Fabar FRST text (part 1):
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
Ran by Jose Luis (administrator) on OUROBOROS on 28-02-2015 17:08:56
Running from C:\Users\Jose Luis\Desktop
Loaded Profiles: Jose Luis (Available profiles: Jose Luis)
Platform: Windows 7 Enterprise Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(CyberLink) D:\CyberLink\YouCam\YCMMirage.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [YouCam Tray] => D:\CyberLink\YouCam\YouCam.exe [234000 2012-06-14] (CyberLink Corp.)
HKU\S-1-5-21-769146361-1135300329-4186616885-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-769146361-1135300329-4186616885-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-769146361-1135300329-4186616885-1000\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-769146361-1135300329-4186616885-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Tcpip\Parameters: [DhcpNameServer] 4.2.2.2 8.8.8.8 208.67.222.222
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Profile 2 -> hxxp://
www.google.com
CHR StartupUrls: Profile 2 -> "
https://www.google.com/"
CHR Profile: C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-06]
CHR Extension: (Google Docs) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-06]
CHR Extension: (Google Drive) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-06]
CHR Extension: (YouTube) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-06]
CHR Extension: (Google Search) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-06]
CHR Extension: (Tampermonkey) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-02-10]
CHR Extension: (Video Downloader professional) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-02-06]
CHR Extension: (Hola Better Internet Engine) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\epbfmioobedknooiakdehepogalbgkng [2015-02-16]
CHR Extension: (Google Sheets) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-06]
CHR Extension: (Hola Better Internet) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2015-02-16]
CHR Extension: (Google Wallet) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-06]
CHR Extension: (Gmail) - C:\Users\Jose Luis\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-06]
CHR HKU\S-1-5-21-769146361-1135300329-4186616885-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] -
http://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [155912 2014-10-22] (BitDefender LLC)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R1 ndisrd; C:\Windows\System32\DRIVERS\ndisrd.sys [33496 2014-03-27] (Realtek)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-02-28] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-10-15] (BitDefender S.R.L.)
S3 WinRing0_1_2_0; C:\Program Files\Intel Corporation\Intel Processor Diagnostic Tool 64bit\WinRing0x64.sys [14544 2014-11-13] (OpenLibSys.org)
S3 catchme; \??\C:\your_name\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
========================== Drivers MD5 =======================
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisrd.sys 520590E98B56531D006B54C1E31AFE11
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\NisDrvWFP.sys E10B84385C3FEEF4BDE8E6A980535522
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys 1A29A59A4C5BA6F8C85062A613B7E2B2
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\drivers\nvhda64v.sys 7E4355930B28C2798D9F09AB9F81151F
C:\Windows\System32\DRIVERS\nvlddmkm.sys 3B99271224C43ADAB5A7F8D4B574AE3F
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys D92F4ED189C8207D0274B8B6BB494892
C:\Windows\System32\drivers\nvvad64v.sys DBFE7B2DF103F74AE51840B3C5F25FE9
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\PSKMAD.sys 05A0C2744CEAC6F1B723EC469B650EF0
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
C:\Windows\System32\Drivers\RDPWD.sys FE571E088C2D83619D2D48D4E961BF41
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Rt64win7.sys D787F86566F6EA23053D9C5F401E33B7
C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\DRIVERS\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys 70988118145F5F10EF24720B97F35F65
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\TrueSight.sys FD44FA80DA03EA144153A76DEBBB61B4
C:\Windows\System32\DRIVERS\trufos.sys 3E75A47D2DEFD2683DCA409572FBE8B2
C:\Windows\System32\DRIVERS\tssecsrv.sys E232A3B43A894BB327FC161529BD9ED1
C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\drivers\usbaudio.sys B0435098C81D04CAFFF80DDB746CD3A2
C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965
C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
C:\Windows\system32\drivers\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3
C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\vmbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Program Files\Intel Corporation\Intel Processor Diagnostic Tool 64bit\WinRing0x64.sys 0C0195C48B6B8582FA6F6373032118DA
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-28 17:08 - 2015-02-28 17:09 - 00022707 _____ () C:\Users\Jose Luis\Desktop\FRST.txt
2015-02-28 17:08 - 2015-02-28 17:09 - 00000000 ____D () C:\FRST
2015-02-28 17:07 - 2015-02-28 17:08 - 02087936 _____ (Farbar) C:\Users\Jose Luis\Desktop\FRST64.exe
2015-02-28 17:00 - 2015-02-28 17:00 - 00000627 _____ () C:\Users\Jose Luis\Desktop\JRT.txt
2015-02-28 16:43 - 2015-02-28 16:43 - 01388274 _____ (Thisisu) C:\Users\Jose Luis\Desktop\JRT.exe
2015-02-28 16:21 - 2015-02-28 16:38 - 00000000 ____D () C:\AdwCleaner
2015-02-28 16:20 - 2015-02-28 16:20 - 02126848 _____ () C:\Users\Jose Luis\Desktop\adwcleaner_4.111.exe
2015-02-28 15:47 - 2015-02-28 15:47 - 00029886 _____ () C:\ComboFix.txt
2015-02-28 15:44 - 2015-02-28 15:44 - 00002666 _____ () C:\Users\Jose Luis\Desktop\Rkill.txt
2015-02-28 15:44 - 2011-06-26 02:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-02-28 15:44 - 2010-11-07 13:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-02-28 15:44 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-02-28 15:44 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-02-28 15:44 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-02-28 15:44 - 2000-08-30 20:00 - 00098816 _____ () C:\Windows\sed.exe
2015-02-28 15:44 - 2000-08-30 20:00 - 00080412 _____ () C:\Windows\grep.exe
2015-02-28 15:44 - 2000-08-30 20:00 - 00068096 _____ () C:\Windows\zip.exe
2015-02-28 15:41 - 2015-02-28 15:41 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Jose Luis\Desktop\rkill.exe
2015-02-28 15:38 - 2015-02-28 15:39 - 05612222 ____R (Swearware) C:\Users\Jose Luis\Desktop\your_name.exe
2015-02-28 15:33 - 2015-02-28 15:33 - 00267320 _____ () C:\Windows\Minidump\022815-14695-01.dmp
2015-02-28 15:31 - 2015-02-28 15:47 - 00000000 ____D () C:\Qoobox
2015-02-28 01:20 - 2015-02-28 03:10 - 00000000 ____D () C:\Users\Jose Luis\Desktop\mbar
2015-02-28 01:14 - 2015-02-28 01:17 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Jose Luis\Desktop\mbar-1.09.1.1004.exe
2015-02-27 23:59 - 2015-02-27 23:59 - 00000000 _____ () C:\Users\Jose\AppData\extensions.sqlite
2015-02-27 23:59 - 2015-02-27 23:59 - 00000000 _____ () C:\Users\Jose\AppData\addons.sqlite
2015-02-27 23:58 - 2015-02-27 23:59 - 15536728 _____ () C:\Users\Jose Luis\Desktop\RogueKiller.exe
2015-02-27 23:55 - 2015-02-27 23:55 - 00065373 _____ () C:\Users\Jose Luis\Desktop\minidumps.zip
2015-02-27 23:25 - 2015-02-27 23:25 - 00044791 _____ () C:\Users\Jose Luis\Desktop\dds.txt
2015-02-27 23:25 - 2015-02-27 23:25 - 00008444 _____ () C:\Users\Jose Luis\Desktop\attach.txt
2015-02-27 23:19 - 2015-02-27 23:19 - 00688992 ____R (Swearware) C:\Users\Jose Luis\Downloads\dds.com
2015-02-27 22:30 - 2015-02-27 22:30 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-27 22:30 - 2015-02-27 22:30 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-27 22:30 - 2015-02-27 22:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-27 22:24 - 2015-02-27 22:25 - 14160536 _____ (Microsoft Corporation) C:\Users\Jose Luis\Downloads\mseinstall64.exe
2015-02-27 22:18 - 2015-02-27 22:19 - 00003129 _____ () C:\DelFix.txt
2015-02-27 22:18 - 2015-02-27 22:18 - 00000000 ____D () C:\Windows\ERUNT
2015-02-27 00:53 - 2015-02-27 00:53 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-27 00:40 - 2015-02-28 16:37 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-27 00:40 - 2015-02-27 00:40 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-27 00:40 - 2015-02-27 00:40 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-27 00:40 - 2015-02-27 00:40 - 00000000 ____D () C:\Windows\system32\Macromed
2015-02-26 22:58 - 2015-02-28 15:50 - 00001098 _____ () C:\Windows\PFRO.log
2015-02-26 22:37 - 2015-02-26 22:38 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\Jose Luis\Downloads\iExplore.exe
2015-02-26 22:33 - 2015-02-26 22:33 - 00267320 _____ () C:\Windows\Minidump\022615-13618-01.dmp
2015-02-26 22:28 - 2015-02-26 22:28 - 00267320 _____ () C:\Windows\Minidump\022615-13821-01.dmp
2015-02-26 22:04 - 2015-02-26 22:05 - 11961808 _____ (OPSWAT, Inc.) C:\Users\Jose Luis\Downloads\AppRemover.exe
2015-02-26 21:40 - 2015-02-28 15:33 - 2647258753 _____ () C:\Windows\MEMORY.DMP
2015-02-26 21:40 - 2015-02-26 21:40 - 00267320 _____ () C:\Windows\Minidump\022615-14976-01.dmp
2015-02-26 21:38 - 2015-02-26 22:42 - 00000000 ____D () C:\Windows\erdnt
2015-02-26 19:49 - 2015-02-28 03:10 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-02-26 00:48 - 2015-02-26 00:48 - 00005264 _____ () C:\Users\Jose Luis\Downloads\cc_20150226_004819.reg
2015-02-26 00:47 - 2015-02-26 00:47 - 00059156 _____ () C:\Users\Jose Luis\Downloads\cc_20150226_004716.reg
2015-02-26 00:40 - 2015-02-26 00:40 - 02931056 _____ () C:\Users\Jose Luis\Downloads\SecurityTaskManager_Setup.exe
2015-02-26 00:01 - 2015-02-26 00:01 - 02666167 _____ (Kephyr) C:\Users\Jose Luis\Downloads\freefixersetup.exe
2015-02-25 23:37 - 2014-02-21 01:56 - 00041984 ____R (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2015-02-25 23:35 - 2015-02-25 23:35 - 00000000 ____D () C:\Users\Jose Luis\AppData\Roaming\Intel Corporation
2015-02-25 23:33 - 2015-02-25 23:33 - 00003722 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2015-02-25 23:33 - 2015-02-25 23:33 - 00003476 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2015-02-25 16:00 - 2013-10-28 10:02 - 00022240 _____ () C:\Windows\system32\Drivers\AppleCharger.sys
2015-02-25 16:00 - 2013-10-24 17:29 - 00022240 _____ () C:\Windows\system32\Drivers\UsbCharger.sys
2015-02-25 16:00 - 2010-04-06 16:30 - 00031272 _____ () C:\Windows\system32\AppleChargerSrv.exe
2015-02-25 15:48 - 2015-02-25 22:52 - 00000000 ____D () C:\Windows\SysWOW64\GBT_DL_OBJ
2015-02-25 15:27 - 2014-04-25 06:11 - 00000000 ____D () C:\Users\Jose Luis\Downloads\AppCenter
2015-02-25 02:38 - 2015-02-25 02:38 - 00001282 _____ () C:\Users\Public\Desktop\Panda Cloud Cleaner.lnk
2015-02-25 02:38 - 2015-02-25 02:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2015-02-25 02:38 - 2015-02-25 02:38 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2015-02-25 02:38 - 2013-04-29 09:17 - 00047632 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2015-02-25 02:34 - 2015-02-25 02:38 - 32509672 _____ (Panda Security ) C:\Users\Jose Luis\Downloads\PandaCloudCleaner.exe
2015-02-25 02:14 - 2014-11-24 22:56 - 00000000 ____D () C:\Users\Jose Luis\Downloads\atBIOS
2015-02-25 02:14 - 2014-02-26 02:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2015-02-25 01:37 - 2015-01-08 23:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-25 01:37 - 2015-01-08 23:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-25 01:37 - 2015-01-08 23:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-25 01:37 - 2015-01-08 22:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-25 01:37 - 2015-01-08 19:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 01:37 - 2015-01-08 19:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-25 01:35 - 2015-02-25 01:35 - 01205264 _____ (Oleg N. Scherbakov) C:\Users\Jose Luis\Downloads\InstallOBJ.exe
2015-02-25 00:57 - 2015-02-27 22:31 - 00001945 _____ () C:\Windows\epplauncher.mif
2015-02-25 00:57 - 2015-02-25 00:57 - 01331232 _____ (Resplendence Software Projects Sp. ) C:\Users\Jose Luis\Downloads\sanitySetup.exe
2015-02-25 00:54 - 2015-02-28 15:35 - 00000000 ____D () C:\Program Files\WhoCrashed
2015-02-25 00:54 - 2015-02-26 21:41 - 00000989 _____ () C:\Users\Jose Luis\Desktop\WhoCrashed.lnk
2015-02-25 00:54 - 2015-02-25 00:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2015-02-25 00:47 - 2015-02-25 00:48 - 02727584 _____ (Resplendence Software Projects Sp. ) C:\Users\Jose Luis\Downloads\whocrashedSetup.exe
2015-02-25 00:29 - 2015-02-25 00:29 - 00000000 ____D () C:\Users\Jose Luis\Desktop\Listar_dispositivos_con_conflictos
2015-02-25 00:28 - 2015-02-25 00:28 - 00001666 _____ () C:\Users\Jose Luis\Downloads\Listar_dispositivos_con_conflictos.zip
2015-02-25 00:23 - 2015-02-25 00:23 - 00051148 _____ () C:\Users\Jose Luis\Downloads\bluescreenview.zip
2015-02-25 00:23 - 2011-05-12 12:19 - 00000000 ____D () C:\Users\Jose Luis\Desktop\bluescreenview
2015-02-25 00:19 - 2015-02-28 00:54 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-02-25 00:19 - 2015-02-25 00:19 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-02-24 23:46 - 2015-02-28 15:33 - 00000000 ____D () C:\Windows\Minidump
2015-02-24 23:44 - 2015-02-24 23:44 - 00000000 ____D () C:\ProgramData\Bitdefender
2015-02-24 23:44 - 2015-02-24 23:44 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll
2015-02-24 23:44 - 2015-02-24 23:44 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin.dll
2015-02-24 23:44 - 2015-02-24 23:44 - 00000000 _____ () C:\Windows\system32\BDSandBoxUH.dll
2015-02-24 23:44 - 2014-10-22 10:29 - 00155912 ____N (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2015-02-24 23:43 - 2015-02-24 23:43 - 00000000 ____D () C:\Users\Jose Luis\AppData\Roaming\QuickScan
2015-02-24 23:43 - 2015-02-24 23:43 - 00000000 ____D () C:\Program Files\Bitdefender
2015-02-24 23:43 - 2014-10-15 17:14 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2015-02-23 22:17 - 2015-02-23 22:17 - 00000000 ____D () C:\Users\Jose Luis\Desktop\w
2015-02-23 22:14 - 2015-02-23 22:17 - 18073125 _____ () C:\Users\Jose Luis\Downloads\Mortal K. X #08.cbr
2015-02-23 16:02 - 2015-02-23 16:02 - 00000000 ____D () C:\Users\Jose Luis\Desktop\War of the Dragon Queen
2015-02-23 00:37 - 2015-02-23 00:43 - 00000233 _____ () C:\Users\Jose Luis\Desktop\Ganancia por set miniaturas.txt
2015-02-18 23:46 - 2015-02-18 23:46 - 00000000 ____D () C:\Users\Jose Luis\AppData\Local\Steam
2015-02-18 00:39 - 2015-02-18 00:39 - 00000000 ____D () C:\Users\Jose Luis\Desktop\eh
2015-02-18 00:37 - 2015-02-18 00:38 - 16752261 _____ () C:\Users\Jose Luis\Downloads\M. Kombat X 07 (1).cbr
2015-02-17 01:20 - 2015-02-24 23:55 - 00000003 _____ () C:\Windows\system32\HRUPPROG.TXT
2015-02-17 01:20 - 2015-02-17 01:20 - 00000003 _____ () C:\Windows\system32\HRUPPROG.EXIT
2015-02-16 19:04 - 2007-06-20 11:16 - 734031872 _____ () C:\Users\Jose Luis\Desktop\STALKER_1.avi
2015-02-16 19:04 - 2007-06-19 16:29 - 734044160 _____ () C:\Users\Jose Luis\Desktop\STALKER_2.avi
2015-02-16 17:32 - 2015-02-16 17:33 - 00067258 _____ () C:\Users\Jose Luis\Downloads\enbseries_stalker_v0068.zip
2015-02-16 17:08 - 2015-02-19 11:54 - 00000000 ____D () C:\Users\Jose Luis\Desktop\3
2015-02-16 10:23 - 2015-02-16 10:23 - 00000000 ____D () C:\Users\Jose Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-16 10:18 - 2009-12-13 23:29 - 00000000 ____D () C:\Users\Jose Luis\Desktop\Green Lantern Corps_42_L9D
2015-02-15 08:54 - 2015-02-15 08:54 - 00000000 ____D () C:\Users\Jose Luis\Desktop\u
2015-02-14 19:46 - 2015-02-14 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autumnal Wanderers
2015-02-14 19:05 - 2015-02-14 19:11 - 00000000 ____D () C:\Users\Jose Luis\Desktop\Stalker-SOC 3GB RAM
2015-02-14 19:04 - 2015-02-14 19:04 - 00283769 _____ () C:\Users\Jose Luis\Downloads\Stalker-SOC_3GB_RAM (1).7z
2015-02-14 18:51 - 2015-02-14 18:51 - 00283769 _____ () C:\Users\Jose Luis\Downloads\Stalker-SOC_3GB_RAM.7z
2015-02-14 10:59 - 2015-02-14 11:47 - 698819851 _____ () C:\Users\Jose Luis\Downloads\STALKER_Complete_2009_1.4.4.7z
2015-02-14 10:30 - 2015-02-14 10:30 - 00000000 ____D () C:\Program Files (x86)\THQ
2015-02-14 10:18 - 2015-02-14 10:18 - 00000000 ____D () C:\Users\Jose Luis\Downloads\stk-us-10005
2015-02-14 10:13 - 2015-02-14 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Extractor
2015-02-14 10:13 - 2015-02-14 10:13 - 00000000 ____D () C:\Program Files (x86)\Universal Extractor
2015-02-14 10:12 - 2015-02-14 10:12 - 05556306 _____ (Jared Breland ) C:\Users\Jose Luis\Downloads\uniextract161.exe
2015-02-14 10:08 - 2015-02-14 10:10 - 30890136 _____ (THQ ) C:\Users\Jose Luis\Downloads\stk-us-10005.exe
2015-02-14 09:58 - 2015-02-14 09:58 - 02891784 _____ (THQ ) C:\Users\Jose Luis\Downloads\stk-npr-efis-patch-5-6 (1).exe
2015-02-14 09:04 - 2015-02-14 09:04 - 02891784 _____ (THQ ) C:\Users\Jose Luis\Downloads\stk-npr-efis-patch-5-6.exe
2015-02-14 09:01 - 2015-02-14 09:06 - 00000000 ____D () C:\Users\Jose Luis\AppData\Local\QuickPar
2015-02-14 09:01 - 2015-02-14 09:01 - 00000000 ____D () C:\Users\Jose Luis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QuickPar
2015-02-14 09:01 - 2015-02-14 09:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar
2015-02-14 09:01 - 2015-02-14 09:01 - 00000000 ____D () C:\Program Files (x86)\QuickPar
2015-02-14 08:30 - 2015-02-14 08:42 - 00000000 ____D () C:\Users\Public\Documents\stalker-shoc