Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2015
Ran by Blackface (administrator) on BLACKFACE-PC on 20-01-2015 06:50:23
Running from C:\Users\Blackface\Desktop
Loaded Profiles: Blackface (Available profiles: Blackface & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(EasyTech) C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\ErrorReportLauncher.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\x86\FileIOSurrogate.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\x86\sfvstserver.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13657304 2013-10-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM\...\Policies\Explorer: [NoAutorun] 1
HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)
HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30878816 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> URL http://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP6599C0AB-72D8-4B14-8B06-ECE3F565E200&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://www.bing.com/search
BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\syswow64\urlmon.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 localhost
FireFox:
========
FF ProfilePath: C:\Users\Blackface\AppData\Roaming\Mozilla\Firefox\Profiles\nedizu6j.default
FF NewTab:
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll No File
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Blackface\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2015-01-17]
Chrome:
=======
CHR Profile: C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Kaboom) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\beahobhgpojnjfdjglaehfhdanaioode [2014-07-22]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-16]
CHR Extension: (Facebook Social Toolkit) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcachklhcihfinmagjnlomehfdhndhep [2014-11-26]
CHR Extension: (No Name) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-17]
CHR Extension: (Google Wallet) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-16]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 EasyRedirect; C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe [3575120 2012-11-22] (EasyTech)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2631456 2014-12-10] (IObit)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-12-02] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-15] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-22] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-05] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-18] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
S4 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
S2 simptcp; C:\Windows\SysWOW64\tcpsvcs.exe [9216 2009-07-13] (Microsoft Corporation)
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-20] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-25] (Disc Soft Ltd)
S3 EagleX64; No ImagePath
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-02] (REALiX(tm))
S4 LMIRfsClientNP; No ImagePath
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-20] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-06-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
R2 PfFilter; C:\Program Files (x86)\IObit\Protected Folder\pffilter.sys [39504 2013-04-03] (IObit Information Technology)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-03-18] ()
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-01-18] ()
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
S3 X6va017; No ImagePath
S3 X6va019; No ImagePath
S3 X6va021; No ImagePath
S3 X6va022; No ImagePath
S3 X6va023; No ImagePath
S3 X6va025; No ImagePath
S3 X6va026; No ImagePath
S3 X6va027; No ImagePath
S3 XFDriver64; C:\Program Files (x86)\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 CV2K1; system32\DRIVERS\cv2k1.sys [X]
S1 HssDRV6; system32\DRIVERS\hssdrv6.sys [X]
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va028; \??\C:\Windows\SysWOW64\Drivers\X6va028 [X]
S3 X6va029; \??\C:\Windows\SysWOW64\Drivers\X6va029 [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-20 06:50 - 2015-01-20 06:50 - 00016897 _____ () C:\Users\Blackface\Desktop\FRST.txt
2015-01-20 06:50 - 2015-01-20 06:50 - 00000000 ____D () C:\FRST
2015-01-20 06:49 - 2015-01-20 06:46 - 02126848 _____ (Farbar) C:\Users\Blackface\Desktop\FRST64.exe
2015-01-19 18:05 - 2015-01-19 19:29 - 2270261602 _____ () C:\Users\Blackface\Documents\Untitled.mp4
2015-01-19 03:25 - 2015-01-19 03:25 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-19 03:25 - 2015-01-19 03:25 - 00000000 _____ () C:\Windows\setupact.log
2015-01-18 17:39 - 2015-01-18 17:39 - 00000012 _____ () C:\Users\Blackface\Desktop\Sulman number.txt
2015-01-18 16:41 - 2015-01-18 16:41 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\eCyber
2015-01-18 12:11 - 2015-01-18 12:11 - 00000000 ____D () C:\Program Files (x86)\Windows Resource Kits
2015-01-18 11:37 - 2014-08-27 01:10 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2015-01-18 11:37 - 2014-08-27 01:10 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2015-01-18 11:29 - 2014-08-27 01:10 - 00942808 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2015-01-18 09:56 - 2015-01-18 16:57 - 00000000 ____D () C:\Users\Blackface\AppData\Local\CrashDumps
2015-01-18 05:59 - 2015-01-18 05:58 - 02448688 _____ (Megaify Software ) C:\Users\Blackface\Desktop\driver_setup.exe
2015-01-18 04:57 - 2015-01-18 04:57 - 00001710 _____ () C:\Users\Blackface\Desktop\JRT.txt
2015-01-18 04:53 - 2015-01-18 04:53 - 00050580 _____ () C:\ComboFix.txt
2015-01-18 04:42 - 2015-01-18 16:39 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-01-18 04:42 - 2015-01-18 04:53 - 00000000 ____D () C:\Qoobox
2015-01-18 04:42 - 2015-01-18 04:51 - 00000000 ____D () C:\Windows\erdnt
2015-01-18 04:42 - 2015-01-18 04:42 - 00000000 ____D () C:\Windows\ERUNT
2015-01-18 04:42 - 2015-01-18 04:42 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-01-18 04:42 - 2015-01-18 04:41 - 15340120 _____ () C:\Users\Blackface\Desktop\RogueKiller.exe
2015-01-18 04:42 - 2015-01-18 04:40 - 05608785 ____R (Swearware) C:\Users\Blackface\Desktop\ComboFix.exe
2015-01-18 04:42 - 2015-01-18 04:37 - 01707939 _____ (Thisisu) C:\Users\Blackface\Desktop\JRT.exe
2015-01-18 04:42 - 2011-06-26 01:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-01-18 04:42 - 2010-11-07 12:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-01-18 04:42 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00098816 _____ () C:\Windows\sed.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00080412 _____ () C:\Windows\grep.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00068096 _____ () C:\Windows\zip.exe
2015-01-18 04:27 - 2015-01-18 04:27 - 00130854 _____ () C:\Users\Blackface\Desktop\OTL.Txt
2015-01-18 04:27 - 2015-01-18 04:27 - 00072074 _____ () C:\Users\Blackface\Desktop\Extras.Txt
2015-01-18 04:22 - 2015-01-18 04:10 - 00602112 _____ (OldTimer Tools) C:\Users\Blackface\Desktop\OTL.exe
2015-01-18 04:00 - 2015-01-18 04:00 - 00000000 ____D () C:\ProgramData\ProductData
2015-01-17 20:58 - 2015-01-18 16:37 - 00000000 ____D () C:\ProgramData\notracks.com
2015-01-17 18:45 - 2015-01-17 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\turbodiagnosis
2015-01-17 18:44 - 2015-01-17 18:44 - 00002316 _____ () C:\Windows\patsearch.bin
2015-01-17 18:44 - 2015-01-17 18:44 - 00000000 ____D () C:\ProgramData\SearchModulePlus
2015-01-17 18:43 - 2015-01-18 04:55 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\moters
2015-01-17 18:43 - 2015-01-17 18:43 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Booster Web
2015-01-17 18:34 - 2015-01-17 18:40 - 00479312 _____ () C:\Users\Blackface\Downloads\Office 2010 PRO PLUS PreActivated [Project Antix]__9273_il2862.exe
2015-01-17 08:08 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-14 10:27 - 2015-01-14 11:27 - 05013680 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-01-14 02:20 - 2015-01-14 02:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy-Hide-IP
2015-01-14 02:18 - 2015-01-14 02:18 - 00000000 ____D () C:\Users\Blackface\AppData\Local\LogMeIn
2015-01-14 01:20 - 2015-01-14 01:20 - 00000000 ____D () C:\Windows\SysWOW64\HavijPro
2015-01-14 01:19 - 2015-01-14 01:25 - 00000000 ____D () C:\Users\Blackface\Desktop\sad
2015-01-14 01:18 - 2015-01-14 01:19 - 00692291 _____ () C:\Users\Blackface\Downloads\( uploadMB.com ) SQLi-DB.zip
2015-01-14 01:18 - 2015-01-14 01:18 - 05354206 _____ () C:\Users\Blackface\Downloads\Havij-v1.16-Pro-Portable-Cracked.7z
2015-01-13 18:00 - 2014-12-18 22:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-13 18:00 - 2014-12-18 20:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-13 18:00 - 2014-12-12 00:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-13 18:00 - 2014-12-12 00:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-13 18:00 - 2014-12-12 00:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-13 18:00 - 2014-12-12 00:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-13 18:00 - 2014-12-12 00:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-13 18:00 - 2014-12-12 00:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-13 18:00 - 2014-12-12 00:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-13 18:00 - 2014-12-11 12:47 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-13 18:00 - 2014-12-05 23:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-13 18:00 - 2014-12-05 22:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-13 18:00 - 2014-12-05 22:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-09 10:19 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-01-09 10:19 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-01-09 10:19 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-01-07 16:32 - 2015-01-17 18:58 - 00000000 ____D () C:\Windows\system32\log
2015-01-07 16:31 - 2015-01-07 16:31 - 00729504 _____ (Elex do Brasil Participações Ltda) C:\Users\Blackface\Downloads\yet_another_cleaner_sk_6142890.exe
2015-01-07 16:26 - 2015-01-07 17:26 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2015-01-07 16:26 - 2015-01-07 16:26 - 00003770 _____ () C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
2015-01-07 16:26 - 2015-01-07 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
2015-01-07 16:23 - 2015-01-07 16:23 - 09698760 _____ (Nota Inc. ) C:\Users\Blackface\Downloads\Gyazo-2.3.0.exe
2015-01-04 21:42 - 2015-01-04 21:42 - 00000000 ____D () C:\Users\Blackface\Documents\My Games
2015-01-04 17:38 - 2015-01-19 04:41 - 00000000 ____D () C:\Users\Blackface\AppData\Local\LogMeIn Hamachi
2015-01-04 17:38 - 2015-01-04 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-01-04 17:38 - 2015-01-04 17:38 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2015-01-04 17:36 - 2015-01-04 17:36 - 08527872 _____ () C:\Users\Blackface\Downloads\Hamachi.msi
2015-01-04 17:31 - 2015-01-18 16:57 - 00000000 ____D () C:\ProgramData\LogMeIn
2015-01-04 17:31 - 2015-01-09 10:05 - 00000964 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk
2015-01-04 17:31 - 2015-01-09 10:05 - 00000948 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
2015-01-04 17:31 - 2015-01-04 17:32 - 00000000 ____D () C:\Users\Blackface\AppData\Local\LogMeInIgnition
2015-01-04 17:31 - 2015-01-04 17:31 - 00001024 _____ () C:\.rnd
2015-01-04 17:31 - 2014-10-31 11:55 - 00107392 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll
2015-01-04 17:31 - 2014-10-31 11:54 - 00092520 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll
2015-01-04 17:31 - 2014-10-31 11:54 - 00035688 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll
2015-01-04 17:31 - 2014-10-31 11:15 - 00072216 _____ (LogMeIn, Inc.) C:\Windows\system32\Drivers\LMIRfsDriver.sys
2015-01-04 17:29 - 2015-01-04 17:30 - 26279936 _____ () C:\Users\Blackface\Downloads\LogMeIn.msi
2015-01-04 17:27 - 2015-01-04 18:01 - 00000000 ____D () C:\Users\Blackface\Documents\Dolphin Emulator
2015-01-04 17:26 - 2015-01-04 17:26 - 04936808 _____ () C:\Users\Blackface\Downloads\dolphin-master-4.0-4920-x64.7z
2015-01-04 17:24 - 2015-01-04 17:44 - 00000000 ____D () C:\Users\Blackface\Downloads\New Super Mario Bros Wii [MULTI5][WII-Scrubber][PAL][
WwW.GamesTorrents.CoM]
2015-01-04 17:13 - 2015-01-04 17:14 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-01-04 17:13 - 2015-01-04 17:13 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-01-04 16:58 - 2015-01-04 16:58 - 00000000 ____H () C:\Users\Blackface\Documents\Default.rdp
2015-01-04 16:39 - 2015-01-04 16:39 - 00002495 _____ () C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DC Universe Online.lnk
2015-01-04 16:39 - 2015-01-04 16:39 - 00002465 _____ () C:\Users\Blackface\Desktop\DC Universe Online.lnk
2015-01-04 16:39 - 2015-01-04 16:39 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-01-04 16:39 - 2015-01-04 16:39 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2015-01-04 16:39 - 2015-01-04 16:39 - 00000000 ____D () C:\Users\Blackface\AppData\Local\SCE
2015-01-04 16:38 - 2015-01-04 16:38 - 26520968 _____ () C:\Users\Blackface\Downloads\DCUO_setup.exe
2015-01-02 09:30 - 2015-01-02 09:30 - 00000000 ____H () C:\asc_rdflag
2015-01-02 09:28 - 2014-12-12 19:47 - 00620176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-01-02 09:26 - 2014-12-13 05:08 - 32099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 25460552 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 24764232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 20465808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 16040184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 13288360 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 13202520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 10770120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 10710160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 10345280 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-02 09:26 - 2014-12-13 05:08 - 03610440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 03248968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 01895056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434709.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 01556624 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434709.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00994384 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00968336 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00928072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00906560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00876976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00391488 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00353224 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00346944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00306328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00178632 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00165760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-01-02 09:26 - 2014-10-09 12:02 - 00195728 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-01-02 09:26 - 2014-10-09 12:02 - 00030536 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-01-02 09:26 - 2014-10-09 02:17 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 60636160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2015-01-02 08:12 - 2015-01-02 08:12 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 03962840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-01-02 08:12 - 2015-01-02 08:12 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-01-02 08:12 - 2015-01-02 08:12 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-01-02 08:12 - 2015-01-02 08:12 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2015-01-02 08:06 - 2015-01-02 08:06 - 09890008 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2015-01-02 08:06 - 2015-01-02 08:06 - 00272600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUStor.sys
2015-01-02 08:05 - 2015-01-02 08:11 - 00003176 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Startup
2015-01-02 08:05 - 2015-01-02 08:11 - 00003174 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2015-01-02 08:04 - 2015-01-02 08:04 - 02472136 _____ (Ralink Technology, Corp.) C:\Windows\system32\Drivers\netr28x.sys
2015-01-02 08:04 - 2015-01-02 08:04 - 00332080 _____ (Ralink Technology, Inc.) C:\Windows\system32\SET4FA0.tmp
2015-01-02 08:04 - 2015-01-02 08:04 - 00332080 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll
2015-01-02 08:04 - 2015-01-02 08:04 - 00013973 _____ () C:\Windows\system32\RaCoInst.dat
2015-01-02 08:03 - 2015-01-02 08:03 - 00026528 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2015-01-02 08:02 - 2015-01-02 08:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2
2015-01-02 07:44 - 2015-01-02 07:44 - 00000000 ____D () C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2014-12-25 19:31 - 2014-12-25 19:31 - 10067126 _____ () C:\Program Files\Easy-Hide-IP.rar
2014-12-22 19:55 - 2014-12-22 19:55 - 00000000 ____D () C:\Users\Blackface\Documents\WB Games
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-20 06:43 - 2014-03-18 22:02 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Skype
2015-01-20 06:27 - 2014-03-18 22:24 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-20 03:00 - 2014-03-18 18:58 - 01779896 _____ () C:\Windows\WindowsUpdate.log
2015-01-20 01:51 - 2014-05-01 12:39 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-18 16:57 - 2014-03-20 23:30 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\uTorrent
2015-01-18 16:45 - 2009-07-13 23:45 - 00027040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-18 16:45 - 2009-07-13 23:45 - 00027040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-18 16:44 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-18 16:43 - 2009-07-14 00:13 - 00825574 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-18 16:37 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-18 16:36 - 2014-08-04 17:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-18 16:27 - 2014-03-18 23:23 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit
2015-01-18 13:56 - 2014-05-27 14:54 - 00059840 _____ () C:\Users\Blackface\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-18 13:56 - 2009-07-13 23:45 - 00273376 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-18 11:37 - 2014-03-18 19:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-18 11:37 - 2014-03-18 19:19 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-18 09:55 - 2014-07-15 10:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-18 04:53 - 2009-07-13 22:20 - 00000000 ___RD () C:\Users\Default
2015-01-18 04:49 - 2009-07-13 21:34 - 00000215 _____ () C:\Windows\system.ini
2015-01-18 04:48 - 2009-07-13 21:34 - 64749568 _____ () C:\Windows\system32\config\SOFTWARE.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 22544384 _____ () C:\Windows\system32\config\SYSTEM.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 00028672 _____ () C:\Windows\system32\config\SAM.bak
2015-01-18 04:47 - 2014-09-13 19:31 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-17 20:42 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2015-01-17 20:18 - 2014-04-19 00:35 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\vlc
2015-01-17 20:17 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\Registration
2015-01-17 19:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2015-01-17 19:28 - 2014-03-18 23:41 - 00009701 _____ () C:\Windows\system32\RaCoInst.log
2015-01-17 19:16 - 2014-07-14 18:17 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\TS3Client
2015-01-17 19:15 - 2014-07-10 05:53 - 00000000 ____D () C:\AdwCleaner
2015-01-17 18:58 - 2014-07-22 03:38 - 00001144 _____ () C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-17 18:58 - 2014-07-15 10:30 - 00001025 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-17 18:58 - 2014-07-15 10:30 - 00001013 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-17 18:58 - 2014-05-16 17:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-17 18:44 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-15 08:34 - 2014-07-26 11:48 - 00003520 _____ () C:\Windows\SysWOW64\EasyRedirect.ini
2015-01-15 08:34 - 2014-07-26 11:48 - 00002040 _____ () C:\Windows\SysWOW64\EasyRedirectOff.ini
2015-01-15 08:34 - 2014-07-26 11:48 - 00002040 _____ () C:\Windows\system32\EasyRedirectOff.ini
2015-01-14 22:29 - 2014-06-15 16:52 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\BoL
2015-01-14 18:27 - 2014-07-14 18:17 - 00000000 ____D () C:\Users\Blackface\AppData\Local\TeamSpeak 3 Client
2015-01-14 13:46 - 2014-10-26 14:24 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Xfire
2015-01-14 13:46 - 2014-10-26 14:23 - 00000000 ____D () C:\ProgramData\Xfire
2015-01-14 13:45 - 2014-10-26 14:23 - 00000000 ____D () C:\Program Files (x86)\Xfire2
2015-01-14 11:27 - 2014-03-18 22:24 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-14 11:27 - 2014-03-18 22:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-14 11:27 - 2014-03-18 22:24 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-14 03:03 - 2014-08-16 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 03:00 - 2014-08-16 02:00 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 02:20 - 2014-07-26 11:48 - 00000000 ____D () C:\Program Files\Easy-Hide-IP
2015-01-09 10:56 - 2014-08-05 14:24 - 00000000 ____D () C:\Program Files\Wireshark
2015-01-09 10:19 - 2014-03-19 07:49 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2015-01-09 10:19 - 2014-03-19 07:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-01-09 10:05 - 2014-03-19 22:43 - 00000000 ____D () C:\Windows\pss
2015-01-08 16:42 - 2014-04-21 18:26 - 00000000 ____D () C:\ProgramData\Origin
2015-01-08 15:45 - 2014-04-21 18:26 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-01-07 16:50 - 2014-06-13 02:20 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Notepad++
2015-01-07 16:50 - 2014-05-02 15:07 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\TeamViewer
2015-01-07 16:50 - 2014-03-31 01:04 - 00000000 ____D () C:\Users\Blackface\Desktop\Program
2015-01-07 16:50 - 2014-03-18 22:28 - 00000000 ____D () C:\Windows\Panther
2015-01-07 16:38 - 2014-03-19 00:03 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-01-07 03:02 - 2014-03-19 15:30 - 00000000 ____D () C:\Users\Blackface\Documents\Cross Fire
2015-01-06 04:36 - 2014-03-18 19:56 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-05 02:49 - 2014-05-24 20:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-04 16:35 - 2014-08-31 16:30 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-01-02 09:30 - 2014-03-19 00:23 - 63442944 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 38817792 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 00286720 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 00028672 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-01-02 09:28 - 2014-08-04 17:12 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-01-02 09:28 - 2014-08-04 17:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-02 09:28 - 2014-06-23 16:03 - 00000000 ____D () C:\temp
2015-01-02 08:38 - 2014-09-23 17:51 - 00000000 ____D () C:\ProgramData\geeksn0w
2015-01-02 08:19 - 2014-03-19 00:03 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\IObit
2015-01-02 08:13 - 2014-03-19 21:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-01-02 08:09 - 2014-05-03 21:48 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\.minecraft
2015-01-02 08:02 - 2014-03-19 00:03 - 00000000 ____D () C:\ProgramData\IObit
2015-01-02 07:51 - 2014-03-18 18:56 - 00000000 ____D () C:\Users\Blackface
==================== Files in the root of some directories =======
2014-12-25 19:31 - 2014-12-25 19:31 - 10067126 _____ () C:\Program Files\Easy-Hide-IP.rar
2014-09-01 03:18 - 2014-09-01 03:18 - 0001248 _____ () C:\Users\Blackface\AppData\Roaming\GMDOU
2014-09-01 03:18 - 2014-09-01 03:18 - 0002086 _____ () C:\Users\Blackface\AppData\Roaming\NBEVA
2014-03-18 23:05 - 2014-03-18 23:05 - 0000017 _____ () C:\Users\Blackface\AppData\Local\resmon.resmoncfg
2014-06-10 20:21 - 2014-06-10 20:21 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some content of TEMP:
====================
C:\Users\Blackface\AppData\Local\Temp\dllnt_dump.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-04 05:46
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-01-2015
Ran by Blackface at 2015-01-20 06:50:53
Running from C:\Users\Blackface\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\uTorrent) (Version: 3.4.2.36802 - BitTorrent Inc.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassins Creed Revelations 1.01 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}_is1) (Version: 1.01 - Ubisoft)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bandicam (HKLM-x32\...\Bandicam) (Version: 2.0.3.674 - Bandisoft.com)
Battlefield 4 (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.23831 - Electronic Arts)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
CodeBlocks (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\CodeBlocks) (Version: 13.12 - The Code::Blocks Team)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Cross Fire En (HKLM-x32\...\Cross Fire_is1) (Version: - Z8Games.com)
CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DC Universe Online (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\SOE-DC Universe Online) (Version: 1.0.3.183 - Sony Online Entertainment)
DC Universe Online Live (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\SOE-DC Universe Online Live) (Version: - Sony Online Entertainment)
Driver Booster 2.1 (HKLM-x32\...\Driver Booster_is1) (Version: 2.1 - IObit)
Driver Checker v2.7.5 (HKLM-x32\...\Driver Checker_is1) (Version: 2.7.5 - driverchecker.com, Inc.)
Easy-Hide-IP 5.0.0.3 (HKLM\...\Easy-Hide-IP_is1) (Version: - EasyTech)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.107 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.107 - Etron Technology) Hidden
Fallen Evolution v.35 (HKLM-x32\...\Fallen Evolution v.35) (Version: v.35 - Elevations Productions)
GamersFirst LIVE! (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\GamersFirst LIVE!) (Version: - GamersFirst)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Gyazo 2.3 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
HxD Hex Editor version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden
iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
KNCTR (HKLM-x32\...\Itibiti_is1) (Version: - Itibiti Inc.)
League of Legends (HKLM-x32\...\League of Legends 3.0.0) (Version: 3.0.0 - Riot Games)
League of Legends (x32 Version: 3.0.0 - Riot Games) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.291 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.291 - LogMeIn, Inc.) Hidden
Macro Recorder 5.7.3 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.7.3 - Jitbit Software)
MacroMaker (HKLM-x32\...\{49E9E81A-9CA8-4A76-8AD6-BE7E3B2E1E2A}) (Version: 1.0.44 - ARM Software)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 35.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 35.0 (x86 en-US)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.6 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.09 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)
NVIDIA Graphics Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.9 - Power Software Ltd)
Process Hacker 2.33 (r5590) (HKLM\...\Process_Hacker2_is1) (Version: 2.33.0.5590 - wj32)
Protected Folder (HKLM-x32\...\Protected Folder_is1) (Version: - IObit)
Pulover's Macro Creator version 4.1.1 (HKLM\...\{223FFB42-2D49-4AF6-9EF2-82B7D0CAF8B4}_is1) (Version: 4.1.1 - Rodolfo U. Batista)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.12943.90 - raidcall.com)
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.1.59.0 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.90.826.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Sandboxie 4.12 (64-bit) (HKLM\...\Sandboxie) (Version: 4.12 - Sandboxie Holdings, LLC)
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden
Skype 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
SmartClose 1.3 (HKLM-x32\...\SmartClose.{7F22CBCB-92B5-4F5D-9A34-BB690215BEF2}_is1) (Version: 1.3 - BM-productions)
Splinter Cell Blacklist (HKLM-x32\...\Splinter Cell Blacklist_is1) (Version: - Ubisoft | RePack by BATYA)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
TeamSpeak 3 Client (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
Titanfall (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.8.10 - Electronic Arts)
Torchlight (HKLM-x32\...\Torchlight_is1) (Version: - GOG.com)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
Ventrilo Client for Windows x64 (HKLM\...\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}) (Version: 3.0.8.0 - Flagship Industries, Inc.)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.3.0.0 - Azureus Software, Inc.)
Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wondershare TunesGo ( Version 4.6.1 ) (HKLM-x32\...\{0B31C808-8274-460D-8846-C711D40544A0}_is1) (Version: 4.6.1 - Wondershare)
Xfire 2.0 (HKLM-x32\...\{43ADAE00-A4ED-4379-A76D-A1FF5D9D334A}_is1) (Version: 2.0 - Xfire, Inc.)
Xfire Codec (remove only) (HKLM-x32\...\XfireCodec) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 21:34 - 2015-01-18 16:43 - 00000768 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {38AE551A-2188-47CC-9B1A-7B9049FD0118} - \SMWPUpd No Task File <==== ATTENTION
Task: {5AC2E424-256D-486B-B374-542B8386DBF7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-14] (Adobe Systems Incorporated)
Task: {637F3B23-7911-424F-938F-C84AB3C42903} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit)
Task: {A7D063B2-FEB5-4244-95F2-2DF74534B43D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A9A0BC6F-504E-42C4-9727-03DFB579763B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {D9DD74DC-4493-4347-8D81-F9EBD82E8980} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2014-07-03] ()
Task: {F11AA8F2-1630-4323-A0FA-8EC4632F930F} - \SMW_UpdateTask_Time_313732363837373932362d3437415a556c2a3223346c41 No Task File <==== ATTENTION
Task: {FD0345FB-9FE7-490C-A92A-80BBE0F36C33} - System32\Tasks\SmartDefrag3_Startup => C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe [2014-03-10] (IObit)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-08-04 17:12 - 2014-12-13 03:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-24 03:14 - 2014-08-18 03:33 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-08-04 17:12 - 2014-11-06 12:08 - 00707400 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2014-08-04 17:12 - 2014-11-06 12:08 - 00854344 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2014-04-10 09:27 - 2014-04-10 09:27 - 01699616 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OpenColorIO.dll
2014-04-10 09:26 - 2014-04-10 09:26 - 00058144 _____ () C:\Program Files\Sony\Vegas Pro 13.0\FileIOProxyStubx64.dll
2014-04-10 09:26 - 2014-04-10 09:26 - 08351520 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\Filters.ofx.bundle\Contents\Win64\Filters.ofx
2014-03-31 11:19 - 2014-03-31 11:19 - 01215096 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HitFilmVegasBasic.ofx
2014-03-31 11:19 - 2014-03-31 11:19 - 00344696 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\BleachBypass.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00816760 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\LightFlares.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00383608 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\ScanLines.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00342136 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\ThreeStripColor.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00470136 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\TVDamage.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00377464 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\Vibrance.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00424568 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\WitnessProtection.hfpl
2014-04-10 09:26 - 2014-04-10 09:26 - 07573280 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\Stabilize.ofx.bundle\Contents\Win64\Stabilize.ofx
2014-04-10 09:26 - 2014-04-10 09:26 - 00380192 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\TitlesAndText.ofx.bundle\Contents\Win64\TitlesAndText.ofx
2014-04-10 09:26 - 2014-04-10 09:26 - 13704480 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\Vfx1.ofx.bundle\Contents\Win64\Vfx1.ofx
2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-31 11:16 - 2014-07-31 11:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-01-14 02:20 - 2012-11-22 15:10 - 02471248 _____ () c:\program files\easy-hide-ip\notracks.dll
2015-01-14 02:20 - 2012-09-12 08:49 - 00455168 _____ () C:\Program Files\Easy-Hide-IP\rdr\sqlite3.dll
2014-10-07 21:27 - 2014-10-07 21:27 - 00117760 _____ () C:\Users\Blackface\AppData\Roaming\moters\mentste.dll
2014-10-17 03:31 - 2014-10-17 03:31 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2014-03-18 19:31 - 2010-11-05 22:50 - 00058880 ____N () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-10 09:26 - 2014-04-10 09:26 - 00046368 _____ () C:\Program Files\Sony\Vegas Pro 13.0\x86\FileIOProxyStubx86.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Blackface\Downloads\Office 2010 PRO PLUS PreActivated [Project Antix]__9273_il2862.exe:typelib
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EasyRedirect => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdvancedSystemCareService7 => 2
MSCONFIG\Services: c2cautoupdatesvc => 2
MSCONFIG\Services: c2cpnrsvc => 2
MSCONFIG\Services: CltMngSvc => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IMFservice => 2
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: SbieSvc => 2
MSCONFIG\Services: vToolbarUpdater18.1.5 => 2
MSCONFIG\startupfolder: C:^Users^Blackface^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Xfire2.bat => C:\Windows\pss\Xfire2.bat.Startup
MSCONFIG\startupreg: Advanced SystemCare 8 => "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
MSCONFIG\startupreg: Easy-Hide-IP => C:\Program Files\Easy-Hide-IP\easy-hide-ip.exe
MSCONFIG\startupreg: LogMeIn GUI => "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe"
MSCONFIG\startupreg: uTorrent => "C:\Users\Blackface\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
========================= Accounts: ==========================
Administrator (S-1-5-21-1844497773-1764367655-1372063253-500 - Administrator - Disabled)
Blackface (S-1-5-21-1844497773-1764367655-1372063253-1000 - Administrator - Enabled) => C:\Users\Blackface
Guest (S-1-5-21-1844497773-1764367655-1372063253-501 - Limited - Disabled)
==================== Faulty Device Manager Devices =============
Name: LogMeIn Kernel Information Provider
Description: LogMeIn Kernel Information Provider
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: LMIInfo
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Hotspot Shield Routing Driver 6
Description: Hotspot Shield Routing Driver 6
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: HssDRV6
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Error: (01/19/2015 07:28:22 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
Error: (01/19/2015 04:46:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The ASP.NET State Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
Error: (01/19/2015 04:45:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The LogMeIn Hamachi Tunneling Engine service terminated unexpectedly. It has done this 1 time(s).
Error: (01/19/2015 04:44:45 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The TeamViewer 10 service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 2000 milliseconds: Restart the service.
Error: (01/19/2015 04:44:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Management and Security Application User Notification Service service terminated unexpectedly. It has done this 1 time(s).
Error: (01/19/2015 04:44:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The TeamViewer 10 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 2000 milliseconds: Restart the service.
Error: (01/19/2015 04:44:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Simple TCP/IP Services service terminated unexpectedly. It has done this 1 time(s).
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2015-01-18 04:47:20.054
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-01-18 04:47:20.018
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Percentage of memory in use: 33%
Total physical RAM: 12270.52 MB
Available physical RAM: 8207.94 MB
Total Pagefile: 30673.71 MB
Available Pagefile: 25897.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.19 GB) (Free:418.08 GB) NTFS
Drive d: () (Removable) (Total:1.86 GB) (Free:1.68 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 326930AB)
Partition: GPT Partition Type.
========================================================
Disk: 1 (Size: 1.9 GB) (Disk ID: C0369BCE)
Partition 1: (Not Active) - (Size=1.9 GB) - (Type=0B)
==================== End Of Log ============================