SysWow64\gdi32.dll
2015-03-04 04:55 . 2015-04-15 08:30 367552 —-a-w- c:\windows\system32\clfs.sys
2015-03-04 04:41 . 2015-04-15 08:30 79360 —-a-w- c:\windows\system32\clfsw32.dll
2015-03-04 04:41 . 2015-05-15 03:16 309248 —-a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2015-03-04 04:41 . 2015-05-15 03:16 103424 —-a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2015-03-04 04:10 . 2015-04-15 08:30 58880 —-a-w- c:\windows\SysWow64\clfsw32.dll
2015-03-04 04:10 . 2015-05-15 03:16 470528 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2015-03-04 04:10 . 2015-05-15 03:16 2178560 —-a-w- c:\windows\apppatch\AcGenral.dll
2015-03-04 04:06 . 2015-05-15 03:16 2560 —-a-w- c:\windows\apppatch\AcRes.dll
2015-02-25 03:18 . 2015-04-15 08:31 754688 —-a-w- c:\windows\system32\drivers\http.sys
2015-02-24 00:17 . 2010-11-21 03:27 295552 ——w- c:\windows\system32\MpSigStub.exe
2015-02-20 04:41 . 2015-03-11 16:37 41984 —-a-w- c:\windows\system32\lpk.dll
2015-02-20 04:40 . 2015-03-11 16:37 100864 —-a-w- c:\windows\system32\fontsub.dll
2015-02-20 04:40 . 2015-03-11 16:37 14336 —-a-w- c:\windows\system32\dciman32.dll
2015-02-20 04:40 . 2015-03-11 16:37 46080 —-a-w- c:\windows\system32\atmlib.dll
2015-02-20 04:13 . 2015-03-11 16:37 70656 —-a-w- c:\windows\SysWow64\fontsub.dll
2015-02-20 04:13 . 2015-03-11 16:37 10240 —-a-w- c:\windows\SysWow64\dciman32.dll
2015-02-20 04:13 . 2015-03-11 16:37 34304 —-a-w- c:\windows\SysWow64\atmlib.dll
2015-02-20 04:12 . 2015-03-11 16:37 25600 —-a-w- c:\windows\SysWow64\lpk.dll
2015-02-20 03:29 . 2015-03-11 16:37 372224 —-a-w- c:\windows\system32\atmfd.dll
2015-02-20 03:09 . 2015-03-11 16:37 299008 —-a-w- c:\windows\SysWow64\atmfd.dll
2015-02-17 12:04 . 2015-02-17 12:04 1202848 —-a-w- c:\windows\SysWow64\FM20.DLL
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2015-05-01 06:43 223432 —-a-w- c:\users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2015-05-01 06:43 223432 —-a-w- c:\users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2015-05-01 06:43 223432 —-a-w- c:\users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-03-25 31682144]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"WRSVC"="c:\program files\Webroot\WRSA.exe" [2015-05-06 817072]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 0 (0x0)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
R1 UsbCharger;UsbCharger;c:\windows\system32\DRIVERS\UsbCharger.sys;c:\windows\SYSNATIVE\DRIVERS\UsbCharger.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 WRSVC;WRSVC;c:\program files\Webroot\WRSA.exe;c:\program files\Webroot\WRSA.exe [x]
R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys;c:\windows\SYSNATIVE\drivers\Apowersoft_AudioDevice.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 cleanhlp;cleanhlp;c:\eek\bin\cleanhlp64.sys;c:\eek\bin\cleanhlp64.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wrUrlFlt;Webroot UrlFilter;c:\windows\system32\DRIVERS\wrUrlFlt.sys;c:\windows\SYSNATIVE\DRIVERS\wrUrlFlt.sys [x]
R4 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
R4 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
R4 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R4 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
R4 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R4 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
R4 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
R4 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe [x]
R4 mi-raysat_3dsmax2014_64;mental ray Satellite for Autodesk 3ds Max 2014 64-bit;c:\program files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe;c:\program files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [x]
R4 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
R4 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
R4 OverwolfUpdater;Overwolf Updater Windows SCM;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R4 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]
R4 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
R4 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
R4 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R4 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R4 WPSHWPBC;WPSHWPBC;c:\program files (x86)\D-Link\DWA-132\WPSHWPBC.exe;c:\program files (x86)\D-Link\DWA-132\WPSHWPBC.exe [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 WRkrn;WRkrn;c:\windows\System32\drivers\WRkrn.sys;c:\windows\SYSNATIVE\drivers\WRkrn.sys [x]
S1 A2DDA;A2 Direct Disk Access Support Driver;c:\eek\bin\a2ddax64.sys;c:\eek\bin\a2ddax64.sys [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
S1 SDHookDriver;Hook Test Driver;c:\program files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys;c:\program files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys [x]
S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE\drivers\RzMaelstromVAD.sys [x]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - 34767385
*Deregistered* - 34767385
.
Contents of the 'Scheduled Tasks' folder
.
2015-05-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13 17:46]
.
2015-05-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13 17:46]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2015-05-01 06:43 262344 —-a-w- c:\users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2015-05-01 06:43 262344 —-a-w- c:\users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2015-05-01 06:43 262344 —-a-w- c:\users\Daddy\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\acaptuser64.dll
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\users\Daddy\AppData\Roaming\Mozilla\Firefox\Profiles\553pyx0k.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - about:home
.
.
——- File Associations ——-
.
inifile=%SystemRoot%\SysWow64\NOTEPAD.EXE %1
JSEFile="%SystemRoot%\System32\WScript.exe" "%1" %*
txtfile=%SystemRoot%\SysWow64\NOTEPAD.EXE %1
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-Run- - (no file)
Notify-SDWinLogon - SDWinLogon.dll
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-05-16 14:43:46
ComboFix-quarantined-files.txt 2015-05-16 10:43
.
Pre-Run: 454,470,414,336 bytes free
Post-Run: 454,835,089,408 bytes free
.
- - End Of File - - 002A670B5D80A5643F0BFAE7F5D53CD9
A36C5E4F47E84449FF07ED3517B43A31

Satchfan

Post #24May 16, 2015, 3:31 PM UTC

Can you check to see if these are installed and if so, uninstall them:

MyPC Backup
McAfee Security Scan Plus

Download and run Windows Repair (all in one)

Download Windows Repair (all in one) from here

install and then run the program
at the top, click on the Repairs button & make sure that “Automatically Do a Registry Backup” is checked. When it is finished you will see a message saying that the Registry is backed up
click the Open Repairs button
on the “Start Repairs” tab click Start

[external image: DwysfIW.jpg]
at the “Repair Options” screen, be sure the following are selected:

Reset Registry Permissions
Reset File Permissions
Remove Policies Set By Infections
Repair Windows Updates
Repair File Associations
also check Restart System When Finished.
now press Start.

Once that is complete, can you try to run FRST in normal mode and send the new log.

Satchfan

wil1571

Post #25May 16, 2015, 7:48 PM UTC

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05-2015 02
Ran by [removed] (administrator) on USER-PC on 16-05-2015 23:44:22
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Webroot) C:\Program Files\Webroot\WRSA.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Lenovo) C:\Program Files (x86)\MagicPlus\MagicPlus_helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\…\Run: [] => [X]
HKLM-x32\…\Run: [WRSVC] => C:\Program Files\Webroot\WRSA.exe [817072 2015-05-06] (Webroot)
HKLM-x32\…\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\…\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1055236318-1379152274-1924446089-1005\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll No File
BHO: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax64\wrflt.dll [2015-04-18] (Webroot)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-27] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Webroot\WRData\PKG\Vistax86\wrflt.dll [2015-04-18] (Webroot)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-27] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
Toolbar: HKU\S-1-5-21-1055236318-1379152274-1924446089-1005 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Tcpip\Parameters: [DhcpNameServer] [removed] [removed]

FireFox:
========
FF ProfilePath: C:\Users\Daddy\AppData\Roaming\Mozilla\Firefox\Profiles\553pyx0k.default
FF SelectedSearchEngine:
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll [2015-01-20] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll [2015-01-20] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-09] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-09-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\ProgramData\WRData\PKG\FIREFOX\WebrootSecure_SocketServer
FF Extension: Webroot Filtering Extension - C:\ProgramData\WRData\PKG\FIREFOX\WebrootSecure_SocketServer [2015-04-18]
FF HKLM-x32\…\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome:
=======
CHR Profile: C:\Users\Daddy\AppData\Local\Google\Chrome\User Data\Default

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S4 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed]
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation)
S4 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2014-01-25] (Macrovision Europe Ltd.) [File not signed]
S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S4 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S4 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
S4 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-15] () [File not signed]
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [999152 2015-05-04] (Overwolf LTD)
S4 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4250624 2014-05-23] (A-Volute) [File not signed]
S4 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S4 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
S4 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 WPSHWPBC; C:\Program Files (x86)\D-Link\DWA-132\WPSHWPBC.exe [318976 2013-01-17] ()
R2 WRSVC; C:\Program Files\Webroot\WRSA.exe [817072 2015-05-06] (Webroot)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 A2DDA; C:\EEK\bin\a2ddax64.sys [26176 2015-05-09] (Emsisoft GmbH)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
S3 cleanhlp; C:\EEK\bin\cleanhlp64.sys [57024 2015-05-09] (Emsisoft GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [32768 2014-05-23] (Windows (R) Win 7 DDK provider)
R1 SDHookDriver; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys [63904 2013-10-10] ()
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21584 2013-05-06] ()
R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [116224 2015-05-06] (Webroot)
S3 wrUrlFlt; C:\Windows\system32\DRIVERS\wrUrlFlt.sys [41040 2015-04-18] (Webroot)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-16 21:37 - 2015-05-16 21:37 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-USER-PC-Windows-7-Professional-(64-bit).dat
2015-05-16 21:36 - 2015-05-16 21:36 - 00000000 ____D () C:\RegBackup
2015-05-16 21:35 - 2015-05-16 21:35 - 00003652 _____ () C:\Windows\System32\Tasks\Tweaking.com - Windows Repair Tray Icon
2015-05-16 21:35 - 2015-05-16 21:35 - 00002163 _____ () C:\Users\Daddy\Desktop\Tweaking.com - Windows Repair.lnk
2015-05-16 21:33 - 2015-05-16 21:35 - 12873576 _____ () C:\Users\Daddy\Downloads\tweaking.com_windows_repair_aio_setup (1).exe
2015-05-16 21:32 - 2015-05-16 21:32 - 00002163 _____ () C:\Users\Daddy\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2015-05-16 21:32 - 2015-05-16 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-05-16 21:32 - 2015-05-16 21:32 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2015-05-16 21:29 - 2015-05-16 21:31 - 12840520 _____ () C:\Users\Daddy\Downloads\tweaking.com_windows_repair_aio_setup.exe
2015-05-16 14:43 - 2015-05-16 14:43 - 00031657 _____ () C:\ComboFix.txt
2015-05-16 14:32 - 2015-01-31 07:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-05-16 14:32 - 2015-01-31 07:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-05-16 14:32 - 2015-01-31 03:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-05-16 14:31 - 2014-12-11 21:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-05-16 14:30 - 2015-05-16 14:43 - 00000000 ____D () C:\Qoobox
2015-05-16 14:30 - 2011-06-26 10:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-16 14:30 - 2010-11-07 21:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-16 14:30 - 2009-04-20 08:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-16 14:30 - 2000-08-31 04:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-16 14:30 - 2000-08-31 04:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-16 14:30 - 2000-08-31 04:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-16 14:30 - 2000-08-31 04:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-16 14:30 - 2000-08-31 04:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-16 14:29 - 2015-05-16 14:42 - 00000000 ____D () C:\Windows\erdnt
2015-05-16 14:18 - 2015-05-16 14:18 - 00000000 ____D () C:\Users\Daddy\Downloads\tdsskiller
2015-05-16 14:18 - 2015-01-22 08:42 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Daddy\Desktop\TDSSKiller.exe
2015-05-16 14:17 - 2015-05-16 14:17 - 05623645 ____R (Swearware) C:\Users\Daddy\Desktop\ComboFix.exe
2015-05-16 14:17 - 2015-05-16 14:17 - 04176437 _____ () C:\Users\Daddy\Downloads\tdsskiller.zip
2015-05-16 10:01 - 2014-09-05 06:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-05-16 10:01 - 2014-09-05 05:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-05-15 20:39 - 2015-05-16 17:00 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\Skype
2015-05-15 20:39 - 2015-05-15 20:39 - 00002697 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-05-15 20:39 - 2015-05-15 20:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-05-15 20:39 - 2015-05-15 20:39 - 00000000 ____D () C:\Users\Daddy\AppData\Local\Skype
2015-05-15 20:39 - 2015-05-15 20:39 - 00000000 ____D () C:\ProgramData\Skype
2015-05-15 20:39 - 2015-05-15 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-05-15 20:39 - 2013-10-02 06:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-05-15 20:39 - 2013-10-02 06:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-05-15 20:39 - 2013-10-02 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-05-15 20:39 - 2013-10-02 05:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-05-15 20:39 - 2013-10-02 05:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-05-15 20:39 - 2013-10-02 05:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-05-15 20:39 - 2013-10-02 05:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-05-15 20:39 - 2013-10-02 04:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-05-15 20:39 - 2013-10-02 04:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-05-15 20:39 - 2013-10-02 04:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-05-15 20:39 - 2013-10-02 04:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-05-15 20:39 - 2013-10-02 03:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-05-15 20:39 - 2013-10-02 03:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-05-15 20:39 - 2013-10-02 03:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-05-15 20:39 - 2013-10-02 02:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-05-15 20:31 - 2012-08-23 18:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-05-15 20:31 - 2012-08-23 18:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2015-05-15 20:31 - 2012-08-23 15:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-05-15 20:31 - 2012-08-23 14:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-05-15 20:30 - 2015-03-14 07:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-05-15 20:30 - 2015-03-14 07:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-05-15 20:30 - 2015-03-14 07:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-05-15 20:30 - 2015-03-14 07:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-05-15 20:21 - 2015-05-15 20:21 - 00000000 ____D () C:\Windows\pss
2015-05-15 18:28 - 2015-05-15 18:28 - 00007355 _____ () C:\Users\Daddy\Desktop\RKreport_SCN_05152015_181909.log
2015-05-15 18:12 - 2015-05-15 18:12 - 00000848 _____ () C:\Users\Public\Desktop\RogueKiller.lnk
2015-05-15 18:12 - 2015-05-15 18:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2015-05-15 18:12 - 2015-05-15 18:12 - 00000000 ____D () C:\Program Files\RogueKiller
2015-05-15 18:11 - 2015-05-15 18:11 - 18974568 _____ (Adlice Software ) C:\Users\Daddy\Downloads\setup.exe
2015-05-15 18:08 - 2015-05-15 18:08 - 00852630 _____ () C:\Users\Daddy\Desktop\SecurityCheck.exe
2015-05-15 08:03 - 2015-05-01 17:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 08:03 - 2015-05-01 17:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 07:21 - 2015-05-05 05:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-15 07:21 - 2015-05-05 05:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-15 07:21 - 2015-04-22 06:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-15 07:21 - 2015-04-22 05:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-15 07:21 - 2015-04-21 21:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-15 07:21 - 2015-04-21 21:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-15 07:21 - 2015-04-21 21:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-15 07:21 - 2015-04-21 20:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-15 07:21 - 2015-04-21 20:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-15 07:21 - 2015-04-21 20:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-15 07:21 - 2015-04-21 20:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-15 07:21 - 2015-04-21 20:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-15 07:21 - 2015-04-21 20:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-15 07:21 - 2015-04-21 20:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-15 07:21 - 2015-04-21 20:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-15 07:21 - 2015-04-21 20:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-15 07:21 - 2015-04-21 20:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-15 07:21 - 2015-04-21 20:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-15 07:21 - 2015-04-21 20:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-15 07:21 - 2015-04-21 20:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-15 07:21 - 2015-04-21 20:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-15 07:21 - 2015-04-21 20:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-15 07:21 - 2015-04-21 20:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-15 07:21 - 2015-04-21 20:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-15 07:21 - 2015-04-21 20:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-15 07:21 - 2015-04-21 20:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-15 07:21 - 2015-04-21 20:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-15 07:21 - 2015-04-21 20:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-15 07:21 - 2015-04-21 20:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-15 07:21 - 2015-04-21 20:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-15 07:21 - 2015-04-21 20:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-15 07:21 - 2015-04-21 20:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-15 07:21 - 2015-04-21 20:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-15 07:21 - 2015-04-21 20:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-15 07:21 - 2015-04-21 20:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-15 07:21 - 2015-04-21 20:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-15 07:21 - 2015-04-21 20:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-15 07:21 - 2015-04-21 20:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-15 07:21 - 2015-04-21 19:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-15 07:21 - 2015-04-21 19:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-15 07:21 - 2015-04-21 19:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-15 07:21 - 2015-04-21 19:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-15 07:21 - 2015-04-21 19:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-15 07:21 - 2015-04-21 19:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-15 07:21 - 2015-04-21 19:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-15 07:21 - 2015-04-21 19:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-15 07:21 - 2015-04-21 19:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-15 07:21 - 2015-04-21 19:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-15 07:21 - 2015-04-21 19:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-15 07:21 - 2015-04-21 19:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-15 07:21 - 2015-04-21 19:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-15 07:21 - 2015-04-21 19:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-15 07:21 - 2015-04-21 19:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-15 07:21 - 2015-04-21 19:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-15 07:21 - 2015-04-21 19:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-15 07:21 - 2015-04-21 19:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-15 07:21 - 2015-04-21 19:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-15 07:21 - 2015-04-21 19:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-15 07:21 - 2015-04-21 19:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-15 07:21 - 2015-04-21 19:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-15 07:21 - 2015-04-21 18:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-15 07:21 - 2015-04-21 18:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-15 07:21 - 2015-04-18 07:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-15 07:21 - 2015-04-18 06:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-15 07:17 - 2015-04-27 23:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-15 07:17 - 2015-04-27 23:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-15 07:17 - 2015-04-27 23:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-15 07:17 - 2015-04-27 23:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-15 07:17 - 2015-04-27 23:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-15 07:17 - 2015-04-27 23:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-15 07:17 - 2015-04-27 23:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-15 07:17 - 2015-04-27 23:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-15 07:17 - 2015-04-27 23:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-15 07:17 - 2015-04-27 23:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 23:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-15 07:17 - 2015-04-27 23:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-15 07:17 - 2015-04-27 23:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-15 07:17 - 2015-04-27 23:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-15 07:17 - 2015-04-27 23:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-15 07:17 - 2015-04-27 23:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-15 07:17 - 2015-04-27 23:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-15 07:17 - 2015-04-27 23:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-15 07:17 - 2015-04-27 23:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-15 07:17 - 2015-04-27 23:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-15 07:17 - 2015-04-27 23:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-15 07:17 - 2015-04-27 23:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-15 07:17 - 2015-04-27 23:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-15 07:17 - 2015-04-27 23:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-15 07:17 - 2015-04-27 23:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-15 07:17 - 2015-04-27 23:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-15 07:17 - 2015-04-27 23:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-15 07:17 - 2015-04-27 23:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-15 07:17 - 2015-04-27 23:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-15 07:17 - 2015-04-27 23:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 22:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-15 07:17 - 2015-04-27 21:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-15 07:17 - 2015-04-27 21:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-15 07:17 - 2015-04-27 21:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 21:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 21:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-15 07:17 - 2015-04-27 21:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-15 07:17 - 2015-04-13 07:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-15 07:16 - 2015-04-20 07:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-15 07:16 - 2015-04-20 07:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-15 07:16 - 2015-04-20 06:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-15 07:16 - 2015-04-20 06:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-15 07:16 - 2015-04-08 07:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-15 07:16 - 2015-04-08 07:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-15 07:16 - 2015-04-08 07:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-15 07:16 - 2015-03-04 08:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-15 07:16 - 2015-03-04 08:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-15 07:16 - 2015-03-04 08:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-15 07:16 - 2015-03-04 08:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-15 07:16 - 2015-03-04 08:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-15 07:16 - 2015-03-04 08:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-15 07:16 - 2015-03-04 08:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-15 07:16 - 2015-02-18 11:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-15 07:16 - 2015-02-18 11:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-15 07:16 - 2015-01-29 07:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-15 07:16 - 2015-01-29 07:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-15 07:08 - 2015-05-15 07:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-05-11 22:05 - 2015-05-11 22:05 - 00456984 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150511.220513.1704.log
2015-05-11 22:05 - 2015-05-11 22:05 - 00000022 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150511.220513.1704.zip
2015-05-10 20:15 - 2015-05-16 23:44 - 00000000 ____D () C:\Users\Daddy\Desktop\FRST-OlderVersion
2015-05-09 16:45 - 2015-05-09 16:45 - 00000000 ____D () C:\Users\Daddy\AppData\Local\CrashDumps
2015-05-09 13:54 - 2015-05-11 22:07 - 00000000 ____D () C:\EEK
2015-05-09 13:54 - 2015-05-09 13:55 - 00000743 _____ () C:\Users\Daddy\Desktop\Start Emsisoft Emergency Kit.lnk
2015-05-09 13:40 - 2015-05-15 18:12 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-05-09 13:40 - 2015-05-09 13:54 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-05-09 13:39 - 2015-05-09 13:40 - 20688472 _____ () C:\Users\Daddy\Desktop\RogueKillerX64.exe
2015-05-09 13:28 - 2015-05-09 13:28 - 00003324 _____ () C:\Windows\system32\.crusader
2015-05-09 13:20 - 2015-05-09 13:21 - 00096639 _____ () C:\Users\Daddy\Desktop\Addition.txt
2015-05-09 13:19 - 2015-05-16 23:44 - 02107392 _____ (Farbar) C:\Users\Daddy\Desktop\FRST64.exe
2015-05-09 13:19 - 2015-05-16 23:44 - 00014997 _____ () C:\Users\Daddy\Desktop\FRST.txt
2015-05-09 13:19 - 2015-05-16 23:44 - 00000000 ____D () C:\FRST
2015-05-09 13:09 - 2015-05-09 13:28 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-05-09 12:43 - 2015-05-09 12:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-09 12:41 - 2015-05-09 12:41 - 00495366 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150509.124149.8808.log
2015-05-09 12:41 - 2015-05-09 12:41 - 00000022 _____ () C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe_20150509.124149.8808.zip
2015-05-09 12:41 - 2015-05-09 12:39 - 157101768 _____ () C:\Users\Daddy\Desktop\EmsisoftEmergencyKit.exe
2015-05-09 12:41 - 2015-05-09 12:29 - 11024496 _____ (SurfRight B.V.) C:\Users\Daddy\Desktop\HitmanPro_x64.exe
2015-05-09 12:41 - 2015-05-09 12:22 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Daddy\Desktop\mbam-setup-2.1.6.1022.exe
2015-05-09 12:41 - 2015-05-09 12:10 - 00221384 _____ (ESET) C:\Users\Daddy\Desktop\ESETPoweliksCleaner.exe
2015-05-09 10:46 - 2015-05-09 10:47 - 05198336 _____ (AVAST Software) C:\Users\Daddy\Desktop\aswMBR.exe
2015-05-06 19:58 - 2015-05-06 19:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-02 12:07 - 2015-05-02 12:07 - 00000000 ____D () C:\Users\Public\Documents\PC Faster
2015-05-02 11:19 - 2015-05-02 11:19 - 00000000 ____D () C:\Users\Daddy\Documents\ProcAlyzer Dumps
2015-05-02 10:28 - 2015-05-02 10:28 - 00986624 _____ () C:\Users\Daddy\Downloads\MicrosoftFixit50850 (1).msi
2015-05-01 11:31 - 2015-05-01 11:31 - 00016225 _____ () C:\Users\Daddy\Documents\My Movie.wlmp
2015-05-01 10:56 - 2015-05-01 10:56 - 00000000 ____D () C:\Users\Daddy\Tracing
2015-05-01 10:54 - 2015-05-01 10:54 - 00001500 _____ () C:\Users\Public\Desktop\Free Video Flip and Rotate.lnk
2015-05-01 10:54 - 2015-05-01 10:54 - 00001245 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-05-01 10:54 - 2015-05-01 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-05-01 10:54 - 2015-05-01 10:54 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-05-01 10:50 - 2015-05-01 10:50 - 00001374 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-05-01 10:50 - 2015-05-01 10:50 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-05-01 10:50 - 2015-05-01 10:50 - 00000000 ____D () C:\Windows\en
2015-05-01 10:49 - 2015-05-01 10:49 - 00002486 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-05-01 10:49 - 2015-05-01 10:49 - 00001458 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-05-01 10:49 - 2015-05-01 10:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-05-01 10:48 - 2015-05-01 10:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-05-01 10:48 - 2015-05-01 10:48 - 00000000 ____D () C:\Program Files\Windows Live
2015-05-01 10:48 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2015-05-01 10:47 - 2015-05-01 10:55 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\DVDVideoSoft
2015-05-01 10:47 - 2015-05-01 10:49 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-05-01 10:45 - 2015-05-01 10:46 - 30138712 _____ (DVDVideoSoft Ltd. ) C:\Users\Daddy\Downloads\FreeVideoFlipAndRotate.exe
2015-05-01 10:44 - 2015-05-01 10:44 - 00000360 _____ () C:\Windows\DirectX.log
2015-05-01 10:43 - 2015-05-01 10:43 - 00002177 _____ () C:\Users\Daddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-05-01 10:43 - 2015-05-01 10:43 - 00002104 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-05-01 10:43 - 2015-05-01 10:43 - 00002104 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-05-01 10:43 - 2015-05-01 10:43 - 00000000 ___RD () C:\Users\Daddy\OneDrive
2015-05-01 10:43 - 2015-05-01 10:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2015-05-01 10:42 - 2015-05-01 10:42 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-05-01 10:41 - 2015-05-01 11:07 - 00000000 ____D () C:\Users\Daddy\AppData\Local\Windows Live
2015-05-01 10:41 - 2015-05-01 10:41 - 01239752 _____ (Microsoft Corporation) C:\Users\Daddy\Downloads\wlsetup-web.exe
2015-04-25 14:28 - 2015-05-15 21:07 - 00000000 ____D () C:\ProgramData\SecTaskMan
2015-04-25 14:28 - 2015-04-25 14:28 - 00001162 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk
2015-04-25 14:28 - 2015-04-25 14:28 - 00001151 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk
2015-04-25 14:28 - 2015-04-25 14:28 - 00001139 _____ () C:\Users\Public\Desktop\Security Task Manager.lnk
2015-04-25 14:28 - 2015-04-25 14:28 - 00000000 ____D () C:\Users\Daddy\AppData\Local\SecTaskMan
2015-04-25 14:28 - 2015-04-25 14:28 - 00000000 ____D () C:\Program Files (x86)\Security Task Manager
2015-04-25 14:24 - 2015-04-25 14:24 - 00000000 ____D () C:\Users\Daddy\Downloads\exe-fix-twc
2015-04-21 22:12 - 2015-04-18 10:39 - 00010752 _____ () C:\Users\Daddy\Desktop\exefix_xp.com
2015-04-21 22:08 - 2015-04-21 22:08 - 00000000 ____D () C:\Utilities
2015-04-21 22:05 - 2015-04-18 08:51 - 00002127 _____ () C:\Users\Daddy\Desktop\win7-regfix.reg
2015-04-21 21:58 - 2015-04-18 08:51 - 00002127 _____ () C:\Users\Bianca\Desktop\win7-regfix.reg
2015-04-21 21:57 - 2015-04-18 10:39 - 00010752 _____ () C:\Users\Bianca\Desktop\exefix_xp.com
2015-04-21 21:23 - 2015-04-21 21:24 - 00001293 _____ () C:\Users\Daddy\Downloads\exe-fix-twc.zip
2015-04-18 10:52 - 2015-05-16 22:42 - 00000000 ____D () C:\ProgramData\WRData
2015-04-18 10:52 - 2015-05-06 19:39 - 00166128 _____ (Webroot) C:\Windows\SysWOW64\WRusr.dll
2015-04-18 10:52 - 2015-05-06 19:39 - 00116224 _____ (Webroot) C:\Windows\system32\Drivers\WRkrn.sys
2015-04-18 10:52 - 2015-05-06 19:39 - 00103816 _____ (Webroot) C:\Windows\system32\WRusr.dll
2015-04-18 10:52 - 2015-04-18 10:52 - 00041040 ____T (Webroot) C:\Windows\system32\Drivers\wrUrlFlt.sys
2015-04-18 10:52 - 2015-04-18 10:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webroot SecureAnywhere
2015-04-18 10:52 - 2015-04-18 10:52 - 00000000 ____D () C:\Program Files\Webroot
2015-04-18 08:14 - 2015-04-18 08:14 - 00000000 ____D () C:\Users\Mom\.swt
2015-04-18 08:13 - 2015-04-18 08:16 - 00000000 ____D () C:\Users\Mom\AppData\Roaming\Azureus
2015-04-17 17:53 - 2015-04-17 17:53 - 00986624 _____ () C:\Users\Daddy\Downloads\MicrosoftFixit50850.msi
2015-04-17 17:46 - 2015-04-17 17:46 - 00986624 _____ () C:\Users\Mom\Downloads\MicrosoftFixit50850(1).msi
2015-04-17 17:44 - 2015-04-17 17:44 - 00986624 _____ () C:\Users\Mom\Downloads\MicrosoftFixit50850.msi
2015-04-17 15:09 - 2015-04-17 15:09 - 00072008 _____ (Azureus Software, Inc.) C:\Users\Daddy\Downloads\VuzeBittorrentClientInstaller.exe
2015-04-17 15:08 - 2015-04-17 15:08 - 00012498 _____ () C:\Users\Daddy\Downloads\Game+of+Thrones+S05E01+HDTV+x264-Xclusive+mp4 (1).torrent
2015-04-17 15:07 - 2015-04-17 15:07 - 00012498 _____ () C:\Users\Daddy\Downloads\Game+of+Thrones+S05E01+HDTV+x264-Xclusive+mp4.torrent
2015-04-16 21:53 - 2015-04-09 00:32 - 00560968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-04-16 21:50 - 2015-04-09 04:58 - 31570064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 30397072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 25375048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 24053576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 15818528 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 15716232 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 14617288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 14006752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 12852784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 11380728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 10423952 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-04-16 21:50 - 2015-04-09 04:58 - 02896528 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 02573456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01895568 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435012.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435012.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01086424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01047368 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 01037640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00970568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00962192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00927440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-04-16 21:50 - 2015-04-09 04:58 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-04-16 09:09 - 2015-04-16 09:09 - 00000000 ____D () C:\Windows\system32\appraiser

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-16 23:43 - 2013-10-13 21:46 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-16 23:42 - 2009-07-14 08:45 - 05081288 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-16 23:41 - 2014-10-17 15:23 - 00061986 _____ () C:\Windows\setupact.log
2015-05-16 23:41 - 2009-07-14 09:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-16 23:40 - 2014-11-06 16:12 - 00021010 _____ () C:\Windows\PFRO.log
2015-05-16 23:40 - 2011-04-12 12:28 - 00000000 ____D () C:\Windows\CSC
2015-05-16 23:12 - 2013-10-13 21:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-16 22:40 - 2009-07-14 09:13 - 00788438 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-16 22:39 - 2009-07-14 06:34 - 00000514 _____ () C:\Windows\win.ini
2015-05-16 22:36 - 2013-10-12 15:21 - 00788438 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-05-16 22:35 - 2013-10-12 15:17 - 01465130 _____ () C:\Windows\WindowsUpdate.log
2015-05-16 21:00 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\rescache
2015-05-16 19:16 - 2013-10-13 21:36 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-16 18:04 - 2009-07-14 08:45 - 00022096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-16 18:04 - 2009-07-14 08:45 - 00022096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-16 14:41 - 2009-07-14 06:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-16 10:07 - 2013-10-13 21:46 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-16 10:07 - 2013-10-13 21:46 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-15 21:12 - 2011-04-12 12:28 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-15 21:12 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-15 21:05 - 2009-07-14 07:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-15 21:03 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-05-15 19:59 - 2013-10-12 15:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-15 19:09 - 2013-10-18 08:54 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-05-15 18:05 - 2015-01-13 17:00 - 00000000 ___RD () C:\Users\Daddy\iCloudDrive
2015-05-15 18:04 - 2014-08-01 10:17 - 00000000 ____D () C:\Users\Daddy\AppData\Local\Overwolf
2015-05-15 17:34 - 2015-01-17 21:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-15 17:34 - 2015-01-17 21:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-15 08:11 - 2013-10-13 19:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-15 08:11 - 2013-10-12 21:39 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-15 08:06 - 2013-10-12 21:39 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-15 08:03 - 2015-01-17 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-15 07:02 - 2014-08-01 10:30 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2015-05-12 19:26 - 2014-07-30 20:57 - 05539456 _____ () C:\Users\Daddy\Downloads\noname (1).eml
2015-05-11 23:10 - 2014-07-30 20:57 - 05648049 _____ () C:\Users\Daddy\Downloads\noname.eml
2015-05-10 19:53 - 2013-10-12 17:53 - 00000000 ____D () C:\Program Files\Vuze
2015-05-09 15:20 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-09 12:58 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\TAPI
2015-05-09 10:40 - 2013-10-26 08:43 - 00000000 ____D () C:\ProgramData\FLEXnet
2015-05-09 10:01 - 2013-11-02 20:57 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\Azureus
2015-05-07 21:07 - 2015-01-18 12:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-07 17:50 - 2014-08-06 07:32 - 00002066 _____ () C:\Users\Daddy\Desktop\PC App Store.lnk
2015-05-05 15:14 - 2009-07-14 09:08 - 00032582 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-02 12:17 - 2013-10-26 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-05-02 12:15 - 2014-06-07 12:41 - 00000000 ____D () C:\Program Files (x86)\Real
2015-05-02 12:15 - 2014-06-07 12:40 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\Real
2015-05-02 12:15 - 2014-06-07 12:13 - 00000000 ____D () C:\ProgramData\Real
2015-05-02 12:12 - 2013-10-13 21:46 - 00000000 ____D () C:\Program Files (x86)\Google
2015-05-02 11:19 - 2013-10-18 09:23 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-05-02 10:16 - 2015-03-02 19:48 - 00003338 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1055236318-1379152274-1924446089-1005
2015-05-02 10:16 - 2015-03-02 19:48 - 00003204 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1055236318-1379152274-1924446089-1005
2015-05-01 10:56 - 2013-10-30 22:02 - 00000000 ____D () C:\Users\Daddy
2015-05-01 10:48 - 2009-07-14 07:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-04-25 23:31 - 2009-07-14 07:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-23 18:34 - 2013-11-09 07:46 - 00000000 ____D () C:\Users\Daddy\AppData\Roaming\vlc
2015-04-18 08:14 - 2013-10-18 08:18 - 00000000 ____D () C:\Users\Mom
2015-04-16 21:54 - 2014-12-27 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-16 21:54 - 2013-10-12 15:48 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-04-16 21:36 - 2014-12-27 00:56 - 00001381 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-04-16 09:09 - 2014-05-07 00:04 - 00000000 ___SD () C:\Windows\system32\CompatTel

==================== Files in the root of some directories =======

2013-10-21 21:24 - 2013-10-21 21:24 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-11-21 20:54 - 2013-11-21 20:54 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2015-05-15 07:44

==================== End Of Log ============================

Satchfan

Post #26May 16, 2015, 8:56 PM UTC

Can you tell me how it is running now.

wil1571

Post #27May 18, 2015, 3:31 AM UTC

Sorry for the late reply, everything seems to be running smoothly. All the windows updates were installed properly without any errors or warnings. If anything happens I will let you know, again many thanks for your help and patience.

Satchfan

Post #28May 18, 2015, 7:06 AM UTC

Let’s run an online scan to be sure nothing is left and if that’s clear I’ll send instructions to tidy up.

Run ESET Online Scan

Note: This may take a long time so please be patient.

IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.

Note: You can use Internet Explorer, FireFox or Chrome for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.

ESET OnlineScan

click the Eset online Scanner button
for alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

o click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
o double click on the Eset installer icon on your desktop.
check Yes, I accept the Terms of Use
click the Start button
accept any security warnings from your browser
check Enable detection of potentially unwanted applications
click Advanced settings and select the following:

o   scan archives
o   scan for potentially unsafe applications
o   enable Anti-Stealth technology

Note: Do not check Remove found threats
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
when the scan completes, push List of found threats
push Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

Note - if ESET doesn't find any threats, no report will be created.
push the back button.
push Finish

When the scan is complete:

If no threats were found:

o   put a checkmark in "Uninstall application on close"
o   close program
o   report to me that nothing was found.

If threats were found:

o   click on "list of threats found"
o   click on "export to text file" and save it as ESET results and save to the desktop
o   Click on back
o   put a checkmark in "Uninstall application on close"
o   click on finish
o   close program
o   copy and paste the report here.

Thanks

Satchfan

wil1571

Post #29May 18, 2015, 7:07 PM UTC

I tried to run ESET but it looks like nothing is happening - see attached, is this normal?

Attachments:

📎ESET screenshot.pdf

Satchfan

Post #30May 18, 2015, 9:38 PM UTC

I tried to run ESET but it looks like nothing is happening - see attached, is this normal?

Please tell me what the attachment is or what it says as I don't feel comfortable opening random attachments.

Please also make sure that your computer's security is not running and try to run Eset again.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

AnLogRpt and other exe pop ups [Solved]

✨ Ask AI

Ask AI