Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.

networkadapter disabled?

3K views 5 replies 2 participants last post by  JSntgRvr 
#1 ·
i have downloaded some viruses on my computer; i have run malware byte and adwcleaner and it removed around 500 viuses.
before i restarted my computer my internet connections was working fine but right after i restarted cause the malware byte scanner told me to restart my internet connection wasnt working. I tried doing trouble shoot but all it says is The wireless/wired network adapter is experiencing problems and didnt give a solution to fix it. I tried to do ipconfig /all on my cmd but all it gave me was "Windows ip configuration Host name ...: Blackface-pc , primay dns ....: (BLANK nothing was written) node type ... : Hybrid Ip routing enabled... No wins proxy enabled ... : No. nothing else. when i try to connect to my wifi it says limited acess and wont let me connect. when i try to connect lan it doesnt detect any lan input even tho thee a wire connected flashing green. The programs i have already used are : Malware byte, adwcleaner, OTL.exe, Roguekiller, Combofixer,JRT.exe
Also when i go check my status on my local area connection it says IPv4/6 not connected. Can you guys help me please!!

SysInfo:
Tech Support Guy System Info Utility version 1,0.0.2
OS Version: Microsoft winndows 7 ultimate, sevice pack 1 64 bits
Processor: Intel(R) Core(TM) i5-2320 cpu @ 3.00ghz, intel64Family 6
Model 42 stepping 7
Processor count: 4,
RAM: 12270Mb
Graphic card: NVIDIA GeFoce GTX660, -2048Mb
Hard Drives: C: total 953539 MB; Free - 8662 MB;
Motherboard: Gateway, IPISB-VR
Antivirus: None
 
See less See more
#3 ·
Welcome. :)

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Make sure that under Optional Scans, there is a checkmark on Addition.txt and Shortcut.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also produce another two logs (Addition.txt and Shortcut.txt). Please attach these to your reply.
 
#4 ·
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2015
Ran by Blackface (administrator) on BLACKFACE-PC on 20-01-2015 06:50:23
Running from C:\Users\Blackface\Desktop
Loaded Profiles: Blackface (Available profiles: Blackface & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(EasyTech) C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\ErrorReportLauncher.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\x86\FileIOSurrogate.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Vegas Pro 13.0\x86\sfvstserver.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13657304 2013-10-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM\...\Policies\Explorer: [NoAutorun] 1
HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)
HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30878816 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> URL http://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP6599C0AB-72D8-4B14-8B06-ECE3F565E200&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search
BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\syswow64\urlmon.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 localhost

FireFox:
========
FF ProfilePath: C:\Users\Blackface\AppData\Roaming\Mozilla\Firefox\Profiles\nedizu6j.default
FF NewTab:
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll No File
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Blackface\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2015-01-17]

Chrome:
=======
CHR Profile: C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Kaboom) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\beahobhgpojnjfdjglaehfhdanaioode [2014-07-22]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-16]
CHR Extension: (Facebook Social Toolkit) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcachklhcihfinmagjnlomehfdhndhep [2014-11-26]
CHR Extension: (No Name) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-17]
CHR Extension: (Google Wallet) - C:\Users\Blackface\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 EasyRedirect; C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe [3575120 2012-11-22] (EasyTech)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2631456 2014-12-10] (IObit)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-12-02] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-15] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-22] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-05] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-18] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
S4 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
S2 simptcp; C:\Windows\SysWOW64\tcpsvcs.exe [9216 2009-07-13] (Microsoft Corporation)
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-20] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-25] (Disc Soft Ltd)
S3 EagleX64; No ImagePath
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-02] (REALiX(tm))
S4 LMIRfsClientNP; No ImagePath
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-20] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-06-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
R2 PfFilter; C:\Program Files (x86)\IObit\Protected Folder\pffilter.sys [39504 2013-04-03] (IObit Information Technology)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-03-18] ()
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-01-18] ()
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
S3 X6va017; No ImagePath
S3 X6va019; No ImagePath
S3 X6va021; No ImagePath
S3 X6va022; No ImagePath
S3 X6va023; No ImagePath
S3 X6va025; No ImagePath
S3 X6va026; No ImagePath
S3 X6va027; No ImagePath
S3 XFDriver64; C:\Program Files (x86)\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 CV2K1; system32\DRIVERS\cv2k1.sys [X]
S1 HssDRV6; system32\DRIVERS\hssdrv6.sys [X]
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va028; \??\C:\Windows\SysWOW64\Drivers\X6va028 [X]
S3 X6va029; \??\C:\Windows\SysWOW64\Drivers\X6va029 [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-20 06:50 - 2015-01-20 06:50 - 00016897 _____ () C:\Users\Blackface\Desktop\FRST.txt
2015-01-20 06:50 - 2015-01-20 06:50 - 00000000 ____D () C:\FRST
2015-01-20 06:49 - 2015-01-20 06:46 - 02126848 _____ (Farbar) C:\Users\Blackface\Desktop\FRST64.exe
2015-01-19 18:05 - 2015-01-19 19:29 - 2270261602 _____ () C:\Users\Blackface\Documents\Untitled.mp4
2015-01-19 03:25 - 2015-01-19 03:25 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-19 03:25 - 2015-01-19 03:25 - 00000000 _____ () C:\Windows\setupact.log
2015-01-18 17:39 - 2015-01-18 17:39 - 00000012 _____ () C:\Users\Blackface\Desktop\Sulman number.txt
2015-01-18 16:41 - 2015-01-18 16:41 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\eCyber
2015-01-18 12:11 - 2015-01-18 12:11 - 00000000 ____D () C:\Program Files (x86)\Windows Resource Kits
2015-01-18 11:37 - 2014-08-27 01:10 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2015-01-18 11:37 - 2014-08-27 01:10 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2015-01-18 11:29 - 2014-08-27 01:10 - 00942808 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2015-01-18 09:56 - 2015-01-18 16:57 - 00000000 ____D () C:\Users\Blackface\AppData\Local\CrashDumps
2015-01-18 05:59 - 2015-01-18 05:58 - 02448688 _____ (Megaify Software ) C:\Users\Blackface\Desktop\driver_setup.exe
2015-01-18 04:57 - 2015-01-18 04:57 - 00001710 _____ () C:\Users\Blackface\Desktop\JRT.txt
2015-01-18 04:53 - 2015-01-18 04:53 - 00050580 _____ () C:\ComboFix.txt
2015-01-18 04:42 - 2015-01-18 16:39 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-01-18 04:42 - 2015-01-18 04:53 - 00000000 ____D () C:\Qoobox
2015-01-18 04:42 - 2015-01-18 04:51 - 00000000 ____D () C:\Windows\erdnt
2015-01-18 04:42 - 2015-01-18 04:42 - 00000000 ____D () C:\Windows\ERUNT
2015-01-18 04:42 - 2015-01-18 04:42 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-01-18 04:42 - 2015-01-18 04:41 - 15340120 _____ () C:\Users\Blackface\Desktop\RogueKiller.exe
2015-01-18 04:42 - 2015-01-18 04:40 - 05608785 ____R (Swearware) C:\Users\Blackface\Desktop\ComboFix.exe
2015-01-18 04:42 - 2015-01-18 04:37 - 01707939 _____ (Thisisu) C:\Users\Blackface\Desktop\JRT.exe
2015-01-18 04:42 - 2011-06-26 01:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-01-18 04:42 - 2010-11-07 12:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-01-18 04:42 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00098816 _____ () C:\Windows\sed.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00080412 _____ () C:\Windows\grep.exe
2015-01-18 04:42 - 2000-08-30 19:00 - 00068096 _____ () C:\Windows\zip.exe
2015-01-18 04:27 - 2015-01-18 04:27 - 00130854 _____ () C:\Users\Blackface\Desktop\OTL.Txt
2015-01-18 04:27 - 2015-01-18 04:27 - 00072074 _____ () C:\Users\Blackface\Desktop\Extras.Txt
2015-01-18 04:22 - 2015-01-18 04:10 - 00602112 _____ (OldTimer Tools) C:\Users\Blackface\Desktop\OTL.exe
2015-01-18 04:00 - 2015-01-18 04:00 - 00000000 ____D () C:\ProgramData\ProductData
2015-01-17 20:58 - 2015-01-18 16:37 - 00000000 ____D () C:\ProgramData\notracks.com
2015-01-17 18:45 - 2015-01-17 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\turbodiagnosis
2015-01-17 18:44 - 2015-01-17 18:44 - 00002316 _____ () C:\Windows\patsearch.bin
2015-01-17 18:44 - 2015-01-17 18:44 - 00000000 ____D () C:\ProgramData\SearchModulePlus
2015-01-17 18:43 - 2015-01-18 04:55 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\moters
2015-01-17 18:43 - 2015-01-17 18:43 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Booster Web
2015-01-17 18:34 - 2015-01-17 18:40 - 00479312 _____ () C:\Users\Blackface\Downloads\Office 2010 PRO PLUS PreActivated [Project Antix]__9273_il2862.exe
2015-01-17 08:08 - 2015-01-18 09:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-14 10:27 - 2015-01-14 11:27 - 05013680 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-01-14 02:20 - 2015-01-14 02:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy-Hide-IP
2015-01-14 02:18 - 2015-01-14 02:18 - 00000000 ____D () C:\Users\Blackface\AppData\Local\LogMeIn
2015-01-14 01:20 - 2015-01-14 01:20 - 00000000 ____D () C:\Windows\SysWOW64\HavijPro
2015-01-14 01:19 - 2015-01-14 01:25 - 00000000 ____D () C:\Users\Blackface\Desktop\sad
2015-01-14 01:18 - 2015-01-14 01:19 - 00692291 _____ () C:\Users\Blackface\Downloads\( uploadMB.com ) SQLi-DB.zip
2015-01-14 01:18 - 2015-01-14 01:18 - 05354206 _____ () C:\Users\Blackface\Downloads\Havij-v1.16-Pro-Portable-Cracked.7z
2015-01-13 18:00 - 2014-12-18 22:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-13 18:00 - 2014-12-18 20:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-13 18:00 - 2014-12-12 00:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-13 18:00 - 2014-12-12 00:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-13 18:00 - 2014-12-12 00:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-13 18:00 - 2014-12-12 00:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-13 18:00 - 2014-12-12 00:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-13 18:00 - 2014-12-12 00:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-13 18:00 - 2014-12-12 00:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-13 18:00 - 2014-12-11 12:47 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-13 18:00 - 2014-12-05 23:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-13 18:00 - 2014-12-05 22:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-13 18:00 - 2014-12-05 22:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-09 10:19 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-01-09 10:19 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-01-09 10:19 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-01-07 16:32 - 2015-01-17 18:58 - 00000000 ____D () C:\Windows\system32\log
2015-01-07 16:31 - 2015-01-07 16:31 - 00729504 _____ (Elex do Brasil Participações Ltda) C:\Users\Blackface\Downloads\yet_another_cleaner_sk_6142890.exe
2015-01-07 16:26 - 2015-01-07 17:26 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2015-01-07 16:26 - 2015-01-07 16:26 - 00003770 _____ () C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
2015-01-07 16:26 - 2015-01-07 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
2015-01-07 16:23 - 2015-01-07 16:23 - 09698760 _____ (Nota Inc. ) C:\Users\Blackface\Downloads\Gyazo-2.3.0.exe
2015-01-04 21:42 - 2015-01-04 21:42 - 00000000 ____D () C:\Users\Blackface\Documents\My Games
2015-01-04 17:38 - 2015-01-19 04:41 - 00000000 ____D () C:\Users\Blackface\AppData\Local\LogMeIn Hamachi
2015-01-04 17:38 - 2015-01-04 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-01-04 17:38 - 2015-01-04 17:38 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2015-01-04 17:36 - 2015-01-04 17:36 - 08527872 _____ () C:\Users\Blackface\Downloads\Hamachi.msi
2015-01-04 17:31 - 2015-01-18 16:57 - 00000000 ____D () C:\ProgramData\LogMeIn
2015-01-04 17:31 - 2015-01-09 10:05 - 00000964 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk
2015-01-04 17:31 - 2015-01-09 10:05 - 00000948 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
2015-01-04 17:31 - 2015-01-04 17:32 - 00000000 ____D () C:\Users\Blackface\AppData\Local\LogMeInIgnition
2015-01-04 17:31 - 2015-01-04 17:31 - 00001024 _____ () C:\.rnd
2015-01-04 17:31 - 2014-10-31 11:55 - 00107392 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll
2015-01-04 17:31 - 2014-10-31 11:54 - 00092520 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll
2015-01-04 17:31 - 2014-10-31 11:54 - 00035688 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll
2015-01-04 17:31 - 2014-10-31 11:15 - 00072216 _____ (LogMeIn, Inc.) C:\Windows\system32\Drivers\LMIRfsDriver.sys
2015-01-04 17:29 - 2015-01-04 17:30 - 26279936 _____ () C:\Users\Blackface\Downloads\LogMeIn.msi
2015-01-04 17:27 - 2015-01-04 18:01 - 00000000 ____D () C:\Users\Blackface\Documents\Dolphin Emulator
2015-01-04 17:26 - 2015-01-04 17:26 - 04936808 _____ () C:\Users\Blackface\Downloads\dolphin-master-4.0-4920-x64.7z
2015-01-04 17:24 - 2015-01-04 17:44 - 00000000 ____D () C:\Users\Blackface\Downloads\New Super Mario Bros Wii [MULTI5][WII-Scrubber][PAL][WwW.GamesTorrents.CoM]
2015-01-04 17:13 - 2015-01-04 17:14 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-01-04 17:13 - 2015-01-04 17:13 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-01-04 16:58 - 2015-01-04 16:58 - 00000000 ____H () C:\Users\Blackface\Documents\Default.rdp
2015-01-04 16:39 - 2015-01-04 16:39 - 00002495 _____ () C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DC Universe Online.lnk
2015-01-04 16:39 - 2015-01-04 16:39 - 00002465 _____ () C:\Users\Blackface\Desktop\DC Universe Online.lnk
2015-01-04 16:39 - 2015-01-04 16:39 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-01-04 16:39 - 2015-01-04 16:39 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2015-01-04 16:39 - 2015-01-04 16:39 - 00000000 ____D () C:\Users\Blackface\AppData\Local\SCE
2015-01-04 16:38 - 2015-01-04 16:38 - 26520968 _____ () C:\Users\Blackface\Downloads\DCUO_setup.exe
2015-01-02 09:30 - 2015-01-02 09:30 - 00000000 ____H () C:\asc_rdflag
2015-01-02 09:28 - 2014-12-12 19:47 - 00620176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-01-02 09:26 - 2014-12-13 05:08 - 32099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 25460552 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 24764232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 20465808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 16040184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 13288360 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 13202520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 10770120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 10710160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 10345280 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-02 09:26 - 2014-12-13 05:08 - 03610440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 03248968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 01895056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434709.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 01556624 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434709.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00994384 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00968336 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00928072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00906560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00876976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00399688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00391488 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00353224 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00346944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00306328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00178632 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-01-02 09:26 - 2014-12-13 05:08 - 00165760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-01-02 09:26 - 2014-10-09 12:02 - 00195728 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-01-02 09:26 - 2014-10-09 12:02 - 00030536 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-01-02 09:26 - 2014-10-09 02:17 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 60636160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2015-01-02 08:12 - 2015-01-02 08:12 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 03962840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-01-02 08:12 - 2015-01-02 08:12 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-01-02 08:12 - 2015-01-02 08:12 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-01-02 08:12 - 2015-01-02 08:12 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2015-01-02 08:12 - 2015-01-02 08:12 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2015-01-02 08:06 - 2015-01-02 08:06 - 09890008 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2015-01-02 08:06 - 2015-01-02 08:06 - 00272600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUStor.sys
2015-01-02 08:05 - 2015-01-02 08:11 - 00003176 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Startup
2015-01-02 08:05 - 2015-01-02 08:11 - 00003174 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2015-01-02 08:04 - 2015-01-02 08:04 - 02472136 _____ (Ralink Technology, Corp.) C:\Windows\system32\Drivers\netr28x.sys
2015-01-02 08:04 - 2015-01-02 08:04 - 00332080 _____ (Ralink Technology, Inc.) C:\Windows\system32\SET4FA0.tmp
2015-01-02 08:04 - 2015-01-02 08:04 - 00332080 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll
2015-01-02 08:04 - 2015-01-02 08:04 - 00013973 _____ () C:\Windows\system32\RaCoInst.dat
2015-01-02 08:03 - 2015-01-02 08:03 - 00026528 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2015-01-02 08:02 - 2015-01-02 08:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2
2015-01-02 07:44 - 2015-01-02 07:44 - 00000000 ____D () C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2014-12-25 19:31 - 2014-12-25 19:31 - 10067126 _____ () C:\Program Files\Easy-Hide-IP.rar
2014-12-22 19:55 - 2014-12-22 19:55 - 00000000 ____D () C:\Users\Blackface\Documents\WB Games

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-20 06:43 - 2014-03-18 22:02 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Skype
2015-01-20 06:27 - 2014-03-18 22:24 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-20 03:00 - 2014-03-18 18:58 - 01779896 _____ () C:\Windows\WindowsUpdate.log
2015-01-20 01:51 - 2014-05-01 12:39 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-18 16:57 - 2014-03-20 23:30 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\uTorrent
2015-01-18 16:45 - 2009-07-13 23:45 - 00027040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-18 16:45 - 2009-07-13 23:45 - 00027040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-18 16:44 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-18 16:43 - 2009-07-14 00:13 - 00825574 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-18 16:37 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-18 16:36 - 2014-08-04 17:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-18 16:27 - 2014-03-18 23:23 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit
2015-01-18 13:56 - 2014-05-27 14:54 - 00059840 _____ () C:\Users\Blackface\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-18 13:56 - 2009-07-13 23:45 - 00273376 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-18 11:37 - 2014-03-18 19:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-18 11:37 - 2014-03-18 19:19 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-18 09:55 - 2014-07-15 10:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-18 04:53 - 2009-07-13 22:20 - 00000000 ___RD () C:\Users\Default
2015-01-18 04:49 - 2009-07-13 21:34 - 00000215 _____ () C:\Windows\system.ini
2015-01-18 04:48 - 2009-07-13 21:34 - 64749568 _____ () C:\Windows\system32\config\SOFTWARE.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 22544384 _____ () C:\Windows\system32\config\SYSTEM.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2015-01-18 04:48 - 2009-07-13 21:34 - 00028672 _____ () C:\Windows\system32\config\SAM.bak
2015-01-18 04:47 - 2014-09-13 19:31 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-01-17 20:42 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2015-01-17 20:18 - 2014-04-19 00:35 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\vlc
2015-01-17 20:17 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\Registration
2015-01-17 19:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2015-01-17 19:28 - 2014-03-18 23:41 - 00009701 _____ () C:\Windows\system32\RaCoInst.log
2015-01-17 19:16 - 2014-07-14 18:17 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\TS3Client
2015-01-17 19:15 - 2014-07-10 05:53 - 00000000 ____D () C:\AdwCleaner
2015-01-17 18:58 - 2014-07-22 03:38 - 00001144 _____ () C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-17 18:58 - 2014-07-15 10:30 - 00001025 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-17 18:58 - 2014-07-15 10:30 - 00001013 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-17 18:58 - 2014-05-16 17:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-17 18:44 - 2009-07-13 22:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-15 08:34 - 2014-07-26 11:48 - 00003520 _____ () C:\Windows\SysWOW64\EasyRedirect.ini
2015-01-15 08:34 - 2014-07-26 11:48 - 00002040 _____ () C:\Windows\SysWOW64\EasyRedirectOff.ini
2015-01-15 08:34 - 2014-07-26 11:48 - 00002040 _____ () C:\Windows\system32\EasyRedirectOff.ini
2015-01-14 22:29 - 2014-06-15 16:52 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\BoL
2015-01-14 18:27 - 2014-07-14 18:17 - 00000000 ____D () C:\Users\Blackface\AppData\Local\TeamSpeak 3 Client
2015-01-14 13:46 - 2014-10-26 14:24 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Xfire
2015-01-14 13:46 - 2014-10-26 14:23 - 00000000 ____D () C:\ProgramData\Xfire
2015-01-14 13:45 - 2014-10-26 14:23 - 00000000 ____D () C:\Program Files (x86)\Xfire2
2015-01-14 11:27 - 2014-03-18 22:24 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-14 11:27 - 2014-03-18 22:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-14 11:27 - 2014-03-18 22:24 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-14 03:03 - 2014-08-16 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 03:00 - 2014-08-16 02:00 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 02:20 - 2014-07-26 11:48 - 00000000 ____D () C:\Program Files\Easy-Hide-IP
2015-01-09 10:56 - 2014-08-05 14:24 - 00000000 ____D () C:\Program Files\Wireshark
2015-01-09 10:19 - 2014-03-19 07:49 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2015-01-09 10:19 - 2014-03-19 07:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-01-09 10:05 - 2014-03-19 22:43 - 00000000 ____D () C:\Windows\pss
2015-01-08 16:42 - 2014-04-21 18:26 - 00000000 ____D () C:\ProgramData\Origin
2015-01-08 15:45 - 2014-04-21 18:26 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-01-07 16:50 - 2014-06-13 02:20 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Notepad++
2015-01-07 16:50 - 2014-05-02 15:07 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\TeamViewer
2015-01-07 16:50 - 2014-03-31 01:04 - 00000000 ____D () C:\Users\Blackface\Desktop\Program
2015-01-07 16:50 - 2014-03-18 22:28 - 00000000 ____D () C:\Windows\Panther
2015-01-07 16:38 - 2014-03-19 00:03 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-01-07 03:02 - 2014-03-19 15:30 - 00000000 ____D () C:\Users\Blackface\Documents\Cross Fire
2015-01-06 04:36 - 2014-03-18 19:56 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-05 02:49 - 2014-05-24 20:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-04 16:35 - 2014-08-31 16:30 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-01-02 09:30 - 2014-03-19 00:23 - 63442944 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 38817792 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 00286720 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 00028672 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2015-01-02 09:30 - 2014-03-19 00:23 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-01-02 09:28 - 2014-08-04 17:12 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-01-02 09:28 - 2014-08-04 17:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-02 09:28 - 2014-06-23 16:03 - 00000000 ____D () C:\temp
2015-01-02 08:38 - 2014-09-23 17:51 - 00000000 ____D () C:\ProgramData\geeksn0w
2015-01-02 08:19 - 2014-03-19 00:03 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\IObit
2015-01-02 08:13 - 2014-03-19 21:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-01-02 08:09 - 2014-05-03 21:48 - 00000000 ____D () C:\Users\Blackface\AppData\Roaming\.minecraft
2015-01-02 08:02 - 2014-03-19 00:03 - 00000000 ____D () C:\ProgramData\IObit
2015-01-02 07:51 - 2014-03-18 18:56 - 00000000 ____D () C:\Users\Blackface

==================== Files in the root of some directories =======
2014-12-25 19:31 - 2014-12-25 19:31 - 10067126 _____ () C:\Program Files\Easy-Hide-IP.rar
2014-09-01 03:18 - 2014-09-01 03:18 - 0001248 _____ () C:\Users\Blackface\AppData\Roaming\GMDOU
2014-09-01 03:18 - 2014-09-01 03:18 - 0002086 _____ () C:\Users\Blackface\AppData\Roaming\NBEVA
2014-03-18 23:05 - 2014-03-18 23:05 - 0000017 _____ () C:\Users\Blackface\AppData\Local\resmon.resmoncfg
2014-06-10 20:21 - 2014-06-10 20:21 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Blackface\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-01-04 05:46

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-01-2015
Ran by Blackface at 2015-01-20 06:50:53
Running from C:\Users\Blackface\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\uTorrent) (Version: 3.4.2.36802 - BitTorrent Inc.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassins Creed Revelations 1.01 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}_is1) (Version: 1.01 - Ubisoft)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Bandicam (HKLM-x32\...\Bandicam) (Version: 2.0.3.674 - Bandisoft.com)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.23831 - Electronic Arts)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
CodeBlocks (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\CodeBlocks) (Version: 13.12 - The Code::Blocks Team)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Cross Fire En (HKLM-x32\...\Cross Fire_is1) (Version: - Z8Games.com)
CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DC Universe Online (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\SOE-DC Universe Online) (Version: 1.0.3.183 - Sony Online Entertainment)
DC Universe Online Live (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\SOE-DC Universe Online Live) (Version: - Sony Online Entertainment)
Driver Booster 2.1 (HKLM-x32\...\Driver Booster_is1) (Version: 2.1 - IObit)
Driver Checker v2.7.5 (HKLM-x32\...\Driver Checker_is1) (Version: 2.7.5 - driverchecker.com, Inc.)
Easy-Hide-IP 5.0.0.3 (HKLM\...\Easy-Hide-IP_is1) (Version: - EasyTech)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.107 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.107 - Etron Technology) Hidden
Fallen Evolution v.35 (HKLM-x32\...\Fallen Evolution v.35) (Version: v.35 - Elevations Productions)
GamersFirst LIVE! (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\GamersFirst LIVE!) (Version: - GamersFirst)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Gyazo 2.3 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
HxD Hex Editor version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden
iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
KNCTR (HKLM-x32\...\Itibiti_is1) (Version: - Itibiti Inc.)
League of Legends (HKLM-x32\...\League of Legends 3.0.0) (Version: 3.0.0 - Riot Games)
League of Legends (x32 Version: 3.0.0 - Riot Games) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.291 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.291 - LogMeIn, Inc.) Hidden
Macro Recorder 5.7.3 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.7.3 - Jitbit Software)
MacroMaker (HKLM-x32\...\{49E9E81A-9CA8-4A76-8AD6-BE7E3B2E1E2A}) (Version: 1.0.44 - ARM Software)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 35.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 35.0 (x86 en-US)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.6 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.09 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)
NVIDIA Graphics Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.9 - Power Software Ltd)
Process Hacker 2.33 (r5590) (HKLM\...\Process_Hacker2_is1) (Version: 2.33.0.5590 - wj32)
Protected Folder (HKLM-x32\...\Protected Folder_is1) (Version: - IObit)
Pulover's Macro Creator version 4.1.1 (HKLM\...\{223FFB42-2D49-4AF6-9EF2-82B7D0CAF8B4}_is1) (Version: 4.1.1 - Rodolfo U. Batista)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.12943.90 - raidcall.com)
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.1.59.0 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.90.826.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Sandboxie 4.12 (64-bit) (HKLM\...\Sandboxie) (Version: 4.12 - Sandboxie Holdings, LLC)
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
SmartClose 1.3 (HKLM-x32\...\SmartClose.{7F22CBCB-92B5-4F5D-9A34-BB690215BEF2}_is1) (Version: 1.3 - BM-productions)
Splinter Cell Blacklist (HKLM-x32\...\Splinter Cell Blacklist_is1) (Version: - Ubisoft | RePack by BATYA)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
TeamSpeak 3 Client (HKU\S-1-5-21-1844497773-1764367655-1372063253-1000\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.8.10 - Electronic Arts)
Torchlight (HKLM-x32\...\Torchlight_is1) (Version: - GOG.com)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
Ventrilo Client for Windows x64 (HKLM\...\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}) (Version: 3.0.8.0 - Flagship Industries, Inc.)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.3.0.0 - Azureus Software, Inc.)
Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wondershare TunesGo ( Version 4.6.1 ) (HKLM-x32\...\{0B31C808-8274-460D-8846-C711D40544A0}_is1) (Version: 4.6.1 - Wondershare)
Xfire 2.0 (HKLM-x32\...\{43ADAE00-A4ED-4379-A76D-A1FF5D9D334A}_is1) (Version: 2.0 - Xfire, Inc.)
Xfire Codec (remove only) (HKLM-x32\...\XfireCodec) (Version: - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1844497773-1764367655-1372063253-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2015-01-18 16:43 - 00000768 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {38AE551A-2188-47CC-9B1A-7B9049FD0118} - \SMWPUpd No Task File <==== ATTENTION
Task: {5AC2E424-256D-486B-B374-542B8386DBF7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-14] (Adobe Systems Incorporated)
Task: {637F3B23-7911-424F-938F-C84AB3C42903} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit)
Task: {A7D063B2-FEB5-4244-95F2-2DF74534B43D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A9A0BC6F-504E-42C4-9727-03DFB579763B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {D9DD74DC-4493-4347-8D81-F9EBD82E8980} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2014-07-03] ()
Task: {F11AA8F2-1630-4323-A0FA-8EC4632F930F} - \SMW_UpdateTask_Time_313732363837373932362d3437415a556c2a3223346c41 No Task File <==== ATTENTION
Task: {FD0345FB-9FE7-490C-A92A-80BBE0F36C33} - System32\Tasks\SmartDefrag3_Startup => C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe [2014-03-10] (IObit)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-08-04 17:12 - 2014-12-13 03:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-24 03:14 - 2014-08-18 03:33 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-08-04 17:12 - 2014-11-06 12:08 - 00707400 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2014-08-04 17:12 - 2014-11-06 12:08 - 00854344 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2014-04-10 09:27 - 2014-04-10 09:27 - 01699616 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OpenColorIO.dll
2014-04-10 09:26 - 2014-04-10 09:26 - 00058144 _____ () C:\Program Files\Sony\Vegas Pro 13.0\FileIOProxyStubx64.dll
2014-04-10 09:26 - 2014-04-10 09:26 - 08351520 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\Filters.ofx.bundle\Contents\Win64\Filters.ofx
2014-03-31 11:19 - 2014-03-31 11:19 - 01215096 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HitFilmVegasBasic.ofx
2014-03-31 11:19 - 2014-03-31 11:19 - 00344696 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\BleachBypass.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00816760 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\LightFlares.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00383608 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\ScanLines.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00342136 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\ThreeStripColor.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00470136 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\TVDamage.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00377464 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\Vibrance.hfpl
2014-03-31 11:19 - 2014-03-31 11:19 - 00424568 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\HitFilmVegasBasic.ofx.bundle\Contents\Win64\HFPL\WitnessProtection.hfpl
2014-04-10 09:26 - 2014-04-10 09:26 - 07573280 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\Stabilize.ofx.bundle\Contents\Win64\Stabilize.ofx
2014-04-10 09:26 - 2014-04-10 09:26 - 00380192 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\TitlesAndText.ofx.bundle\Contents\Win64\TitlesAndText.ofx
2014-04-10 09:26 - 2014-04-10 09:26 - 13704480 _____ () C:\Program Files\Sony\Vegas Pro 13.0\OFX Video Plug-Ins\Vfx1.ofx.bundle\Contents\Win64\Vfx1.ofx
2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-31 11:16 - 2014-07-31 11:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-01-14 02:20 - 2012-11-22 15:10 - 02471248 _____ () c:\program files\easy-hide-ip\notracks.dll
2015-01-14 02:20 - 2012-09-12 08:49 - 00455168 _____ () C:\Program Files\Easy-Hide-IP\rdr\sqlite3.dll
2014-10-07 21:27 - 2014-10-07 21:27 - 00117760 _____ () C:\Users\Blackface\AppData\Roaming\moters\mentste.dll
2014-10-17 03:31 - 2014-10-17 03:31 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2014-03-18 19:31 - 2010-11-05 22:50 - 00058880 ____N () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-10 09:26 - 2014-04-10 09:26 - 00046368 _____ () C:\Program Files\Sony\Vegas Pro 13.0\x86\FileIOProxyStubx86.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Blackface\Downloads\Office 2010 PRO PLUS PreActivated [Project Antix]__9273_il2862.exe:typelib

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EasyRedirect => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdvancedSystemCareService7 => 2
MSCONFIG\Services: c2cautoupdatesvc => 2
MSCONFIG\Services: c2cpnrsvc => 2
MSCONFIG\Services: CltMngSvc => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IMFservice => 2
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: SbieSvc => 2
MSCONFIG\Services: vToolbarUpdater18.1.5 => 2
MSCONFIG\startupfolder: C:^Users^Blackface^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Xfire2.bat => C:\Windows\pss\Xfire2.bat.Startup
MSCONFIG\startupreg: Advanced SystemCare 8 => "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
MSCONFIG\startupreg: Easy-Hide-IP => C:\Program Files\Easy-Hide-IP\easy-hide-ip.exe
MSCONFIG\startupreg: LogMeIn GUI => "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe"
MSCONFIG\startupreg: uTorrent => "C:\Users\Blackface\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

========================= Accounts: ==========================

Administrator (S-1-5-21-1844497773-1764367655-1372063253-500 - Administrator - Disabled)
Blackface (S-1-5-21-1844497773-1764367655-1372063253-1000 - Administrator - Enabled) => C:\Users\Blackface
Guest (S-1-5-21-1844497773-1764367655-1372063253-501 - Limited - Disabled)

==================== Faulty Device Manager Devices =============

Name: LogMeIn Kernel Information Provider
Description: LogMeIn Kernel Information Provider
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: LMIInfo
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Hotspot Shield Routing Driver 6
Description: Hotspot Shield Routing Driver 6
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: HssDRV6
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (01/19/2015 07:28:22 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (01/19/2015 04:46:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The ASP.NET State Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.

Error: (01/19/2015 04:45:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The LogMeIn Hamachi Tunneling Engine service terminated unexpectedly. It has done this 1 time(s).

Error: (01/19/2015 04:44:45 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The TeamViewer 10 service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 2000 milliseconds: Restart the service.

Error: (01/19/2015 04:44:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Management and Security Application User Notification Service service terminated unexpectedly. It has done this 1 time(s).

Error: (01/19/2015 04:44:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The TeamViewer 10 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 2000 milliseconds: Restart the service.

Error: (01/19/2015 04:44:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Simple TCP/IP Services service terminated unexpectedly. It has done this 1 time(s).

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2015-01-18 04:47:20.054
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-18 04:47:20.018
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Percentage of memory in use: 33%
Total physical RAM: 12270.52 MB
Available physical RAM: 8207.94 MB
Total Pagefile: 30673.71 MB
Available Pagefile: 25897.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.19 GB) (Free:418.08 GB) NTFS
Drive d: () (Removable) (Total:1.86 GB) (Free:1.68 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 326930AB)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 1.9 GB) (Disk ID: C0369BCE)
Partition 1: (Not Active) - (Size=1.9 GB) - (Type=0B)

==================== End Of Log ============================
 
#5 ·
Users shortcut scan result (x64) Version: 19-01-2015
Ran by Blackface at 2015-01-20 06:51:52
Running from C:\Users\Blackface\Desktop
Boot Mode: Normal
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-AB0000000001}\SC_Reader.ico ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk -> C:\Program Files (x86)\Audacity\audacity.exe (The Audacity Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk -> C:\Program Files (x86)\LogMeIn\Ignition\LMIIgnition.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk -> C:\Program Files (x86)\LogMeIn\x64\LogMeInToolkit.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Z8Games\CrossFire\CrossFire.lnk -> C:\Program Files (x86)\Z8games\CrossFire\CF_G4box.exe (Smilegate Games)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Z8Games\CrossFire\Uninstall crossfire.lnk -> C:\Program Files (x86)\Z8games\CrossFire\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xfire\Xfire.lnk -> C:\Program Files (x86)\Xfire2\Xfire.exe (Xfire Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare\TunesGo\Activate and Purchase.lnk -> C:\Program Files (x86)\Wondershare\TunesGo\Order.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare\TunesGo\HomePage.lnk -> C:\Program Files (x86)\Wondershare\TunesGo\HomePage.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare\TunesGo\How to use.lnk -> C:\Program Files (x86)\Wondershare\TunesGo\Support.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare\TunesGo\Uninstall Wondershare TunesGo.lnk -> C:\Program Files (x86)\Wondershare\TunesGo\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare\TunesGo\Wondershare TunesGo.lnk -> C:\Program Files (x86)\Wondershare\TunesGo\TunesGo.exe (Wondershare)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk -> C:\Program Files (x86)\WinRAR\Rar.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\What is new in the latest version.lnk -> C:\Program Files (x86)\WinRAR\WhatsNew.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk -> C:\Program Files (x86)\VideoLAN\VLC\Documentation.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk -> C:\Program Files (x86)\VideoLAN\VLC\NEWS.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Program Files (x86)\VideoLAN\VLC\VideoLAN Website.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Extractor\Uninstall Universal Extractor.lnk -> C:\Program Files (x86)\Universal Extractor\unins000.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Extractor\Universal Extractor Preferences.lnk -> C:\Program Files (x86)\Universal Extractor\UniExtract.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Extractor\Universal Extractor.lnk -> C:\Program Files (x86)\Universal Extractor\UniExtract.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\turbodiagnosis\turbodiagnosis.lnk -> C:\Program Files (x86)\turbodiagnosis\TurboDiagnosis3.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Titanfall\Technical Support.lnk -> C:\Program Files (x86)\Origin Games\Titanfall\Support\EA Help\Technical Support.en_US.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Titanfall\Titanfall End User License Agreement.lnk -> C:\Program Files (x86)\Origin Games\Titanfall\Support\eula\en_US_eula.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Titanfall\Titanfall.lnk -> C:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.lnk -> C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}\Icon048298C92.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Splinter Cell Blacklist\Splinter Cell Blacklist.lnk -> C:\Program Files (x86)\Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Splinter Cell Blacklist\Удалить игру.lnk -> C:\Program Files (x86)\Splinter Cell Blacklist\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 13.0\Vegas Pro 13.0 (64-bit).lnk -> C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exe (Sony Creative Software Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 13.0\Vegas Pro 13.0 Readme.lnk -> C:\Program Files\Sony\Vegas Pro 13.0\Readme\Vegas_readme.htm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartClose\SmartClose .lnk -> C:\Program Files (x86)\SmartClose\SmartClose.exe (BM-productions)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartClose\Uninstall SmartClose.lnk -> C:\Program Files (x86)\SmartClose\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3\Smart Defrag 3.lnk -> C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe (IObit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3\Uninstall Smart Defrag 3.lnk -> C:\Program Files (x86)\IObit\Smart Defrag 3\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resource Hacker\Resource Hacker.lnk -> C:\Program Files (x86)\Resource Hacker\ResHacker.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer\Razer Game Booster\Razer Game Booster.lnk -> C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe (Razer Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RaidCall\Uninstall RaidCall.lnk -> C:\Program Files (x86)\RaidCall\uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst\Assassins Creed Revelations\Readme.lnk -> C:\Program Files (x86)\R.G. Catalyst\Assassins Creed Revelations\Support\Readme\ReadMe.English.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst\Assassins Creed Revelations\Start Game.lnk -> C:\Program Files (x86)\R.G. Catalyst\Assassins Creed Revelations\ACRSP.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst\Assassins Creed Revelations\Uninstall Game.lnk -> C:\Program Files (x86)\R.G. Catalyst\Assassins Creed Revelations\uninstall\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst\Assassins Creed Revelations\Ðóêîâîäñòâî ïîëüçîâàòåëÿ.lnk -> C:\Program Files (x86)\R.G. Catalyst\Assassins Creed Revelations\Support\Manual\AssassinsCreed.English.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pulover's Macro Creator\Pulover's Macro Creator.lnk -> C:\Program Files\MacroCreator\MacroCreator.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pulover's Macro Creator\Uninstall Pulover's Macro Creator.lnk -> C:\Program Files\MacroCreator\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Folder\Protected Folder.lnk -> C:\Program Files (x86)\IObit\Protected Folder\ProtectedFolder.exe (IObit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Folder\Uninstall Protected Folder.lnk -> C:\Program Files (x86)\IObit\Protected Folder\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2\PE Viewer.lnk -> C:\Program Files\Process Hacker 2\peview.exe (wj32)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2\Process Hacker 2.lnk -> C:\Program Files\Process Hacker 2\ProcessHacker.exe (wj32)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2\Uninstall Process Hacker 2.lnk -> C:\Program Files\Process Hacker 2\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2\Help and Support\Changelog.lnk -> C:\Program Files\Process Hacker 2\CHANGELOG.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\PowerISO Help.lnk -> C:\Program Files\PowerISO\PowerISO.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\PowerISO Virtual Drive Manager.lnk -> C:\Program Files\PowerISO\PWRISOVM.EXE (Power Software Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\PowerISO.lnk -> C:\Program Files\PowerISO\PowerISO.exe (Power Software Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO\Uninstall PowerISO.lnk -> C:\Program Files\PowerISO\uninstall.exe (Power Software Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin Error Reporter.lnk -> C:\Program Files (x86)\Origin\OriginER.exe (Electronic Arts)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk -> C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Uninstall Origin.lnk -> C:\Program Files (x86)\Origin\OriginUninstall.exe (Electronic Arts, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe (NVIDIA)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe (NVIDIA Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Uninstall Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder\Hotkey Macro Launcher.lnk -> C:\Program Files (x86)\MacroRecorder\MacroLauncher.exe (Jitbit Macro Recorder)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder\Macro Recorder.lnk -> C:\Program Files (x86)\MacroRecorder\MacroRecorder.exe (Jitbit Macro Recorder)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder\Uninstall Macro Recorder.lnk -> C:\Program Files (x86)\MacroRecorder\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\LogMeIn Hamachi.lnk -> C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\League of Legends.lnk -> C:\Riot Games\League of Legends\lol.launcher.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KNCTR\KNCTR.lnk -> C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk -> C:\Program Files (x86)\Java\jre7\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\About iTunes.lnk -> C:\Program Files (x86)\iTunes\iTunes.Resources\en.lproj\About iTunes.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\iTunes.lnk -> C:\Program Files (x86)\iTunes\iTunes.exe (Apple Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel(R) Rapid Storage Technology.lnk -> C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe (Intel Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor\Changelog.lnk -> C:\Program Files (x86)\HxD\changelog.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor\HxD.lnk -> C:\Program Files (x86)\HxD\HxD.exe (Maël Hörz)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor\License.lnk -> C:\Program Files (x86)\HxD\license.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor\Readme.lnk -> C:\Program Files (x86)\HxD\readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo GIF.lnk -> C:\Program Files (x86)\Gyazo\GyazoGIF.exe (Nota Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Torchlight\Torchlight.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\Torchlight.exe (Runic Games, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Torchlight\Uninstall Torchlight.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Torchlight\Documents\Manual.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\TorchlightManual.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallen Evolution v.35\FE Configuration.lnk -> C:\Program Files (x86)\Elevations Productions\Fallen Evolution\FE Configuration.exe (Elevations Productions)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallen Evolution v.35\Play Fallen Evolution!.lnk -> C:\Program Files (x86)\Elevations Productions\Fallen Evolution\FE Launcher.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy-Hide-IP\Easy-Hide-IP.lnk -> C:\Program Files\Easy-Hide-IP\easy-hide-ip.exe (Easy Hide IP)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy-Hide-IP\Uninstall Easy-Hide-IP.lnk -> C:\Program Files\Easy-Hide-IP\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Checker\Driver Checker Help.lnk -> C:\Program Files (x86)\Driver Checker\DriverCheckerhelp.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Checker\Driver Checker on the Web.lnk -> C:\Program Files (x86)\Driver Checker\DriverChecker.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Checker\Driver Checker.lnk -> C:\Program Files (x86)\Driver Checker\DriverChecker.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Checker\Uninstall Driver Checker.lnk -> C:\Program Files (x86)\Driver Checker\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2\Driver Booster 2.lnk -> C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe (IObit)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2\Uninstall Driver Booster 2.lnk -> C:\Program Files (x86)\IObit\Driver Booster\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\SPTD Setup.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\SPTDinst-x64.exe (Duplex Secure Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark\CrystalDiskMark (32bit).lnk -> C:\Program Files\CrystalDiskMark\DiskMark.exe (Crystal Dew World)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark\CrystalDiskMark (64bit).lnk -> C:\Program Files\CrystalDiskMark\DiskMarkX64.exe (Crystal Dew World)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks\CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\codeblocks.exe (Code::Blocks Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine 6.3 (32-bit).lnk -> C:\Program Files (x86)\Cheat Engine 6.3\cheatengine-i386.exe (Cheat Engine)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine 6.3 (64-bit).lnk -> C:\Program Files (x86)\Cheat Engine 6.3\cheatengine-x86_64.exe (Cheat Engine)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine 6.3.lnk -> C:\Program Files (x86)\Cheat Engine 6.3\Cheat Engine.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine help.lnk -> C:\Program Files (x86)\Cheat Engine 6.3\CheatEngine.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Cheat Engine tutorial.lnk -> C:\Program Files (x86)\Cheat Engine 6.3\Tutorial-i386.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Reset settings.lnk -> C:\Program Files (x86)\Cheat Engine 6.3\ceregreset.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Uninstall Cheat Engine.lnk -> C:\Program Files (x86)\Cheat Engine 6.3\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\Kernel stuff\Unload kernel module.lnk -> C:\Program Files (x86)\Cheat Engine 6.3\Kernelmoduleunloader.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk -> C:\Program Files\CCleaner\uninst.exe (Piriform Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4\Battlefield 4 End User License Agreement.lnk -> C:\Program Files (x86)\Origin Games\Battlefield 4\Support\eula\en_US_eula.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4\Battlefield 4(64 bit).lnk -> C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe (EA Digital Illusions CE AB)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4\Battlefield 4.lnk -> C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe (EA Digital Illusions CE AB)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4\Technical Support.lnk -> C:\Program Files (x86)\Origin Games\Battlefield 4\Support\EA Help\Technical Support.en_US.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam\Bandicam.lnk -> C:\Program Files (x86)\Bandicam\bdcam.exe (www.Bandisoft.com)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam\BandiFix.lnk -> C:\Program Files (x86)\Bandicam\bdfix.exe (Bandisoft.com)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam\Uninstall.lnk -> C:\Program Files (x86)\Bandicam\uninstall.exe (Bandisoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\AMD Catalyst Control Center.lnk -> C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\IIS Manager.lnk -> C:\Windows\System32\inetsrv\InetMgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\NetworkProjection.lnk -> C:\Windows\System32\NetProj.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{05721EFD-3B5F-406D-BD00-EB1BFF0CFFA4}\PlayTasks\1\Manual.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\TorchlightManual.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{05721EFD-3B5F-406D-BD00-EB1BFF0CFFA4}\PlayTasks\0\Play.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\Torchlight.exe (Runic Games, Inc.)
Shortcut: C:\Users\Blackface\Links\Desktop.lnk -> C:\Users\Blackface\Desktop ()
Shortcut: C:\Users\Blackface\Links\Downloads.lnk -> C:\Users\Blackface\Downloads ()
Shortcut: C:\Users\Blackface\Links\OneDrive.lnk -> C:\Users\Blackface\OneDrive ()
Shortcut: C:\Users\Blackface\Desktop\CrossFire.lnk -> C:\Program Files (x86)\Z8games\CrossFire\CF_G4box.exe (Smilegate Games)
Shortcut: C:\Users\Blackface\Desktop\DC Universe Online.lnk -> C:\Users\Public\Sony Online Entertainment\Installed Games\DC Universe Online\LaunchPad.exe (Sony Online Entertainment)
Shortcut: C:\Users\Blackface\Desktop\Program\Adobe Reader XI.lnk -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)
Shortcut: C:\Users\Blackface\Desktop\Program\Audacity.lnk -> C:\Program Files (x86)\Audacity\audacity.exe (The Audacity Team)
Shortcut: C:\Users\Blackface\Desktop\Program\Bandicam.lnk -> C:\Program Files (x86)\Bandicam\bdcam.exe (www.Bandisoft.com)
Shortcut: C:\Users\Blackface\Desktop\Program\Battlefield 4(64 bit).lnk -> C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe (EA Digital Illusions CE AB)
Shortcut: C:\Users\Blackface\Desktop\Program\Battlefield 4.lnk -> C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe (EA Digital Illusions CE AB)
Shortcut: C:\Users\Blackface\Desktop\Program\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
Shortcut: C:\Users\Blackface\Desktop\Program\Cheat Engine.lnk -> C:\Program Files (x86)\Cheat Engine 6.3\Cheat Engine.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\codeblocks.exe (Code::Blocks Team)
Shortcut: C:\Users\Blackface\Desktop\Program\CrystalDiskMark.lnk -> C:\Program Files\CrystalDiskMark\DiskMarkX64.exe (Crystal Dew World)
Shortcut: C:\Users\Blackface\Desktop\Program\Curse.lnk -> C:\Users\Blackface\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Shortcut: C:\Users\Blackface\Desktop\Program\DAEMON Tools Lite.lnk -> C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
Shortcut: C:\Users\Blackface\Desktop\Program\Driver Booster 2.lnk -> C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe (IObit)
Shortcut: C:\Users\Blackface\Desktop\Program\Driver Checker.lnk -> C:\Program Files (x86)\Driver Checker\DriverChecker.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\Fallen Evolution - Shortcut.lnk -> C:\Program Files (x86)\Elevations Productions\Fallen Evolution\Fallen Evolution.exe (Elevations Productions)
Shortcut: C:\Users\Blackface\Desktop\Program\FE Configuration.lnk -> C:\Program Files (x86)\Elevations Productions\Fallen Evolution\FE Configuration.exe (Elevations Productions)
Shortcut: C:\Users\Blackface\Desktop\Program\GamersFirst LIVE!.lnk -> C:\Users\Blackface\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst)
Shortcut: C:\Users\Blackface\Desktop\Program\GameVox.lnk -> C:\Windows\Installer\{48EFB96C-0B2D-4D37-9DA8-2979C0069BBA}\gamevox.ico (No File)
Shortcut: C:\Users\Blackface\Desktop\Program\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe (NVIDIA)
Shortcut: C:\Users\Blackface\Desktop\Program\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\Gyazo GIF.lnk -> C:\Program Files (x86)\Gyazo\GyazoGIF.exe (Nota Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\iTunes.lnk -> C:\Program Files (x86)\iTunes\iTunes.exe (Apple Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\KNCTR.lnk -> C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\LogMeIn Hamachi.lnk -> C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\Macro Recorder.lnk -> C:\Program Files (x86)\MacroRecorder\MacroRecorder.exe (Jitbit Macro Recorder)
Shortcut: C:\Users\Blackface\Desktop\Program\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\Users\Blackface\Desktop\Program\movementblock - Shortcut.lnk -> C:\Users\Blackface\Bot of Legends\Bot of Legends\Scripts\movementblock.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr)
Shortcut: C:\Users\Blackface\Desktop\Program\Origin.lnk -> C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
Shortcut: C:\Users\Blackface\Desktop\Program\Play Fallen Evolution!.lnk -> C:\Program Files (x86)\Elevations Productions\Fallen Evolution\FE Launcher.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\Play Ultimate Ninja Storm 3 Full Burst.lnk -> C:\Games\Ultimate Ninja Storm 3 Full Burst\NS3FB_launcher.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\PowerISO.lnk -> C:\Program Files\PowerISO\PowerISO.exe (Power Software Ltd)
Shortcut: C:\Users\Blackface\Desktop\Program\Process Hacker 2.lnk -> C:\Program Files\Process Hacker 2\ProcessHacker.exe (wj32)
Shortcut: C:\Users\Blackface\Desktop\Program\RaidCall.lnk -> C:\Program Files (x86)\RaidCall\raidcall.exe (RAIDCALL.COM)
Shortcut: C:\Users\Blackface\Desktop\Program\Razer Game Booster.lnk -> C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe (Razer Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\Skype.lnk -> C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\SmartClose.lnk -> C:\Program Files (x86)\SmartClose\SmartClose.exe (BM-productions)
Shortcut: C:\Users\Blackface\Desktop\Program\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\Users\Blackface\Desktop\Program\TeamSpeak 3 Client.lnk -> C:\Users\Blackface\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\Blackface\Desktop\Program\TeamViewer 10.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH)
Shortcut: C:\Users\Blackface\Desktop\Program\TechPowerUp GPU-Z.lnk -> C:\Program Files (x86)\GPU-Z\GPU-Z.exe (No File)
Shortcut: C:\Users\Blackface\Desktop\Program\Torchlight.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\Torchlight.exe (Runic Games, Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\Universal Extractor.lnk -> C:\Program Files (x86)\Universal Extractor\UniExtract.exe (No File)
Shortcut: C:\Users\Blackface\Desktop\Program\Uplay.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe (Ubisoft)
Shortcut: C:\Users\Blackface\Desktop\Program\Vegas Pro 13.0 (64-bit).lnk -> C:\Program Files\Sony\Vegas Pro 13.0\vegas130.exe (Sony Creative Software Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\Ventrilo.lnk -> C:\Program Files\Ventrilo\Ventrilo.exe (Flagship Industries, Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\VLC media player.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\Users\Blackface\Desktop\Program\Wondershare TunesGo.lnk -> C:\Program Files (x86)\Wondershare\TunesGo\TunesGo.exe (Wondershare)
Shortcut: C:\Users\Blackface\Desktop\Program\XeMu360.lnk -> C:\Program Files (x86)\XeMu360\XeMu360.exe (xbox360emulator.net)
Shortcut: C:\Users\Blackface\Desktop\Program\Xfire.lnk -> C:\Program Files (x86)\Xfire2\Xfire.exe (Xfire Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\µTorrent.lnk -> C:\Users\Blackface\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
Shortcut: C:\Users\Blackface\Desktop\Program\Stuff\RiPE v2012-06-25.lnk -> C:\Users\Blackface\Downloads\RiPE v2012-06-25.zip ()
Shortcut: C:\Users\Blackface\Desktop\Program\Stuff\RiPE_original - Shortcut.lnk -> C:\Users\Blackface\Desktop\Program\Stuff\ripe\RiPE_original.exe ()
Shortcut: C:\Users\Blackface\Desktop\Program\Stuff\auto\HxD.lnk -> C:\Program Files (x86)\HxD\HxD.exe (Maël Hörz)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\RaidCall.lnk -> C:\Program Files (x86)\RaidCall\raidcall.exe (RAIDCALL.COM)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -> C:\Users\Blackface\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk -> C:\Users\Blackface\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DC Universe Online.lnk -> C:\Users\Public\Sony Online Entertainment\Installed Games\DC Universe Online\LaunchPad.exe (Sony Online Entertainment)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk -> C:\Users\Blackface\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk -> C:\Program Files (x86)\WinRAR\Rar.txt ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\What is new in the latest version.lnk -> C:\Program Files (x86)\WinRAR\WhatsNew.txt ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.chm ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ventrilo\Ventrilo.lnk -> C:\Program Files\Ventrilo\Ventrilo.exe (Flagship Industries, Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Uplay\Uninstall.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uninstall.exe (Ubisoft)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Uplay\Uplay.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe (Ubisoft)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\Uninstall.lnk -> C:\Users\Blackface\AppData\Local\TeamSpeak 3 Client\Uninstall.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RaidCall\RaidCall.lnk -> C:\Program Files (x86)\RaidCall\raidcall.exe (RAIDCALL.COM)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RaidCall\Uninstall RaidCall.lnk -> C:\Program Files (x86)\RaidCall\uninst.exe ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MacroMaker\MacroMaker Help.lnk -> C:\Users\Blackface\AppData\Roaming\Microsoft\Installer\{49E9E81A-9CA8-4A76-8AD6-BE7E3B2E1E2A}\_882868EFC4BEC5CBF9AD81.exe ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MacroMaker\MacroMaker.lnk -> C:\Users\Blackface\AppData\Roaming\Microsoft\Installer\{49E9E81A-9CA8-4A76-8AD6-BE7E3B2E1E2A}\_2C76C9CF1CB212F01D806B.exe ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GamersFirst\LIVE!\GamersFirst LIVE!.lnk -> C:\Users\Blackface\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GamersFirst\LIVE!\Uninstall.lnk -> C:\Users\Blackface\AppData\Local\GamersFirst\LIVE!\uninstall.exe (GamersFirst)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\CB Share Config.lnk -> C:\Program Files (x86)\CodeBlocks\cb_share_config.exe ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\Code Snippets.lnk -> C:\Program Files (x86)\CodeBlocks\codesnippets.exe ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\codeblocks.exe (Code::Blocks Team)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks\Uninstall CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\uninstall.exe (The Code::Blocks Team)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\SendTo\Wondershare TunesGo.lnk -> C:\Program Files (x86)\Wondershare\TunesGo\TunesGo.exe (Wondershare)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk -> C:\Program Files (x86)\Bandicam\bdcam.exe (www.Bandisoft.com)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CodeBlocks.lnk -> C:\Program Files (x86)\CodeBlocks\codeblocks.exe (Code::Blocks Team)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gyazo GIF.lnk -> C:\Program Files (x86)\Gyazo\GyazoGIF.exe (Nota Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -> C:\Users\Blackface\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Origin.lnk -> C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Xfire.lnk -> C:\Program Files (x86)\Xfire2\Xfire.exe (Xfire Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Fallen Evolution - Shortcut.lnk -> C:\Program Files (x86)\Elevations Productions\Fallen Evolution\Fallen Evolution.exe (Elevations Productions)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\HxD.lnk -> C:\Program Files (x86)\HxD\HxD.exe (Maël Hörz)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Macro Recorder.lnk -> C:\Program Files (x86)\MacroRecorder\MacroRecorder.exe (Jitbit Macro Recorder)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Play Fallen Evolution!.lnk -> C:\Program Files (x86)\Elevations Productions\Fallen Evolution\FE Launcher.exe ()
Shortcut: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Blackface\AppData\Local\Microsoft\Windows\GameExplorer\{05721EFD-3B5F-406D-BD00-EB1BFF0CFFA4}\PlayTasks\1\Manual.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\TorchlightManual.pdf ()
Shortcut: C:\Users\Blackface\AppData\Local\Microsoft\Windows\GameExplorer\{05721EFD-3B5F-406D-BD00-EB1BFF0CFFA4}\PlayTasks\0\Play.lnk -> C:\Program Files (x86)\GOG.com\Torchlight\Torchlight.exe (Runic Games, Inc.)
Shortcut: C:\Users\Default\Links\OneDrive.lnk -> C:\Program Files (x86)\Microsoft OneDrive\OneDriveSetup.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk -> C:\Program Files (x86)\Microsoft OneDrive\OneDriveSetup.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)
Shortcut: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Assassins Creed Revelations.lnk -> C:\Program Files (x86)\R.G. Catalyst\Assassins Creed Revelations\ACRSP.exe ()
Shortcut: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Public\Desktop\Play League of Legends.lnk -> C:\Riot Games\League of Legends\lol.launcher.exe ()
Shortcut: C:\Users\Public\Desktop\Titanfall.lnk -> C:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe ()

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Configure Decoder.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> xvid.ax,Configure
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Configure Encoder.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> xvidvfw.dll,Configure
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Advanced\xvid_encraw.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k ""C:\Program Files (x86)\Xvid\xvid_encraw.exe"" -h
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) -> --reset-config --reset-plugins-cache vlc://quit
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (VideoLAN) -> -Iskins
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartClose\SmartClose - Close Programs.lnk -> C:\Program Files (x86)\SmartClose\SmartClose.exe (BM-productions) -> /closeprogs
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartClose\SmartClose - Restore Snapshot.lnk -> C:\Program Files (x86)\SmartClose\SmartClose.exe (BM-productions) -> /restore
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartClose\SmartClose - Settings.lnk -> C:\Program Files (x86)\SmartClose\SmartClose.exe (BM-productions) -> /config
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie\Run any program sandboxed.lnk -> C:\Program Files\Sandboxie\Start.exe (Sandboxie Holdings, LLC) -> /box:__ask__ run_dialog
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie\Run Web browser sandboxed.lnk -> C:\Program Files\Sandboxie\Start.exe (Sandboxie Holdings, LLC) -> default_browser
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie\Run Windows Explorer sandboxed.lnk -> C:\Program Files\Sandboxie\Start.exe (Sandboxie Holdings, LLC) -> .
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie\Sandboxie Control.lnk -> C:\Program Files\Sandboxie\SbieCtrl.exe (Sandboxie Holdings, LLC) -> /open
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie\Sandboxie Start Menu.lnk -> C:\Program Files\Sandboxie\Start.exe (Sandboxie Holdings, LLC) -> /box:__ask__ start_menu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie\Uninstall Sandboxie.lnk -> C:\Windows\Installer\SandboxieInstall64.exe (Sandboxie Holdings, LLC) -> /remove
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /show
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /disable
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /enable
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus\McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\McUICnt.exe (McAfee, Inc.) -> SecurityScanner.dll
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus\Uninstall.lnk -> C:\Program Files\McAfee Security Scan\uninstall.exe (McAfee, Inc.) -> C:\Program Files\McAfee Security Scan\3.8.141\McAfee.ico
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\Uninstall.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i {8B4E75B8-6788-481D-B8D5-143EF17DC06A} REMOVE=ALL
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk -> C:\Program Files (x86)\Java\jre7\bin\javacpl.exe (Oracle Corporation) -> -tab about
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk -> C:\Program Files (x86)\Java\jre7\bin\javacpl.exe (Oracle Corporation) -> -tab update
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo Settings.lnk -> C:\Program Files (x86)\Gyazo\GyStation.exe (Nota Inc.) -> /option
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3\main.lua.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) -> C:\Program Files (x86)\Cheat Engine 6.3\main.lua
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Help.lnk -> C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.exe (ATI Technologies Inc.) -> Start Help -help
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Blackface\Desktop\Program\McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\McUICnt.exe (McAfee, Inc.) -> SecurityScanner.dll
ShortcutWithArgument: C:\Users\Blackface\Desktop\Program\Sandboxed Web Browser.lnk -> C:\Program Files\Sandboxie\Start.exe (Sandboxie Holdings, LLC) -> default_browser
ShortcutWithArgument: C:\Users\Blackface\Desktop\Program\Stuff\auto\Pulover's Macro Creator.lnk -> C:\Program Files\MacroCreator\MacroCreator.exe () -> -m
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\SendTo\Sandboxie - DefaultBox.lnk -> C:\Program Files\Sandboxie\Start.exe (Sandboxie Holdings, LLC) -> /box:DefaultBox
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto:
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\SendTo\TeamViewer.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) -> --sendto
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk -> C:\Program Files\Sandboxie\Start.exe (Sandboxie Holdings, LLC) -> default_browser
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\Users\Blackface\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Pulover's Macro Creator.lnk -> C:\Program Files\MacroCreator\MacroCreator.exe () -> -m
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\TeamViewer.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) -> --sendto
ShortcutWithArgument: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
ShortcutWithArgument: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Xvid Homepage.url -> hxxp://www.xvid.org
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3\Smart Defrag Home Page.url -> hxxp://www.iobit.com/iobitsmartdefrag.html
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst\Assassins Creed Revelations\Ðåëèç îò BestRepack.NET.url -> hxxp://bestrepack.net
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pulover's Macro Creator\Pulover's Macro Creator on the Web.url -> hxxp://www.macrocreator.com
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2\Help and Support\Process Hacker 2 on the Web.url -> hxxp://processhacker.sourceforge.net/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon\MapleStory\MapleStory.url -> hxxp://maplestory.nexon.net/default.aspx?action=startgame
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder\Macro Recorder Online Support.url -> hxxp://www.jitbit.com/docs/macrorecorder/index.htm
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor\Website.url -> hxxp://mh-nexus.de/hxd/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Torchlight\Documents\Support (online).url -> hxxp://www.gog.com/en/support/torchlight
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy-Hide-IP\Easy-Hide-IP on the Web.url -> hxxp://www.easy-hide-ip.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url -> hxxp://www.piriform.com/ccleaner
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam\Home page.url -> hxxp://www.bandicam.com/
InternetURL: C:\ProgramData\Microsoft\Windows\GameExplorer\{05721EFD-3B5F-406D-BD00-EB1BFF0CFFA4}\SupportTasks\0\Support (online).url -> hxxp://www.gog.com/en/support/torchlight
InternetURL: C:\Users\Blackface\Favorites\Download IObit Freeware.url -> hxxp://www.iobit.com/
InternetURL: C:\Users\Blackface\Favorites\Windows Live\Get Windows Live.url -> hxxp://go.microsoft.com/fwlink/?LinkId=69172
InternetURL: C:\Users\Blackface\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742
InternetURL: C:\Users\Blackface\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68925
InternetURL: C:\Users\Blackface\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68927
InternetURL: C:\Users\Blackface\Favorites\MSN Websites\MSN Autos.url -> hxxp://go.microsoft.com/fwlink/?LinkId=55143
InternetURL: C:\Users\Blackface\Favorites\MSN Websites\MSN Entertainment.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68924
InternetURL: C:\Users\Blackface\Favorites\MSN Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68923
InternetURL: C:\Users\Blackface\Favorites\MSN Websites\MSN Sports.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68921
InternetURL: C:\Users\Blackface\Favorites\MSN Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=54729
InternetURL: C:\Users\Blackface\Favorites\MSN Websites\MSNBC News.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68922
InternetURL: C:\Users\Blackface\Favorites\Microsoft Websites\IE Add-on site.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893
InternetURL: C:\Users\Blackface\Favorites\Microsoft Websites\IE site on Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?linkid=44661
InternetURL: C:\Users\Blackface\Favorites\Microsoft Websites\Microsoft At Home.url -> hxxp://go.microsoft.com/fwlink/?linkid=55424
InternetURL: C:\Users\Blackface\Favorites\Microsoft Websites\Microsoft At Work.url -> hxxp://go.microsoft.com/fwlink/?linkid=68920
InternetURL: C:\Users\Blackface\Favorites\Microsoft Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813
InternetURL: C:\Users\Blackface\Favorites\Links for United States\GobiernoUSA.gov.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129792
InternetURL: C:\Users\Blackface\Favorites\Links for United States\USA.gov.url -> hxxp://go.microsoft.com/fwlink/?LinkId=129791
InternetURL: C:\Users\Blackface\Favorites\Links\Suggested Sites (2).url -> 0
InternetURL: C:\Users\Blackface\Favorites\Links\Suggested Sites (3).url -> https://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\Blackface\Favorites\Links\Suggested Sites (4).url -> https://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\Blackface\Favorites\Links\Suggested Sites.url -> 0
InternetURL: C:\Users\Blackface\Favorites\Links\Web Slice Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315
InternetURL: C:\Users\Blackface\Downloads\EOStarProxy\Website.url -> hxxp://www.endless-online.com/server.php
InternetURL: C:\Users\Blackface\Desktop\Program\Counter-Strike Global Offensive.url -> steam://rungameid/730
InternetURL: C:\Users\Blackface\Desktop\Program\deluxe-tools.com.url -> hxxp://deluxe-tools.com/
InternetURL: C:\Users\Blackface\Desktop\Program\MapleStory.url -> hxxp://maplestory.nexon.net/default.aspx?action=startgame
InternetURL: C:\Users\Blackface\Desktop\Program\Version27.Bu\Website.url -> hxxp://www.endless-online.com/server.php
InternetURL: C:\Users\Blackface\Desktop\Program\tsearch\New folder\Start.url -> hxxp://www.endless-online.com/server.php
InternetURL: C:\Users\Blackface\Desktop\Program\tsearch\New folder\Website.url -> hxxp://www.endless-online.com/server.php
InternetURL: C:\Users\Blackface\Desktop\Program\eo\Start.url -> hxxp://www.endless-online.com/server.php
InternetURL: C:\Users\Blackface\Desktop\Program\eo\Website.url -> hxxp://www.endless-online.com/server.php
InternetURL: C:\Users\Blackface\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Counter-Strike Global Offensive.url -> steam://rungameid/730
InternetURL: C:\Users\Blackface\AppData\Local\Microsoft\Windows\GameExplorer\{05721EFD-3B5F-406D-BD00-EB1BFF0CFFA4}\SupportTasks\0\Support (online).url -> hxxp://www.gog.com/en/support/torchlight

==================== End of log =============================
 
#6 ·
Please open C:\Combofix.txt on Notepad and post its contents.

Open an admiistrator Command prompt. (Click on Start, type CMD on the search box, right click on the CMD.exe command on the Stat menu and select Run as an Administrator.)

At the prompt type SFC /ScanNow and press Enter. Let it run unhindered and let me know the results.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top