Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014
Ran by Calvin (administrator) on 420YOLOSWAGGER on 12-11-2014 20:20:16
Running from E:\Users\Calvin\Downloads
Loaded Profile: Calvin (Available profiles: Calvin)
Platform: Windows 7 Ultimate (X64) OS Language: English (United States)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) E:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Affinegy, Inc.) E:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe
() E:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
() E:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
(cFos Software GmbH) E:\Program Files\ASRock\XFast LAN\spd.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) E:\Program Files\Intel\iCLS Client\HeciServer.exe
() E:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) E:\Program Files\Microsoft LifeCam\MSCamS64.exe
(NVIDIA Corporation) E:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nuance Communications, Inc.) E:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
() E:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) E:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) E:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) E:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) E:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(cFos Software GmbH) E:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Logitech Inc.) E:\Program Files\Logitech Gaming Software\LCore.exe
(Echobit LLC) E:\Program Files\Echobit\Evolve\EvolveClient.exe
(Flux Software LLC) E:\Users\Calvin\AppData\Local\FluxSoftware\Flux\flux.exe
(BitTorrent Inc.) E:\Users\Calvin\AppData\Roaming\uTorrent\uTorrent.exe
() E:\Program Files (x86)\RocketDock\RocketDock.exe
(Samsung) E:\Program Files (x86)\Samsung\Kies\Kies.exe
(Sony) E:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Microsoft Corporation) E:\Windows\System32\StikyNot.exe
(Skype Technologies S.A.) E:\Program Files (x86)\Skype\Phone\Skype.exe
(Acresso Corporation) E:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
() E:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Dropbox, Inc.) E:\Users\Calvin\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
() E:\Program Files (x86)\FAHClient\FAHClient.exe
(Intel Corporation) E:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(FNet Co., Ltd.) E:\Program Files (x86)\XFastUSB\XFastUsb.exe
(Razer Inc.) E:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Samsung Electronics Co., Ltd.) E:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Affinegy, Inc.) E:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
(Nuance Communications, Inc.) E:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Echobit LLC) E:\Program Files\Echobit\Evolve\EvoSvc.exe
(Nuance Communications, Inc.) E:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Oracle Corporation) E:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Echobit, LLC) E:\Program Files\Echobit\Evolve\Drivers\EvolveTracker_64.exe
(Belkin International, Inc.) E:\Program Files\Belkin\Belkin USB Print and Storage Center\Connect.exe
(Affinegy, Inc.) E:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
(Affinegy, Inc.) E:\Program Files (x86)\Belkin\Router Setup and Monitor\dlnaPlugin.exe
(NVIDIA Corporation) E:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Echobit, LLC) E:\Program Files\Echobit\Evolve\EvolveUI.exe
(Valve Corporation) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Echobit, LLC) E:\Program Files\Echobit\Evolve\EvolveUI.exe
(Intel Corporation) E:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) E:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => E:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [XFast LAN] => E:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [NvBackend] => E:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => E:\Windows\system32\rundll32.exe E:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => E:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Launch LCore] => E:\Program Files\Logitech Gaming Software\LCore.exe [10801944 2014-07-28] (Logitech Inc.)
HKLM-x32\...\Run: [IAStorIcon] => E:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => E:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [XFastUSB] => E:\Program Files (x86)\XFastUSB\XFastUsb.exe [5019360 2013-12-17] (FNet Co., Ltd.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => E:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [444760 2014-03-07] (Razer Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-05-26] (Elaborate Bytes AG)
HKLM-x32\...\Run: [SwitchBoard] => E:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => E:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LifeCam] => E:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => E:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => E:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [InstaLAN] => E:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe [1884064 2011-12-07] (Affinegy, Inc.)
HKLM-x32\...\Run: [IndexSearch] => E:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-08] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => E:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-08] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort12reminder] => E:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] => E:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] => E:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => E:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
Winlogon\Notify\igfxcui: E:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [EvolveClient] => E:\Program Files\Echobit\Evolve\EvolveClient.exe [3332512 2014-09-17] (Echobit LLC)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [f.lux] => E:\Users\Calvin\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [uTorrent] => E:\Users\Calvin\AppData\Roaming\uTorrent\uTorrent.exe [1385808 2014-10-29] (BitTorrent Inc.)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [RocketDock] => E:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [KiesPreload] => E:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [KiesAirMessage] => E:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3618648 2014-11-05] (Electronic Arts)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [Sony PC Companion] => E:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [468192 2014-09-01] (Sony)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [RESTART_STICKY_NOTES] => E:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [Skype] => E:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [ISUSPM] => E:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-1199268278-559096122-390045334-1000\...\Run: [GoogleChromeAutoLaunch_C7B769EDBBCCE7FB80A6816B8CB269D6] => E:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-21] (Google Inc.)
Startup: E:\Users\Calvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> E:\Users\Calvin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: E:\Users\Calvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Folding@home.lnk
ShortcutTarget:
Folding@home.lnk -> E:\Program Files (x86)\FAHClient\HideConsole.exe ()
Startup: E:\Users\Calvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.lnk
ShortcutTarget: Steam.lnk -> E:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyServer: 179.43.143.126:8089
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCAFC2E2F50BCCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
HKU\S-1-5-21-1199268278-559096122-390045334-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - E:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://ca.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=ASRK
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://ca.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=ASRK
SearchScopes: HKCU - {B1E1E994-213C-4e3d-B228-4F725AC86D3D} URL =
http://www.google.com/custom?client...0FF;GIMP:0000FF;FORID:1&hl=en&q={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> E:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> E:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> E:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> E:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> E:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: E:\Users\Calvin\AppData\Roaming\Mozilla\Firefox\Profiles\thb1obiy.default
FF Plugin: @adobe.com/FlashPlayer -> E:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> E:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> E:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> E:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> E:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> E:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> E:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> E:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> E:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> E:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame -> E:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> E:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> E:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @softnyxNpruntime -> D:\Game\SoftnyxGame\NyxLauncherIS\npSoftnyx.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> E:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> E:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> E:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> E:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> E:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1199268278-559096122-390045334-1000: @unity3d.com/UnityPlayer,version=1.0 -> E:\Users\Calvin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Firefox Old Version Update Hotfix - E:\Users\Calvin\AppData\Roaming\Mozilla\Firefox\Profiles\thb1obiy.default\Extensions\
firefox-hotfix@mozilla.org.xpi [2014-10-09]
FF Extension: Hotspot Shield Extension - E:\Program Files (x86)\Mozilla Firefox\browser\extensions\
afproxy@anchorfree.com [2014-08-04]
FF HKLM-x32\...\Firefox\Extensions: [
content_blocker@kaspersky.com] - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
content_blocker@kaspersky.com
FF Extension: Ngăn chặn trang web nguy hiểm - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
content_blocker@kaspersky.com [2014-11-07]
FF HKLM-x32\...\Firefox\Extensions: [
virtual_keyboard@kaspersky.com] - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
virtual_keyboard@kaspersky.com
FF Extension: Bàn phím ảo - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
virtual_keyboard@kaspersky.com [2014-11-07]
FF HKLM-x32\...\Firefox\Extensions: [
url_advisor@kaspersky.com] - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
url_advisor@kaspersky.com
FF Extension: Công cụ kiểm tra liên kết của Kaspersky - E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\
url_advisor@kaspersky.com [2014-11-07]
Chrome:
=======
CHR HomePage: Default ->
CHR Profile: E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-17]
CHR Extension: (Google Drive) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-17]
CHR Extension: (Google Voice Search Hotword (Beta)) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-03]
CHR Extension: (YouTube) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-17]
CHR Extension: (Honey) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2014-01-19]
CHR Extension: (Adblock Plus) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-12-17]
CHR Extension: (Google Search) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-17]
CHR Extension: (Kaspersky Protection) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2014-11-10]
CHR Extension: (EditThisCookie) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2014-01-19]
CHR Extension: (AdBlock) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-22]
CHR Extension: (Allow Right-Click) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hompjdfbfmmmgflfjdlnkohcplmboaeo [2014-04-02]
CHR Extension: (Reddit Enhancement Suite) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2013-12-17]
CHR Extension: (Cookie Manager) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbnfbcpkiaganjpcanopcgeoehkleeck [2013-12-17]
CHR Extension: (Lazarus: Form Recovery) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\loljledaigphbcpfhfmgopdkppkifgno [2013-12-17]
CHR Extension: (Google Wallet) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-17]
CHR Extension: (Gmail) - E:\Users\Calvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-17]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] -
https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] -
https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AffinegyService; E:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe [563104 2011-12-07] (Affinegy, Inc.)
S2 AVP15.0.0; E:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 Belkin Local Backup Service; E:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [181760 2011-04-19] () [File not signed]
R2 Belkin Network USB Helper; E:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [55296 2010-02-09] () [File not signed]
R2 cFosSpeedS; E:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
R3 EvoSvc; E:\Program Files\Echobit\Evolve\EvoSvc.exe [1579936 2014-09-17] (Echobit LLC)
R2 GfExperienceService; E:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-16] (NVIDIA Corporation)
R2 Intel(R) ME Service; E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 ISCTAgent; E:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
S3 iumsvc; E:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; E:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 NvNetworkService; E:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-16] (NVIDIA Corporation)
R2 NvStreamSvc; E:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-16] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-05] (Electronic Arts)
R2 PDFProFiltSrvPP; E:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-08] (Nuance Communications, Inc.)
R2 PnkBstrA; E:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-07-10] ()
S3 SwitchBoard; E:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 AsrRamDisk; E:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
S3 FNETTBOH_305; E:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2014-10-08] (FNet Co., Ltd.)
R1 FNETURPX; E:\Windows\System32\drivers\FNETURPX.SYS [15936 2013-12-17] (FNet Co., Ltd.)
S3 ggsomc; E:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-07-28] (Sony Mobile Communications)
S3 GunBod; D:\Game\SoftnyxGame\GunBoundIS\avital\gunbod64.sys [86352 2014-07-27] ()
R1 HssDRV6; E:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2014-05-16] (AnchorFree Inc.)
R3 ISCT; E:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
R0 kl1; E:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; E:\Windows\System32\DRIVERS\klflt.sys [141320 2014-11-07] (Kaspersky Lab ZAO)
R1 klhk; E:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; E:\Windows\System32\DRIVERS\klif.sys [793800 2014-11-07] (Kaspersky Lab ZAO)
R1 KLIM6; E:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; E:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; E:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; E:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; E:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; E:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R3 LGSHidFilt; E:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 NvStreamKms; E:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; E:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
R3 rzendpt; E:\Windows\System32\DRIVERS\rzendpt.sys [39080 2013-11-15] (Razer Inc)
R2 sxuptp; E:\Windows\System32\DRIVERS\sxuptp.sys [291352 2009-06-22] (silex technology, Inc.)
R3 taphss6; E:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-16] (Anchorfree Inc.)
U3 TrueSight; E:\Windows\System32\drivers\TrueSight.sys [34808 2014-11-12] ()
R3 WPRO_41_2001; E:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-11-12] ()
S3 catchme; \??\E:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\E:\Windows\system32\drivers\EagleX64.sys [X]
S3 MSICDSetup; \??\G:\CDriver64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-12 20:20 - 2014-11-12 20:20 - 00029809 _____ () E:\Users\Calvin\Downloads\FRST.txt
2014-11-12 20:20 - 2014-11-12 20:20 - 00000000 ____D () E:\FRST
2014-11-12 20:16 - 2014-11-12 20:16 - 00000754 _____ () E:\Users\Calvin\Desktop\JRT.txt
2014-11-12 20:13 - 2014-11-12 20:13 - 00000000 ____D () E:\Windows\ERUNT
2014-11-12 20:10 - 2014-11-12 20:10 - 02116096 _____ (Farbar) E:\Users\Calvin\Downloads\FRST64.exe
2014-11-12 19:36 - 2014-11-12 20:06 - 00000000 ____D () E:\Qoobox
2014-11-12 19:36 - 2014-11-12 20:06 - 00000000 ____D () E:\ComboFix
2014-11-12 19:36 - 2014-11-12 20:00 - 00000000 ____D () E:\Windows\erdnt
2014-11-12 19:36 - 2011-06-26 01:45 - 00256000 _____ () E:\Windows\PEV.exe
2014-11-12 19:36 - 2010-11-07 12:20 - 00208896 _____ () E:\Windows\MBR.exe
2014-11-12 19:36 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) E:\Windows\NIRCMD.exe
2014-11-12 19:36 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) E:\Windows\SWREG.exe
2014-11-12 19:36 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) E:\Windows\SWSC.exe
2014-11-12 19:36 - 2000-08-30 19:00 - 00098816 _____ () E:\Windows\sed.exe
2014-11-12 19:36 - 2000-08-30 19:00 - 00080412 _____ () E:\Windows\grep.exe
2014-11-12 19:36 - 2000-08-30 19:00 - 00068096 _____ () E:\Windows\zip.exe
2014-11-12 19:28 - 2014-11-12 19:32 - 00000000 ____D () E:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-11-12 19:27 - 2014-11-12 19:32 - 00000000 ____D () E:\Users\Calvin\Desktop\mbar
2014-11-12 19:20 - 2014-11-12 19:21 - 00034808 _____ () E:\Windows\system32\Drivers\TrueSight.sys
2014-11-12 19:20 - 2014-11-12 19:20 - 00000000 ____D () E:\ProgramData\RogueKiller
2014-11-12 19:13 - 2014-11-12 19:13 - 00030034 _____ () E:\Users\Calvin\Desktop\dds.txt
2014-11-12 19:13 - 2014-11-12 19:13 - 00013235 _____ () E:\Users\Calvin\Desktop\attach.txt
2014-11-12 19:11 - 2014-11-12 19:11 - 00001165 _____ () E:\Users\Calvin\Downloads\mbam.txt
2014-11-12 19:06 - 2014-11-12 19:06 - 00043152 _____ (AVAST Software) E:\Windows\avastSS.scr
2014-11-12 19:06 - 2014-11-12 19:06 - 00000000 ____D () E:\Windows\SysWOW64\vbox
2014-11-12 19:06 - 2014-11-12 19:06 - 00000000 ____D () E:\Windows\system32\vbox
2014-11-12 19:06 - 2014-11-12 19:06 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\AVAST Software
2014-11-12 19:05 - 2014-11-12 19:05 - 00000000 ____D () E:\Program Files\AVAST Software
2014-11-12 19:04 - 2014-11-12 19:05 - 00000000 ____D () E:\ProgramData\AVAST Software
2014-11-12 15:12 - 2014-11-12 20:12 - 00000830 _____ () E:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-12 15:12 - 2014-11-12 15:12 - 00701104 _____ (Adobe Systems Incorporated) E:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-12 15:12 - 2014-11-12 15:12 - 00071344 _____ (Adobe Systems Incorporated) E:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-12 15:12 - 2014-11-12 15:12 - 00003768 _____ () E:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-12 03:16 - 2014-11-12 03:17 - 00000000 ____D () E:\Users\Calvin\Downloads\oct - nov pics
2014-11-12 02:43 - 2014-11-12 08:06 - 990212472 _____ () E:\Users\Calvin\Downloads\Mayli - SpermSuckers.zip
2014-11-12 01:54 - 2014-11-12 01:54 - 00000946 _____ () E:\Users\Calvin\Desktop\CDisplay.lnk
2014-11-12 01:54 - 2014-11-12 01:54 - 00000000 ____D () E:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplay
2014-11-12 01:54 - 2014-11-12 01:54 - 00000000 ____D () E:\Program Files (x86)\CDisplay
2014-11-11 04:35 - 2014-11-12 20:12 - 00000000 ____D () E:\AdwCleaner
2014-11-11 04:29 - 2014-11-11 04:29 - 01153912 _____ (Emsi Software GmbH) E:\Users\Calvin\Downloads\BlitzBlank.exe
2014-11-10 19:56 - 2014-11-10 20:03 - 02465089 _____ () E:\Users\Calvin\Documents\2deep4me.mp4
2014-11-10 01:35 - 2014-10-29 19:56 - 00614728 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvStreaming.exe
2014-11-10 01:34 - 2014-10-29 23:53 - 31890064 _____ (NVIDIA Corporation) E:\Windows\system32\nvoglv64.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 24554824 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvoglv32.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 20966504 _____ (NVIDIA Corporation) E:\Windows\system32\nvwgf2umx.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 20922696 _____ (NVIDIA Corporation) E:\Windows\system32\nvcompiler.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 19966856 _____ (NVIDIA Corporation) E:\Windows\system32\nvd3dumx.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 18497600 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvwgf2um.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 17258696 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvcompiler.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 14029400 _____ (NVIDIA Corporation) E:\Windows\system32\nvopencl.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 13942368 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuda.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 13189832 _____ (NVIDIA Corporation) E:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-10 01:34 - 2014-10-29 23:53 - 11395672 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvopencl.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 04289856 _____ (NVIDIA Corporation) E:\Windows\system32\nvcuvid.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 04011840 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvcuvid.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 01876296 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispco6434460.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 01539272 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispgenco6434460.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00961224 _____ (NVIDIA Corporation) E:\Windows\system32\NvIFR64.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00932168 _____ (NVIDIA Corporation) E:\Windows\system32\NvFBC64.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00922944 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\NvIFR.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00896144 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\NvFBC.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00870112 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvumdshim.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00352016 _____ (NVIDIA Corporation) E:\Windows\system32\nvoglshim64.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00303600 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvoglshim32.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00174856 _____ (NVIDIA Corporation) E:\Windows\system32\nvinitx.dll
2014-11-10 01:34 - 2014-10-29 23:53 - 00156840 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvinit.dll
2014-11-07 20:46 - 2014-11-07 20:46 - 00028616 _____ () E:\Users\Calvin\Documents\gas pedal strip 2002.veg
2014-11-07 01:44 - 2014-11-07 01:44 - 00001142 _____ () E:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-11-07 01:44 - 2014-11-07 01:44 - 00000000 ____D () E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2014-11-07 01:44 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) E:\Windows\system32\klfphc.dll
2014-11-07 01:43 - 2014-11-12 20:12 - 00000000 ____D () E:\ProgramData\Kaspersky Lab
2014-11-07 01:43 - 2014-11-07 01:52 - 00793800 _____ (Kaspersky Lab ZAO) E:\Windows\system32\Drivers\klif.sys
2014-11-07 01:43 - 2014-11-07 01:52 - 00141320 _____ (Kaspersky Lab ZAO) E:\Windows\system32\Drivers\klflt.sys
2014-11-07 01:43 - 2014-11-07 01:43 - 00000000 ____D () E:\Windows\ELAMBKUP
2014-11-07 01:43 - 2014-11-07 01:43 - 00000000 ____D () E:\Program Files (x86)\Kaspersky Lab
2014-11-07 01:43 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) E:\Windows\system32\Drivers\klhk.sys
2014-10-28 14:42 - 2014-10-28 14:42 - 00148177 _____ () E:\Users\Calvin\Downloads\jfsplit-1_0_1-jar.jar
2014-10-28 13:52 - 2014-10-28 14:18 - 2291925688 _____ () E:\Users\Calvin\Downloads\snowleopard_10a432_userdvd.dmg
2014-10-26 13:26 - 2014-10-26 13:27 - 83703231 _____ () E:\Users\Calvin\Documents\Untitled2.mp4
2014-10-26 13:25 - 2014-10-26 13:27 - 00879480 _____ () E:\Users\Calvin\Documents\Untitled.mp3.sfk
2014-10-26 13:11 - 2014-10-26 13:11 - 06180375 _____ () E:\Users\Calvin\Documents\michael.mp4
2014-10-25 14:52 - 2014-10-25 14:53 - 00000000 ____D () E:\Users\Calvin\Downloads\The Brothers Karamazov by Fyodor Dostoyevsky
2014-10-24 23:39 - 2014-10-24 23:39 - 00000574 _____ () E:\Windows\system32\https--fbcdn-sphotos-h-a.akamaihd.net-hphotos-ak-xpa1-v-t35.0-12-10742617_10152839449518384_1006.jpgoh=720b803d4b753965de926b89b08a9f90&oe=544E0A80&__gda__=1414407085_fdf4d4fe57b498a2076095bd5caec628.lnk
2014-10-23 15:53 - 2014-10-23 15:53 - 00000000 ___RD () E:\Users\Calvin\AppData\Roaming\Brother
2014-10-23 11:12 - 2014-10-29 21:10 - 02558792 _____ (NVIDIA Corporation) E:\Windows\system32\nvsvcr.dll
2014-10-23 11:12 - 2014-10-16 11:54 - 01876296 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispco6434448.dll
2014-10-23 11:12 - 2014-10-16 11:54 - 01539272 _____ (NVIDIA Corporation) E:\Windows\system32\nvdispgenco6434448.dll
2014-10-20 21:59 - 2014-10-20 23:36 - 00000000 ____D () E:\Users\Calvin\Downloads\random pics to send
2014-10-20 21:58 - 2014-11-08 16:39 - 00000000 ____D () E:\Users\Calvin\Downloads\yung lean
2014-10-20 21:57 - 2014-10-26 18:13 - 00000000 ____D () E:\Users\Calvin\Downloads\B01 Study
2014-10-20 21:57 - 2014-10-25 01:22 - 00000000 ____D () E:\Users\Calvin\Downloads\Lily
2014-10-20 21:57 - 2014-10-20 22:01 - 00000000 ____D () E:\Users\Calvin\Downloads\B65 Study
2014-10-18 18:55 - 2014-10-18 18:55 - 00000000 ____D () E:\Users\Calvin\Documents\Max
2014-10-18 18:55 - 2014-10-18 18:55 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Cycling '74
2014-10-18 18:44 - 2014-10-18 18:44 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\FLEXnet
2014-10-16 11:41 - 2014-10-16 11:41 - 00004298 _____ () E:\Windows\SysWOW64\jupdate-1.7.0_71-b14.log
2014-10-16 11:41 - 2014-10-16 11:41 - 00000000 ____D () E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-13 13:02 - 2014-10-13 13:03 - 11543512 _____ () E:\Users\Calvin\Documents\cuffs.mp4
2014-10-13 11:54 - 2014-10-13 11:54 - 03315714 _____ () E:\Users\Calvin\Documents\elliot soft.mp4
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-12 20:19 - 2013-12-17 21:53 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\uTorrent
2014-11-12 20:18 - 2009-07-14 00:13 - 00779266 _____ () E:\Windows\system32\PerfStringBackup.INI
2014-11-12 20:17 - 2009-07-13 23:45 - 00010016 ____H () E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-12 20:17 - 2009-07-13 23:45 - 00010016 ____H () E:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-12 20:15 - 2013-12-17 18:31 - 00389363 _____ () E:\Windows\WindowsUpdate.log
2014-11-12 20:13 - 2013-12-17 19:53 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Skype
2014-11-12 20:12 - 2014-03-08 18:24 - 00094656 _____ (CACE Technologies) E:\Windows\system32\WPRO_41_2001woem.tmp
2014-11-12 20:12 - 2014-01-02 19:04 - 00000000 ____D () E:\ProgramData\NVIDIA
2014-11-12 20:12 - 2013-12-18 21:58 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\FAHClient
2014-11-12 20:12 - 2013-12-18 16:07 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Dropbox
2014-11-12 20:12 - 2013-12-17 20:15 - 00000000 ____D () E:\ProgramData\Origin
2014-11-12 20:12 - 2013-12-17 20:13 - 00000000 ____D () E:\Program Files (x86)\Steam
2014-11-12 20:12 - 2013-12-17 18:43 - 00728466 _____ () E:\Windows\PFRO.log
2014-11-12 20:12 - 2013-12-17 18:43 - 00034752 _____ () E:\Windows\system32\Drivers\WPRO_41_2001.sys
2014-11-12 20:12 - 2013-12-17 18:43 - 00000894 _____ () E:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-12 20:12 - 2009-07-14 00:08 - 00000006 ____H () E:\Windows\Tasks\SA.DAT
2014-11-12 20:12 - 2009-07-13 23:51 - 00106049 _____ () E:\Windows\setupact.log
2014-11-12 19:49 - 2009-07-13 21:34 - 00000215 _____ () E:\Windows\system.ini
2014-11-12 19:28 - 2014-08-16 04:22 - 00131800 _____ (Malwarebytes Corporation) E:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-12 19:27 - 2014-08-16 04:22 - 00096472 _____ (Malwarebytes Corporation) E:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-12 19:25 - 2013-12-17 18:43 - 00000898 _____ () E:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-12 19:19 - 2014-09-11 06:14 - 00000000 ____D () E:\Users\Calvin\AppData\Local\Last.fm
2014-11-12 17:20 - 2013-12-17 18:43 - 00003894 _____ () E:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-12 17:20 - 2013-12-17 18:43 - 00003642 _____ () E:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-12 15:11 - 2014-08-21 23:30 - 00000000 ____D () E:\Users\Calvin\AppData\Local\Adobe
2014-11-12 05:00 - 2013-12-17 22:23 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\vlc
2014-11-12 03:15 - 2013-12-05 15:24 - 00000000 ____D () E:\Users\Calvin\Downloads\Random Sound Clips
2014-11-11 05:02 - 2013-12-17 18:41 - 00000000 ____D () E:\Users\Calvin\AppData\Local\Google
2014-11-11 04:37 - 2009-07-14 00:32 - 00000000 ____D () E:\Windows\addins
2014-11-11 04:31 - 2014-01-01 15:21 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Mozilla
2014-11-10 23:40 - 2014-01-29 20:54 - 00000132 _____ () E:\Users\Calvin\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-11-10 23:34 - 2014-05-29 03:04 - 00000000 ____D () E:\Users\Calvin\Downloads\Pics
2014-11-10 20:05 - 2014-03-11 23:04 - 00119808 ___SH () E:\Users\Calvin\Documents\Thumbs.db
2014-11-10 19:34 - 2014-07-08 02:42 - 00001041 _____ () E:\Users\Calvin\Desktop\WinX HD Video Converter Deluxe.lnk
2014-11-10 01:36 - 2013-12-17 19:11 - 00000000 ____D () E:\Users\Calvin\AppData\Local\CrashDumps
2014-11-10 01:36 - 2013-12-17 18:46 - 00000000 ____D () E:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-10 01:35 - 2013-12-17 18:45 - 00000000 ____D () E:\Program Files (x86)\NVIDIA Corporation
2014-11-07 01:41 - 2014-08-16 04:22 - 00001105 _____ () E:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-07 01:41 - 2014-08-16 04:22 - 00000000 ____D () E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-07 01:41 - 2014-08-16 04:22 - 00000000 ____D () E:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-05 18:31 - 2013-12-28 03:40 - 00000000 ____D () E:\Program Files (x86)\JDownloader
2014-11-05 18:15 - 2013-12-17 20:08 - 00000000 ____D () E:\Users\Calvin\AppData\Local\Battle.net
2014-11-04 02:46 - 2014-06-17 04:47 - 00000000 ____D () E:\Users\Calvin\Desktop\txt
2014-11-04 02:09 - 2009-07-13 22:20 - 00000000 ____D () E:\Windows\system32\NDF
2014-11-01 16:22 - 2013-12-20 09:29 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Audacity
2014-10-29 23:53 - 2014-06-20 16:18 - 11333848 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvcuda.dll
2014-10-29 23:53 - 2013-12-17 19:04 - 16886168 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvd3dum.dll
2014-10-29 23:53 - 2013-12-17 19:04 - 03237528 _____ (NVIDIA Corporation) E:\Windows\system32\nvapi64.dll
2014-10-29 23:53 - 2013-12-17 19:04 - 02849224 _____ (NVIDIA Corporation) E:\Windows\SysWOW64\nvapi.dll
2014-10-29 23:53 - 2013-12-17 19:04 - 00987008 _____ (NVIDIA Corporation) E:\Windows\system32\nvumdshimx.dll
2014-10-29 23:53 - 2013-12-17 19:04 - 00027024 _____ () E:\Windows\system32\nvinfo.pb
2014-10-29 21:39 - 2013-12-17 20:10 - 00000000 ____D () E:\Program Files (x86)\Hearthstone
2014-10-29 21:10 - 2014-01-02 19:03 - 06880968 _____ (NVIDIA Corporation) E:\Windows\system32\nvcpl.dll
2014-10-29 21:10 - 2014-01-02 19:03 - 03533632 _____ (NVIDIA Corporation) E:\Windows\system32\nvsvc64.dll
2014-10-29 21:10 - 2014-01-02 19:03 - 00935232 _____ (NVIDIA Corporation) E:\Windows\system32\nvvsvc.exe
2014-10-29 21:10 - 2014-01-02 19:03 - 00385352 _____ (NVIDIA Corporation) E:\Windows\system32\nvmctray.dll
2014-10-29 21:10 - 2014-01-02 19:03 - 00061640 _____ (NVIDIA Corporation) E:\Windows\system32\nvshext.dll
2014-10-29 20:58 - 2014-01-12 17:58 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-10-29 20:58 - 2013-12-17 20:08 - 00000000 ____D () E:\Program Files (x86)\Battle.net
2014-10-28 16:19 - 2014-01-26 12:32 - 00000000 ____D () E:\Users\Calvin\AppData\Local\Wing 101 4
2014-10-28 16:19 - 2014-01-26 12:31 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Wing 101 4
2014-10-28 04:20 - 2014-09-27 15:52 - 00000000 ___RD () E:\Program Files (x86)\Skype
2014-10-28 04:20 - 2013-12-17 19:53 - 00000000 ____D () E:\ProgramData\Skype
2014-10-26 19:34 - 2014-01-02 19:03 - 04066553 _____ () E:\Windows\system32\nvcoproc.bin
2014-10-23 11:25 - 2014-08-30 15:18 - 00000000 ____D () E:\Users\Calvin\AppData\Roaming\Mp3tag
2014-10-22 13:15 - 2014-09-22 18:19 - 00000000 ____D () E:\Users\Calvin\Documents\ArcheAge
2014-10-21 01:36 - 2014-09-21 11:07 - 00000000 ____D () E:\Users\Calvin\Downloads\Inferno_ A Novel
2014-10-18 18:56 - 2013-12-17 19:25 - 00000000 ____D () E:\Windows\system32\appmgmt
2014-10-18 18:44 - 2014-01-01 15:21 - 00000000 ____D () E:\Program Files (x86)\Mozilla Maintenance Service
2014-10-18 18:44 - 2014-01-01 15:21 - 00000000 ____D () E:\Program Files (x86)\Mozilla Firefox
2014-10-18 18:44 - 2009-07-13 23:45 - 04930520 _____ () E:\Windows\system32\FNTCACHE.DAT
2014-10-16 11:49 - 2013-12-18 08:09 - 00000000 ____D () E:\ProgramData\Oracle
2014-10-16 11:41 - 2013-12-18 08:09 - 00000000 ____D () E:\Program Files (x86)\Java
2014-10-15 17:45 - 2014-10-06 22:38 - 00000000 ____D () E:\ProgramData\Nuance
2014-10-13 17:33 - 2014-09-28 02:48 - 00001014 _____ () E:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
Some content of TEMP:
====================
E:\Users\Calvin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmped4ci7.dll
E:\Users\Calvin\AppData\Local\Temp\Quarantine.exe
E:\Users\Calvin\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
E:\Windows\System32\winlogon.exe => File is digitally signed
E:\Windows\System32\wininit.exe => File is digitally signed
E:\Windows\SysWOW64\wininit.exe => File is digitally signed
E:\Windows\explorer.exe => File is digitally signed
E:\Windows\SysWOW64\explorer.exe => File is digitally signed
E:\Windows\System32\svchost.exe => File is digitally signed
E:\Windows\SysWOW64\svchost.exe => File is digitally signed
E:\Windows\System32\services.exe => File is digitally signed
E:\Windows\System32\User32.dll => File is digitally signed
E:\Windows\SysWOW64\User32.dll => File is digitally signed
E:\Windows\System32\userinit.exe => File is digitally signed
E:\Windows\SysWOW64\userinit.exe => File is digitally signed
E:\Windows\System32\rpcss.dll => File is digitally signed
E:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-05 00:28
==================== End Of Log ============================
w4oZoQEs4jhSmzSZRXsvWz
