Linkbucks - browser hijacked [Solved]

Thanks for the quick answer. Here's the FRST.TXT 

 

And the addition.txt from Farbar Scan

 

And here's adwcleaner log

 

Hi there,

 

Multiple AntiVirus Running

I see you have more than one Anti-Virus program installed, ( Avast Free Antivirus ) and ( AVG 2016 ).

While this may seem like greater protection, it can cause problems including slowdowns, system hangs or even crashes. This can happen if both AntiVirus applications attempt to access the same file at the same time. This may cause the applications to interfere with each other, or cause the system to lock up. It can also be a drain on system resources, making a machine run slower than it should.

Any antivirus program must be removed via add/remove program.
For any program that doesn't have an add/remove entry, you will have to do this:

Re-install the program -> Reboot -> Uninstall

Please choose one that you need or paid for and remove the other. Let me know if you need further assistance.
 
===================================================

Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator
• The tool will start to update the database, please wait a bit.
• Click on the Scan button.
• AdwCleaner will begin…be patient as the scan may take some time to complete.
• After the scan has finished, click on the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

[external image: thisisujrt.gif] Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

===================================================

On your next reply please post :
AdwCleaner log
JRT log


Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Thanks again for all the help!

Here's Adwcleaner log:

 

And JRT log:

 

Sure, here's FRST.txt: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-10-2015 Ran by [removed] (administrator) on CASAPC (17-10-2015 11:30:55) Running from C:\Users\[removed]\Desktop [removed] Platform: Windows 8.1 Pro (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe (Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Dassault Systèmes SolidWorks Corp.) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\sldworks_fs.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated) HKLM\…\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [12326768 2015-08-30] (Zemana Ltd.) HKLM-x32\…\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.) HKLM-x32\…\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36711472 2015-10-12] (Dropbox, Inc.) HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-13] (AVAST Software) HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation) HKLM-x32\…\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguix.exe [1125800 2015-09-22] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd) HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.) HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\Run: [GoogleChromeAutoLaunch_80CE6C1A0400B1F9C1BC3EFB29ACE4A8] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [811848 2015-10-08] (Google Inc.) HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\MountPoints2: E - "E:\MAXON-Start.exe" HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\MountPoints2: G - "G:\setup.exe" ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-13] (AVAST Software) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Inicio rápido de SOLIDWORKS 2015.lnk [2015-08-05] ShortcutTarget: Inicio rápido de SOLIDWORKS 2015.lnk -> C:\Windows\Installer\{F8093877-4F2C-40ED-9BA7-2F9F48F5176F}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Programa de descargas en segundo plano de SOLIDWORKS.lnk [2015-08-05] ShortcutTarget: Programa de descargas en segundo plano de SOLIDWORKS.lnk -> C:\Program Files (x86)\Common Files\Gestor de instalación de SOLIDWORKS\BackgroundDownloading\sldBgDwld.exe (Dassault Systèmes SolidWorks Corp.) CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{D93CE5F3-F96A-4B9A-9A3C-BEAA9AB07E1F}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1940331569-2220852289-466042613-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1940331569-2220852289-466042613-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-ar/?ocid=iehp SearchScopes: HKLM -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms} SearchScopes: HKLM -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms} SearchScopes: HKLM-x32 -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1940331569-2220852289-466042613-1001 -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms} SearchScopes: HKU\S-1-5-21-1940331569-2220852289-466042613-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKU\S-1-5-21-1940331569-2220852289-466042613-1001 -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-13] (AVAST Software) BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-16] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-13] (AVAST Software) BHO-x32: No Name -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> No File BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-15] (Microsoft Corporation) BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-16] (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-03-12] (Microsoft Corporation) FireFox: ======== FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Program Files (x86)\Arc\plugins\NPSWF32.dll [2015-05-28] () FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-16] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-16] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2015-06-11] (Perfect World Entertainment Inc) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems) FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-13] [not signed] Chrome: ======= CHR Profile: C:\Users\Matias\AppData\Local\Google\Chrome\User Data\Default CHR HKLM-x32\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-13] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-04] (Autodesk Inc.) S2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [File not signed] S2 ArcGIS License Manager; C:\Program Files (x86)\ArcGIS\License10.2\bin\lmgrd.exe [1452408 2014-02-13] (Flexera Software LLC) S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88400 2015-06-11] (Perfect World Entertainment Inc) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-13] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-10-13] (Avast Software) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1042344 2015-09-22] (AVG Technologies CZ, s.r.o.) S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-07-16] (BitRaider, LLC) S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2015-05-17] (Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-24] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-24] (Dropbox, Inc.) S2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [1984696 2015-10-14] (Comodo) S2 Foundry FLEXlm Server; C:\Program Files (x86)\The Foundry\\LicensingTools7.0\bin\FLEXlm\lmgrd.foundry.exe [1392016 2012-10-30] (Acresso Software Inc.) S2 Foundry License Server; C:\Program Files (x86)\The Foundry\\LicensingTools7.0\bin\RLM\rlm.foundry.exe [1474560 2013-04-08] (Reprise Software Inc.) [File not signed] S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed] S2 gupdate1d0d528c4820a09; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-12] (Google Inc.) S3 gupdatem1d0d528c4898457; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-12] (Google Inc.) S3 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-07-20] (Hi-Rez Studios) [File not signed] S2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation) S2 McNeelUpdate; c:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67224 2014-06-17] (Robert McNeel & Associates) S3 mi-raysat_3dsmax2016_64; C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [86016 2011-09-15] () [File not signed] S2 Siemens PLM License Server; C:\Program Files\Siemens\PLMLicenseServer\lmgrd.exe [1830736 2014-01-06] (Flexera Software LLC.) S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2015-08-05] (SolidWorks) [File not signed] S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed] S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [12326768 2015-08-30] (Zemana Ltd.) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-22] (Advanced Micro Devices, Inc.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-27] (Advanced Micro Devices, Inc.) R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-13] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-13] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-13] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-13] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-13] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-13] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-13] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-13] (AVAST Software) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [102912 2015-07-15] (Advanced Micro Devices) S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2015-07-16] (BitRaider) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34963 2007-12-12] (Compuware Corporation) [File not signed] S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [37024 2007-12-03] (Compuware Corporation) [File not signed] S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [34587 2007-11-28] (Compuware Corporation) [File not signed] R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-10-13] (AVAST Software) R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-28] (Microsoft Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-10-13] (Avast Software) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) S3 xhunter1; C:\Windows\xhunter1.sys [37416 2015-07-11] (Wellbia.com Co., Ltd.) R1 ZAM; C:\Windows\System32\drivers\zam64.sys [109432 2015-10-10] (Zemana Ltd.) R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [109432 2015-10-10] (Zemana Ltd.) S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-10-17 01:32 - 2015-10-17 01:32 - 00001727 _____ C:\Users\Matias\Desktop\JRT.txt 2015-10-17 01:17 - 2015-10-17 01:18 - 00001574 _____ C:\Users\Matias\Downloads\instrucciones.txt 2015-10-17 00:49 - 2015-10-17 00:50 - 01801288 _____ (Malwarebytes) C:\Users\Matias\Downloads\JRT.exe 2015-10-16 22:00 - 2015-10-16 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-10-16 16:24 - 2015-10-16 16:24 - 01682432 _____ C:\Users\Matias\Downloads\AdwCleaner.exe 2015-10-15 23:12 - 2015-10-15 23:14 - 00070692 _____ C:\Users\Matias\Desktop\Addition.txt 2015-10-15 23:10 - 2015-10-17 11:30 - 00021000 _____ C:\Users\Matias\Desktop\FRST.txt 2015-10-15 23:10 - 2015-10-17 11:30 - 00000000 ____D C:\Users\Matias\Desktop\FRST-OlderVersion 2015-10-15 20:23 - 2015-10-15 20:23 - 00000000 ____D C:\Users\Matias\AppData\Roaming\AVG 2015-10-15 20:12 - 2015-10-15 20:20 - 00012060 _____ C:\Users\Matias\Downloads\hijackthis.log 2015-10-15 20:10 - 2015-10-15 20:10 - 00388608 _____ (Trend Micro Inc.) C:\Users\Matias\Downloads\HijackThis.exe 2015-10-15 20:07 - 2015-10-15 20:07 - 00000954 _____ C:\Users\Public\Desktop\AVG.lnk 2015-10-15 20:07 - 2015-10-15 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen 2015-10-15 20:05 - 2015-10-17 00:55 - 00000000 ____D C:\ProgramData\Avg 2015-10-15 20:05 - 2015-10-17 00:55 - 00000000 ____D C:\Program Files (x86)\AVG 2015-10-15 20:02 - 2015-10-17 00:55 - 00000000 ____D C:\Users\Matias\AppData\Local\Avg 2015-10-15 20:02 - 2015-10-15 20:07 - 00000000 ____D C:\Users\Matias\AppData\Local\AvgSetupLog 2015-10-15 20:02 - 2015-10-15 20:02 - 02895448 _____ (AVG Technologies) C:\Users\Matias\Downloads\AVG_Protection_Free_983.exe 2015-10-15 19:28 - 2015-10-15 19:28 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Sun 2015-10-15 19:26 - 2015-10-15 19:26 - 00000000 ____D C:\Users\Matias\AppData\LocalLow\Oracle 2015-10-15 14:36 - 2015-10-02 11:24 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-10-15 14:36 - 2015-10-02 11:24 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-10-14 18:59 - 2015-10-17 11:30 - 00000000 ____D C:\FRST 2015-10-14 18:58 - 2015-10-17 11:30 - 02196992 _____ (Farbar) C:\Users\Matias\Desktop\FRST64.exe 2015-10-14 18:58 - 2015-10-14 18:58 - 00781312 _____ C:\Users\Matias\Desktop\delfix_1.011.exe 2015-10-14 17:50 - 2015-09-19 00:18 - 00035384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-10-14 17:50 - 2015-09-18 10:42 - 01290752 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-10-14 17:50 - 2015-09-18 10:42 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-10-14 17:50 - 2015-09-18 10:42 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-10-14 17:50 - 2015-09-18 10:42 - 00699904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-10-14 17:50 - 2015-09-18 10:42 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-10-14 17:50 - 2015-09-18 10:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-10-14 15:24 - 2015-10-14 15:24 - 00000000 ____D C:\Program Files (x86)\Comodo 2015-10-13 19:18 - 2015-10-13 19:18 - 00000000 ____D C:\Users\Carolina\AppData\Roaming\AVAST Software 2015-10-13 19:18 - 2015-10-13 19:18 - 00000000 ____D C:\Users\Carolina\AppData\Local\Zemana 2015-10-13 19:17 - 2015-10-13 19:17 - 00000000 ____D C:\Users\Matias\AppData\Roaming\AVAST Software 2015-10-13 18:45 - 2015-08-06 13:47 - 04710400 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2015-10-13 18:45 - 2015-08-06 13:18 - 04068352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2015-10-13 18:43 - 2015-08-07 18:40 - 01134752 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-10-13 18:43 - 2015-08-07 18:40 - 00686960 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-10-13 18:43 - 2015-08-07 18:40 - 00507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2015-10-13 18:43 - 2015-08-07 11:13 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-10-13 18:40 - 2015-08-26 23:43 - 22372152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-13 18:40 - 2015-08-26 23:42 - 19795904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-10-13 18:39 - 2015-08-06 14:05 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx 2015-10-13 18:39 - 2015-08-06 13:37 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx 2015-10-13 18:36 - 2015-09-10 15:02 - 25851392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-10-13 18:35 - 2015-09-10 14:14 - 05990400 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-10-13 18:35 - 2015-09-10 14:09 - 20358144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-10-13 18:34 - 2015-09-10 14:18 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-10-13 18:34 - 2015-09-10 14:06 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-10-13 18:34 - 2015-09-10 13:33 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-10-13 18:34 - 2015-09-10 13:24 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-10-13 18:34 - 2015-09-10 13:02 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-10-13 18:34 - 2015-09-10 13:00 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-10-13 18:34 - 2015-09-10 12:57 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-10-13 18:33 - 2015-09-10 14:19 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-10-13 18:33 - 2015-09-10 14:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-10-13 18:33 - 2015-09-10 13:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-10-13 18:33 - 2015-09-10 13:39 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-10-13 18:33 - 2015-09-10 13:37 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-10-13 18:33 - 2015-09-10 13:35 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-10-13 18:33 - 2015-09-10 13:28 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-10-13 18:33 - 2015-09-10 13:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-10-13 18:33 - 2015-09-10 13:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-10-13 18:33 - 2015-09-10 13:19 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-10-13 18:33 - 2015-09-10 13:19 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-10-13 18:33 - 2015-09-10 13:19 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-10-13 18:33 - 2015-09-10 13:17 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-10-13 18:33 - 2015-09-10 13:17 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-10-13 18:33 - 2015-09-10 13:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-10-13 18:33 - 2015-09-10 13:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-10-13 18:33 - 2015-09-10 12:57 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-10-13 18:33 - 2015-09-10 12:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-10-13 18:33 - 2015-09-10 12:55 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-10-13 18:33 - 2015-09-10 12:45 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-10-13 18:33 - 2015-09-10 12:31 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-10-13 18:33 - 2015-09-10 12:27 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-10-13 18:32 - 2015-09-10 14:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-10-13 18:32 - 2015-09-10 13:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-10-13 18:32 - 2015-09-10 13:28 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-10-13 18:32 - 2015-09-10 13:01 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-10-13 18:32 - 2015-09-10 12:55 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-10-13 18:32 - 2015-09-10 12:34 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-10-13 18:32 - 2015-09-10 12:26 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-10-13 17:09 - 2015-09-29 09:31 - 07457624 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-10-13 17:09 - 2015-09-29 09:31 - 01658536 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-10-13 17:09 - 2015-09-29 09:31 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-10-13 17:09 - 2015-09-29 09:31 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-10-13 17:09 - 2015-09-29 09:31 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-10-13 17:09 - 2015-09-29 09:29 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-10-13 17:09 - 2015-09-28 15:45 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-10-13 17:09 - 2015-09-28 15:26 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-10-13 17:09 - 2015-09-28 15:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-10-13 17:09 - 2015-09-28 15:25 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-10-13 17:09 - 2015-09-28 15:25 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-10-13 17:09 - 2015-09-28 15:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-10-13 17:09 - 2015-09-28 15:22 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-10-13 17:09 - 2015-09-28 15:22 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-10-13 17:09 - 2015-09-28 15:15 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-10-13 17:09 - 2015-09-28 15:13 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-10-13 17:09 - 2015-09-28 15:12 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-10-13 17:09 - 2015-09-24 14:51 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe 2015-10-13 17:09 - 2015-09-24 14:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll 2015-10-13 17:09 - 2015-09-24 14:30 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll 2015-10-13 17:09 - 2015-09-24 13:42 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll 2015-10-13 17:09 - 2015-09-24 13:40 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-13 17:09 - 2015-08-22 10:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-13 17:09 - 2015-08-07 18:40 - 01736520 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-10-13 17:09 - 2015-08-07 18:40 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-10-13 17:09 - 2015-07-16 15:58 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll 2015-10-13 17:03 - 2015-10-13 17:16 - 00000000 ____D C:\Windows\SysWOW64\vbox 2015-10-13 17:03 - 2015-10-13 17:15 - 00000000 ____D C:\Windows\system32\vbox 2015-10-13 17:02 - 2015-10-17 01:03 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-10-13 17:02 - 2015-10-13 17:02 - 00001938 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2015-10-13 17:02 - 2015-10-13 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-10-13 17:01 - 2015-10-13 16:59 - 00448968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-10-13 17:01 - 2015-10-13 16:59 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-10-13 17:01 - 2015-10-13 16:59 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2015-10-13 17:01 - 2015-10-13 16:59 - 00153744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2015-10-13 17:01 - 2015-10-13 16:59 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2015-10-13 17:01 - 2015-10-13 16:59 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-10-13 17:01 - 2015-10-13 16:59 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2015-10-13 17:01 - 2015-10-13 16:59 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2015-10-13 17:01 - 2015-10-13 16:58 - 01049880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2015-10-13 17:01 - 2015-10-13 16:58 - 00132656 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys 2015-10-13 16:59 - 2015-10-13 16:59 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-10-13 16:54 - 2015-10-13 16:54 - 00000000 ____D C:\Program Files\AVAST Software 2015-10-13 16:50 - 2015-10-13 16:50 - 00000000 ____D C:\ProgramData\AVAST Software 2015-10-12 18:17 - 2015-10-12 18:17 - 00000655 _____ C:\Users\Public\Documents\bitrock_installer_5352.log 2015-10-12 17:49 - 2015-10-12 17:49 - 00002254 _____ C:\Users\Public\Desktop\ZBrush 4R7 64-bit.lnk 2015-10-12 17:46 - 2015-10-12 17:46 - 00000000 ____D C:\Users\Public\Pixologic 2015-10-11 00:09 - 2015-10-17 00:55 - 00125744 _____ C:\Windows\PFRO.log 2015-10-10 22:53 - 2015-10-10 22:53 - 00001011 _____ C:\Users\Public\Desktop\Marvelous Designer 5 Personal.lnk 2015-10-10 22:53 - 2015-10-10 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Marvelous Designer 5 Personal 2015-10-10 22:50 - 2015-10-14 14:53 - 00000000 ____D C:\Program Files\Marvelous Designer 5 Personal 2015-10-10 22:50 - 2015-10-10 22:50 - 00000000 ____D C:\Users\Public\Documents\MD5 2015-10-10 13:09 - 2015-10-10 13:09 - 00109432 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys 2015-10-10 13:09 - 2015-10-10 13:09 - 00109432 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys 2015-10-10 13:09 - 2015-10-10 13:09 - 00001160 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk 2015-10-10 13:09 - 2015-10-10 13:09 - 00000000 ____D C:\Users\Matias\AppData\Local\Zemana 2015-10-10 13:09 - 2015-10-10 13:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware 2015-10-10 13:09 - 2015-10-10 13:09 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware 2015-10-09 21:07 - 2015-10-17 01:20 - 00048024 _____ C:\Windows\setupact.log 2015-10-09 21:07 - 2015-10-09 21:07 - 00000000 _____ C:\Windows\setuperr.log 2015-10-09 21:06 - 2015-10-17 00:53 - 01025900 _____ C:\Windows\WindowsUpdate.log 2015-10-08 13:57 - 2015-10-08 13:57 - 00001027 _____ C:\Users\Matias\Desktop\3D-CoatDX64S.exe - Shortcut.lnk 2015-10-07 20:19 - 2015-10-08 13:09 - 00000025 ____H C:\Users\Matias\AppData\Roaming\uninst2.log 2015-10-07 20:19 - 2015-10-08 13:09 - 00000025 ____H C:\Users\Matias\AppData\Local\uninst3.log 2015-10-07 20:19 - 2015-10-08 13:09 - 00000025 ____H C:\ProgramData\temp21.log 2015-10-07 20:16 - 2015-10-07 20:16 - 00000000 ____D C:\Users\Matias\Documents\3D-CoatV3 2015-10-07 20:08 - 2015-10-08 13:57 - 00000000 ____D C:\Users\Matias\Documents\3D-CoatV45 2015-10-07 20:04 - 2015-10-07 20:08 - 00000000 ____D C:\Program Files\3D-Coat-V4.5 2015-10-07 20:04 - 2015-10-07 20:04 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4.5 2015-10-04 00:45 - 2015-10-04 00:45 - 00000000 ____D C:\Users\Public\Documents\CLO3D 2015-10-03 19:22 - 2015-10-17 00:50 - 00000000 ____D C:\Program Files\Common Files\AV 2015-10-03 19:22 - 2015-10-03 19:22 - 00003518 _____ C:\Windows\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 2015-10-03 18:48 - 2015-10-03 18:48 - 00000684 ____H C:\bdr-cf01 2015-10-03 18:43 - 2015-10-03 18:48 - 00253404 ____H C:\bdr-ld01 2015-10-03 18:43 - 2015-10-03 18:48 - 00009216 ____H C:\bdr-ld01.mbr 2015-10-03 18:43 - 2014-07-04 17:49 - 49563064 ____H C:\bdr-im01.gz 2015-10-03 18:43 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz01 2015-10-01 14:33 - 2015-10-01 14:33 - 00000000 ____D C:\Users\Matias\AppData\Roaming\ZWSOFT 2015-10-01 14:32 - 2015-10-01 14:42 - 00000000 ____D C:\Users\Matias\AppData\Roaming\ZW3D 2015 Eng (x64) 2015-10-01 14:32 - 2015-10-01 14:32 - 00000000 ____D C:\Users\Matias\Documents\ZW3D 2015-10-01 14:32 - 2015-10-01 14:32 - 00000000 ____D C:\Users\Matias\AppData\Roaming\ZWMold5.0 2015-10-01 14:03 - 2015-10-01 14:03 - 00002011 _____ C:\Users\Public\Desktop\ZW3D 2015 Eng (x64).lnk 2015-10-01 14:03 - 2015-10-01 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZWSOFT 2015-10-01 13:51 - 2015-10-01 13:51 - 00000000 ____D C:\Program Files\ZWSOFT 2015-09-29 11:06 - 2015-10-05 11:18 - 00000000 ____D C:\Users\Carolina\Desktop\alpaca 2015-09-28 21:07 - 2015-09-28 21:07 - 00000000 ____D C:\Program Files (x86)\The Foundry 2015-09-28 21:04 - 2015-09-28 21:04 - 00000000 ____D C:\Users\Matias\maricache 2015-09-28 21:04 - 2015-09-28 21:04 - 00000000 ____D C:\Users\Matias\Documents\Mari 2015-09-28 21:04 - 2015-09-28 21:04 - 00000000 ____D C:\Users\Matias\.mari 2015-09-28 20:53 - 2015-09-28 20:53 - 00000000 ____D C:\ProgramData\Macrovision 2015-09-28 20:46 - 2015-10-01 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Foundry 2015-09-28 20:42 - 2015-09-28 21:07 - 00000000 ____D C:\ProgramData\The Foundry 2015-09-28 20:42 - 2015-09-28 21:06 - 00000000 ____D C:\Program Files\The Foundry 2015-09-28 17:50 - 2015-10-15 19:28 - 00000000 ____D C:\Users\Matias\.oracle_jre_usage 2015-09-28 10:41 - 2015-10-15 20:01 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-09-28 10:41 - 2015-10-14 15:26 - 00001114 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-09-28 10:41 - 2015-10-14 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-09-28 10:41 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-09-28 10:41 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-09-28 10:41 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-09-28 10:40 - 2015-10-14 15:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-09-27 20:41 - 2015-09-27 20:41 - 00345187 _____ C:\Users\Matias\Documents\casa.skp 2015-09-27 20:16 - 2015-09-27 20:16 - 00001192 _____ C:\Users\Matias\Desktop\Editor.exe - Shortcut (2).lnk 2015-09-27 11:58 - 2015-09-27 11:58 - 00000000 ____D C:\Users\Matias\AppData\Roaming\HD Tune Pro 2015-09-27 11:57 - 2015-09-28 13:40 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro 2015-09-27 11:57 - 2015-09-27 11:57 - 00001045 _____ C:\Users\Matias\Desktop\HD Tune Pro.lnk 2015-09-27 11:57 - 2015-09-27 11:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro 2015-09-27 11:31 - 2015-09-27 11:31 - 00007370 _____ C:\Users\Matias\crash_report.txt 2015-09-26 23:51 - 2015-09-27 17:24 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Twinmotion3-Pro 2015-09-26 23:49 - 2015-09-26 23:49 - 00002215 _____ C:\Users\Public\Desktop\Twinmotion 2015 Professional Edition.lnk 2015-09-26 23:49 - 2015-09-26 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Twinmotion 2015 Professional Edition 2015-09-26 23:44 - 2015-09-26 23:48 - 00000000 ____D C:\Program Files\Twinmotion 2015 Professional Edition 2015-09-26 17:31 - 2015-09-26 17:31 - 00000000 ____D C:\Users\Matias\Documents\church (2) 2015-09-26 12:54 - 2015-09-26 12:54 - 00000000 ____D C:\ProgramData\Bricsys 2015-09-26 12:53 - 2015-09-26 12:53 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Bricsys 2015-09-26 12:53 - 2015-09-26 12:53 - 00000000 ____D C:\Users\Matias\AppData\Local\Bricsys 2015-09-26 12:52 - 2015-09-26 12:52 - 00000000 ____D C:\Program Files\Bricsys 2015-09-25 19:29 - 2015-09-25 19:29 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Python 2015-09-25 17:43 - 2015-09-25 19:38 - 00002660 _____ C:\Users\Matias\Desktop\Autodesk Fusion 360.lnk 2015-09-25 17:43 - 2015-09-25 17:43 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-09-25 13:12 - 2015-09-25 13:13 - 00000000 ____D C:\Users\Carolina\AppData\Local\Dropbox 2015-09-24 14:57 - 2015-10-17 11:11 - 00000000 ___RD C:\Users\Matias\Dropbox 2015-09-24 14:57 - 2015-09-24 14:57 - 00001242 _____ C:\Users\Matias\Desktop\Dropbox.lnk 2015-09-24 14:53 - 2015-09-24 14:53 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Dropbox 2015-09-24 14:51 - 2015-10-17 11:11 - 00000000 ____D C:\Users\Matias\AppData\Local\Dropbox 2015-09-24 14:51 - 2015-10-17 11:09 - 00000960 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2015-09-24 14:51 - 2015-10-16 23:56 - 00000964 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2015-09-24 14:51 - 2015-10-16 22:01 - 00000000 ____D C:\Program Files (x86)\Dropbox 2015-09-24 14:51 - 2015-09-24 14:51 - 00003936 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA 2015-09-24 14:51 - 2015-09-24 14:51 - 00003700 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore 2015-09-24 14:51 - 2015-09-24 14:51 - 00000000 ____D C:\ProgramData\Dropbox 2015-09-22 16:17 - 2015-09-22 16:17 - 00000000 ____D C:\Users\Matias\AppData\Local\CEF 2015-09-22 07:46 - 2015-09-22 21:33 - 00000000 ____D C:\Users\Matias\AppData\Local\UnrealEngine 2015-09-22 07:46 - 2015-09-22 07:46 - 00000000 ____D C:\Users\Matias\AppData\Local\UnrealEngineLauncher 2015-09-22 07:46 - 2015-09-22 07:46 - 00000000 ____D C:\Users\Matias\AppData\Local\EpicGamesLauncher 2015-09-22 07:36 - 2015-09-22 07:36 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2015-09-22 07:36 - 2015-09-22 07:36 - 00001216 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk 2015-09-22 07:35 - 2015-09-22 16:18 - 00000000 ____D C:\Program Files\Epic Games 2015-09-22 07:35 - 2015-09-22 07:46 - 00000000 ____D C:\ProgramData\Epic 2015-09-21 11:14 - 2015-10-16 16:25 - 00000000 ____D C:\Users\Matias\AppData\Local\CrashDumps 2015-09-21 11:14 - 2015-09-21 11:14 - 00062001 _____ C:\Users\Matias\Documents\zdump_a2_b9647_09_21_2015_11_14_44.dmp 2015-09-21 11:14 - 2015-09-21 11:14 - 00000000 ____D C:\Users\Matias\Documents\FMZ @ 09-21-15 1114 2015-09-21 09:58 - 2015-09-21 09:58 - 00002188 _____ C:\Users\Matias\Documents\untitled1 2.mtl 2015-09-21 09:34 - 2015-09-21 09:34 - 00000000 ____D C:\ProgramData\ATI 2015-09-20 10:58 - 2015-09-20 10:58 - 00058661 _____ C:\Windows\SysWOW64\CCCInstall_201509201058384400.log 2015-09-20 10:58 - 2015-09-20 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-10-17 11:27 - 2015-05-10 19:38 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Skype 2015-10-17 11:18 - 2015-05-21 21:57 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1940331569-2220852289-466042613-1001 2015-10-17 11:16 - 2015-08-12 15:00 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-17 11:12 - 2015-05-10 17:13 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{28E5ECD5-F002-487F-B58E-4DDCE20F588A} 2015-10-17 11:10 - 2015-05-11 13:44 - 00000000 ___DO C:\Users\Matias\OneDrive 2015-10-17 11:09 - 2015-08-12 15:00 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-17 11:08 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\sru 2015-10-17 01:21 - 2015-05-15 20:34 - 00000000 ____D C:\ProgramData\Reprise 2015-10-17 01:20 - 2015-08-01 19:11 - 00000350 _____ C:\Windows\Tasks\GoodScene.job 2015-10-17 01:20 - 2013-08-22 11:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-17 01:19 - 2015-05-22 18:47 - 00000000 ____D C:\AdwCleaner 2015-10-17 01:19 - 2013-08-22 10:25 - 00524288 ___SH C:\Windows\system32\config\BBI 2015-10-17 00:55 - 2015-05-21 14:29 - 00000000 ____D C:\ProgramData\MFAData 2015-10-17 00:55 - 2015-05-14 23:17 - 00000000 ____D C:\Program Files\Bitdefender 2015-10-17 00:48 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\ELAMBKUP 2015-10-16 17:38 - 2015-05-16 16:01 - 00000000 ____D C:\ProgramData\Oracle 2015-10-16 17:16 - 2015-05-16 16:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-10-16 17:16 - 2015-05-16 16:01 - 00000000 ____D C:\Program Files (x86)\Java 2015-10-16 16:46 - 2015-05-10 18:48 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Awesomium 2015-10-16 16:42 - 2015-05-16 16:01 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-10-15 20:27 - 2013-08-22 10:25 - 00262144 ___SH C:\Windows\system32\config\ELAM 2015-10-15 16:53 - 2015-05-10 19:37 - 00000000 ____D C:\ProgramData\Skype 2015-10-15 14:55 - 2015-07-26 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thea Render 2015-10-15 14:39 - 2015-05-10 17:04 - 00913650 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-14 23:20 - 2015-05-11 23:14 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-10-14 23:20 - 2015-05-11 23:14 - 00000000 ____D C:\Windows\system32\appraiser 2015-10-14 23:20 - 2013-08-22 12:36 - 00000000 ___RD C:\Windows\ToastData 2015-10-14 22:20 - 2015-06-05 23:41 - 00807424 ___SH C:\Users\Matias\Downloads\Thumbs.db 2015-10-14 19:08 - 2015-05-14 16:33 - 00000000 ____D C:\Users\Matias\AppData\Roaming\uTorrent 2015-10-14 18:13 - 2013-08-22 12:20 - 00000000 ____D C:\Windows\CbsTemp 2015-10-14 14:20 - 2015-05-31 10:52 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1940331569-2220852289-466042613-1006 2015-10-14 10:54 - 2015-05-20 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-10-13 21:11 - 2015-05-20 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-10-13 21:10 - 2013-08-22 10:25 - 00000167 _____ C:\Windows\win.ini 2015-10-13 20:52 - 2015-05-11 10:44 - 00000000 ____D C:\Windows\system32\MRT 2015-10-13 20:35 - 2015-05-11 10:44 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-10-12 17:49 - 2015-07-17 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixologic 2015-10-12 00:42 - 2015-05-11 00:21 - 00000000 ____D C:\Users\Matias\Documents\Evaer 2015-10-11 01:07 - 2015-05-10 17:03 - 00000000 ____D C:\Users\Matias 2015-10-10 21:54 - 2015-09-10 14:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate 2015-10-10 21:53 - 2015-07-17 17:42 - 00000000 ____D C:\Program Files\Rockstar Games 2015-10-10 21:53 - 2015-07-17 17:42 - 00000000 ____D C:\Program Files (x86)\Rockstar Games 2015-10-10 19:49 - 2015-05-20 22:47 - 01369600 ___SH C:\Users\Matias\Desktop\Thumbs.db 2015-10-09 20:57 - 2015-08-07 22:54 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Abvent_Artlantis6 2015-10-09 16:26 - 2015-07-16 15:31 - 00001469 _____ C:\Users\Public\Desktop\Star Wars - The Old Republic.lnk 2015-10-08 21:06 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\AppReadiness 2015-10-07 19:26 - 2015-05-12 16:38 - 00000000 ___SD C:\Windows\system32\GWX 2015-10-07 17:48 - 2015-05-12 16:38 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-10-05 14:42 - 2015-08-22 18:33 - 00000000 ____D C:\Users\Matias\Documents\character_project 2015-10-05 14:30 - 2015-05-17 20:08 - 00000000 ____D C:\Users\Matias\AppData\Local\Autodesk 2015-10-05 14:19 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\NDF 2015-10-05 10:29 - 2015-05-25 20:58 - 00466440 _____ C:\Windows\system32\FNTCACHE.DAT 2015-10-04 13:58 - 2015-05-31 13:34 - 00053760 ___SH C:\Users\Carolina\Desktop\Thumbs.db 2015-10-04 01:10 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\setup 2015-10-03 21:30 - 2015-05-14 23:16 - 00000000 ____D C:\Users\Matias\AppData\Roaming\QuickScan 2015-10-03 21:29 - 2015-05-14 23:17 - 00000000 ____D C:\ProgramData\Bitdefender 2015-10-03 21:29 - 2015-05-14 20:23 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2015-10-03 19:20 - 2015-05-14 23:31 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll 2015-10-03 19:18 - 2015-05-14 23:17 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll 2015-10-03 13:01 - 2015-05-24 19:20 - 00000000 ____D C:\Users\Matias\.frostwire5 2015-10-01 16:47 - 2015-05-24 17:36 - 00000000 __SHD C:\$360Section 2015-10-01 16:47 - 2015-05-24 14:59 - 00000000 ____D C:\ProgramData\360Quarant 2015-10-01 14:32 - 2015-05-17 20:14 - 00000000 ____D C:\ProgramData\FLEXnet 2015-10-01 11:44 - 2015-05-31 01:06 - 00000000 ____D C:\Users\Carolina\AppData\LocalLow\360WD 2015-09-30 23:18 - 2015-06-13 16:17 - 00000988 _____ C:\Users\Matias\Desktop\ShaderMap 3.lnk 2015-09-30 21:53 - 2015-05-31 19:19 - 00000000 ____D C:\Users\Matias\Desktop\arboles 2015-09-29 19:22 - 2015-05-31 01:03 - 00000000 ____D C:\Users\Carolina 2015-09-28 14:34 - 2015-05-10 17:08 - 00000000 ____D C:\Users\Matias\AppData\Local\VirtualStore 2015-09-28 10:38 - 2015-08-12 15:00 - 00004030 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-09-28 10:38 - 2015-08-12 15:00 - 00003794 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-09-27 20:16 - 2015-05-25 21:03 - 00000000 ____D C:\CRYENGINE 2015-09-27 19:32 - 2015-06-12 17:34 - 00000000 ____D C:\Users\Matias\AppData\Local\Chief Architect Premier X7 2015-09-27 19:31 - 2015-06-13 18:58 - 00000000 ___RD C:\Users\Matias\Documents\Chief Architect Premier X7 Data 2015-09-26 08:51 - 2015-06-13 12:32 - 00000000 ____D C:\Program Files (x86)\Steam 2015-09-25 20:11 - 2015-07-26 15:50 - 00000000 ____D C:\Users\Public\Ticket 2015-09-25 17:44 - 2015-05-17 19:48 - 00000000 ____D C:\ProgramData\Autodesk 2015-09-25 17:43 - 2015-05-17 19:48 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Autodesk 2015-09-24 19:31 - 2015-05-17 17:26 - 00000000 ____D C:\Users\Matias\Documents\Unreal Projects 2015-09-23 17:33 - 2015-05-10 18:33 - 00000000 ____D C:\ProgramData\Package Cache 2015-09-21 09:58 - 2015-09-13 22:10 - 00100273 _____ C:\Users\Matias\Documents\Untitled1.obj 2015-09-20 12:44 - 2015-05-10 19:18 - 00000000 ____D C:\Users\Matias\AppData\Local\AMD 2015-09-20 10:58 - 2015-05-10 17:22 - 00000000 ____D C:\Program Files\AMD 2015-09-20 10:57 - 2015-05-10 18:36 - 00000000 ____D C:\ProgramData\AMD 2015-09-20 10:49 - 2015-05-10 18:30 - 00000000 ____D C:\AMD 2015-09-18 17:39 - 2015-06-13 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShaderMap 3 2015-09-18 17:39 - 2015-06-13 16:17 - 00000000 ____D C:\Program Files\ShaderMap 3 ==================== Files in the root of some directories ======= 2015-06-13 14:55 - 2015-08-23 11:42 - 0004686 _____ () C:\Users\Matias\AppData\Roaming\pixplant3settings.txt 2015-10-07 20:19 - 2015-10-08 13:09 - 0000025 ____H () C:\Users\Matias\AppData\Roaming\uninst2.log 2015-05-11 00:12 - 2015-05-11 00:12 - 0000000 _____ () C:\Users\Matias\AppData\Local\Temp.dat 2015-10-07 20:19 - 2015-10-08 13:09 - 0000025 ____H () C:\Users\Matias\AppData\Local\uninst3.log 2015-06-13 14:55 - 2015-06-13 14:55 - 0000000 _____ () C:\ProgramData\pixplant3settings.txt 2015-03-17 15:40 - 2015-03-17 15:40 - 0002602 _____ () C:\ProgramData\regid.2014-02.com.twinmotion_BA67F727-A69B-4F6F-AC3C-CB8C7B04A0F8.swidtag 2015-10-07 20:19 - 2015-10-08 13:09 - 0000025 ____H () C:\ProgramData\temp21.log Some files in TEMP: ==================== C:\Users\Carolina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5pysfv.dll C:\Users\Matias\AppData\Local\Temp\cct.dll C:\Users\Matias\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfnin3b.dll C:\Users\Matias\AppData\Local\Temp\JavaIC.dll C:\Users\Matias\AppData\Local\Temp\jre-8u60-windows-au.exe C:\Users\Matias\AppData\Local\Temp\msscct32.dll C:\Users\Matias\AppData\Local\Temp\sqlite3.dll C:\Users\Matias\AppData\Local\Temp\YSearchUtil.dll ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-10-11 11:56 ==================== End of FRST.txt ============================

Addition.txt Additional scan result of Farbar Recovery Scan Tool (x64) Version:17-10-2015 Ran by [removed] (2015-10-17 11:31:52) Running from C:\Users\[removed]\Desktop Windows 8.1 Pro (X64) (2015-05-10 20:06:17) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1940331569-2220852289-466042613-500 - Administrator - Disabled) Carolina (S-1-5-21-1940331569-2220852289-466042613-1006 - Administrator - Enabled) => C:\Users\Carolina Guest (S-1-5-21-1940331569-2220852289-466042613-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1940331569-2220852289-466042613-1003 - Limited - Enabled) Matias (S-1-5-21-1940331569-2220852289-466042613-1001 - Administrator - Enabled) => C:\Users\Matias ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Allegorithmic Substance Designer 5.2.0 (HKLM-x32\…\Substance Designer_5) (Version: 5.2.0 build 16375 (2015-08-18) - Allegorithmic) AMD Catalyst Install Manager (HKLM\…\{770EA7C3-0B5A-C557-E641-A09244603B84}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden Arc (HKLM-x32\…\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment) ArcGIS 10.2.2 License Manager (HKLM-x32\…\ArcGIS 10.2.2 License Manager) (Version: 10.2.3552 - Environmental Systems Research Institute, Inc.) ArcGIS 10.2.2 License Manager (x32 Version: 10.2.3552 - Environmental Systems Research Institute, Inc.) Hidden ArchiCAD 19 INT (HKLM\…\001FFF2FFF19FF00FF0701F01F02F000-R1) (Version: 19.0 - GRAPHISOFT) Artlantis Studio 6.0.2.17 (HKLM\…\Artlantis Studio 6) (Version: 6.0.2.17 - Abvent R&D;) ArtRage 4 (HKLM-x32\…\ArtRage 4 4.5.2.0) (Version: 4.5.2.0 - Ambient Design) ArtRage 4 (Version: 4.5.2.0 - Ambient Design) Hidden Autodesk 3ds Max 2016 (HKLM\…\Autodesk 3ds Max 2016) (Version: 18.3.490.0 - Autodesk) Autodesk 3ds Max 2016 (Version: 18.3.490.0 - Autodesk) Hidden Autodesk 3ds Max 2016 Populate Data (HKLM\…\{57E92DED-DC7C-41E5-B9E1-76D83BD2EABE}) (Version: 18.0.0.0 - Autodesk) Autodesk 3ds Max 2016 SP1 (HKLM\…\Autodesk 3ds Max 2016 SP1.1) (Version: 18.3.490.0 - Autodesk) Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\…\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.19 - Autodesk) Autodesk Application Manager (HKLM-x32\…\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk) Autodesk Backburner 2016 (HKLM-x32\…\{8C5F38D2-9EFE-49A4-B3F5-BF3210FED168}) (Version: 16.0.0.0 - Autodesk) Autodesk BIM 360 Revit 2016 Add-in 64 bit (HKLM\…\{C5A83116-8654-47A3-A3B1-B76905C8A198}) (Version: 4.35.3969 - Autodesk) Autodesk DirectConnect 2016 64-bit (HKLM\…\Autodesk DirectConnect 2016 64-bit) (Version: 10.0.98.0 - Autodesk) Autodesk DirectConnect 2016 64-bit (Version: 10.0.98.0 - Autodesk) Hidden Autodesk Fusion 360 (HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.1633 - Autodesk, Inc.) Autodesk Games Launcher (HKLM\…\{BB6E1486-552C-49A1-908B-39946A1CAB87}) (Version: 1.0.7.0 - Autodesk) Autodesk Inventor Server Engine for 3ds Max 2016 (HKLM\…\{9167CA34-4E58-49E3-8892-3C439739D2D3}) (Version: 18.0 - Autodesk) Autodesk Material Library 2016 (HKLM-x32\…\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.18 - Autodesk) Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\…\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.18 - Autodesk) Autodesk Material Library Low Resolution Image Library 2016 (HKLM-x32\…\{FA5DF4D1-CD59-4183-B3D4-779A56498786}) (Version: 6.3.0.18 - Autodesk) Autodesk Material Library Medium Resolution Image Library 2016 (HKLM-x32\…\{415A5A54-325E-4815-9940-62A889CA3877}) (Version: 6.3.0.18 - Autodesk) Autodesk Maya 2016 (HKLM\…\Autodesk Maya 2016) (Version: 16.0.1312.0 - Autodesk) Autodesk Maya 2016 (Version: 16.0.1312.0 - Autodesk) Hidden Autodesk Revit Architecture 2016 (HKLM\…\Autodesk Revit Architecture 2016) (Version: 16.0.428.0 - Autodesk) Autodesk Revit Architecture Content Libraries 2016 (HKLM\…\Autodesk Revit Architecture Content Libraries 2016) (Version: 16.0.428.0 - Autodesk) Autodesk Revit Interoperability for 3ds Max (HKLM\…\Autodesk Revit Interoperability for 3ds Max ) (Version: 16.0.394.0 - Autodesk) Autodesk Revit Interoperability for 3ds Max (Version: 16.0.394.0 - Autodesk) Hidden Autodesk Seek Viewer (1.0.54) (HKLM-x32\…\{15131435-F50E-4E2A-BC42-11466C0994CC}) (Version: 1.0.54 - Autodesk) Autodesk SketchBook Pro 2016 (HKLM\…\Autodesk SketchBook Pro 2016) (Version: 7.2.0.0 - Autodesk) Autodesk SketchBook Pro 2016 (Version: 7.2.0.0 - Autodesk) Hidden Autodesk Stingray 1.0.31.0 (HKLM\…\Autodesk Stingray 1.0.31.0) (Version: 1.0.31.0 - Autodesk) Autodesk Stingray 1.0.31.0 (Version: 1.0.31.0 - Autodesk) Hidden Autodesk Workflows 2016 (HKLM\…\{535CDED0-D690-4738-83EE-09056A365BAC}) (Version: 6.3.0.18 - Autodesk, Inc.) Avast Free Antivirus (HKLM-x32\…\Avast) (Version: 10.4.2233 - AVAST Software) AVG (HKLM\…\AvgZen) (Version: 1.12.1.20806 - AVG Technologies) AVG Zen (Version: 1.12.62 - AVG Technologies) Hidden AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden BitRaider Streaming Client (HKLM-x32\…\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC) Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blender (HKLM\…\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation) Bonjour (HKLM\…\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) BS.Player PRO (HKLM-x32\…\BSPlayerp) (Version: 2.69.1079 - AB Team, d.o.o.) Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden C4DtoA for Cinema4D R16 (HKLM\…\C4DtoA_R16) (Version: 1.0.1.0 - Solid Angle) CCleaner (HKLM\…\CCleaner) (Version: 5.07 - Piriform) Chief Architect Premier X7 (64 bit) (HKLM\…\{AD72C4EE-2D20-4B27-8602-0C7CC9DEEA87}) (Version: 17.3.0.0 - Chief Architect) Comodo Dragon (HKLM-x32\…\Comodo Dragon) (Version: 45.6.11.385 - Comodo) Curse (HKLM-x32\…\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse) Dassault Systemes Software VC10 Prerequisites x86-x64 (HKLM\…\{7C534131-6431-4ECB-9069-525CB5F75CC8}) (Version: 10.1.1 - Dassault Systemes) Dassault Systemes Software VC9 Prerequisites x86-x64 (HKLM\…\{F2F2DEA7-36AB-4E13-907C-D8BDE775EF97}) (Version: 9.1.2 - Dassault Systemes) DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden Dropbox (HKLM-x32\…\Dropbox) (Version: 3.10.8 - Dropbox, Inc.) Dropbox Update Helper (x32 Version: 1.3.27.37 - Dropbox, Inc.) Hidden EasyBCD 2.2 (HKLM-x32\…\EasyBCD) (Version: 2.2 - NeoSmart Technologies) Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\…\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation) Epic Games Launcher (HKLM\…\{03027486-9D54-4DE3-BF0F-9DEDB622D7CE}) (Version: 1.1.36.0 - Epic Games, Inc.) Esri CityEngine 2015.1 (HKLM\…\Esri CityEngine 2015.1) (Version: 15.1.2047 - Environmental Systems Research Institute, Inc.) Esri CityEngine 2015.1 (Version: 15.1.2047 - Environmental Systems Research Institute, Inc.) Hidden FARO LS 1.1.501.0 (64bit) (HKLM-x32\…\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production) FLT 7.0v2 (HKLM-x32\…\FLT 7.0v2_is1) (Version: - The Foundry) FMW 1 (Version: 1.12.3 - AVG Technologies) Hidden formZ 8 Pro 64 (HKLM\…\{B58A1D9E-1737-4033-9FE6-394665202B93}) (Version: 8.05.0000 - AutoDesSys, Inc.) Google Chrome (HKLM-x32\…\Google Chrome) (Version: 46.0.2490.71 - Google Inc.) Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden Grip points (Version: 3.08.1.0 - Open Design Alliance) Hidden HD Tune Pro 5.60 (HKLM-x32\…\HD Tune Pro_is1) (Version: - EFD Software) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\…\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) IIS 8.0 Express (HKLM\…\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\…\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\…\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - ) ImageMagick 6.9.1-4 Q16 (64-bit) (2015-07-15) (HKLM\…\ImageMagick 6.9.1 Q16 (64-bit)_is1) (Version: 6.9.1 - ImageMagick Studio LLC) Instant Reality Framework 2.5.1.28546 (64 Bit) (HKLM\…\{D164739D-5BE0-4471-B82B-E28BBF44E3CF}) (Version: 2.5.1.28546 - Fraunhofer IGD) Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\…\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation) Java 8 Update 60 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation) KeyShot 5 64 bit (HKLM-x32\…\KeyShot 5_64) (Version: 5.2 64 bit - Luxion ApS) Kit SDK de vérification de Visual Studio 2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden KMSpico v9.0.5.20131111 (HKLM\…\KMSpico_is1) (Version: 9.0.5.20131111 - ) Knald (HKLM-x32\…\Knald64) (Version: 1.0.0 - Knald Technologies, LLC) Knald Beta (HKLM-x32\…\KnaldBeta64) (Version: 1.1.0 - Knald Technologies, LLC) LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\…\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Marvel Heroes Game (HKLM-x32\…\{f8f040bd-5ced-4167-a116-592fce1698f4}_is1) (Version: 1.0 - Gazillion Entertainment) Marvelous Designer 5 Personal (HKLM-x32\…\Marvelous Designer 5 Personal) (Version: - CLO Virtual Fashion Inc.) Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden mental ray Standalone 3.13.1 for Autodesk 2016 (HKLM\…\{F20501D6-D8A8-4091-A3B5-5A103C71CC10}) (Version: 16.0.0.0 - mental ray) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\…\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\…\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\…\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\…\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\…\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\…\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Help Viewer 2.1 (HKLM-x32\…\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Office 2003 Web Components (HKLM-x32\…\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\…\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\…\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\…\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\…\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\…\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\…\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\…\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\…\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\…\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\…\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\…\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2014 Express LocalDB (HKLM\…\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (HKLM-x32\…\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (x64) (HKLM\…\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\…\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\…\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\…\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\…\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\…\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\…\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\…\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\…\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\…\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM\…\{8C06D6DB-A391-4686-B050-99CC522A7843}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\…\{4AEB505C-95E1-4964-9B64-8D27F3186D30}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\…\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\…\{887868A2-D6DE-3255-AA92-AA0B5A59B874}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{f9b04b37-35d5-4a19-a51b-fcf4a8734851}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\…\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\…\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\…\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Professional 2013 with Update 4 (HKLM-x32\…\{c96467b4-e480-4218-8fde-db83bf9d47d1}) (Version: 12.0.31101 - Microsoft Corporation) Microsoft Web Deploy 3.5 (HKLM\…\{69A998C5-00A9-42CA-AB4E-C31CFFCD9251}) (Version: 3.1237.1763 - Microsoft Corporation) NVIDIA PhysX (HKLM-x32\…\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation) Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden OpenRL Runtime 1.3.1000.14 x64 (HKLM\…\{250C8D22-1757-11E3-818E-1803734DBB4F}) (Version: 1.3.1000.14 - Caustic Graphics, Inc.) Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden PDFExport (Version: 3.08.1.0 - Open Design Alliance) Hidden PixPlant 3.0.6 (HKLM\…\PixPlant3_is1) (Version: 3.0.6 - FaronStudio) Polygon Cruncher 12.70 (HKLM\…\Polygon Cruncher (x64 bits)) (Version: 12.70 - Mootools) PowerISO (HKLM-x32\…\PowerISO) (Version: 5.9 - Power Software Ltd) PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden Prerequisites for SSDT (HKLM-x32\…\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation) Prerequisites for SSDT (HKLM-x32\…\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation) PyFFI 2.2.2 (HKLM-x32\…\PyFFI-py3k) (Version: 2.2.2 - Amorilia ) Python 2.5.4 (HKLM-x32\…\{2E0DFC24-7C4B-4DCF-BCC7-81C513BED3BC}) (Version: 2.5.4150 - Python Software Foundation) Python 2.7.10 (64-bit) (HKLM\…\{E2B51919-207A-43EB-AE78-733F9C6797C3}) (Version: 2.7.10150 - Python Software Foundation) Python 3.3.0 (64-bit) (HKLM\…\{290329c4-a276-3aec-b633-9f5a39d8dd96}) (Version: 3.3.150 - Python Software Foundation) Python 3.4.3 (HKLM-x32\…\{CCD588A7-8D55-49F1-A30C-47FAB40889ED}) (Version: 3.4.16490 - Python Software Foundation) Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden RealFlow 2014 (HKLM-x32\…\RealFlow 2014) (Version: - ) Revit Architecture 2016 (Version: 16.0.428.0 - Autodesk) Hidden Revit Architecture Content Libraries 2016 (Version: 16.0.428.0 - Autodesk) Hidden Rhinoceros 5 (64-bit) (HKLM\…\{32672999-63EB-42D7-A1F0-214CD8CD5803}) (Version: 5.9.40617.14345 - Robert McNeel & Associates) Rhinoceros 5 (HKLM-x32\…\{1277B5ED-415D-40F0-BFBF-47380D93BD5D}) (Version: 5.9.40617.14345 - Robert McNeel & Associates) Rhinoceros 5 Help Media (HKLM-x32\…\{E42CF82B-C897-4E9D-B8C4-DE63FF0A28D7}) (Version: 5.7.31022.19295 - Robert McNeel & Associates) Rhinoceros 5 Language Pack Installer (en-US) (HKLM-x32\…\{06E2D312-B485-4914-904B-A3A940BC6750}) (Version: 5.9.40617.14345 - Robert McNeel & Associates) Rhinoceros 5 Language Pack Installer (es-ES) (HKLM-x32\…\{44C83F69-ADD4-48E8-B8A4-B1831A534C21}) (Version: 5.7.31022.19295 - Robert McNeel & Associates) SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden Shade 3D ver.14E version 14.1.1.1370 (HKLM\…\Shade14US_is1) (Version: 14.1.1.1370 - e frontier, Inc.) ShaderMap 3.0.5 (HKLM\…\ShaderMap 3_is1) (Version: - Rendering Systems Inc.) SharePoint Client Components (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden SharePoint Client Components (Version: 16.0.2617.1200 - Microsoft Corporation) Hidden Sheet sets (Version: 3.08.1.0 - Open Design Alliance) Hidden Siemens NX 10.0 (HKLM\…\{11B4AD15-AE98-4618-B90A-562EC6875DC3}) (Version: 10.0.0.24 - Siemens) Siemens PLM License Server (HKLM-x32\…\Siemens PLM License Server) (Version: 6.4.2.1 - Siemens Product Lifecycle Management Software Inc.) SimLab Composer 2015 SP1 (Version: 5.1.9 - SimLab) Hidden SimLab Composer 2015 SP1 64 bit (HKLM-x32\…\SimLab Composer 2015 SP1 5.1.9) (Version: 5.1.9 - SimLab) SimLab Composer 6 64 bit (HKLM-x32\…\SimLab Composer 6 6.0.6) (Version: 6.0.6 - SimLab) SimLab FBX Importer 5.0.2 for SketchUp x64 (HKLM\…\{DD959DC0-9D9D-4C29-BD93-C278D1C23E9D}) (Version: 5.0.2 - SimLab Soft) SketchUp 2015 (HKLM\…\{90A6F70E-96AD-4054-AB8F-42BCFA75F8EC}) (Version: 15.0.9350 - Trimble Navigation Limited) Skype 7.12 (HKLM-x32\…\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.) Smite (HKLM-x32\…\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.15.3015.0 - Hi-Rez Studios) solidThinking 2015 4911 (HKLM\…\solidThinking 2015 4911) (Version: 2015.0.4911.0 - solidThinking, Inc.) SOLIDWORKS 2015 x64 Edition SP04 (HKLM-x32\…\SolidWorks Installation Manager 20150-40400-1100-100) (Version: 23.4.0.56 - SolidWorks Corporation) SOLIDWORKS 2015 x64 Edition SP04 (Version: 23.140.56 - Dassault Systemes SolidWorks Corp) Hidden SOLIDWORKS 2015 x64 Spanish Resources (Version: 23.140.56 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Composer 2015 SP04 x64 Edition (Version: 23.40.56 - Dassault Systemes SolidWorks Corp) Hidden SOLIDWORKS eDrawings 2015 x64 Edition SP04 (Version: 15.4.0012 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Explorer 2015 SP04 x64 Edition (Version: 23.40.56 - Dassault Systèmes SolidWorks Corp) Hidden SpeedTree Cinema version 7.1.1 (HKLM\…\{5F1E1CC6-3A97-4D83-894C-50C52CDF000C}_is1) (Version: 7.1.1 - IDV, Inc.) Star Wars The Old Republic (HKLM-x32\…\swtor_swtor) (Version: 8.0.0.24 - Bioware/EA) Star Wars: The Old Republic (HKLM-x32\…\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) Steam (HKLM-x32\…\Steam) (Version: 2.10.91.91 - Valve Corporation) Substance Painter version 1.4.2 (HKLM\…\{410F5B6E-A29C-4F43-9DE3-44A1357D6AF5}_is1) (Version: 1.4.2 - Allegorithmic) SVG Export (Version: 3.08.1.0 - Open Design Alliance) Hidden TDXAcId (Version: 3.08.1.0 - Soft Dev SPb) Hidden Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden TeighaX Core (Version: 3.08.1.0 - Open Design Alliance) Hidden TeighaX DWF Support (Version: 3.08.1.0 - Open Design Alliance) Hidden TeighaX ExEvalWatcher (Version: 3.08.1.0 - Open Design Alliance) Hidden TeighaX Field Evaluator (Version: 3.08.1.0 - Open Design Alliance) Hidden TeighaX Rendering (Version: 3.08.1.0 - Open Design Alliance) Hidden The Elder Scrolls Online (HKLM-x32\…\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios) The Foundry MODO 901 build 85499 (HKLM-x32\…\901_64) (Version: - ) Twinmotion 2015 Professional Edition (HKLM\…\{852273A7-3497-43F4-B958-5FA6750B2B8C}) (Version: 3.2.1 - KA-RA) TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden Unity (HKLM-x32\…\Unity) (Version: 5.2.0f2 - Unity Technologies ApS) Update for (KB2504637) (HKLM-x32\…\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\…\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{40930C8E-A677-414C-A72F-DFDEB10738FB}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3085581) 64-Bit Edition (HKLM\…\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6BCC80EE-3B68-4110-8D47-23E04FB6D08D}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3085581) 64-Bit Edition (HKLM\…\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6BCC80EE-3B68-4110-8D47-23E04FB6D08D}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3085581) 64-Bit Edition (HKLM\…\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6BCC80EE-3B68-4110-8D47-23E04FB6D08D}) (Version: - Microsoft) USB Game Controller (HKLM-x32\…\{D3DF3D05-DE2A-476A-A384-08FCD58D9FE7}) (Version: 2007.01.01 - ) USB Network Driver (HKLM-x32\…\{66ED8E01-C915-41F5-B33E-C5C31F27B885}) (Version: 2007.07.3 - ) USB Vibration Joystick (BM) (HKLM-x32\…\{61A994FF-D39B-4937-9DB9-87EC4E91B31F}) (Version: 1.00.0000 - ShanWan) ViewX (Version: 3.08.1.0 - Open Design Alliance) Hidden Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual Studio 2012 x64 Redistributables (HKLM\…\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\…\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\…\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation) VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\…\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation) Windows Phone 8.1 Emulators - ENU (HKLM-x32\…\{166a69f6-6512-47ea-a342-17d954fc059a}) (Version: 12.0.31010.0 - Microsoft Corporation) Wings 3D 1.5.3 (HKLM-x32\…\Wings 3D 1.5.3) (Version: - ) WinRAR 5.21 (64-bit) (HKLM\…\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) Workflow Manager Client 1.0 (Version: 2.0.40131.0 - Microsoft Corporation) Hidden Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.40326.0 - Microsoft Corporation) Hidden World Machine 2 Professional Edition (HKLM-x32\…\World Machine2Pro) (Version: - ) WWE 2K15 (HKLM-x32\…\V1dFMksxNQ==_is1) (Version: 1 - ) Xvid MPEG-4 Video Codec (HKLM-x32\…\xvid) (Version: - Xvid Development Team) Youtube Downloader HD v. 2.9.9.23 (HKLM-x32\…\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com) ZBrush 4R7 (HKLM-x32\…\ZBrush 4R7 4R7) (Version: 4R7 - Pixologic) Zemana AntiMalware (HKLM-x32\…\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.17.116 - Zemana Ltd.) ZW3D 2015 Eng (x64) (HKLM\…\{D8BF151F-E726-4F00-8030-A3BEE6259E34}) (Version: 6.0.15.0318 - ZWCAD Software Co.,Ltd) ZW3D 2015 Eng (x64) (Version: 6.0.15.0318 - ZWCAD Software Co.,Ltd) Hidden Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1940331569-2220852289-466042613-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\Matias\AppData\Local\Autodesk\webdeploy\production\47982f0424d12e24e06d9052d8b578f503263543\NPreview10.dll () ==================== Restore Points ========================= 26-09-2015 12:51:19 Instalado BricsCAD V15.2.06 (x64) es_ES 01-10-2015 13:46:06 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 07-10-2015 17:45:00 Windows Update 10-10-2015 21:47:41 Quitado BricsCAD V15.2.06 (x64) es_ES 13-10-2015 16:51:41 avast! antivirus system restore point 14-10-2015 19:13:33 Removed SimLab Composer 6 15-10-2015 20:11:57 Installed AVG 2016 15-10-2015 20:14:24 Installed AVG 17-10-2015 00:44:08 Removed AVG ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 10:25 - 2013-08-22 10:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0797F62E-F293-43DF-B84C-EDC9CAAF96D9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd) Task: {185C6CCC-CF45-495F-A6AB-4BAA46470A81} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-24] (Dropbox, Inc.) Task: {245AE948-B516-4ABD-B910-1B9D6BB97E25} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-24] (Dropbox, Inc.) Task: {59861C83-967C-4CBA-B83C-0321AC08B2C0} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-10-13] (AVAST Software) Task: {5E123958-32C2-4560-8EB6-C58C99620985} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) Task: {5E583C03-7746-4B43-8016-AA2136400018} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {84613B3F-3E75-41E6-B718-302C96CC1533} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-13] (Microsoft Corporation) Task: {9146195D-008A-447B-8D4D-BA4F5CBA80A6} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe Task: {9D4B3BEB-BDBF-4060-A352-7DB897A2C893} - \GoodScene -> No File <==== ATTENTION Task: {C38FBF55-120A-4201-B1A6-BAF82C244667} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-12] (Google Inc.) Task: {DB6AB4A3-8A09-4493-BCC9-FD00EDE2EB19} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {DCB5B12A-DC80-4CAF-B35D-7701ABE7D5DC} - System32\Tasks\{AF6A4D77-905F-462A-9E67-28275D63DA22} => pcalua.exe -a "C:\ProgramData\Battle.net\Agent\Blizzard Uninstaller.exe" -c –lang=esES –uid=battle.net –displayname="Battle.net" Task: {DF5B23E5-A4C1-4BCD-A6BE-2537112B6B91} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe Task: {E95C7B80-F83D-45C0-BDDB-B9C4A3EA0BFB} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\CompatTelRunner.exe [2015-09-19] (Microsoft Corporation) Task: {F47306D8-5486-4DC7-B537-6EDF3D7192BC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-12] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoodScene.job => c:\programdata\{1e623558-7e5e-9b3e-1e62-235587e5d561}\rld-wwe15c.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-08-21 22:09 - 2015-08-21 22:09 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2015-06-19 09:14 - 2015-06-19 09:14 - 00268280 _____ () C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\sldBodyDiffu.dll 2015-10-13 16:59 - 2015-10-13 16:59 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-10-13 16:59 - 2015-10-13 16:59 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-10-16 16:15 - 2015-10-16 16:15 - 02994032 _____ () C:\Program Files\AVAST Software\Avast\defs\15101601\algo.dll 2015-10-17 11:10 - 2015-10-17 11:10 - 00071168 _____ () c:\users\matias\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfnin3b.dll 2015-10-16 22:00 - 2015-09-23 20:07 - 00012800 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick.2\qtquick2plugin.dll 2015-10-16 22:00 - 2015-09-23 20:07 - 00779776 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-10-16 22:00 - 2015-09-23 20:07 - 00056320 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-10-16 22:00 - 2015-09-23 20:07 - 00012288 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Window.2\windowplugin.dll 2015-10-15 15:24 - 2015-10-08 21:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll 2015-10-15 15:24 - 2015-10-08 21:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll 2015-10-13 16:59 - 2015-10-13 16:59 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-10-15 20:05 - 2015-10-15 20:03 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Matias\OneDrive:ms-properties AlternateDataStreams: C:\Users\Matias\SkyDrive:ms-properties ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1940331569-2220852289-466042613-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Matias\Pictures\4466977276_f75358de53_b.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [TCP Query User{EEC3D308-CCA3-4D29-A7EB-630936E15997}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [UDP Query User{48D6BD3B-213B-43F3-A6CA-79E29FDC1806}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [TCP Query User{D028B87E-E74C-40D9-8214-A9A5CDBC9480}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{3958C216-F5DC-4993-B2BD-97660905FDD6}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{CC000EB1-B52F-4CFE-AE4A-D41A56A75438}] => (Allow) LPort=1688 FirewallRules: [TCP Query User{6FD1520B-9442-4D3B-B0D7-1930F748AB12}C:\program files (x86)\formz 8.5 beta\formz.exe] => (Block) C:\program files (x86)\formz 8.5 beta\formz.exe FirewallRules: [UDP Query User{E1D2CE95-58F8-4836-A80E-BD51324BCC8B}C:\program files (x86)\formz 8.5 beta\formz.exe] => (Block) C:\program files (x86)\formz 8.5 beta\formz.exe FirewallRules: [TCP Query User{E80E99E8-7942-45AE-A902-A2014AB976AD}C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe] => (Allow) C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe FirewallRules: [UDP Query User{26450F4B-C93D-4ABB-84FC-7B073CE06DFD}C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe] => (Allow) C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe FirewallRules: [TCP Query User{AC4002C5-34C3-4F0D-B4E9-14E947AE7C05}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{964F631B-4FFA-45CC-8E45-1AE955705B14}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{58AC8D01-5007-427A-8C7C-514BFD40AF7A}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{E7A819CA-AA97-49C0-A4D5-FA4A8013B3ED}] => (Allow) LPort=12292 FirewallRules: [{AAD19023-2EBF-4809-8CB0-50DB7E2DDAB5}] => (Allow) C:\Program Files (x86)\FrostWire 6\FrostWire.exe FirewallRules: [{1CFAD418-A123-4264-8F7E-9453B1AE2D67}] => (Allow) C:\Program Files (x86)\FrostWire 6\FrostWire.exe FirewallRules: [{F77178FB-231B-47EA-96C9-001C9CE79089}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot5.exe FirewallRules: [{C9288178-4935-4F68-9581-DBFA6DD161E2}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot_daemon.exe FirewallRules: [{3A0DB351-0F89-4C1D-B3FB-1C85C1A2096F}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot5.exe FirewallRules: [{DB4E4122-7BD4-431A-95AF-D52ABF093417}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot_daemon.exe FirewallRules: [TCP Query User{8AFD20F2-349D-45A0-9502-8B67A31CCA96}C:\cryengine\bin64\editor.exe] => (Allow) C:\cryengine\bin64\editor.exe FirewallRules: [UDP Query User{B6C47D23-B34E-492D-8A73-9F1A4B7C75E2}C:\cryengine\bin64\editor.exe] => (Allow) C:\cryengine\bin64\editor.exe FirewallRules: [TCP Query User{33788017-385E-4EB7-AC71-44ADABBABFF4}C:\program files\maxon\cinema 4d r16\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r16\cinema 4d.exe FirewallRules: [UDP Query User{6E786E5E-34B7-40B7-AFE5-2B8646F7572F}C:\program files\maxon\cinema 4d r16\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r16\cinema 4d.exe FirewallRules: [{8EAF8EF6-275B-4720-816C-DC00BEB72B4A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{A1B4B940-994A-46DA-8FA7-13DB02B3EDD6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{91EEFF08-08F0-429A-B001-2294B386A8A6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{3709E212-6105-44B9-94C1-7A295F27221A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [TCP Query User{076761FF-CBEE-48EC-8847-4E488AFD1E9F}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe FirewallRules: [UDP Query User{2BC88200-0DFC-42B4-9C3D-D16E1BBA07BE}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe FirewallRules: [TCP Query User{980F31F7-5775-44B8-A30E-545DA19A8587}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe FirewallRules: [UDP Query User{D169DD73-1590-44DE-8C75-F3EBB60B0676}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe FirewallRules: [{F9BF3757-0C34-4D16-BEF3-07138BD87017}] => (Allow) C:\Program Files\Luxology\modo\901\modo.exe FirewallRules: [{447A550D-1819-441B-95A8-330B5B727B13}] => (Allow) C:\Program Files\Luxology\modo\901\modo.exe FirewallRules: [TCP Query User{5FC64AC7-9C7B-4D69-8A5C-FC50DBAC7D29}C:\program files (x86)\champions online_en\champions online\live\gameclient.exe] => (Allow) C:\program files (x86)\champions online_en\champions online\live\gameclient.exe FirewallRules: [UDP Query User{83312C3B-2986-4211-A357-5AA9DFD01680}C:\program files (x86)\champions online_en\champions online\live\gameclient.exe] => (Allow) C:\program files (x86)\champions online_en\champions online\live\gameclient.exe FirewallRules: [{C3ACA67B-2158-486C-886C-8C8C89B83429}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\ArchiCAD.exe FirewallRules: [{C43905EA-08F7-4EAE-83CA-EF4BA5AA6306}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\ArchiCAD.exe FirewallRules: [{8548189A-4FFA-4A3D-A37D-370ACEEAE6D1}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\CineRender\CineRender 64bit.exe FirewallRules: [{3EDA12F6-5A96-458D-8EC9-12D725DECAA2}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\CineRender\CineRender 64bit.exe FirewallRules: [{469BB8B1-62F4-49F3-B7B8-4CBAF4914EDD}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe FirewallRules: [{B69AB0FF-E8E9-45B2-A51C-85EB99B9E717}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe FirewallRules: [{D58F5E10-E12C-4E27-839A-66A2E94B5698}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64.exe FirewallRules: [{E2F3C055-1E71-4562-8927-1001F936574B}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64.exe FirewallRules: [{F90D4400-D089-43C4-9B76-47B26EB25C6C}] => (Allow) C:\Program Files\Autodesk\Autodesk SketchBook Pro 2016\SketchBookPro.exe FirewallRules: [{AD886A27-17B7-4E58-B569-10D143265C3D}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{43BAB051-2078-4A46-B1E1-3F22684C9E60}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{07807D46-9705-4DB3-9934-310491CB7136}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{AB6454B8-6C4F-45FB-B15E-BD7F76EC77D3}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe FirewallRules: [{FA3B5C03-D0DD-44D5-88C1-AEAD766113F1}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe FirewallRules: [{D71C8189-57C3-4F3D-84DC-FAF7A9A41A42}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe FirewallRules: [{29B25815-F3D3-48AF-AEEF-927868680A32}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe FirewallRules: [{E0556C60-314F-4AE0-B3A7-64FB5D6623B8}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe FirewallRules: [{96A62610-FE76-4273-BB59-C3922E2D0F90}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{5FF749C8-F8B5-4490-9792-09E20121EE12}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{88C2FE69-43CE-4B45-96C8-673F67453A20}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{DFD4F057-563F-4260-95BF-5ED98CCD4C0D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{D04259BD-8D6F-4515-A6D3-3A3F0DDA41AA}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe FirewallRules: [{F3BE14F5-A190-4B4E-8FDD-C3D97B42895A}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe FirewallRules: [TCP Query User{058B2D58-4692-46E3-A84B-0589A72F1C62}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe FirewallRules: [UDP Query User{ECF77F81-D51D-42BE-A398-493E92B2059B}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe FirewallRules: [TCP Query User{F1DA0B33-C182-4D33-9B8E-E249CA8F5C1C}C:\program files\artlantis studio 6\artlantis studio.exe] => (Allow) C:\program files\artlantis studio 6\artlantis studio.exe FirewallRules: [UDP Query User{6054BC27-61FA-4403-9D9D-F68C8AC12DA6}C:\program files\artlantis studio 6\artlantis studio.exe] => (Allow) C:\program files\artlantis studio 6\artlantis studio.exe FirewallRules: [TCP Query User{A8EA19CD-D078-440A-A21C-A45DC9A0D987}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe FirewallRules: [UDP Query User{7FB86FFB-81B6-4E56-913E-A4D9BF3ED586}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe FirewallRules: [TCP Query User{929CBCD5-D0F3-42D4-B0A6-80458D6180BB}C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe FirewallRules: [UDP Query User{B17C5663-949D-47AC-94B0-28240347AFA2}C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe FirewallRules: [TCP Query User{DAB70CFE-C1E0-4BD8-9EDD-503D11F9FA4C}C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe FirewallRules: [UDP Query User{37F2EFE9-78D2-4ABD-B6A5-93CC90045735}C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe FirewallRules: [TCP Query User{8FDE71B0-F4A1-4017-9665-BCC23A5E8529}C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe] => (Allow) C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe FirewallRules: [UDP Query User{44389E2A-E90F-4677-8819-2C4702538F97}C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe] => (Allow) C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe FirewallRules: [TCP Query User{6CB2B3B0-244F-49A7-8EB5-23F2C7E6181C}C:\program files\allegorithmic\substance painter\substance painter.exe] => (Allow) C:\program files\allegorithmic\substance painter\substance painter.exe FirewallRules: [UDP Query User{C655077B-043A-4E7E-B629-ADA669D3A291}C:\program files\allegorithmic\substance painter\substance painter.exe] => (Allow) C:\program files\allegorithmic\substance painter\substance painter.exe FirewallRules: [TCP Query User{2801199D-C799-4369-8D8F-38DE9311B338}C:\program files\formz 8\formz 8.5 pro 64\formz.exe] => (Allow) C:\program files\formz 8\formz 8.5 pro 64\formz.exe FirewallRules: [UDP Query User{56A8B4F3-1BA3-4042-BF0B-C8B0E9AF002A}C:\program files\formz 8\formz 8.5 pro 64\formz.exe] => (Allow) C:\program files\formz 8\formz 8.5 pro 64\formz.exe FirewallRules: [TCP Query User{F6CA3CD1-2915-41B0-B9FC-98AD9A1C82C0}C:\program files\vectorworks2015\vectorworks2015.exe] => (Allow) C:\program files\vectorworks2015\vectorworks2015.exe FirewallRules: [UDP Query User{AA94C76E-73A1-4313-8EF1-361E5D483065}C:\program files\vectorworks2015\vectorworks2015.exe] => (Allow) C:\program files\vectorworks2015\vectorworks2015.exe FirewallRules: [TCP Query User{DAEBAD42-302B-4A71-9703-B6F90694DF36}C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe] => (Allow) C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe FirewallRules: [UDP Query User{0E002FC8-9E33-4C8A-92C8-FA59FE475398}C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe] => (Allow) C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe FirewallRules: [TCP Query User{A0027E5C-E79F-4E7A-AEAB-9051404EF792}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe FirewallRules: [UDP Query User{08B67559-A2D7-42F6-8A5A-CEE3B09DF549}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe FirewallRules: [TCP Query User{AF9A1A76-7D3C-4DF9-909B-41F6FBA73ADC}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe FirewallRules: [UDP Query User{44C777AD-0D6D-46EF-B77A-1EEFF74DE5F6}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe FirewallRules: [TCP Query User{32261600-8A68-4979-B8D9-17CDEC7F5D34}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe FirewallRules: [UDP Query User{2F8AA8D8-5BC3-4093-A17A-A8C9C6EC1468}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe FirewallRules: [TCP Query User{2F3C8C21-C04C-4DF0-B868-70B4F543D34A}C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe FirewallRules: [UDP Query User{8E412EDE-8002-47C6-9BA1-5FF95C4A922A}C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe FirewallRules: [TCP Query User{2CBC8F10-A1D6-44F1-845B-5E4171BEA3ED}C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe FirewallRules: [UDP Query User{65A1E2B0-A496-4724-838F-A2995766250D}C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe FirewallRules: [TCP Query User{53C2258F-D19A-461F-8A79-D553832021FA}C:\cryengine\bin\win_x64\editor.exe] => (Allow) C:\cryengine\bin\win_x64\editor.exe FirewallRules: [UDP Query User{353FA17E-74C0-4A52-A60C-61F7FD702917}C:\cryengine\bin\win_x64\editor.exe] => (Allow) C:\cryengine\bin\win_x64\editor.exe FirewallRules: [{F2920C9C-2ED4-49F9-B03C-051EF38B7C1C}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\zw3d.exe FirewallRules: [{10811460-7962-4587-987A-318C87D23A0E}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\zw3d.exe FirewallRules: [{9ED05213-F350-441E-A4F3-A224F09A10E5}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\ZwAppLm.exe FirewallRules: [{9264AE2D-3EE2-4EF1-A7BE-1979D29EBA32}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\ZwAppLm.exe FirewallRules: [TCP Query User{8C2B9247-66BF-458D-8914-38C40C201666}C:\program files\3d-coat-v4.5\3d-coatdx64c.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64c.exe FirewallRules: [UDP Query User{FA7F2B14-5ED5-47E9-82D9-FF2427684344}C:\program files\3d-coat-v4.5\3d-coatdx64c.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64c.exe FirewallRules: [TCP Query User{93BC8612-1A50-43ED-913E-73D566DE1DD9}C:\program files\3d-coat-v4.5\3d-coatdx64s.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64s.exe FirewallRules: [UDP Query User{327A4E69-4DC2-4878-A9FA-7E7A8D4BBA77}C:\program files\3d-coat-v4.5\3d-coatdx64s.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64s.exe FirewallRules: [{511F4A76-DBFB-4D26-8116-0B429F8B68C2}] => (Allow) C:\Program Files\Marvelous Designer 5 Personal\MD5_Personal_x64.exe FirewallRules: [{D391F82F-7CB5-41A5-9F81-4A41A030A8F6}] => (Allow) C:\Program Files\Marvelous Designer 5 Personal\MD5_Personal_x64.exe FirewallRules: [{10A5539C-3EAD-4294-A531-37C9B0A29AB2}] => (Block) %ProgramFiles%\Marvelous Designer 5 Personal\MD5_Personal_x64.exe FirewallRules: [{2640C204-E6F1-44AC-9F45-28FBA6A350B5}] => (Block) %ProgramFiles%\Marvelous Designer 5 Personal\MD5_Personal_x64.exe FirewallRules: [{2B8CA8B0-0DA3-412D-9812-F12FC3FC784A}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{22A148A0-C34B-4253-AF86-AFBAA2962A48}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{B2DFEBAD-3427-4078-B845-72F7BB45A5D1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{01BF4DCB-7F77-46C0-9060-37B043771F81}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{0B62B32B-0597-4D07-8E6E-5872A694FBED}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{6E10482A-E6D2-4B4C-8522-AA51F27C2583}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/17/2015 11:10:05 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: License Activation (slui.exe) failed with the following error code: hr=0xC004F074 Command-line arguments: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=UserLogon;SessionId=2 Error: (10/17/2015 11:08:51 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: License Activation (slui.exe) failed with the following error code: hr=0xC004F074 Command-line arguments: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable Error: (10/17/2015 01:27:41 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 10d4 Start Time: 01d1089365ed200d Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: 5b775954-7487-11e5-829e-002421a85da4 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 Error: (10/17/2015 01:25:30 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: License Activation (slui.exe) failed with the following error code: hr=0xC004F074 Command-line arguments: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable Error: (10/17/2015 01:25:30 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: License Activation (slui.exe) failed with the following error code: hr=0xC004F074 Command-line arguments: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=UserLogon;SessionId=1 Error: (10/17/2015 01:04:31 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 118c Start Time: 01d1089011af789f Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: 092766fa-7484-11e5-829d-002421a85da4 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 Error: (10/17/2015 12:59:42 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: License Activation (slui.exe) failed with the following error code: hr=0xC004F074 Command-line arguments: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable Error: (10/17/2015 12:59:42 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: License Activation (slui.exe) failed with the following error code: hr=0xC004F074 Command-line arguments: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=UserLogon;SessionId=1 Error: (10/17/2015 12:51:19 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: License Activation (slui.exe) failed with the following error code: hr=0xC004F074 Command-line arguments: RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable Error: (10/17/2015 12:44:19 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. . System errors: ============= Error: (10/17/2015 01:45:02 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgsvc service. Error: (10/17/2015 01:29:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (10/17/2015 01:29:31 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The SQL Server VSS Writer service terminated unexpectedly. It has done this 1 time(s). Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The ArcGIS License Manager service terminated unexpectedly. It has done this 1 time(s). Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Siemens PLM License Server service terminated unexpectedly. It has done this 1 time(s). Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The McNeel Update Service 5.0 service terminated unexpectedly. It has done this 1 time(s). Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Windows Phone IP over USB Transport (IpOverUsbSvc) service terminated unexpectedly. It has done this 1 time(s). Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Foundry License Server service terminated unexpectedly. It has done this 1 time(s). Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The COMODO Dragon Update Service service terminated unexpectedly. It has done this 1 time(s). Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Servicio Bonjour service terminated unexpectedly. It has done this 1 time(s). CodeIntegrity: =================================== Date: 2015-08-31 10:57:33.161 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-08-31 10:57:32.505 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-08-31 10:57:31.677 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-08-31 10:57:29.990 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: AMD Phenom™ II X4 810 Processor Percentage of memory in use: 31% Total physical RAM: 8191.18 MB Available physical RAM: 5632.56 MB Total Virtual: 9343.18 MB Available Virtual: 6813.15 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.5 GB) (Free:585.85 GB) NTFS ==>[drive with boot components (obtained from BCD)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 4637E82B) Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================

Sorry about that! Here we go again. FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-10-2015
Ran by [removed] (administrator) on CASAPC (17-10-2015 11:30:55)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 8.1 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\sldworks_fs.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated)
HKLM\…\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [12326768 2015-08-30] (Zemana Ltd.)
HKLM-x32\…\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\…\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36711472 2015-10-12] (Dropbox, Inc.)
HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-13] (AVAST Software)
HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM-x32\…\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguix.exe [1125800 2015-09-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\Run: [GoogleChromeAutoLaunch_80CE6C1A0400B1F9C1BC3EFB29ACE4A8] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [811848 2015-10-08] (Google Inc.)
HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\MountPoints2: E - "E:\MAXON-Start.exe"
HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\MountPoints2: G - "G:\setup.exe"
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-13] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Inicio rápido de SOLIDWORKS 2015.lnk [2015-08-05]
ShortcutTarget: Inicio rápido de SOLIDWORKS 2015.lnk -> C:\Windows\Installer\{F8093877-4F2C-40ED-9BA7-2F9F48F5176F}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Programa de descargas en segundo plano de SOLIDWORKS.lnk [2015-08-05]
ShortcutTarget: Programa de descargas en segundo plano de SOLIDWORKS.lnk -> C:\Program Files (x86)\Common Files\Gestor de instalación de SOLIDWORKS\BackgroundDownloading\sldBgDwld.exe (Dassault Systèmes SolidWorks Corp.)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D93CE5F3-F96A-4B9A-9A3C-BEAA9AB07E1F}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1940331569-2220852289-466042613-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1940331569-2220852289-466042613-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-ar/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKLM -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKLM-x32 -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1940331569-2220852289-466042613-1001 -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1940331569-2220852289-466042613-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-1940331569-2220852289-466042613-1001 -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-13] (AVAST Software)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-16] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-13] (AVAST Software)
BHO-x32: No Name -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-15] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-16] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-03-12] (Microsoft Corporation)

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Program Files (x86)\Arc\plugins\NPSWF32.dll [2015-05-28] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2015-06-11] (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-13] [not signed]

Chrome:
=======
CHR Profile: C:\Users\Matias\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-13]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-04] (Autodesk Inc.)
S2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [File not signed]
S2 ArcGIS License Manager; C:\Program Files (x86)\ArcGIS\License10.2\bin\lmgrd.exe [1452408 2014-02-13] (Flexera Software LLC)
S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88400 2015-06-11] (Perfect World Entertainment Inc)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-13] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-10-13] (Avast Software)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1042344 2015-09-22] (AVG Technologies CZ, s.r.o.)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-07-16] (BitRaider, LLC)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2015-05-17] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-24] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-24] (Dropbox, Inc.)
S2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [1984696 2015-10-14] (Comodo)
S2 Foundry FLEXlm Server; C:\Program Files (x86)\The Foundry\\LicensingTools7.0\bin\FLEXlm\lmgrd.foundry.exe [1392016 2012-10-30] (Acresso Software Inc.)
S2 Foundry License Server; C:\Program Files (x86)\The Foundry\\LicensingTools7.0\bin\RLM\rlm.foundry.exe [1474560 2013-04-08] (Reprise Software Inc.) [File not signed]
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
S2 gupdate1d0d528c4820a09; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-12] (Google Inc.)
S3 gupdatem1d0d528c4898457; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-12] (Google Inc.)
S3 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-07-20] (Hi-Rez Studios) [File not signed]
S2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
S2 McNeelUpdate; c:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67224 2014-06-17] (Robert McNeel & Associates)
S3 mi-raysat_3dsmax2016_64; C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [86016 2011-09-15] () [File not signed]
S2 Siemens PLM License Server; C:\Program Files\Siemens\PLMLicenseServer\lmgrd.exe [1830736 2014-01-06] (Flexera Software LLC.)
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2015-08-05] (SolidWorks) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [12326768 2015-08-30] (Zemana Ltd.)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-22] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-27] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-13] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-13] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-13] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-13] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [102912 2015-07-15] (Advanced Micro Devices)
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2015-07-16] (BitRaider)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34963 2007-12-12] (Compuware Corporation) [File not signed]
S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [37024 2007-12-03] (Compuware Corporation) [File not signed]
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [34587 2007-11-28] (Compuware Corporation) [File not signed]
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-10-13] (AVAST Software)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-28] (Microsoft Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-10-13] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [37416 2015-07-11] (Wellbia.com Co., Ltd.)
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [109432 2015-10-10] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [109432 2015-10-10] (Zemana Ltd.)
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-17 01:32 - 2015-10-17 01:32 - 00001727 _____ C:\Users\Matias\Desktop\JRT.txt
2015-10-17 01:17 - 2015-10-17 01:18 - 00001574 _____ C:\Users\Matias\Downloads\instrucciones.txt
2015-10-17 00:49 - 2015-10-17 00:50 - 01801288 _____ (Malwarebytes) C:\Users\Matias\Downloads\JRT.exe
2015-10-16 22:00 - 2015-10-16 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-16 16:24 - 2015-10-16 16:24 - 01682432 _____ C:\Users\Matias\Downloads\AdwCleaner.exe
2015-10-15 23:12 - 2015-10-15 23:14 - 00070692 _____ C:\Users\Matias\Desktop\Addition.txt
2015-10-15 23:10 - 2015-10-17 11:30 - 00021000 _____ C:\Users\Matias\Desktop\FRST.txt
2015-10-15 23:10 - 2015-10-17 11:30 - 00000000 ____D C:\Users\Matias\Desktop\FRST-OlderVersion
2015-10-15 20:23 - 2015-10-15 20:23 - 00000000 ____D C:\Users\Matias\AppData\Roaming\AVG
2015-10-15 20:12 - 2015-10-15 20:20 - 00012060 _____ C:\Users\Matias\Downloads\hijackthis.log
2015-10-15 20:10 - 2015-10-15 20:10 - 00388608 _____ (Trend Micro Inc.) C:\Users\Matias\Downloads\HijackThis.exe
2015-10-15 20:07 - 2015-10-15 20:07 - 00000954 _____ C:\Users\Public\Desktop\AVG.lnk
2015-10-15 20:07 - 2015-10-15 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2015-10-15 20:05 - 2015-10-17 00:55 - 00000000 ____D C:\ProgramData\Avg
2015-10-15 20:05 - 2015-10-17 00:55 - 00000000 ____D C:\Program Files (x86)\AVG
2015-10-15 20:02 - 2015-10-17 00:55 - 00000000 ____D C:\Users\Matias\AppData\Local\Avg
2015-10-15 20:02 - 2015-10-15 20:07 - 00000000 ____D C:\Users\Matias\AppData\Local\AvgSetupLog
2015-10-15 20:02 - 2015-10-15 20:02 - 02895448 _____ (AVG Technologies) C:\Users\Matias\Downloads\AVG_Protection_Free_983.exe
2015-10-15 19:28 - 2015-10-15 19:28 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Sun
2015-10-15 19:26 - 2015-10-15 19:26 - 00000000 ____D C:\Users\Matias\AppData\LocalLow\Oracle
2015-10-15 14:36 - 2015-10-02 11:24 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-15 14:36 - 2015-10-02 11:24 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-14 18:59 - 2015-10-17 11:30 - 00000000 ____D C:\FRST
2015-10-14 18:58 - 2015-10-17 11:30 - 02196992 _____ (Farbar) C:\Users\Matias\Desktop\FRST64.exe
2015-10-14 18:58 - 2015-10-14 18:58 - 00781312 _____ C:\Users\Matias\Desktop\delfix_1.011.exe
2015-10-14 17:50 - 2015-09-19 00:18 - 00035384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-14 17:50 - 2015-09-18 10:42 - 01290752 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-14 17:50 - 2015-09-18 10:42 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-14 17:50 - 2015-09-18 10:42 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-14 17:50 - 2015-09-18 10:42 - 00699904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-14 17:50 - 2015-09-18 10:42 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-14 17:50 - 2015-09-18 10:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-14 15:24 - 2015-10-14 15:24 - 00000000 ____D C:\Program Files (x86)\Comodo
2015-10-13 19:18 - 2015-10-13 19:18 - 00000000 ____D C:\Users\Carolina\AppData\Roaming\AVAST Software
2015-10-13 19:18 - 2015-10-13 19:18 - 00000000 ____D C:\Users\Carolina\AppData\Local\Zemana
2015-10-13 19:17 - 2015-10-13 19:17 - 00000000 ____D C:\Users\Matias\AppData\Roaming\AVAST Software
2015-10-13 18:45 - 2015-08-06 13:47 - 04710400 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-10-13 18:45 - 2015-08-06 13:18 - 04068352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2015-10-13 18:43 - 2015-08-07 18:40 - 01134752 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-13 18:43 - 2015-08-07 18:40 - 00686960 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-10-13 18:43 - 2015-08-07 18:40 - 00507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-10-13 18:43 - 2015-08-07 11:13 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-13 18:40 - 2015-08-26 23:43 - 22372152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-13 18:40 - 2015-08-26 23:42 - 19795904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-13 18:39 - 2015-08-06 14:05 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2015-10-13 18:39 - 2015-08-06 13:37 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2015-10-13 18:36 - 2015-09-10 15:02 - 25851392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-13 18:35 - 2015-09-10 14:14 - 05990400 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-13 18:35 - 2015-09-10 14:09 - 20358144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-13 18:34 - 2015-09-10 14:18 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-13 18:34 - 2015-09-10 14:06 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-13 18:34 - 2015-09-10 13:33 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-13 18:34 - 2015-09-10 13:24 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-13 18:34 - 2015-09-10 13:02 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-13 18:34 - 2015-09-10 13:00 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-13 18:34 - 2015-09-10 12:57 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-13 18:33 - 2015-09-10 14:19 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-13 18:33 - 2015-09-10 14:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-13 18:33 - 2015-09-10 13:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-13 18:33 - 2015-09-10 13:39 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-13 18:33 - 2015-09-10 13:37 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-13 18:33 - 2015-09-10 13:35 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-13 18:33 - 2015-09-10 13:28 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-13 18:33 - 2015-09-10 13:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-13 18:33 - 2015-09-10 13:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-13 18:33 - 2015-09-10 13:19 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-13 18:33 - 2015-09-10 13:19 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-13 18:33 - 2015-09-10 13:19 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-13 18:33 - 2015-09-10 13:17 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-13 18:33 - 2015-09-10 13:17 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-13 18:33 - 2015-09-10 13:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-13 18:33 - 2015-09-10 13:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-13 18:33 - 2015-09-10 12:57 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-13 18:33 - 2015-09-10 12:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-13 18:33 - 2015-09-10 12:55 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-13 18:33 - 2015-09-10 12:45 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-13 18:33 - 2015-09-10 12:31 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-13 18:33 - 2015-09-10 12:27 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-13 18:32 - 2015-09-10 14:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-13 18:32 - 2015-09-10 13:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-13 18:32 - 2015-09-10 13:28 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-10-13 18:32 - 2015-09-10 13:01 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-10-13 18:32 - 2015-09-10 12:55 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-13 18:32 - 2015-09-10 12:34 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-13 18:32 - 2015-09-10 12:26 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-13 17:09 - 2015-09-29 09:31 - 07457624 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-13 17:09 - 2015-09-29 09:31 - 01658536 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-13 17:09 - 2015-09-29 09:31 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-13 17:09 - 2015-09-29 09:31 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-13 17:09 - 2015-09-29 09:31 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-13 17:09 - 2015-09-29 09:29 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-13 17:09 - 2015-09-28 15:45 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-13 17:09 - 2015-09-28 15:26 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-10-13 17:09 - 2015-09-28 15:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-13 17:09 - 2015-09-28 15:25 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-13 17:09 - 2015-09-28 15:25 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-13 17:09 - 2015-09-28 15:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-13 17:09 - 2015-09-28 15:22 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-13 17:09 - 2015-09-28 15:22 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-13 17:09 - 2015-09-28 15:15 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-13 17:09 - 2015-09-28 15:13 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-13 17:09 - 2015-09-28 15:12 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-13 17:09 - 2015-09-24 14:51 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2015-10-13 17:09 - 2015-09-24 14:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2015-10-13 17:09 - 2015-09-24 14:30 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2015-10-13 17:09 - 2015-09-24 13:42 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2015-10-13 17:09 - 2015-09-24 13:40 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 17:09 - 2015-08-22 10:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 17:09 - 2015-08-07 18:40 - 01736520 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-13 17:09 - 2015-08-07 18:40 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-13 17:09 - 2015-07-16 15:58 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll
2015-10-13 17:03 - 2015-10-13 17:16 - 00000000 ____D C:\Windows\SysWOW64\vbox
2015-10-13 17:03 - 2015-10-13 17:15 - 00000000 ____D C:\Windows\system32\vbox
2015-10-13 17:02 - 2015-10-17 01:03 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-10-13 17:02 - 2015-10-13 17:02 - 00001938 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-10-13 17:02 - 2015-10-13 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-13 17:01 - 2015-10-13 16:59 - 00448968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-10-13 17:01 - 2015-10-13 16:59 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-10-13 17:01 - 2015-10-13 16:59 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-10-13 17:01 - 2015-10-13 16:59 - 00153744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-10-13 17:01 - 2015-10-13 16:59 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-10-13 17:01 - 2015-10-13 16:59 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-10-13 17:01 - 2015-10-13 16:59 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-10-13 17:01 - 2015-10-13 16:59 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-10-13 17:01 - 2015-10-13 16:58 - 01049880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-10-13 17:01 - 2015-10-13 16:58 - 00132656 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
2015-10-13 16:59 - 2015-10-13 16:59 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-10-13 16:54 - 2015-10-13 16:54 - 00000000 ____D C:\Program Files\AVAST Software
2015-10-13 16:50 - 2015-10-13 16:50 - 00000000 ____D C:\ProgramData\AVAST Software
2015-10-12 18:17 - 2015-10-12 18:17 - 00000655 _____ C:\Users\Public\Documents\bitrock_installer_5352.log
2015-10-12 17:49 - 2015-10-12 17:49 - 00002254 _____ C:\Users\Public\Desktop\ZBrush 4R7 64-bit.lnk
2015-10-12 17:46 - 2015-10-12 17:46 - 00000000 ____D C:\Users\Public\Pixologic
2015-10-11 00:09 - 2015-10-17 00:55 - 00125744 _____ C:\Windows\PFRO.log
2015-10-10 22:53 - 2015-10-10 22:53 - 00001011 _____ C:\Users\Public\Desktop\Marvelous Designer 5 Personal.lnk
2015-10-10 22:53 - 2015-10-10 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Marvelous Designer 5 Personal
2015-10-10 22:50 - 2015-10-14 14:53 - 00000000 ____D C:\Program Files\Marvelous Designer 5 Personal
2015-10-10 22:50 - 2015-10-10 22:50 - 00000000 ____D C:\Users\Public\Documents\MD5
2015-10-10 13:09 - 2015-10-10 13:09 - 00109432 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2015-10-10 13:09 - 2015-10-10 13:09 - 00109432 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
2015-10-10 13:09 - 2015-10-10 13:09 - 00001160 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
2015-10-10 13:09 - 2015-10-10 13:09 - 00000000 ____D C:\Users\Matias\AppData\Local\Zemana
2015-10-10 13:09 - 2015-10-10 13:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2015-10-10 13:09 - 2015-10-10 13:09 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2015-10-09 21:07 - 2015-10-17 01:20 - 00048024 _____ C:\Windows\setupact.log
2015-10-09 21:07 - 2015-10-09 21:07 - 00000000 _____ C:\Windows\setuperr.log
2015-10-09 21:06 - 2015-10-17 00:53 - 01025900 _____ C:\Windows\WindowsUpdate.log
2015-10-08 13:57 - 2015-10-08 13:57 - 00001027 _____ C:\Users\Matias\Desktop\3D-CoatDX64S.exe - Shortcut.lnk
2015-10-07 20:19 - 2015-10-08 13:09 - 00000025 ____H C:\Users\Matias\AppData\Roaming\uninst2.log
2015-10-07 20:19 - 2015-10-08 13:09 - 00000025 ____H C:\Users\Matias\AppData\Local\uninst3.log
2015-10-07 20:19 - 2015-10-08 13:09 - 00000025 ____H C:\ProgramData\temp21.log
2015-10-07 20:16 - 2015-10-07 20:16 - 00000000 ____D C:\Users\Matias\Documents\3D-CoatV3
2015-10-07 20:08 - 2015-10-08 13:57 - 00000000 ____D C:\Users\Matias\Documents\3D-CoatV45
2015-10-07 20:04 - 2015-10-07 20:08 - 00000000 ____D C:\Program Files\3D-Coat-V4.5
2015-10-07 20:04 - 2015-10-07 20:04 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3d-Coat-V4.5
2015-10-04 00:45 - 2015-10-04 00:45 - 00000000 ____D C:\Users\Public\Documents\CLO3D
2015-10-03 19:22 - 2015-10-17 00:50 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-03 19:22 - 2015-10-03 19:22 - 00003518 _____ C:\Windows\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8
2015-10-03 18:48 - 2015-10-03 18:48 - 00000684 ____H C:\bdr-cf01
2015-10-03 18:43 - 2015-10-03 18:48 - 00253404 ____H C:\bdr-ld01
2015-10-03 18:43 - 2015-10-03 18:48 - 00009216 ____H C:\bdr-ld01.mbr
2015-10-03 18:43 - 2014-07-04 17:49 - 49563064 ____H C:\bdr-im01.gz
2015-10-03 18:43 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz01
2015-10-01 14:33 - 2015-10-01 14:33 - 00000000 ____D C:\Users\Matias\AppData\Roaming\ZWSOFT
2015-10-01 14:32 - 2015-10-01 14:42 - 00000000 ____D C:\Users\Matias\AppData\Roaming\ZW3D 2015 Eng (x64)
2015-10-01 14:32 - 2015-10-01 14:32 - 00000000 ____D C:\Users\Matias\Documents\ZW3D
2015-10-01 14:32 - 2015-10-01 14:32 - 00000000 ____D C:\Users\Matias\AppData\Roaming\ZWMold5.0
2015-10-01 14:03 - 2015-10-01 14:03 - 00002011 _____ C:\Users\Public\Desktop\ZW3D 2015 Eng (x64).lnk
2015-10-01 14:03 - 2015-10-01 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZWSOFT
2015-10-01 13:51 - 2015-10-01 13:51 - 00000000 ____D C:\Program Files\ZWSOFT
2015-09-29 11:06 - 2015-10-05 11:18 - 00000000 ____D C:\Users\Carolina\Desktop\alpaca
2015-09-28 21:07 - 2015-09-28 21:07 - 00000000 ____D C:\Program Files (x86)\The Foundry
2015-09-28 21:04 - 2015-09-28 21:04 - 00000000 ____D C:\Users\Matias\maricache
2015-09-28 21:04 - 2015-09-28 21:04 - 00000000 ____D C:\Users\Matias\Documents\Mari
2015-09-28 21:04 - 2015-09-28 21:04 - 00000000 ____D C:\Users\Matias\.mari
2015-09-28 20:53 - 2015-09-28 20:53 - 00000000 ____D C:\ProgramData\Macrovision
2015-09-28 20:46 - 2015-10-01 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Foundry
2015-09-28 20:42 - 2015-09-28 21:07 - 00000000 ____D C:\ProgramData\The Foundry
2015-09-28 20:42 - 2015-09-28 21:06 - 00000000 ____D C:\Program Files\The Foundry
2015-09-28 17:50 - 2015-10-15 19:28 - 00000000 ____D C:\Users\Matias\.oracle_jre_usage
2015-09-28 10:41 - 2015-10-15 20:01 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-28 10:41 - 2015-10-14 15:26 - 00001114 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-28 10:41 - 2015-10-14 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-28 10:41 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-09-28 10:41 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-09-28 10:41 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-09-28 10:40 - 2015-10-14 15:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-27 20:41 - 2015-09-27 20:41 - 00345187 _____ C:\Users\Matias\Documents\casa.skp
2015-09-27 20:16 - 2015-09-27 20:16 - 00001192 _____ C:\Users\Matias\Desktop\Editor.exe - Shortcut (2).lnk
2015-09-27 11:58 - 2015-09-27 11:58 - 00000000 ____D C:\Users\Matias\AppData\Roaming\HD Tune Pro
2015-09-27 11:57 - 2015-09-28 13:40 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro
2015-09-27 11:57 - 2015-09-27 11:57 - 00001045 _____ C:\Users\Matias\Desktop\HD Tune Pro.lnk
2015-09-27 11:57 - 2015-09-27 11:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro
2015-09-27 11:31 - 2015-09-27 11:31 - 00007370 _____ C:\Users\Matias\crash_report.txt
2015-09-26 23:51 - 2015-09-27 17:24 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Twinmotion3-Pro
2015-09-26 23:49 - 2015-09-26 23:49 - 00002215 _____ C:\Users\Public\Desktop\Twinmotion 2015 Professional Edition.lnk
2015-09-26 23:49 - 2015-09-26 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Twinmotion 2015 Professional Edition
2015-09-26 23:44 - 2015-09-26 23:48 - 00000000 ____D C:\Program Files\Twinmotion 2015 Professional Edition
2015-09-26 17:31 - 2015-09-26 17:31 - 00000000 ____D C:\Users\Matias\Documents\church (2)
2015-09-26 12:54 - 2015-09-26 12:54 - 00000000 ____D C:\ProgramData\Bricsys
2015-09-26 12:53 - 2015-09-26 12:53 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Bricsys
2015-09-26 12:53 - 2015-09-26 12:53 - 00000000 ____D C:\Users\Matias\AppData\Local\Bricsys
2015-09-26 12:52 - 2015-09-26 12:52 - 00000000 ____D C:\Program Files\Bricsys
2015-09-25 19:29 - 2015-09-25 19:29 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Python
2015-09-25 17:43 - 2015-09-25 19:38 - 00002660 _____ C:\Users\Matias\Desktop\Autodesk Fusion 360.lnk
2015-09-25 17:43 - 2015-09-25 17:43 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-09-25 13:12 - 2015-09-25 13:13 - 00000000 ____D C:\Users\Carolina\AppData\Local\Dropbox
2015-09-24 14:57 - 2015-10-17 11:11 - 00000000 ___RD C:\Users\Matias\Dropbox
2015-09-24 14:57 - 2015-09-24 14:57 - 00001242 _____ C:\Users\Matias\Desktop\Dropbox.lnk
2015-09-24 14:53 - 2015-09-24 14:53 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Dropbox
2015-09-24 14:51 - 2015-10-17 11:11 - 00000000 ____D C:\Users\Matias\AppData\Local\Dropbox
2015-09-24 14:51 - 2015-10-17 11:09 - 00000960 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-09-24 14:51 - 2015-10-16 23:56 - 00000964 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-09-24 14:51 - 2015-10-16 22:01 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-09-24 14:51 - 2015-09-24 14:51 - 00003936 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2015-09-24 14:51 - 2015-09-24 14:51 - 00003700 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2015-09-24 14:51 - 2015-09-24 14:51 - 00000000 ____D C:\ProgramData\Dropbox
2015-09-22 16:17 - 2015-09-22 16:17 - 00000000 ____D C:\Users\Matias\AppData\Local\CEF
2015-09-22 07:46 - 2015-09-22 21:33 - 00000000 ____D C:\Users\Matias\AppData\Local\UnrealEngine
2015-09-22 07:46 - 2015-09-22 07:46 - 00000000 ____D C:\Users\Matias\AppData\Local\UnrealEngineLauncher
2015-09-22 07:46 - 2015-09-22 07:46 - 00000000 ____D C:\Users\Matias\AppData\Local\EpicGamesLauncher
2015-09-22 07:36 - 2015-09-22 07:36 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2015-09-22 07:36 - 2015-09-22 07:36 - 00001216 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2015-09-22 07:35 - 2015-09-22 16:18 - 00000000 ____D C:\Program Files\Epic Games
2015-09-22 07:35 - 2015-09-22 07:46 - 00000000 ____D C:\ProgramData\Epic
2015-09-21 11:14 - 2015-10-16 16:25 - 00000000 ____D C:\Users\Matias\AppData\Local\CrashDumps
2015-09-21 11:14 - 2015-09-21 11:14 - 00062001 _____ C:\Users\Matias\Documents\zdump_a2_b9647_09_21_2015_11_14_44.dmp
2015-09-21 11:14 - 2015-09-21 11:14 - 00000000 ____D C:\Users\Matias\Documents\FMZ @ 09-21-15 1114
2015-09-21 09:58 - 2015-09-21 09:58 - 00002188 _____ C:\Users\Matias\Documents\untitled1 2.mtl
2015-09-21 09:34 - 2015-09-21 09:34 - 00000000 ____D C:\ProgramData\ATI
2015-09-20 10:58 - 2015-09-20 10:58 - 00058661 _____ C:\Windows\SysWOW64\CCCInstall_201509201058384400.log
2015-09-20 10:58 - 2015-09-20 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-17 11:27 - 2015-05-10 19:38 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Skype
2015-10-17 11:18 - 2015-05-21 21:57 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1940331569-2220852289-466042613-1001
2015-10-17 11:16 - 2015-08-12 15:00 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-17 11:12 - 2015-05-10 17:13 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{28E5ECD5-F002-487F-B58E-4DDCE20F588A}
2015-10-17 11:10 - 2015-05-11 13:44 - 00000000 ___DO C:\Users\Matias\OneDrive
2015-10-17 11:09 - 2015-08-12 15:00 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-17 11:08 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\sru
2015-10-17 01:21 - 2015-05-15 20:34 - 00000000 ____D C:\ProgramData\Reprise
2015-10-17 01:20 - 2015-08-01 19:11 - 00000350 _____ C:\Windows\Tasks\GoodScene.job
2015-10-17 01:20 - 2013-08-22 11:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-17 01:19 - 2015-05-22 18:47 - 00000000 ____D C:\AdwCleaner
2015-10-17 01:19 - 2013-08-22 10:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-10-17 00:55 - 2015-05-21 14:29 - 00000000 ____D C:\ProgramData\MFAData
2015-10-17 00:55 - 2015-05-14 23:17 - 00000000 ____D C:\Program Files\Bitdefender
2015-10-17 00:48 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\ELAMBKUP
2015-10-16 17:38 - 2015-05-16 16:01 - 00000000 ____D C:\ProgramData\Oracle
2015-10-16 17:16 - 2015-05-16 16:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-16 17:16 - 2015-05-16 16:01 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-16 16:46 - 2015-05-10 18:48 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Awesomium
2015-10-16 16:42 - 2015-05-16 16:01 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-15 20:27 - 2013-08-22 10:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-10-15 16:53 - 2015-05-10 19:37 - 00000000 ____D C:\ProgramData\Skype
2015-10-15 14:55 - 2015-07-26 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thea Render
2015-10-15 14:39 - 2015-05-10 17:04 - 00913650 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-14 23:20 - 2015-05-11 23:14 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-14 23:20 - 2015-05-11 23:14 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-14 23:20 - 2013-08-22 12:36 - 00000000 ___RD C:\Windows\ToastData
2015-10-14 22:20 - 2015-06-05 23:41 - 00807424 ___SH C:\Users\Matias\Downloads\Thumbs.db
2015-10-14 19:08 - 2015-05-14 16:33 - 00000000 ____D C:\Users\Matias\AppData\Roaming\uTorrent
2015-10-14 18:13 - 2013-08-22 12:20 - 00000000 ____D C:\Windows\CbsTemp
2015-10-14 14:20 - 2015-05-31 10:52 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1940331569-2220852289-466042613-1006
2015-10-14 10:54 - 2015-05-20 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-13 21:11 - 2015-05-20 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-10-13 21:10 - 2013-08-22 10:25 - 00000167 _____ C:\Windows\win.ini
2015-10-13 20:52 - 2015-05-11 10:44 - 00000000 ____D C:\Windows\system32\MRT
2015-10-13 20:35 - 2015-05-11 10:44 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-12 17:49 - 2015-07-17 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixologic
2015-10-12 00:42 - 2015-05-11 00:21 - 00000000 ____D C:\Users\Matias\Documents\Evaer
2015-10-11 01:07 - 2015-05-10 17:03 - 00000000 ____D C:\Users\Matias
2015-10-10 21:54 - 2015-09-10 14:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
2015-10-10 21:53 - 2015-07-17 17:42 - 00000000 ____D C:\Program Files\Rockstar Games
2015-10-10 21:53 - 2015-07-17 17:42 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-10-10 19:49 - 2015-05-20 22:47 - 01369600 ___SH C:\Users\Matias\Desktop\Thumbs.db
2015-10-09 20:57 - 2015-08-07 22:54 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Abvent_Artlantis6
2015-10-09 16:26 - 2015-07-16 15:31 - 00001469 _____ C:\Users\Public\Desktop\Star Wars - The Old Republic.lnk
2015-10-08 21:06 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\AppReadiness
2015-10-07 19:26 - 2015-05-12 16:38 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-07 17:48 - 2015-05-12 16:38 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-05 14:42 - 2015-08-22 18:33 - 00000000 ____D C:\Users\Matias\Documents\character_project
2015-10-05 14:30 - 2015-05-17 20:08 - 00000000 ____D C:\Users\Matias\AppData\Local\Autodesk
2015-10-05 14:19 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\NDF
2015-10-05 10:29 - 2015-05-25 20:58 - 00466440 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-04 13:58 - 2015-05-31 13:34 - 00053760 ___SH C:\Users\Carolina\Desktop\Thumbs.db
2015-10-04 01:10 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\setup
2015-10-03 21:30 - 2015-05-14 23:16 - 00000000 ____D C:\Users\Matias\AppData\Roaming\QuickScan
2015-10-03 21:29 - 2015-05-14 23:17 - 00000000 ____D C:\ProgramData\Bitdefender
2015-10-03 21:29 - 2015-05-14 20:23 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2015-10-03 19:20 - 2015-05-14 23:31 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2015-10-03 19:18 - 2015-05-14 23:17 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2015-10-03 13:01 - 2015-05-24 19:20 - 00000000 ____D C:\Users\Matias\.frostwire5
2015-10-01 16:47 - 2015-05-24 17:36 - 00000000 __SHD C:\$360Section
2015-10-01 16:47 - 2015-05-24 14:59 - 00000000 ____D C:\ProgramData\360Quarant
2015-10-01 14:32 - 2015-05-17 20:14 - 00000000 ____D C:\ProgramData\FLEXnet
2015-10-01 11:44 - 2015-05-31 01:06 - 00000000 ____D C:\Users\Carolina\AppData\LocalLow\360WD
2015-09-30 23:18 - 2015-06-13 16:17 - 00000988 _____ C:\Users\Matias\Desktop\ShaderMap 3.lnk
2015-09-30 21:53 - 2015-05-31 19:19 - 00000000 ____D C:\Users\Matias\Desktop\arboles
2015-09-29 19:22 - 2015-05-31 01:03 - 00000000 ____D C:\Users\Carolina
2015-09-28 14:34 - 2015-05-10 17:08 - 00000000 ____D C:\Users\Matias\AppData\Local\VirtualStore
2015-09-28 10:38 - 2015-08-12 15:00 - 00004030 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-28 10:38 - 2015-08-12 15:00 - 00003794 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-27 20:16 - 2015-05-25 21:03 - 00000000 ____D C:\CRYENGINE
2015-09-27 19:32 - 2015-06-12 17:34 - 00000000 ____D C:\Users\Matias\AppData\Local\Chief Architect Premier X7
2015-09-27 19:31 - 2015-06-13 18:58 - 00000000 ___RD C:\Users\Matias\Documents\Chief Architect Premier X7 Data
2015-09-26 08:51 - 2015-06-13 12:32 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-25 20:11 - 2015-07-26 15:50 - 00000000 ____D C:\Users\Public\Ticket
2015-09-25 17:44 - 2015-05-17 19:48 - 00000000 ____D C:\ProgramData\Autodesk
2015-09-25 17:43 - 2015-05-17 19:48 - 00000000 ____D C:\Users\Matias\AppData\Roaming\Autodesk
2015-09-24 19:31 - 2015-05-17 17:26 - 00000000 ____D C:\Users\Matias\Documents\Unreal Projects
2015-09-23 17:33 - 2015-05-10 18:33 - 00000000 ____D C:\ProgramData\Package Cache
2015-09-21 09:58 - 2015-09-13 22:10 - 00100273 _____ C:\Users\Matias\Documents\Untitled1.obj
2015-09-20 12:44 - 2015-05-10 19:18 - 00000000 ____D C:\Users\Matias\AppData\Local\AMD
2015-09-20 10:58 - 2015-05-10 17:22 - 00000000 ____D C:\Program Files\AMD
2015-09-20 10:57 - 2015-05-10 18:36 - 00000000 ____D C:\ProgramData\AMD
2015-09-20 10:49 - 2015-05-10 18:30 - 00000000 ____D C:\AMD
2015-09-18 17:39 - 2015-06-13 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShaderMap 3
2015-09-18 17:39 - 2015-06-13 16:17 - 00000000 ____D C:\Program Files\ShaderMap 3

==================== Files in the root of some directories =======

2015-06-13 14:55 - 2015-08-23 11:42 - 0004686 _____ () C:\Users\Matias\AppData\Roaming\pixplant3settings.txt
2015-10-07 20:19 - 2015-10-08 13:09 - 0000025 ____H () C:\Users\Matias\AppData\Roaming\uninst2.log
2015-05-11 00:12 - 2015-05-11 00:12 - 0000000 _____ () C:\Users\Matias\AppData\Local\Temp.dat
2015-10-07 20:19 - 2015-10-08 13:09 - 0000025 ____H () C:\Users\Matias\AppData\Local\uninst3.log
2015-06-13 14:55 - 2015-06-13 14:55 - 0000000 _____ () C:\ProgramData\pixplant3settings.txt
2015-03-17 15:40 - 2015-03-17 15:40 - 0002602 _____ () C:\ProgramData\regid.2014-02.com.twinmotion_BA67F727-A69B-4F6F-AC3C-CB8C7B04A0F8.swidtag
2015-10-07 20:19 - 2015-10-08 13:09 - 0000025 ____H () C:\ProgramData\temp21.log

Some files in TEMP:
====================
C:\Users\Carolina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5pysfv.dll
C:\Users\Matias\AppData\Local\Temp\cct.dll
C:\Users\Matias\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfnin3b.dll
C:\Users\Matias\AppData\Local\Temp\JavaIC.dll
C:\Users\Matias\AppData\Local\Temp\jre-8u60-windows-au.exe
C:\Users\Matias\AppData\Local\Temp\msscct32.dll
C:\Users\Matias\AppData\Local\Temp\sqlite3.dll
C:\Users\Matias\AppData\Local\Temp\YSearchUtil.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-11 11:56

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:17-10-2015
Ran by [removed] (2015-10-17 11:31:52)
Running from C:\Users\[removed]\Desktop
Windows 8.1 Pro (X64) (2015-05-10 20:06:17)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1940331569-2220852289-466042613-500 - Administrator - Disabled)
Carolina (S-1-5-21-1940331569-2220852289-466042613-1006 - Administrator - Enabled) => C:\Users\Carolina
Guest (S-1-5-21-1940331569-2220852289-466042613-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1940331569-2220852289-466042613-1003 - Limited - Enabled)
Matias (S-1-5-21-1940331569-2220852289-466042613-1001 - Administrator - Enabled) => C:\Users\Matias

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Allegorithmic Substance Designer 5.2.0 (HKLM-x32\…\Substance Designer_5) (Version: 5.2.0 build 16375 (2015-08-18) - Allegorithmic)
AMD Catalyst Install Manager (HKLM\…\{770EA7C3-0B5A-C557-E641-A09244603B84}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden
Arc (HKLM-x32\…\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
ArcGIS 10.2.2 License Manager (HKLM-x32\…\ArcGIS 10.2.2 License Manager) (Version: 10.2.3552 - Environmental Systems Research Institute, Inc.)
ArcGIS 10.2.2 License Manager (x32 Version: 10.2.3552 - Environmental Systems Research Institute, Inc.) Hidden
ArchiCAD 19 INT (HKLM\…\001FFF2FFF19FF00FF0701F01F02F000-R1) (Version: 19.0 - GRAPHISOFT)
Artlantis Studio 6.0.2.17 (HKLM\…\Artlantis Studio 6) (Version: 6.0.2.17 - Abvent R&D;)
ArtRage 4 (HKLM-x32\…\ArtRage 4 4.5.2.0) (Version: 4.5.2.0 - Ambient Design)
ArtRage 4 (Version: 4.5.2.0 - Ambient Design) Hidden
Autodesk 3ds Max 2016 (HKLM\…\Autodesk 3ds Max 2016) (Version: 18.3.490.0 - Autodesk)
Autodesk 3ds Max 2016 (Version: 18.3.490.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 Populate Data (HKLM\…\{57E92DED-DC7C-41E5-B9E1-76D83BD2EABE}) (Version: 18.0.0.0 - Autodesk)
Autodesk 3ds Max 2016 SP1 (HKLM\…\Autodesk 3ds Max 2016 SP1.1) (Version: 18.3.490.0 - Autodesk)
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\…\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.19 - Autodesk)
Autodesk Application Manager (HKLM-x32\…\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Backburner 2016 (HKLM-x32\…\{8C5F38D2-9EFE-49A4-B3F5-BF3210FED168}) (Version: 16.0.0.0 - Autodesk)
Autodesk BIM 360 Revit 2016 Add-in 64 bit (HKLM\…\{C5A83116-8654-47A3-A3B1-B76905C8A198}) (Version: 4.35.3969 - Autodesk)
Autodesk DirectConnect 2016 64-bit (HKLM\…\Autodesk DirectConnect 2016 64-bit) (Version: 10.0.98.0 - Autodesk)
Autodesk DirectConnect 2016 64-bit (Version: 10.0.98.0 - Autodesk) Hidden
Autodesk Fusion 360 (HKU\S-1-5-21-1940331569-2220852289-466042613-1001\…\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.1633 - Autodesk, Inc.)
Autodesk Games Launcher (HKLM\…\{BB6E1486-552C-49A1-908B-39946A1CAB87}) (Version: 1.0.7.0 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2016 (HKLM\…\{9167CA34-4E58-49E3-8892-3C439739D2D3}) (Version: 18.0 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\…\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\…\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2016 (HKLM-x32\…\{FA5DF4D1-CD59-4183-B3D4-779A56498786}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2016 (HKLM-x32\…\{415A5A54-325E-4815-9940-62A889CA3877}) (Version: 6.3.0.18 - Autodesk)
Autodesk Maya 2016 (HKLM\…\Autodesk Maya 2016) (Version: 16.0.1312.0 - Autodesk)
Autodesk Maya 2016 (Version: 16.0.1312.0 - Autodesk) Hidden
Autodesk Revit Architecture 2016 (HKLM\…\Autodesk Revit Architecture 2016) (Version: 16.0.428.0 - Autodesk)
Autodesk Revit Architecture Content Libraries 2016 (HKLM\…\Autodesk Revit Architecture Content Libraries 2016) (Version: 16.0.428.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max (HKLM\…\Autodesk Revit Interoperability for 3ds Max ) (Version: 16.0.394.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max (Version: 16.0.394.0 - Autodesk) Hidden
Autodesk Seek Viewer (1.0.54) (HKLM-x32\…\{15131435-F50E-4E2A-BC42-11466C0994CC}) (Version: 1.0.54 - Autodesk)
Autodesk SketchBook Pro 2016 (HKLM\…\Autodesk SketchBook Pro 2016) (Version: 7.2.0.0 - Autodesk)
Autodesk SketchBook Pro 2016 (Version: 7.2.0.0 - Autodesk) Hidden
Autodesk Stingray 1.0.31.0 (HKLM\…\Autodesk Stingray 1.0.31.0) (Version: 1.0.31.0 - Autodesk)
Autodesk Stingray 1.0.31.0 (Version: 1.0.31.0 - Autodesk) Hidden
Autodesk Workflows 2016 (HKLM\…\{535CDED0-D690-4738-83EE-09056A365BAC}) (Version: 6.3.0.18 - Autodesk, Inc.)
Avast Free Antivirus (HKLM-x32\…\Avast) (Version: 10.4.2233 - AVAST Software)
AVG (HKLM\…\AvgZen) (Version: 1.12.1.20806 - AVG Technologies)
AVG Zen (Version: 1.12.62 - AVG Technologies) Hidden
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden
BitRaider Streaming Client (HKLM-x32\…\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blender (HKLM\…\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation)
Bonjour (HKLM\…\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BS.Player PRO (HKLM-x32\…\BSPlayerp) (Version: 2.69.1079 - AB Team, d.o.o.)
Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
C4DtoA for Cinema4D R16 (HKLM\…\C4DtoA_R16) (Version: 1.0.1.0 - Solid Angle)
CCleaner (HKLM\…\CCleaner) (Version: 5.07 - Piriform)
Chief Architect Premier X7 (64 bit) (HKLM\…\{AD72C4EE-2D20-4B27-8602-0C7CC9DEEA87}) (Version: 17.3.0.0 - Chief Architect)
Comodo Dragon (HKLM-x32\…\Comodo Dragon) (Version: 45.6.11.385 - Comodo)
Curse (HKLM-x32\…\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
Dassault Systemes Software VC10 Prerequisites x86-x64 (HKLM\…\{7C534131-6431-4ECB-9069-525CB5F75CC8}) (Version: 10.1.1 - Dassault Systemes)
Dassault Systemes Software VC9 Prerequisites x86-x64 (HKLM\…\{F2F2DEA7-36AB-4E13-907C-D8BDE775EF97}) (Version: 9.1.2 - Dassault Systemes)
DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dropbox (HKLM-x32\…\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.37 - Dropbox, Inc.) Hidden
EasyBCD 2.2 (HKLM-x32\…\EasyBCD) (Version: 2.2 - NeoSmart Technologies)
Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\…\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
Epic Games Launcher (HKLM\…\{03027486-9D54-4DE3-BF0F-9DEDB622D7CE}) (Version: 1.1.36.0 - Epic Games, Inc.)
Esri CityEngine 2015.1 (HKLM\…\Esri CityEngine 2015.1) (Version: 15.1.2047 - Environmental Systems Research Institute, Inc.)
Esri CityEngine 2015.1 (Version: 15.1.2047 - Environmental Systems Research Institute, Inc.) Hidden
FARO LS 1.1.501.0 (64bit) (HKLM-x32\…\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production)
FLT 7.0v2 (HKLM-x32\…\FLT 7.0v2_is1) (Version: - The Foundry)
FMW 1 (Version: 1.12.3 - AVG Technologies) Hidden
formZ 8 Pro 64 (HKLM\…\{B58A1D9E-1737-4033-9FE6-394665202B93}) (Version: 8.05.0000 - AutoDesSys, Inc.)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grip points (Version: 3.08.1.0 - Open Design Alliance) Hidden
HD Tune Pro 5.60 (HKLM-x32\…\HD Tune Pro_is1) (Version: - EFD Software)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\…\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
IIS 8.0 Express (HKLM\…\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\…\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
IIS Express Application Compatibility Database for x86 (HKLM\…\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
ImageMagick 6.9.1-4 Q16 (64-bit) (2015-07-15) (HKLM\…\ImageMagick 6.9.1 Q16 (64-bit)_is1) (Version: 6.9.1 - ImageMagick Studio LLC)
Instant Reality Framework 2.5.1.28546 (64 Bit) (HKLM\…\{D164739D-5BE0-4471-B82B-E28BBF44E3CF}) (Version: 2.5.1.28546 - Fraunhofer IGD)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\…\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Java 8 Update 60 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
KeyShot 5 64 bit (HKLM-x32\…\KeyShot 5_64) (Version: 5.2 64 bit - Luxion ApS)
Kit SDK de vérification de Visual Studio 2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
KMSpico v9.0.5.20131111 (HKLM\…\KMSpico_is1) (Version: 9.0.5.20131111 - )
Knald (HKLM-x32\…\Knald64) (Version: 1.0.0 - Knald Technologies, LLC)
Knald Beta (HKLM-x32\…\KnaldBeta64) (Version: 1.1.0 - Knald Technologies, LLC)
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\…\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Marvel Heroes Game (HKLM-x32\…\{f8f040bd-5ced-4167-a116-592fce1698f4}_is1) (Version: 1.0 - Gazillion Entertainment)
Marvelous Designer 5 Personal (HKLM-x32\…\Marvelous Designer 5 Personal) (Version: - CLO Virtual Fashion Inc.)
Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
mental ray Standalone 3.13.1 for Autodesk 2016 (HKLM\…\{F20501D6-D8A8-4091-A3B5-5A103C71CC10}) (Version: 16.0.0.0 - mental ray)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\…\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\…\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\…\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\…\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\…\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\…\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\…\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Office 2003 Web Components (HKLM-x32\…\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\…\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\…\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\…\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\…\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\…\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\…\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\…\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\…\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\…\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\…\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\…\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB (HKLM\…\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (HKLM-x32\…\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (x64) (HKLM\…\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\…\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\…\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\…\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\…\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\…\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\…\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\…\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\…\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\…\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\…\{8C06D6DB-A391-4686-B050-99CC522A7843}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\…\{4AEB505C-95E1-4964-9B64-8D27F3186D30}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\…\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\…\{887868A2-D6DE-3255-AA92-AA0B5A59B874}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{f9b04b37-35d5-4a19-a51b-fcf4a8734851}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\…\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\…\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\…\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Professional 2013 with Update 4 (HKLM-x32\…\{c96467b4-e480-4218-8fde-db83bf9d47d1}) (Version: 12.0.31101 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\…\{69A998C5-00A9-42CA-AB4E-C31CFFCD9251}) (Version: 3.1237.1763 - Microsoft Corporation)
NVIDIA PhysX (HKLM-x32\…\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
OpenRL Runtime 1.3.1000.14 x64 (HKLM\…\{250C8D22-1757-11E3-818E-1803734DBB4F}) (Version: 1.3.1000.14 - Caustic Graphics, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDFExport (Version: 3.08.1.0 - Open Design Alliance) Hidden
PixPlant 3.0.6 (HKLM\…\PixPlant3_is1) (Version: 3.0.6 - FaronStudio)
Polygon Cruncher 12.70 (HKLM\…\Polygon Cruncher (x64 bits)) (Version: 12.70 - Mootools)
PowerISO (HKLM-x32\…\PowerISO) (Version: 5.9 - Power Software Ltd)
PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT (HKLM-x32\…\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Prerequisites for SSDT (HKLM-x32\…\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
PyFFI 2.2.2 (HKLM-x32\…\PyFFI-py3k) (Version: 2.2.2 - Amorilia <[removed]>)
Python 2.5.4 (HKLM-x32\…\{2E0DFC24-7C4B-4DCF-BCC7-81C513BED3BC}) (Version: 2.5.4150 - Python Software Foundation)
Python 2.7.10 (64-bit) (HKLM\…\{E2B51919-207A-43EB-AE78-733F9C6797C3}) (Version: 2.7.10150 - Python Software Foundation)
Python 3.3.0 (64-bit) (HKLM\…\{290329c4-a276-3aec-b633-9f5a39d8dd96}) (Version: 3.3.150 - Python Software Foundation)
Python 3.4.3 (HKLM-x32\…\{CCD588A7-8D55-49F1-A30C-47FAB40889ED}) (Version: 3.4.16490 - Python Software Foundation)
Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
RealFlow 2014 (HKLM-x32\…\RealFlow 2014) (Version: - )
Revit Architecture 2016 (Version: 16.0.428.0 - Autodesk) Hidden
Revit Architecture Content Libraries 2016 (Version: 16.0.428.0 - Autodesk) Hidden
Rhinoceros 5 (64-bit) (HKLM\…\{32672999-63EB-42D7-A1F0-214CD8CD5803}) (Version: 5.9.40617.14345 - Robert McNeel & Associates)
Rhinoceros 5 (HKLM-x32\…\{1277B5ED-415D-40F0-BFBF-47380D93BD5D}) (Version: 5.9.40617.14345 - Robert McNeel & Associates)
Rhinoceros 5 Help Media (HKLM-x32\…\{E42CF82B-C897-4E9D-B8C4-DE63FF0A28D7}) (Version: 5.7.31022.19295 - Robert McNeel & Associates)
Rhinoceros 5 Language Pack Installer (en-US) (HKLM-x32\…\{06E2D312-B485-4914-904B-A3A940BC6750}) (Version: 5.9.40617.14345 - Robert McNeel & Associates)
Rhinoceros 5 Language Pack Installer (es-ES) (HKLM-x32\…\{44C83F69-ADD4-48E8-B8A4-B1831A534C21}) (Version: 5.7.31022.19295 - Robert McNeel & Associates)
SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Shade 3D ver.14E version 14.1.1.1370 (HKLM\…\Shade14US_is1) (Version: 14.1.1.1370 - e frontier, Inc.)
ShaderMap 3.0.5 (HKLM\…\ShaderMap 3_is1) (Version: - Rendering Systems Inc.)
SharePoint Client Components (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
SharePoint Client Components (Version: 16.0.2617.1200 - Microsoft Corporation) Hidden
Sheet sets (Version: 3.08.1.0 - Open Design Alliance) Hidden
Siemens NX 10.0 (HKLM\…\{11B4AD15-AE98-4618-B90A-562EC6875DC3}) (Version: 10.0.0.24 - Siemens)
Siemens PLM License Server (HKLM-x32\…\Siemens PLM License Server) (Version: 6.4.2.1 - Siemens Product Lifecycle Management Software Inc.)
SimLab Composer 2015 SP1 (Version: 5.1.9 - SimLab) Hidden
SimLab Composer 2015 SP1 64 bit (HKLM-x32\…\SimLab Composer 2015 SP1 5.1.9) (Version: 5.1.9 - SimLab)
SimLab Composer 6 64 bit (HKLM-x32\…\SimLab Composer 6 6.0.6) (Version: 6.0.6 - SimLab)
SimLab FBX Importer 5.0.2 for SketchUp x64 (HKLM\…\{DD959DC0-9D9D-4C29-BD93-C278D1C23E9D}) (Version: 5.0.2 - SimLab Soft)
SketchUp 2015 (HKLM\…\{90A6F70E-96AD-4054-AB8F-42BCFA75F8EC}) (Version: 15.0.9350 - Trimble Navigation Limited)
Skype 7.12 (HKLM-x32\…\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Smite (HKLM-x32\…\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.15.3015.0 - Hi-Rez Studios)
solidThinking 2015 4911 (HKLM\…\solidThinking 2015 4911) (Version: 2015.0.4911.0 - solidThinking, Inc.)
SOLIDWORKS 2015 x64 Edition SP04 (HKLM-x32\…\SolidWorks Installation Manager 20150-40400-1100-100) (Version: 23.4.0.56 - SolidWorks Corporation)
SOLIDWORKS 2015 x64 Edition SP04 (Version: 23.140.56 - Dassault Systemes SolidWorks Corp) Hidden
SOLIDWORKS 2015 x64 Spanish Resources (Version: 23.140.56 - Dassault Systèmes SolidWorks Corp) Hidden
SOLIDWORKS Composer 2015 SP04 x64 Edition (Version: 23.40.56 - Dassault Systemes SolidWorks Corp) Hidden
SOLIDWORKS eDrawings 2015 x64 Edition SP04 (Version: 15.4.0012 - Dassault Systèmes SolidWorks Corp) Hidden
SOLIDWORKS Explorer 2015 SP04 x64 Edition (Version: 23.40.56 - Dassault Systèmes SolidWorks Corp) Hidden
SpeedTree Cinema version 7.1.1 (HKLM\…\{5F1E1CC6-3A97-4D83-894C-50C52CDF000C}_is1) (Version: 7.1.1 - IDV, Inc.)
Star Wars The Old Republic (HKLM-x32\…\swtor_swtor) (Version: 8.0.0.24 - Bioware/EA)
Star Wars: The Old Republic (HKLM-x32\…\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Steam (HKLM-x32\…\Steam) (Version: 2.10.91.91 - Valve Corporation)
Substance Painter version 1.4.2 (HKLM\…\{410F5B6E-A29C-4F43-9DE3-44A1357D6AF5}_is1) (Version: 1.4.2 - Allegorithmic)
SVG Export (Version: 3.08.1.0 - Open Design Alliance) Hidden
TDXAcId (Version: 3.08.1.0 - Soft Dev SPb) Hidden
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
TeighaX Core (Version: 3.08.1.0 - Open Design Alliance) Hidden
TeighaX DWF Support (Version: 3.08.1.0 - Open Design Alliance) Hidden
TeighaX ExEvalWatcher (Version: 3.08.1.0 - Open Design Alliance) Hidden
TeighaX Field Evaluator (Version: 3.08.1.0 - Open Design Alliance) Hidden
TeighaX Rendering (Version: 3.08.1.0 - Open Design Alliance) Hidden
The Elder Scrolls Online (HKLM-x32\…\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Foundry MODO 901 build 85499 (HKLM-x32\…\901_64) (Version: - )
Twinmotion 2015 Professional Edition (HKLM\…\{852273A7-3497-43F4-B958-5FA6750B2B8C}) (Version: 3.2.1 - KA-RA)
TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
Unity (HKLM-x32\…\Unity) (Version: 5.2.0f2 - Unity Technologies ApS)
Update for (KB2504637) (HKLM-x32\…\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\…\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{40930C8E-A677-414C-A72F-DFDEB10738FB}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3085581) 64-Bit Edition (HKLM\…\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6BCC80EE-3B68-4110-8D47-23E04FB6D08D}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3085581) 64-Bit Edition (HKLM\…\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6BCC80EE-3B68-4110-8D47-23E04FB6D08D}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3085581) 64-Bit Edition (HKLM\…\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6BCC80EE-3B68-4110-8D47-23E04FB6D08D}) (Version: - Microsoft)
USB Game Controller (HKLM-x32\…\{D3DF3D05-DE2A-476A-A384-08FCD58D9FE7}) (Version: 2007.01.01 - )
USB Network Driver (HKLM-x32\…\{66ED8E01-C915-41F5-B33E-C5C31F27B885}) (Version: 2007.07.3 - )
USB Vibration Joystick (BM) (HKLM-x32\…\{61A994FF-D39B-4937-9DB9-87EC4E91B31F}) (Version: 1.00.0000 - ShanWan)
ViewX (Version: 3.08.1.0 - Open Design Alliance) Hidden
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\…\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\…\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\…\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\…\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation)
VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\…\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Windows Phone 8.1 Emulators - ENU (HKLM-x32\…\{166a69f6-6512-47ea-a342-17d954fc059a}) (Version: 12.0.31010.0 - Microsoft Corporation)
Wings 3D 1.5.3 (HKLM-x32\…\Wings 3D 1.5.3) (Version: - )
WinRAR 5.21 (64-bit) (HKLM\…\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Workflow Manager Client 1.0 (Version: 2.0.40131.0 - Microsoft Corporation) Hidden
Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.40326.0 - Microsoft Corporation) Hidden
World Machine 2 Professional Edition (HKLM-x32\…\World Machine2Pro) (Version: - )
WWE 2K15 (HKLM-x32\…\V1dFMksxNQ==_is1) (Version: 1 - )
Xvid MPEG-4 Video Codec (HKLM-x32\…\xvid) (Version: - Xvid Development Team)
Youtube Downloader HD v. 2.9.9.23 (HKLM-x32\…\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com)
ZBrush 4R7 (HKLM-x32\…\ZBrush 4R7 4R7) (Version: 4R7 - Pixologic)
Zemana AntiMalware (HKLM-x32\…\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.17.116 - Zemana Ltd.)
ZW3D 2015 Eng (x64) (HKLM\…\{D8BF151F-E726-4F00-8030-A3BEE6259E34}) (Version: 6.0.15.0318 - ZWCAD Software Co.,Ltd)
ZW3D 2015 Eng (x64) (Version: 6.0.15.0318 - ZWCAD Software Co.,Ltd) Hidden
Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1940331569-2220852289-466042613-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\Matias\AppData\Local\Autodesk\webdeploy\production\47982f0424d12e24e06d9052d8b578f503263543\NPreview10.dll ()

==================== Restore Points =========================

26-09-2015 12:51:19 Instalado BricsCAD V15.2.06 (x64) es_ES
01-10-2015 13:46:06 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
07-10-2015 17:45:00 Windows Update
10-10-2015 21:47:41 Quitado BricsCAD V15.2.06 (x64) es_ES
13-10-2015 16:51:41 avast! antivirus system restore point
14-10-2015 19:13:33 Removed SimLab Composer 6
15-10-2015 20:11:57 Installed AVG 2016
15-10-2015 20:14:24 Installed AVG
17-10-2015 00:44:08 Removed AVG

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 10:25 - 2013-08-22 10:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0797F62E-F293-43DF-B84C-EDC9CAAF96D9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)
Task: {185C6CCC-CF45-495F-A6AB-4BAA46470A81} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-24] (Dropbox, Inc.)
Task: {245AE948-B516-4ABD-B910-1B9D6BB97E25} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-24] (Dropbox, Inc.)
Task: {59861C83-967C-4CBA-B83C-0321AC08B2C0} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-10-13] (AVAST Software)
Task: {5E123958-32C2-4560-8EB6-C58C99620985} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {5E583C03-7746-4B43-8016-AA2136400018} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {84613B3F-3E75-41E6-B718-302C96CC1533} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-13] (Microsoft Corporation)
Task: {9146195D-008A-447B-8D4D-BA4F5CBA80A6} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe
Task: {9D4B3BEB-BDBF-4060-A352-7DB897A2C893} - \GoodScene -> No File <==== ATTENTION
Task: {C38FBF55-120A-4201-B1A6-BAF82C244667} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-12] (Google Inc.)
Task: {DB6AB4A3-8A09-4493-BCC9-FD00EDE2EB19} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DCB5B12A-DC80-4CAF-B35D-7701ABE7D5DC} - System32\Tasks\{AF6A4D77-905F-462A-9E67-28275D63DA22} => pcalua.exe -a "C:\ProgramData\Battle.net\Agent\Blizzard Uninstaller.exe" -c –lang=esES –uid=battle.net –displayname="Battle.net"
Task: {DF5B23E5-A4C1-4BCD-A6BE-2537112B6B91} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
Task: {E95C7B80-F83D-45C0-BDDB-B9C4A3EA0BFB} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\CompatTelRunner.exe [2015-09-19] (Microsoft Corporation)
Task: {F47306D8-5486-4DC7-B537-6EDF3D7192BC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-12] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoodScene.job => c:\programdata\{1e623558-7e5e-9b3e-1e62-235587e5d561}\rld-wwe15c.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-08-21 22:09 - 2015-08-21 22:09 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-06-19 09:14 - 2015-06-19 09:14 - 00268280 _____ () C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\sldBodyDiffu.dll
2015-10-13 16:59 - 2015-10-13 16:59 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-10-13 16:59 - 2015-10-13 16:59 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-10-16 16:15 - 2015-10-16 16:15 - 02994032 _____ () C:\Program Files\AVAST Software\Avast\defs\15101601\algo.dll
2015-10-17 11:10 - 2015-10-17 11:10 - 00071168 _____ () c:\users\matias\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfnin3b.dll
2015-10-16 22:00 - 2015-09-23 20:07 - 00012800 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick.2\qtquick2plugin.dll
2015-10-16 22:00 - 2015-09-23 20:07 - 00779776 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-10-16 22:00 - 2015-09-23 20:07 - 00056320 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-10-16 22:00 - 2015-09-23 20:07 - 00012288 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Window.2\windowplugin.dll
2015-10-15 15:24 - 2015-10-08 21:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll
2015-10-15 15:24 - 2015-10-08 21:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll
2015-10-13 16:59 - 2015-10-13 16:59 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-10-15 20:05 - 2015-10-15 20:03 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Matias\OneDrive:ms-properties
AlternateDataStreams: C:\Users\Matias\SkyDrive:ms-properties

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1940331569-2220852289-466042613-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Matias\Pictures\4466977276_f75358de53_b.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [TCP Query User{EEC3D308-CCA3-4D29-A7EB-630936E15997}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{48D6BD3B-213B-43F3-A6CA-79E29FDC1806}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [TCP Query User{D028B87E-E74C-40D9-8214-A9A5CDBC9480}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{3958C216-F5DC-4993-B2BD-97660905FDD6}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{CC000EB1-B52F-4CFE-AE4A-D41A56A75438}] => (Allow) LPort=1688
FirewallRules: [TCP Query User{6FD1520B-9442-4D3B-B0D7-1930F748AB12}C:\program files (x86)\formz 8.5 beta\formz.exe] => (Block) C:\program files (x86)\formz 8.5 beta\formz.exe
FirewallRules: [UDP Query User{E1D2CE95-58F8-4836-A80E-BD51324BCC8B}C:\program files (x86)\formz 8.5 beta\formz.exe] => (Block) C:\program files (x86)\formz 8.5 beta\formz.exe
FirewallRules: [TCP Query User{E80E99E8-7942-45AE-A902-A2014AB976AD}C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe] => (Allow) C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe
FirewallRules: [UDP Query User{26450F4B-C93D-4ABB-84FC-7B073CE06DFD}C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe] => (Allow) C:\program files\e frontier\shade 3d ver.14e\bin\shade.exe
FirewallRules: [TCP Query User{AC4002C5-34C3-4F0D-B4E9-14E947AE7C05}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{964F631B-4FFA-45CC-8E45-1AE955705B14}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{58AC8D01-5007-427A-8C7C-514BFD40AF7A}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{E7A819CA-AA97-49C0-A4D5-FA4A8013B3ED}] => (Allow) LPort=12292
FirewallRules: [{AAD19023-2EBF-4809-8CB0-50DB7E2DDAB5}] => (Allow) C:\Program Files (x86)\FrostWire 6\FrostWire.exe
FirewallRules: [{1CFAD418-A123-4264-8F7E-9453B1AE2D67}] => (Allow) C:\Program Files (x86)\FrostWire 6\FrostWire.exe
FirewallRules: [{F77178FB-231B-47EA-96C9-001C9CE79089}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot5.exe
FirewallRules: [{C9288178-4935-4F68-9581-DBFA6DD161E2}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot_daemon.exe
FirewallRules: [{3A0DB351-0F89-4C1D-B3FB-1C85C1A2096F}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot5.exe
FirewallRules: [{DB4E4122-7BD4-431A-95AF-D52ABF093417}] => (Allow) C:\Program Files\KeyShot5\bin\keyshot_daemon.exe
FirewallRules: [TCP Query User{8AFD20F2-349D-45A0-9502-8B67A31CCA96}C:\cryengine\bin64\editor.exe] => (Allow) C:\cryengine\bin64\editor.exe
FirewallRules: [UDP Query User{B6C47D23-B34E-492D-8A73-9F1A4B7C75E2}C:\cryengine\bin64\editor.exe] => (Allow) C:\cryengine\bin64\editor.exe
FirewallRules: [TCP Query User{33788017-385E-4EB7-AC71-44ADABBABFF4}C:\program files\maxon\cinema 4d r16\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r16\cinema 4d.exe
FirewallRules: [UDP Query User{6E786E5E-34B7-40B7-AFE5-2B8646F7572F}C:\program files\maxon\cinema 4d r16\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r16\cinema 4d.exe
FirewallRules: [{8EAF8EF6-275B-4720-816C-DC00BEB72B4A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A1B4B940-994A-46DA-8FA7-13DB02B3EDD6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{91EEFF08-08F0-429A-B001-2294B386A8A6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3709E212-6105-44B9-94C1-7A295F27221A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{076761FF-CBEE-48EC-8847-4E488AFD1E9F}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe
FirewallRules: [UDP Query User{2BC88200-0DFC-42B4-9C3D-D16E1BBA07BE}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win64\marvelheroes2015.exe
FirewallRules: [TCP Query User{980F31F7-5775-44B8-A30E-545DA19A8587}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe
FirewallRules: [UDP Query User{D169DD73-1590-44DE-8C75-F3EBB60B0676}C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe] => (Allow) C:\program files (x86)\gazillion entertainment\marvel heroes game\unrealengine3\binaries\win32\marvelheroes2015.exe
FirewallRules: [{F9BF3757-0C34-4D16-BEF3-07138BD87017}] => (Allow) C:\Program Files\Luxology\modo\901\modo.exe
FirewallRules: [{447A550D-1819-441B-95A8-330B5B727B13}] => (Allow) C:\Program Files\Luxology\modo\901\modo.exe
FirewallRules: [TCP Query User{5FC64AC7-9C7B-4D69-8A5C-FC50DBAC7D29}C:\program files (x86)\champions online_en\champions online\live\gameclient.exe] => (Allow) C:\program files (x86)\champions online_en\champions online\live\gameclient.exe
FirewallRules: [UDP Query User{83312C3B-2986-4211-A357-5AA9DFD01680}C:\program files (x86)\champions online_en\champions online\live\gameclient.exe] => (Allow) C:\program files (x86)\champions online_en\champions online\live\gameclient.exe
FirewallRules: [{C3ACA67B-2158-486C-886C-8C8C89B83429}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\ArchiCAD.exe
FirewallRules: [{C43905EA-08F7-4EAE-83CA-EF4BA5AA6306}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\ArchiCAD.exe
FirewallRules: [{8548189A-4FFA-4A3D-A37D-370ACEEAE6D1}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\CineRender\CineRender 64bit.exe
FirewallRules: [{3EDA12F6-5A96-458D-8EC9-12D725DECAA2}] => (Allow) C:\Program Files\GRAPHISOFT\ArchiCAD 19\CineRender\CineRender 64bit.exe
FirewallRules: [{469BB8B1-62F4-49F3-B7B8-4CBAF4914EDD}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe
FirewallRules: [{B69AB0FF-E8E9-45B2-A51C-85EB99B9E717}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe
FirewallRules: [{D58F5E10-E12C-4E27-839A-66A2E94B5698}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64.exe
FirewallRules: [{E2F3C055-1E71-4562-8927-1001F936574B}] => (Allow) C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64.exe
FirewallRules: [{F90D4400-D089-43C4-9B76-47B26EB25C6C}] => (Allow) C:\Program Files\Autodesk\Autodesk SketchBook Pro 2016\SketchBookPro.exe
FirewallRules: [{AD886A27-17B7-4E58-B569-10D143265C3D}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{43BAB051-2078-4A46-B1E1-3F22684C9E60}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{07807D46-9705-4DB3-9934-310491CB7136}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{AB6454B8-6C4F-45FB-B15E-BD7F76EC77D3}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{FA3B5C03-D0DD-44D5-88C1-AEAD766113F1}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe
FirewallRules: [{D71C8189-57C3-4F3D-84DC-FAF7A9A41A42}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe
FirewallRules: [{29B25815-F3D3-48AF-AEEF-927868680A32}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe
FirewallRules: [{E0556C60-314F-4AE0-B3A7-64FB5D6623B8}] => (Allow) C:\Program Files\Knald Technologies\Knald Beta\knald.exe
FirewallRules: [{96A62610-FE76-4273-BB59-C3922E2D0F90}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5FF749C8-F8B5-4490-9792-09E20121EE12}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{88C2FE69-43CE-4B45-96C8-673F67453A20}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DFD4F057-563F-4260-95BF-5ED98CCD4C0D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D04259BD-8D6F-4515-A6D3-3A3F0DDA41AA}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe
FirewallRules: [{F3BE14F5-A190-4B4E-8FDD-C3D97B42895A}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe
FirewallRules: [TCP Query User{058B2D58-4692-46E3-A84B-0589A72F1C62}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe
FirewallRules: [UDP Query User{ECF77F81-D51D-42BE-A398-493E92B2059B}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe
FirewallRules: [TCP Query User{F1DA0B33-C182-4D33-9B8E-E249CA8F5C1C}C:\program files\artlantis studio 6\artlantis studio.exe] => (Allow) C:\program files\artlantis studio 6\artlantis studio.exe
FirewallRules: [UDP Query User{6054BC27-61FA-4403-9D9D-F68C8AC12DA6}C:\program files\artlantis studio 6\artlantis studio.exe] => (Allow) C:\program files\artlantis studio 6\artlantis studio.exe
FirewallRules: [TCP Query User{A8EA19CD-D078-440A-A21C-A45DC9A0D987}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe
FirewallRules: [UDP Query User{7FB86FFB-81B6-4E56-913E-A4D9BF3ED586}C:\program files\artlantis studio 6\artlantis license manager.exe] => (Block) C:\program files\artlantis studio 6\artlantis license manager.exe
FirewallRules: [TCP Query User{929CBCD5-D0F3-42D4-B0A6-80458D6180BB}C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe
FirewallRules: [UDP Query User{B17C5663-949D-47AC-94B0-28240347AFA2}C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\engine\win64\dev\stingray_win64_dev_x64.exe
FirewallRules: [TCP Query User{DAB70CFE-C1E0-4BD8-9EDD-503D11F9FA4C}C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe
FirewallRules: [UDP Query User{37F2EFE9-78D2-4ABD-B6A5-93CC90045735}C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe] => (Allow) C:\program files\autodesk\stingray\1.0.31.0\editor\backend\stingrayeditorbackend.exe
FirewallRules: [TCP Query User{8FDE71B0-F4A1-4017-9665-BCC23A5E8529}C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe] => (Allow) C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe
FirewallRules: [UDP Query User{44389E2A-E90F-4677-8819-2C4702538F97}C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe] => (Allow) C:\program files\allegorithmic\substance designer\5\bin64\substance_designer.exe
FirewallRules: [TCP Query User{6CB2B3B0-244F-49A7-8EB5-23F2C7E6181C}C:\program files\allegorithmic\substance painter\substance painter.exe] => (Allow) C:\program files\allegorithmic\substance painter\substance painter.exe
FirewallRules: [UDP Query User{C655077B-043A-4E7E-B629-ADA669D3A291}C:\program files\allegorithmic\substance painter\substance painter.exe] => (Allow) C:\program files\allegorithmic\substance painter\substance painter.exe
FirewallRules: [TCP Query User{2801199D-C799-4369-8D8F-38DE9311B338}C:\program files\formz 8\formz 8.5 pro 64\formz.exe] => (Allow) C:\program files\formz 8\formz 8.5 pro 64\formz.exe
FirewallRules: [UDP Query User{56A8B4F3-1BA3-4042-BF0B-C8B0E9AF002A}C:\program files\formz 8\formz 8.5 pro 64\formz.exe] => (Allow) C:\program files\formz 8\formz 8.5 pro 64\formz.exe
FirewallRules: [TCP Query User{F6CA3CD1-2915-41B0-B9FC-98AD9A1C82C0}C:\program files\vectorworks2015\vectorworks2015.exe] => (Allow) C:\program files\vectorworks2015\vectorworks2015.exe
FirewallRules: [UDP Query User{AA94C76E-73A1-4313-8EF1-361E5D483065}C:\program files\vectorworks2015\vectorworks2015.exe] => (Allow) C:\program files\vectorworks2015\vectorworks2015.exe
FirewallRules: [TCP Query User{DAEBAD42-302B-4A71-9703-B6F90694DF36}C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe] => (Allow) C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe
FirewallRules: [UDP Query User{0E002FC8-9E33-4C8A-92C8-FA59FE475398}C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe] => (Allow) C:\program files\vectorworks2015\renderworks\cinerender 64bit.exe
FirewallRules: [TCP Query User{A0027E5C-E79F-4E7A-AEAB-9051404EF792}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [UDP Query User{08B67559-A2D7-42F6-8A5A-CEE3B09DF549}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [TCP Query User{AF9A1A76-7D3C-4DF9-909B-41F6FBA73ADC}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe
FirewallRules: [UDP Query User{44C777AD-0D6D-46EF-B77A-1EEFF74DE5F6}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe
FirewallRules: [TCP Query User{32261600-8A68-4979-B8D9-17CDEC7F5D34}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe
FirewallRules: [UDP Query User{2F8AA8D8-5BC3-4093-A17A-A8C9C6EC1468}C:\program files\maxon\cinema 4d r17\cinema 4d.exe] => (Allow) C:\program files\maxon\cinema 4d r17\cinema 4d.exe
FirewallRules: [TCP Query User{2F3C8C21-C04C-4DF0-B868-70B4F543D34A}C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{8E412EDE-8002-47C6-9BA1-5FF95C4A922A}C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\win64\ue4editor.exe
FirewallRules: [TCP Query User{2CBC8F10-A1D6-44F1-845B-5E4171BEA3ED}C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [UDP Query User{65A1E2B0-A496-4724-838F-A2995766250D}C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\4.9\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [TCP Query User{53C2258F-D19A-461F-8A79-D553832021FA}C:\cryengine\bin\win_x64\editor.exe] => (Allow) C:\cryengine\bin\win_x64\editor.exe
FirewallRules: [UDP Query User{353FA17E-74C0-4A52-A60C-61F7FD702917}C:\cryengine\bin\win_x64\editor.exe] => (Allow) C:\cryengine\bin\win_x64\editor.exe
FirewallRules: [{F2920C9C-2ED4-49F9-B03C-051EF38B7C1C}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\zw3d.exe
FirewallRules: [{10811460-7962-4587-987A-318C87D23A0E}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\zw3d.exe
FirewallRules: [{9ED05213-F350-441E-A4F3-A224F09A10E5}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\ZwAppLm.exe
FirewallRules: [{9264AE2D-3EE2-4EF1-A7BE-1979D29EBA32}] => (Allow) C:\Program Files\ZWSOFT\ZW3D 2015 Eng (x64)\ZwAppLm.exe
FirewallRules: [TCP Query User{8C2B9247-66BF-458D-8914-38C40C201666}C:\program files\3d-coat-v4.5\3d-coatdx64c.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64c.exe
FirewallRules: [UDP Query User{FA7F2B14-5ED5-47E9-82D9-FF2427684344}C:\program files\3d-coat-v4.5\3d-coatdx64c.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64c.exe
FirewallRules: [TCP Query User{93BC8612-1A50-43ED-913E-73D566DE1DD9}C:\program files\3d-coat-v4.5\3d-coatdx64s.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64s.exe
FirewallRules: [UDP Query User{327A4E69-4DC2-4878-A9FA-7E7A8D4BBA77}C:\program files\3d-coat-v4.5\3d-coatdx64s.exe] => (Allow) C:\program files\3d-coat-v4.5\3d-coatdx64s.exe
FirewallRules: [{511F4A76-DBFB-4D26-8116-0B429F8B68C2}] => (Allow) C:\Program Files\Marvelous Designer 5 Personal\MD5_Personal_x64.exe
FirewallRules: [{D391F82F-7CB5-41A5-9F81-4A41A030A8F6}] => (Allow) C:\Program Files\Marvelous Designer 5 Personal\MD5_Personal_x64.exe
FirewallRules: [{10A5539C-3EAD-4294-A531-37C9B0A29AB2}] => (Block) %ProgramFiles%\Marvelous Designer 5 Personal\MD5_Personal_x64.exe
FirewallRules: [{2640C204-E6F1-44AC-9F45-28FBA6A350B5}] => (Block) %ProgramFiles%\Marvelous Designer 5 Personal\MD5_Personal_x64.exe
FirewallRules: [{2B8CA8B0-0DA3-412D-9812-F12FC3FC784A}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{22A148A0-C34B-4253-AF86-AFBAA2962A48}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{B2DFEBAD-3427-4078-B845-72F7BB45A5D1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{01BF4DCB-7F77-46C0-9060-37B043771F81}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{0B62B32B-0597-4D07-8E6E-5872A694FBED}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{6E10482A-E6D2-4B4C-8522-AA51F27C2583}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/17/2015 11:10:05 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (10/17/2015 11:08:51 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (10/17/2015 01:27:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 10d4

Start Time: 01d1089365ed200d

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 5b775954-7487-11e5-829e-002421a85da4

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (10/17/2015 01:25:30 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (10/17/2015 01:25:30 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (10/17/2015 01:04:31 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 118c

Start Time: 01d1089011af789f

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 092766fa-7484-11e5-829d-002421a85da4

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (10/17/2015 12:59:42 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (10/17/2015 12:59:42 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (10/17/2015 12:51:19 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (10/17/2015 12:44:19 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.


System errors:
=============
Error: (10/17/2015 01:45:02 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgsvc service.

Error: (10/17/2015 01:29:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (10/17/2015 01:29:31 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The SQL Server VSS Writer service terminated unexpectedly. It has done this 1 time(s).

Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The ArcGIS License Manager service terminated unexpectedly. It has done this 1 time(s).

Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Siemens PLM License Server service terminated unexpectedly. It has done this 1 time(s).

Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The McNeel Update Service 5.0 service terminated unexpectedly. It has done this 1 time(s).

Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Windows Phone IP over USB Transport (IpOverUsbSvc) service terminated unexpectedly. It has done this 1 time(s).

Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Foundry License Server service terminated unexpectedly. It has done this 1 time(s).

Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The COMODO Dragon Update Service service terminated unexpectedly. It has done this 1 time(s).

Error: (10/17/2015 01:29:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Servicio Bonjour service terminated unexpectedly. It has done this 1 time(s).


CodeIntegrity:
===================================
Date: 2015-08-31 10:57:33.161
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-31 10:57:32.505
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-31 10:57:31.677
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-31 10:57:29.990
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\DriverStore\Temp\{01c61f55-ecd1-544d-84fe-a12bb9f43e68}\B187676\SET9C76.tmp because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: AMD Phenom™ II X4 810 Processor
Percentage of memory in use: 31%
Total physical RAM: 8191.18 MB
Available physical RAM: 5632.56 MB
Total Virtual: 9343.18 MB
Available Virtual: 6813.15 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.5 GB) (Free:585.85 GB) NTFS ==>[drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 4637E82B)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================