Possible Bandwidth Stealing Virus [Solved]

Hi Satchfan,

Here's the log file of ComboFix.

ComboFix 16-02-09.01 - comp 02/13/2016   8:40.1.2 - x86
Microsoft Windows 7 Home Basic   6.1.7600.0.1252.1.1033.18.1480.415 [GMT 8:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition *Disabled/Updated* {4D41356F-32AD-7C42-C820-63775EE4F413}
SP: AVG AntiVirus Free Edition *Disabled/Updated* {F620D48B-1497-73CC-F290-58052563BEAE}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1455285491.bdinstall.bin
c:\programdata\1455285494.bdinstall.bin
c:\windows\security\Database\tmp.edb
.
.
(((((((((((((((((((((((((   Files Created from 2016-01-13 to 2016-02-13  )))))))))))))))))))))))))))))))
.
.
2016-02-13 00:46 . 2016-02-13 00:46    ——–    d—–w-    c:\users\Default\AppData\Local\temp
2016-02-12 10:42 . 2016-02-12 14:55    ——–    d—–w-    c:\program files\Mozilla Maintenance Service
2016-02-12 04:45 . 2016-02-12 13:56    ——–    d—–w-    C:\FRST
2016-02-11 23:14 . 2016-02-12 13:41    ——–    d—–w-    C:\AdwCleaner
2016-02-09 11:24 . 2016-02-09 11:24    ——–    d—–w-    C:\found.001
2016-02-07 11:03 . 2016-02-07 11:03    ——–    d—–w-    C:\$AVG
2016-02-07 10:55 . 2016-02-13 00:33    ——–    d—–w-    c:\programdata\MFAData
2016-02-07 10:35 . 2016-02-12 15:08    ——–    d—–w-    c:\program files\AVG
2016-02-07 10:35 . 2016-02-07 10:35    ——–    d–h–w-    c:\programdata\Common Files
2016-02-07 10:35 . 2016-02-12 15:08    ——–    d—–w-    c:\programdata\Avg
2016-02-07 05:52 . 2009-07-14 15:27    1461992    —-a-w-    c:\windows\system32\WdfCoInstaller01009.dll
2016-02-04 23:04 . 2016-02-04 23:04    ——–    d—–w-    c:\program files\CPUID
2016-02-04 10:58 . 2016-02-13 00:32    170200    —-a-w-    c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-02-04 10:57 . 2016-02-04 10:57    ——–    d—–w-    c:\program files\Malwarebytes Anti-Malware
2016-02-04 10:57 . 2016-02-04 10:57    ——–    d—–w-    c:\programdata\Malwarebytes
2016-02-04 10:57 . 2015-10-05 01:50    51928    —-a-w-    c:\windows\system32\drivers\mwac.sys
2016-02-04 10:57 . 2015-10-05 01:50    94936    —-a-w-    c:\windows\system32\drivers\mbamchameleon.sys
2016-02-04 10:57 . 2015-10-05 01:50    23256    —-a-w-    c:\windows\system32\drivers\mbam.sys
2016-02-04 10:48 . 2016-02-04 10:48    796864    —-a-w-    c:\windows\system32\FlashPlayerApp.exe
2016-02-04 10:48 . 2016-02-04 10:48    142528    —-a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2016-02-04 10:48 . 2016-02-13 05:29    ——–    d—–w-    c:\windows\system32\Macromed
2016-02-04 10:44 . 2016-02-04 10:44    ——–    d—–w-    c:\programdata\Package Cache
2016-02-03 11:21 . 2016-02-03 11:21    62576    —-a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{2149CDCD-C9F0-485C-A396-CB7B8BF3CAF5}\offreg.3028.dll
2016-01-24 23:54 . 2016-02-08 08:48    ——–    d—–w-    C:\found.000
2016-01-24 00:58 . 2016-01-24 00:58    ——–    d—–w-    c:\program files\Microsoft.NET
2016-01-23 17:58 . 2016-02-07 11:04    ——–    d-sh–w-    c:\windows\Installer
2016-01-23 17:56 . 2016-02-07 11:04    ——–    d—–w-    c:\program files\Common Files\AV
2016-01-23 17:45 . 2015-12-16 02:15    9014120    —-a-w-    c:\programdata\Microsoft\Windows Defender\Definition Updates\{2149CDCD-C9F0-485C-A396-CB7B8BF3CAF5}\mpengine.dll
2016-01-23 17:45 . 2015-12-02 05:25    247976    ——w-    c:\windows\system32\MpSigStub.exe
2016-01-23 17:29 . 2016-02-13 00:32    ——–    d—–w-    c:\program files\Steam
2016-01-23 17:29 . 2016-02-08 02:22    ——–    d—–w-    c:\program files\Common Files\Steam
2016-01-23 17:04 . 2016-02-12 18:42    65536    —-a-w-    c:\windows\system32\spu_storage.bin
2016-01-23 17:00 . 2016-01-23 17:00    0    —-a-w-    c:\windows\ativpsrm.bin
2016-01-23 16:59 . 2016-01-24 09:26    ——–    d—–w-    c:\windows\system32\DAX2
2016-01-23 16:48 . 2016-01-24 09:26    ——–    d—–w-    c:\program files\Common Files\ATI Technologies
2016-01-23 16:41 . 2016-01-23 16:41    73928    —-a-w-    c:\windows\system32\drivers\amd_sata.sys
2016-01-23 16:41 . 2016-01-23 16:41    36040    —-a-w-    c:\windows\system32\drivers\amd_xata.sys
2016-01-23 16:40 . 2016-01-23 16:40    95808    —-a-w-    c:\windows\system32\DelayAPO.dll
2016-01-23 16:40 . 2016-01-23 16:40    87576    —-a-w-    c:\windows\system32\drivers\AtihdW73.sys
2016-01-23 16:39 . 2016-01-23 16:39    84248    —-a-w-    c:\windows\system32\drivers\ssudbus.sys
2016-01-23 16:36 . 2016-01-23 16:36    85616    —-a-w-    c:\windows\system32\RtNicProp32.dll
2016-01-23 16:36 . 2016-01-23 16:36    769280    —-a-w-    c:\windows\system32\drivers\Rt86win7.sys
2016-01-23 16:36 . 2016-01-23 16:36    109648    —-a-w-    c:\windows\system32\RTNUninst32.dll
2016-01-23 16:12 . 2016-01-23 16:12    31832    —-a-w-    c:\windows\system32\drivers\DrvAgent32.sys
2016-01-23 08:47 . 2016-01-31 07:19    ——–    d—–w-    c:\programdata\AVAST Software
2016-01-23 08:43 . 2016-01-23 17:11    ——–    d—–w-    c:\program files\Google
2016-01-23 08:39 . 2016-01-24 09:26    ——–    d—–w-    c:\program files\Realtek
2016-01-23 08:39 . 2016-01-23 08:39    ——–    d–h–w-    c:\program files\InstallShield Installation Information
2016-01-23 07:12 . 2016-02-07 14:52    ——–    d—–w-    c:\windows\system32\wbem\Performance
2016-01-23 07:07 . 2016-02-12 13:38    ——–    d—–w-    c:\users\comp
2016-01-23 07:06 . 2016-01-23 07:06    ——–    d—–w-    C:\Recovery
2016-01-22 07:13 . 2016-01-22 07:13    198576    —-a-w-    c:\windows\system32\drivers\avgmfx86.sys
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-01-08 02:49 . 2016-01-08 02:49    207792    —-a-w-    c:\windows\system32\drivers\avgidshx.sys
2016-01-08 02:49 . 2016-01-08 02:49    23472    —-a-w-    c:\windows\system32\drivers\avgunivx.sys
2016-01-05 08:18 . 2016-01-05 08:18    257456    —-a-w-    c:\windows\system32\drivers\avgidsdriverx.sys
2015-12-04 06:27 . 2015-12-04 06:27    37296    —-a-w-    c:\windows\system32\drivers\avgrkx86.sys
2015-11-20 00:05 . 2015-11-20 00:05    31664    —-a-w-    c:\windows\system32\drivers\avgidsshimx.sys
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2016-02-04 3014224]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI.exe" [2016-01-23 7745792]
"AvgUi"="c:\program files\AVG\Framework\Common\avguirnx.exe" [2016-01-12 179624]
"AVG_UI"="c:\program files\AVG\Av\avuirunnerx.exe" [2016-02-01 25512]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO32.SYS [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\Av\avgidsagent.exe [2016-02-01 3881184]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2016-01-23 84248]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [2016-01-23 31832]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2016-01-23 73928]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2016-01-23 36040]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2016-01-08 207792]
S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2015-08-14 308656]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2015-12-04 37296]
S0 Avgunivx;AVG Universal Driver;c:\windows\system32\DRIVERS\avgunivx.sys [2016-01-08 23472]
S1 Avgdiskx;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiskx.sys [2015-11-06 149936]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2016-01-05 257456]
S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2015-11-20 31664]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2015-10-21 229296]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2015-10-07 231856]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2016-01-23 259072]
S2 avgsvc;AVG Service;c:\program files\AVG\Framework\Common\avgsvcx.exe [2016-01-12 865704]
S2 avgwd;AVG WatchDog;c:\program files\AVG\Av\avgwdsvcx.exe [2016-02-01 561104]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-10-05 1513784]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-10-05 1135416]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2016-01-23 87576]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-10-05 23256]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2016-02-13 170200]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-10-05 51928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2016-01-23 769280]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation    REG_MULTI_SZ       SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc
.
Contents of the 'Scheduled Tasks' folder
.
2016-02-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-04 10:48]
.
.
——- Supplementary Scan ——-
.
TCP: DhcpNameServer = [removed] 192.168.0.1
FF - ProfilePath - c:\users\comp\AppData\Roaming\Mozilla\Firefox\Profiles\8gptxh2g.default\
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-SafeZone 1.46.1990.139 - c:\program files\AVAST Software\SZBrowser\Launcher.exe
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_20_0_0_286_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_20_0_0_286_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2016-02-13  08:47:38
ComboFix-quarantined-files.txt  2016-02-13 00:47
.
Pre-Run: 458,357,190,656 bytes free
Post-Run: 458,268,532,736 bytes free
.
- - End Of File - - ADF274B6DB13560A736B08A545929D8E
A36C5E4F47E84449FF07ED3517B43A31
 

Hi Satchfan,

here are the logs you requested:

Fix result of Farbar Recovery Scan Tool (x86) Version:07-02-2016
Ran by [removed] (2016-02-13 23:28:03) Run:3
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal

==============================================

fixlist content:
*****************
R1 HWiNFO32; \??\C:\Windows\system32\drivers\HWiNFO32.SYS [X]
*****************

HWiNFO32 => service removed successfully.

==== End of Fixlog 23:28:03 ====

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-02-2016
Ran by [removed] (administrator) on KUUHAKU-PC (13-02-2016 23:31:30)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Microsoft Windows 7 Home Basic  (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(Valve Corporation) C:\Program Files\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\PING.EXE
() C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
(Valve Corporation) C:\Program Files\Steam\GameOverlayUI.exe
(Farbar) C:\Users\comp\Desktop\FRST[1].exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\comp\Desktop\FRST[1].exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [7745792 2016-01-24] (Realtek Semiconductor)
HKLM\…\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [179624 2016-01-12] (AVG Technologies CZ, s.r.o.)
HKLM\…\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3873704 2016-02-01] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-1597179411-2372084101-3668902816-1000\…\Run: [Steam] => C:\Program Files\Steam\steam.exe [3014224 2016-02-05] (Valve Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] [removed] 192.168.0.1
Tcpip\..\Interfaces\{C4E1DE4D-B1A7-49C4-A018-1C8BC3C6D0CE}: [DhcpNameServer] [removed] 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1597179411-2372084101-3668902816-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar;=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar;=msnhome
HKU\S-1-5-21-1597179411-2372084101-3668902816-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar;=iesearch

FireFox:
========
FF ProfilePath: C:\Users\comp\AppData\Roaming\Mozilla\Firefox\Profiles\8gptxh2g.default
FF Extension: Disable Ads - C:\Users\comp\AppData\Roaming\Mozilla\Firefox\Profiles\8gptxh2g.default\Extensions\@com.virtualjame.disableads.xpi [2016-02-13]

Chrome:
=======
CHR Profile: C:\Users\comp\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\comp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-24]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3881184 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [865704 2016-01-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [561104 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amd_sata; C:\Windows\System32\DRIVERS\amd_sata.sys [73928 2016-01-24] (Advanced Micro Devices)
R0 amd_xata; C:\Windows\System32\DRIVERS\amd_xata.sys [36040 2016-01-24] (Advanced Micro Devices)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [149936 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [257456 2016-01-05] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [207792 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [198576 2016-01-22] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [37296 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
R0 Avgunivx; C:\Windows\System32\DRIVERS\avgunivx.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-02-13] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\comp\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-13 23:31 - 2016-02-13 23:32 - 00007662 _____ C:\Users\comp\Desktop\FRST.txt
2016-02-13 23:28 - 2016-02-13 23:28 - 00000465 _____ C:\Users\comp\Desktop\Fixlog.txt
2016-02-13 16:26 - 2009-07-14 09:20 - 03954768 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpx.exe
2016-02-13 16:26 - 2009-07-14 09:17 - 00507568 _____ (Microsoft Corporation) C:\Windows\system32\winloadp.exe
2016-02-13 16:25 - 2016-02-13 16:25 - 00000000 ____D C:\Windows\system32\src
2016-02-13 08:47 - 2016-02-13 08:47 - 00011708 _____ C:\ComboFix.txt
2016-02-13 08:38 - 2016-02-13 08:47 - 00000000 ____D C:\Qoobox
2016-02-13 08:38 - 2016-02-13 08:46 - 00000000 ____D C:\Windows\erdnt
2016-02-13 08:38 - 2011-06-26 14:45 - 00256000 _____ C:\Windows\PEV.exe
2016-02-13 08:38 - 2010-11-08 01:20 - 00208896 _____ C:\Windows\MBR.exe
2016-02-13 08:38 - 2009-04-20 12:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-02-13 08:38 - 2000-08-31 08:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-02-13 08:38 - 2000-08-31 08:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-02-13 08:38 - 2000-08-31 08:00 - 00098816 _____ C:\Windows\sed.exe
2016-02-13 08:38 - 2000-08-31 08:00 - 00080412 _____ C:\Windows\grep.exe
2016-02-13 08:38 - 2000-08-31 08:00 - 00068096 _____ C:\Windows\zip.exe
2016-02-13 08:34 - 2016-02-13 08:36 - 05657611 ____R (Swearware) C:\Users\comp\Desktop\ComboFix.exe
2016-02-12 22:56 - 2016-02-12 22:56 - 00001121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-12 22:56 - 2016-02-12 22:56 - 00001109 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-02-12 22:41 - 2016-02-12 22:41 - 172254235 _____ C:\Windows\MEMORY.DMP
2016-02-12 22:41 - 2016-02-12 22:41 - 00144920 _____ C:\Windows\Minidump\021216-25864-01.dmp
2016-02-12 22:39 - 2016-02-12 22:39 - 00006576 ____N C:\bootsqm.dat
2016-02-12 22:16 - 2016-02-12 22:16 - 00000119 _____ C:\Users\comp\Documents\Important.txt
2016-02-12 21:50 - 2016-02-12 21:48 - 01721344 _____ (Farbar) C:\Users\comp\Desktop\FRST[1].exe
2016-02-12 18:57 - 2016-02-12 18:57 - 00000000 ____D C:\Users\comp\AppData\Local\Macromedia
2016-02-12 18:52 - 2016-02-12 18:57 - 00000000 ____D C:\Users\comp\AppData\Local\Adobe
2016-02-12 18:42 - 2016-02-12 22:55 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-02-12 18:42 - 2016-02-12 18:48 - 00000000 ____D C:\Users\comp\AppData\Local\Mozilla
2016-02-12 18:42 - 2016-02-12 18:42 - 00000000 ____D C:\Users\comp\AppData\Roaming\Mozilla
2016-02-12 18:41 - 2016-02-12 22:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-02-12 12:45 - 2016-02-13 23:31 - 00000000 ____D C:\FRST
2016-02-12 07:14 - 2016-02-12 21:41 - 00000000 ____D C:\AdwCleaner
2016-02-12 07:13 - 2016-02-12 07:14 - 01609032 _____ (Malwarebytes) C:\Users\comp\Downloads\JRT.exe
2016-02-12 07:13 - 2016-02-12 07:14 - 01508352 _____ C:\Users\comp\Downloads\adwcleaner_5.033.exe
2016-02-10 11:14 - 2016-02-10 11:15 - 00000000 ____D C:\Windows\system32\config\mybackup
2016-02-09 19:24 - 2016-02-09 19:24 - 00000000 ____D C:\found.001
2016-02-09 07:04 - 2016-02-13 16:15 - 00000000 ____D C:\Windows\pss
2016-02-08 15:42 - 2016-02-09 23:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp
2016-02-07 19:05 - 2016-02-12 23:08 - 00000000 ____D C:\Users\comp\AppData\Roaming\AVG
2016-02-07 19:04 - 2016-02-12 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-02-07 19:04 - 2016-02-07 19:04 - 00000000 ____D C:\Users\comp\AppData\Roaming\TuneUp Software
2016-02-07 19:03 - 2016-02-07 19:03 - 00000000 ____D C:\$AVG
2016-02-07 18:55 - 2016-02-13 21:51 - 00000000 ____D C:\ProgramData\MFAData
2016-02-07 18:55 - 2016-02-07 18:55 - 00000000 ____D C:\Users\comp\AppData\Local\MFAData
2016-02-07 18:46 - 2016-02-12 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-02-07 18:46 - 2016-02-07 18:46 - 00000832 _____ C:\Users\Public\Desktop\AVG.lnk
2016-02-07 18:35 - 2016-02-12 23:08 - 00000000 ____D C:\ProgramData\Avg
2016-02-07 18:35 - 2016-02-12 23:08 - 00000000 ____D C:\Program Files\AVG
2016-02-07 18:24 - 2016-02-09 20:35 - 00000000 ____D C:\Users\comp\AppData\Local\AvgSetupLog
2016-02-07 18:24 - 2016-02-08 15:41 - 00000000 ____D C:\Users\comp\AppData\Local\Avg
2016-02-07 15:18 - 2016-02-07 15:19 - 02946424 _____ (AVG Technologies CZ, s.r.o.) C:\Users\comp\Downloads\AVG_Protection_Free_698.exe
2016-02-07 13:52 - 2009-07-14 23:27 - 01461992 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2016-02-07 13:23 - 2016-02-08 16:41 - 00000000 ____D C:\Users\comp\AppData\Roaming\QuickScan
2016-02-05 07:04 - 2016-02-05 07:04 - 00000000 ____D C:\Program Files\CPUID
2016-02-05 05:38 - 2016-02-05 05:38 - 00000000 ____D C:\Users\comp\AppData\Roaming\Macromedia
2016-02-05 05:34 - 2016-02-05 05:34 - 00000000 ____D C:\Users\comp\AppData\Roaming\Adobe
2016-02-04 18:58 - 2016-02-13 22:49 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-04 18:57 - 2016-02-12 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-02-04 18:57 - 2016-02-04 18:57 - 00001064 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-02-04 18:57 - 2016-02-04 18:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-04 18:57 - 2016-02-04 18:57 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-02-04 18:57 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-02-04 18:57 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-02-04 18:57 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-02-04 18:51 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-02-04 18:51 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-02-04 18:51 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-02-04 18:51 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-02-04 18:51 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-02-04 18:51 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-02-04 18:51 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-02-04 18:51 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-02-04 18:51 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2016-02-04 18:51 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2016-02-04 18:51 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2016-02-04 18:51 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-02-04 18:51 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-02-04 18:51 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-02-04 18:51 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-02-04 18:51 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-02-04 18:51 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-02-04 18:51 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-02-04 18:51 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-02-04 18:51 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-02-04 18:51 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-02-04 18:51 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-02-04 18:51 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-02-04 18:51 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-02-04 18:51 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-02-04 18:51 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-02-04 18:51 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-02-04 18:51 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-02-04 18:51 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-02-04 18:51 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-02-04 18:51 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-02-04 18:51 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-02-04 18:51 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-02-04 18:51 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-02-04 18:51 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-02-04 18:51 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-02-04 18:51 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-02-04 18:51 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-02-04 18:51 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-02-04 18:51 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-02-04 18:51 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-02-04 18:51 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-02-04 18:51 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2016-02-04 18:51 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-02-04 18:51 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-02-04 18:51 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-02-04 18:51 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-02-04 18:51 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-02-04 18:51 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-02-04 18:51 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-02-04 18:51 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-02-04 18:51 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-02-04 18:51 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-02-04 18:51 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-02-04 18:51 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-02-04 18:51 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-02-04 18:51 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-02-04 18:51 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-02-04 18:51 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-02-04 18:51 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-02-04 18:51 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-02-04 18:51 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-02-04 18:51 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-02-04 18:51 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-02-04 18:51 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-02-04 18:51 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-02-04 18:51 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-02-04 18:51 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-02-04 18:51 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-02-04 18:51 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-02-04 18:51 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-02-04 18:51 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-02-04 18:51 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-02-04 18:51 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-02-04 18:51 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-02-04 18:51 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-02-04 18:51 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-02-04 18:51 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-02-04 18:51 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-02-04 18:51 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-02-04 18:51 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-02-04 18:51 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-02-04 18:51 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-02-04 18:51 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-02-04 18:51 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-02-04 18:51 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-02-04 18:51 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-02-04 18:51 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-02-04 18:51 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-02-04 18:51 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-02-04 18:51 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-02-04 18:48 - 2016-02-13 23:14 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-04 18:48 - 2016-02-13 13:29 - 00000000 ____D C:\Windows\system32\Macromed
2016-02-04 18:48 - 2016-02-04 18:48 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-02-04 18:48 - 2016-02-04 18:48 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-02-04 18:44 - 2016-02-04 18:44 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-01 23:23 - 2016-02-13 16:25 - 00002622 _____ C:\Windows\system32\readme.txt
2016-02-01 23:07 - 2016-02-13 16:25 - 00115712 _____ C:\Windows\system32\PatchPae2.exe
2016-01-31 20:39 - 2016-01-31 20:39 - 00000000 __RSH C:\MSDOS.SYS
2016-01-31 20:39 - 2016-01-31 20:39 - 00000000 __RSH C:\IO.SYS
2016-01-31 00:29 - 2016-02-13 23:13 - 00007602 _____ C:\Users\comp\AppData\Local\Resmon.ResmonCfg
2016-01-30 21:08 - 2016-01-30 21:08 - 00000000 ____D C:\Users\comp\AppData\Local\AVAST Software
2016-01-30 18:58 - 2016-01-30 18:58 - 00001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-01-25 21:05 - 2016-01-25 21:05 - 00000000 ____D C:\Users\comp\AppData\Local\AMD
2016-01-25 07:54 - 2016-02-08 16:48 - 00000000 ____D C:\found.000
2016-01-24 09:03 - 2016-02-12 22:41 - 00000000 ____D C:\Windows\Minidump
2016-01-24 02:26 - 2016-01-26 10:51 - 00000000 ____D C:\Users\comp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-01-24 02:26 - 2016-01-24 02:26 - 00000213 _____ C:\Users\comp\Desktop\Dota 2.url
2016-01-24 01:56 - 2016-02-07 19:04 - 00000000 ____D C:\Program Files\Common Files\AV
2016-01-24 01:55 - 2016-01-31 14:29 - 00000000 ____D C:\Users\comp\AppData\Local\Steam
2016-01-24 01:55 - 2016-01-24 01:55 - 00000000 ____D C:\Users\comp\AppData\Local\CEF
2016-01-24 01:45 - 2015-12-02 13:25 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-01-24 01:29 - 2016-02-13 23:19 - 00000000 ____D C:\Program Files\Steam
2016-01-24 01:29 - 2016-02-08 10:22 - 00000000 ____D C:\Program Files\Common Files\Steam
2016-01-24 01:29 - 2016-01-26 10:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-01-24 01:29 - 2016-01-24 01:29 - 00000925 _____ C:\Users\Public\Desktop\Steam.lnk
2016-01-24 01:04 - 2016-02-13 20:54 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-01-24 01:00 - 2016-01-24 01:00 - 00000000 _____ C:\Windows\ativpsrm.bin
2016-01-24 00:59 - 2016-01-24 17:26 - 00000000 ____D C:\Windows\system32\DAX2
2016-01-24 00:59 - 2016-01-24 00:59 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-01-24 00:58 - 2016-01-24 01:59 - 00000000 ____D C:\Windows\system32\RTCOM
2016-01-24 00:58 - 2016-01-24 00:58 - 72203792 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2016-01-24 00:58 - 2016-01-24 00:58 - 13798184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 12014440 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 11922512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO40.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 07170872 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 07053696 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-01-24 00:58 - 2016-01-24 00:58 - 05132496 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 04763576 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 04236168 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 04005405 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-01-24 00:58 - 2016-01-24 00:58 - 03629312 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2016-01-24 00:58 - 2016-01-24 00:58 - 02895632 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 02826496 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2016-01-24 00:58 - 2016-01-24 00:58 - 02702592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 02610208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 02424264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 02400312 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO70.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01983096 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01948808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01832072 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01816352 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01791808 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01531680 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01515176 _____ (Conexant Systems Inc.) C:\Windows\system32\CX32APO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01512320 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01400808 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01313128 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01239808 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01180352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01074056 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01039224 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 01028016 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00990792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00965680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00954200 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00936624 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00883376 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00868464 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00863608 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00860520 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00858264 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00834328 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00799016 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00786352 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00669592 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00645824 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00625000 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00615872 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00589080 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00575936 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00532896 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00522712 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00522712 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00471288 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00439608 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00415872 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00402072 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00401056 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00387624 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00384520 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00371816 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00369792 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00364024 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00357992 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00357160 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00341160 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00308064 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00307240 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00307240 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00302744 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00285632 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00243864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00232424 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00231880 _____ (TODO: ) C:\Windows\system32\slprp32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00230912 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaemaxapo32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00229592 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00229584 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00229040 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00225048 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00197440 _____ C:\Windows\system32\AcpiServiceVnA.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00196008 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00183616 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00181232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00151920 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo32.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00150560 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00144688 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00142328 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00116648 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00105656 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00101624 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00101336 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00096608 _____ C:\Windows\system32\audioLibVc.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00088280 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00083648 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00078488 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00074384 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00071712 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00067752 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll
2016-01-24 00:58 - 2016-01-24 00:58 - 00022160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll
2016-01-24 00:56 - 2016-02-12 22:19 - 00000000 ____D C:\Users\comp\Desktop\Thank you
2016-01-24 00:48 - 2016-01-24 17:26 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2016-01-24 00:48 - 2016-01-24 00:48 - 39712768 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 25052160 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atioglxx.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 22318592 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 19581440 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2016-01-24 00:48 - 2016-01-24 00:48 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 09468448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 07898704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdva.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 07167416 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdag.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 05129728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 03471376 _____ C:\Windows\system32\atiumdva.cap
2016-01-24 00:48 - 2016-01-24 00:48 - 01194928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00995342 _____ C:\Windows\system32\amdocl_as32.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00934400 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00842001 _____ C:\Windows\system32\amdicdxx.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00798734 _____ C:\Windows\system32\amdocl_ld32.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00737410 _____ C:\Windows\system32\atiicdxx.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00669696 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00662456 _____ C:\Windows\system32\atiapfxx.blb
2016-01-24 00:48 - 2016-01-24 00:48 - 00564224 _____ (AMD) C:\Windows\system32\atieclxx.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00385536 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00370688 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2016-01-24 00:48 - 2016-01-24 00:48 - 00322868 _____ C:\Windows\system32\ativvaxy_vi.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00321200 _____ C:\Windows\system32\ativvaxy_vi_nd.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00294912 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00259072 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00255808 _____ C:\Windows\system32\ativvaxy_cz_nd.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00250884 _____ C:\Windows\system32\ativvaxy_FJ.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00249088 _____ C:\Windows\system32\ativvaxy_FJ_nd.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00234420 _____ C:\Windows\system32\ativvaxy_cik.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00232752 _____ C:\Windows\system32\ativvaxy_cik_nd.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00204952 _____ C:\Windows\system32\ativvsvl.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00203776 _____ C:\Windows\system32\clinfo.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00201216 _____ C:\Windows\system32\amdgfxinfo32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00189440 _____ C:\Windows\system32\atieah32.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00177344 _____ C:\Windows\system32\ativce03.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00175648 _____ C:\Windows\system32\amde31a.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00164352 _____ (AMD) C:\Windows\system32\atitmmxx.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00158208 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atigktxx.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00157144 _____ C:\Windows\system32\ativvsva.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00142848 _____ C:\Windows\system32\hsa-thunk.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00140240 _____ C:\Windows\system32\samu_krnl_ci.sbin
2016-01-24 00:48 - 2016-01-24 00:48 - 00138832 _____ C:\Windows\system32\samu_krnl_isv_ci.sbin
2016-01-24 00:48 - 2016-01-24 00:48 - 00136624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxpag.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00125288 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00123240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9pag.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00120656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00117760 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00101376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00100816 _____ C:\Windows\system32\ativce02.dat
2016-01-24 00:48 - 2016-01-24 00:48 - 00092328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00092328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00090624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00089600 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl32.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00059392 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00047664 _____ C:\Windows\system32\kapp_ci.sbin
2016-01-24 00:48 - 2016-01-24 00:48 - 00045056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe
2016-01-24 00:48 - 2016-01-24 00:48 - 00043536 _____ C:\Windows\system32\kapp_si.sbin
2016-01-24 00:48 - 2016-01-24 00:48 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00038400 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00029184 _____ (AMD) C:\Windows\system32\atimuixx.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2016-01-24 00:48 - 2016-01-24 00:48 - 00000000 ____D C:\Program Files\AMD
2016-01-24 00:41 - 2016-01-24 00:41 - 00073928 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_sata.sys
2016-01-24 00:41 - 2016-01-24 00:41 - 00036040 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_xata.sys
2016-01-24 00:40 - 2016-01-24 00:40 - 00095808 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2016-01-24 00:40 - 2016-01-24 00:40 - 00087576 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW73.sys
2016-01-24 00:39 - 2016-01-24 00:39 - 00084248 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2016-01-24 00:36 - 2016-01-24 00:36 - 00769280 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2016-01-24 00:36 - 2016-01-24 00:36 - 00109648 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2016-01-24 00:36 - 2016-01-24 00:36 - 00085616 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2016-01-24 00:20 - 2016-01-24 17:25 - 00000000 ____D C:\Users\comp\AppData\Local\Microsoft Games
2016-01-24 00:12 - 2016-01-24 00:12 - 00031832 _____ (Phoenix Technologies) C:\Windows\system32\Drivers\DrvAgent32.sys
2016-01-23 23:54 - 2016-01-23 23:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-01-23 16:47 - 2016-01-31 15:19 - 00000000 ____D C:\ProgramData\AVAST Software
2016-01-23 16:43 - 2016-01-25 20:01 - 00000000 ____D C:\Users\comp\AppData\Local\Deployment
2016-01-23 16:43 - 2016-01-25 20:01 - 00000000 ____D C:\Users\comp\AppData\Local\Apps\2.0
2016-01-23 16:43 - 2016-01-24 01:11 - 00000000 ____D C:\Users\comp\AppData\Local\Google
2016-01-23 16:43 - 2016-01-24 01:11 - 00000000 ____D C:\Program Files\Google
2016-01-23 16:39 - 2016-01-24 17:26 - 00000000 ____D C:\Program Files\Realtek
2016-01-23 16:39 - 2016-01-23 16:39 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-01-23 16:03 - 2016-01-23 16:03 - 00057560 _____ C:\Users\comp\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-23 16:03 - 2016-01-23 16:03 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-01-23 15:22 - 2016-01-23 16:18 - 00000000 ____D C:\Users\comp\AppData\Local\ElevatedDiagnostics
2016-01-23 15:12 - 2016-02-07 22:52 - 00713888 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-23 15:08 - 2016-01-23 15:08 - 00001417 _____ C:\Users\comp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-23 15:07 - 2016-02-12 23:09 - 00000000 ____D C:\Users\comp\AppData\Local\VirtualStore
2016-01-23 15:07 - 2016-02-12 21:38 - 00000000 ____D C:\Users\comp
2016-01-23 15:07 - 2016-01-23 15:07 - 00000020 ___SH C:\Users\comp\ntuser.ini
2016-01-23 15:07 - 2016-01-23 15:07 - 00000000 _SHDL C:\Users\comp\My Documents
2016-01-23 15:07 - 2016-01-23 15:07 - 00000000 _SHDL C:\Users\comp\Documents\My Videos
2016-01-23 15:07 - 2016-01-23 15:07 - 00000000 _SHDL C:\Users\comp\Documents\My Pictures
2016-01-23 15:07 - 2016-01-23 15:07 - 00000000 _SHDL C:\Users\comp\Documents\My Music
2016-01-22 15:13 - 2016-01-22 15:13 - 00198576 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-13 23:22 - 2009-07-14 12:34 - 00017536 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-13 23:22 - 2009-07-14 12:34 - 00017536 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-13 21:50 - 2009-07-14 12:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-13 19:00 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\NDF
2016-02-13 13:29 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\registration
2016-02-13 08:46 - 2009-07-14 10:04 - 00000215 _____ C:\Windows\system.ini
2016-02-12 23:09 - 2009-07-14 12:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-02-12 23:09 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\inf
2016-02-12 23:09 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\AppCompat
2016-02-12 23:08 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\sysprep
2016-02-07 22:35 - 2009-07-14 07:47 - 12866560 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-01-31 22:03 - 2009-07-14 10:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-01-26 10:51 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\MUI
2016-01-24 17:26 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\security
2016-01-24 07:05 - 2009-07-14 12:33 - 00257736 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-24 07:02 - 2009-07-14 12:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-01-24 01:29 - 2009-07-14 12:53 - 00013856 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-01-23 16:33 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\tracing
2016-01-23 15:07 - 2009-07-14 12:34 - 00000000 ____D C:\Windows\Setup
2016-01-23 15:07 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\rescache

==================== Files in the root of some directories =======

2016-01-31 00:29 - 2016-02-13 23:13 - 0007602 _____ () C:\Users\comp\AppData\Local\Resmon.ResmonCfg
2016-01-24 00:59 - 2016-01-24 00:59 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


nointegritychecks: ==> "IntegrityChecks" is disabled. <===== ATTENTION


LastRegBack: 2016-02-11 19:44

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version:07-02-2016
Ran by [removed] (2016-02-13 23:32:50)
Running from C:\Users\[removed]\Desktop
Microsoft Windows 7 Home Basic  (X86) (2016-01-23 07:07:19)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1597179411-2372084101-3668902816-500 - Administrator - Disabled)
comp (S-1-5-21-1597179411-2372084101-3668902816-1000 - Administrator - Enabled) => C:\Users\comp
Guest (S-1-5-21-1597179411-2372084101-3668902816-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 20 ActiveX (HKLM\…\Adobe Flash Player ActiveX) (Version: 20.0.0.286 - Adobe Systems Incorporated)
AVG (HKLM\…\AvgZen) (Version: 1.31.1.48846 - AVG Technologies)
AVG (Version: 16.41.7442 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4522 - AVG Technologies) Hidden
AVG Protection (HKLM\…\AVG) (Version: 2016.41.7442 - AVG Technologies)
AVG Zen (Version: 1.31.9 - AVG Technologies) Hidden
Dota 2 (HKLM\…\Steam App 570) (Version:  - Valve)
FMW 1 (Version: 1.52.1 - AVG Technologies) Hidden
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM\…\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 en-US) (HKLM\…\Mozilla Firefox 44.0.2 (x86 en-US)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 44.0.2 - Mozilla)
Realtek High Definition Audio Driver (HKLM\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7634 - Realtek Semiconductor Corp.)
Steam (HKLM\…\Steam) (Version: 2.10.91.91 - Valve Corporation)
Visual Studio 2012 x86 Redistributables (HKLM\…\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {15BE16E0-9A1C-4C9D-AD36-8C0450AA4A79} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-01-24] (AVAST Software)
Task: {57AB1A14-DB9C-4C91-A4EC-5E96876F69C5} - System32\Tasks\SafeZone scheduled Autoupdate 1454151524 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {5E80B004-C143-4B38-87E1-48B2FCDEF5D6} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1597179411-2372084101-3668902816-1000
Task: {677EEFA3-A2CE-4BD3-9481-5D71E791A08B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-04] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-01-24 01:54 - 2015-12-15 13:54 - 00782336 _____ () C:\Program Files\Steam\SDL2.dll
2016-01-24 01:54 - 2015-07-04 00:12 - 04962816 _____ () C:\Program Files\Steam\v8.dll
2016-01-24 01:54 - 2015-07-04 00:12 - 01556992 _____ () C:\Program Files\Steam\icui18n.dll
2016-01-24 01:54 - 2015-07-04 00:12 - 01187840 _____ () C:\Program Files\Steam\icuuc.dll
2016-01-24 01:54 - 2016-02-05 05:02 - 02546768 _____ () C:\Program Files\Steam\video.dll
2016-01-24 01:54 - 2015-09-24 08:33 - 02549248 _____ () C:\Program Files\Steam\libavcodec-56.dll
2016-01-24 01:54 - 2015-09-24 08:33 - 00442880 _____ () C:\Program Files\Steam\libavutil-54.dll
2016-01-24 01:54 - 2015-09-24 08:33 - 00491008 _____ () C:\Program Files\Steam\libavformat-56.dll
2016-01-24 01:54 - 2015-09-24 08:33 - 00332800 _____ () C:\Program Files\Steam\libavresample-2.dll
2016-01-24 01:54 - 2015-09-24 08:33 - 00485888 _____ () C:\Program Files\Steam\libswscale-3.dll
2016-01-24 01:54 - 2016-02-05 05:01 - 00802896 _____ () C:\Program Files\Steam\bin\chromehtml.DLL
2016-01-24 01:54 - 2015-12-30 09:51 - 00208896 _____ () C:\Program Files\Steam\bin\openvr_api.dll
2016-02-07 18:35 - 2016-02-07 18:33 - 40500224 _____ () C:\Program Files\AVG\UiDll\2171\libcef.dll
2016-01-24 01:54 - 2016-01-06 09:52 - 48387872 _____ () C:\Program Files\Steam\bin\libcef.dll
2016-01-24 01:54 - 2015-09-25 07:56 - 00119208 _____ () C:\Program Files\Steam\winh264.dll
2016-01-24 02:26 - 2016-02-12 22:14 - 00281168 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
2016-01-24 02:26 - 2016-02-12 22:14 - 04360784 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\engine2.dll
2016-01-24 02:26 - 2016-02-12 22:16 - 00489552 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\tier0.dll
2016-01-24 02:26 - 2016-02-12 22:16 - 00365648 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\vstdlib.dll
2016-01-24 02:26 - 2016-01-30 17:47 - 00778752 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\SDL2.dll
2016-01-24 02:26 - 2016-02-12 22:14 - 00364624 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\filesystem_stdio.dll
2016-01-24 02:26 - 2016-02-12 22:14 - 00596048 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\inputsystem.dll
2016-01-30 17:38 - 2016-02-12 22:14 - 00213584 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\imemanager.dll
2016-01-30 17:39 - 2016-02-12 22:14 - 00174160 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\localize.dll
2016-01-24 02:26 - 2016-02-12 22:16 - 01196112 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\rendersystemdx9.dll
2016-01-24 02:26 - 2016-02-12 22:17 - 00484944 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\resourcesystem.dll
2016-01-24 02:26 - 2016-02-12 22:15 - 00550992 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\schemasystem.dll
2016-01-24 02:26 - 2016-02-12 22:15 - 00839248 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\materialsystem2.dll
2016-01-30 17:45 - 2016-02-12 22:16 - 00193616 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\valve_avi.dll
2016-01-24 02:26 - 2016-02-12 22:17 - 04816976 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\scaleformui_4_dx9.dll
2016-01-24 02:26 - 2016-02-12 22:14 - 00708176 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\meshsystem.dll
2016-01-24 02:26 - 2016-02-12 22:18 - 01059408 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\worldrenderer.dll
2016-01-24 02:26 - 2016-02-12 22:17 - 00635984 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\vscript.dll
2016-01-24 02:26 - 2016-02-12 22:15 - 01704528 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\networksystem.dll
2016-01-24 02:26 - 2016-02-12 22:14 - 01075792 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\animationsystem.dll
2016-01-24 02:26 - 2016-02-12 22:17 - 01672784 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\vphysics2.dll
2016-01-31 21:29 - 2016-02-12 22:16 - 00915536 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\soundsystem.dll
2016-01-31 21:29 - 2016-02-12 22:18 - 02297936 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\scenesystem.dll
2016-01-24 02:26 - 2016-02-12 22:18 - 00898640 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\vguirendersurface.dll
2016-01-24 02:26 - 2016-02-12 22:18 - 00414800 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\vgui2.dll
2016-01-24 02:26 - 2016-02-12 22:16 - 01927248 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\panoramauiclient.dll
2016-01-31 21:29 - 2016-01-31 21:35 - 05002752 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\v8.dll
2016-01-24 02:26 - 2016-01-30 17:37 - 01612800 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\icui18n.dll
2016-01-24 02:26 - 2016-01-30 17:35 - 01210368 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\icuuc.dll
2016-01-24 02:26 - 2016-01-30 17:49 - 02364928 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\video.dll
2016-01-24 02:26 - 2016-01-30 17:37 - 02396672 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\libavcodec-56.dll
2016-01-24 02:26 - 2016-01-30 17:37 - 00442880 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\libavutil-54.dll
2016-01-24 02:26 - 2016-01-30 17:39 - 00479744 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\libavformat-56.dll
2016-01-24 02:26 - 2016-01-30 17:37 - 00332800 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\libavresample-2.dll
2016-01-24 02:26 - 2016-01-30 17:39 - 00485888 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\libswscale-3.dll
2016-01-24 02:26 - 2016-02-12 22:16 - 02333776 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\particles.dll
2016-01-24 02:26 - 2016-02-12 22:16 - 02633296 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\panorama.dll
2016-01-24 02:26 - 2016-02-12 22:14 - 01005648 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\panorama_text_pango.dll
2016-01-24 02:26 - 2016-01-30 17:36 - 00402432 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\libfontconfig-1.dll
2016-01-24 02:26 - 2016-01-30 17:39 - 00941056 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\libfreetype-6.dll
2016-01-24 02:26 - 2016-02-12 22:15 - 00304208 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\renderingpipelines.dll
2016-02-07 15:16 - 2016-02-13 16:24 - 23907408 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\dota\bin\win32\server.dll
2016-01-31 21:29 - 2016-02-13 16:23 - 26798672 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\dota\bin\win32\client.dll
2016-01-25 05:56 - 2016-01-30 17:40 - 00071680 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\mssmp3.asi
2016-01-25 05:57 - 2016-01-30 17:40 - 00013312 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\mssds3d.flt
2016-01-25 05:54 - 2016-01-30 17:42 - 00055808 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\msseax.flt
2016-01-24 02:26 - 2016-02-12 22:18 - 01134672 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\dota\bin\win32\host.dll
2016-01-30 17:45 - 2016-02-12 22:16 - 00217168 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\scenefilecache.dll
2016-01-24 02:26 - 2016-02-12 22:16 - 00429136 _____ () C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\navsystem.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 10:04 - 2016-02-13 08:46 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1597179411-2372084101-3668902816-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\comp\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: [removed] - 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{80795403-1DEB-4582-B07F-8EAF58C7924A}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [{B49DBE99-2EAF-4A6F-958C-29A6197FCED5}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [{3C7BE42E-A385-48A9-9E37-17963DDE95FB}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{FE89A2BE-7D11-42E6-98F3-25CBFFCA9479}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{9440C6E1-A8A6-4C21-9A58-0AAB068FB834}] => (Allow) C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{97CD9C94-FE6C-41DB-ABAB-BFB8CE86B653}] => (Allow) C:\Program Files\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{0179DF71-69E5-48DE-A2FA-EEB2AF2DF37E}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
FirewallRules: [{A35ED699-C84F-48E0-8C92-2B0B19F23DA8}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
FirewallRules: [{770643B1-521D-49FD-959F-E6449B494F62}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
FirewallRules: [{B84499E9-FBA0-42EF-867D-2B784AEC72E1}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
FirewallRules: [{6436401D-79C7-4981-8C53-1E72875A8562}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{BB8739A6-B8C2-4724-80EB-78C4F8E4724B}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{F34C58ED-C95F-4CA8-BA2F-CA5D41BDFC2C}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
FirewallRules: [{9968C1A0-ED67-4830-90AC-1E5FAFB740B4}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
FirewallRules: [{ABE9498F-E873-417C-AF78-A9FA0AAF30CB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{B5737E39-F698-422B-A021-1B6D85590920}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Restore Points =========================

08-02-2016 02:20:20 02/08/16
09-02-2016 20:24:36 02/08/16
12-02-2016 12:42:17 JRT Pre-Junkware Removal
12-02-2016 21:43:23 JRT Pre-Junkware Removal
12-02-2016 21:59:25 Uh huh
12-02-2016 22:17:13 New

==================== Faulty Device Manager Devices =============

Name: HWiNFO32/64 Kernel Driver
Description: HWiNFO32/64 Kernel Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: HWiNFO32
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/13/2016 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FRST[1].exe version 7.2.2016.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1618

Start Time: 01d16672f28f0f08

Termination Time: 5

Application Path: C:\Users\comp\Desktop\FRST[1].exe

Report Id: 3934b304-d266-11e5-802c-448a5bb8d5ea

Error: (02/13/2016 08:51:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbamservice.exe, version: 3.2.19.0, time stamp: 0x55e84649
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdadb
Exception code: 0xc0000005
Fault offset: 0x00051f70
Faulting process id: 0x64c
Faulting application start time: 0xmbamservice.exe0
Faulting application path: mbamservice.exe1
Faulting module path: mbamservice.exe2
Report Id: mbamservice.exe3

Error: (02/12/2016 10:17:14 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary bdselfpr.

System Error:
The system cannot find the file specified.
.

Error: (02/12/2016 10:14:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe_SysMain, version: 6.1.7600.16385, time stamp: 0x4a5bc100
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdadb
Exception code: 0xc0000005
Fault offset: 0x00051ffe
Faulting process id: 0x53c
Faulting application start time: 0xsvchost.exe_SysMain0
Faulting application path: svchost.exe_SysMain1
Faulting module path: svchost.exe_SysMain2
Report Id: svchost.exe_SysMain3

Error: (02/12/2016 09:59:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary bdselfpr.

System Error:
The system cannot find the file specified.
.

Error: (02/12/2016 09:12:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 44.0.2.5884, time stamp: 0x56bbf417
Faulting module name: mozglue.dll, version: 44.0.2.5884, time stamp: 0x56bbe58e
Exception code: 0x80000003
Fault offset: 0x0000ed3b
Faulting process id: 0x1550
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3

Error: (02/12/2016 09:00:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mbamservice.exe, version: 3.2.19.0, time stamp: 0x55e84649
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdadb
Exception code: 0xc0000005
Fault offset: 0x00051ffe
Faulting process id: 0x80c
Faulting application start time: 0xmbamservice.exe0
Faulting application path: mbamservice.exe1
Faulting module path: mbamservice.exe2
Report Id: mbamservice.exe3

Error: (02/12/2016 12:49:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Dwm.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc225
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdadb
Exception code: 0xc0000005
Fault offset: 0x00051ffe
Faulting process id: 0xe98
Faulting application start time: 0xDwm.exe0
Faulting application path: Dwm.exe1
Faulting module path: Dwm.exe2
Report Id: Dwm.exe3

Error: (02/11/2016 07:45:02 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/11/2016 07:14:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Dwm.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc225
Faulting module name: dwmcore.dll, version: 6.1.7600.16385, time stamp: 0x4a5bda08
Exception code: 0xc0000005
Fault offset: 0x0005fce9
Faulting process id: 0x7d0
Faulting application start time: 0xDwm.exe0
Faulting application path: Dwm.exe1
Faulting module path: Dwm.exe2
Report Id: Dwm.exe3


System errors:
=============
Error: (02/13/2016 09:50:49 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 08:48:56 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 08:29:45 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 07:05:23 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 05:23:18 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 05:19:21 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 04:37:22 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 04:11:02 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
HWiNFO32

Error: (02/13/2016 08:51:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The MBAMService service terminated unexpectedly.  It has done this 1 time(s).

Error: (02/13/2016 08:46:17 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The PEVSystemStart service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.


==================== Memory info ===========================

Processor: AMD A4-6300 APU with Radeon™ HD Graphics
Percentage of memory in use: 73%
Total physical RAM: 3272.14 MB
Available physical RAM: 864.68 MB
Total Virtual: 6542.57 MB
Available Virtual: 3509.67 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:423.06 GB) NTFS
Drive e: (Low MB ) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 0B3AFE36)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================