Closed/Inactive My computer tabs out every 7-11th second

avaris · Feb 2, 2017

Doesn't matter what program, currently as im typing it's tabbing out and in again in chrome. This is more of an issue in games because i use fullscreen.

I've disconnected every usb i have, didn't change the problem. This issue started happening today. I tried to close every application i have, the ones that were left were these: http://prnt.sc/e3rjnl - (red line just indicates it doesn't cause the problem)

I've disabled my antivirus program, still happends. I've ran a scan on my computer, still happends. I've obviously restarted my system. I've removed application from my startup system configuration. I've tried EVERYTHING.

Also here's a video to display how it looks when it "tabs out".

Explanation: On (0:06/0:07) the top of chrome goes gray, meaning it's deselected. You can see it goes from selected to gray, and then back to black which means selected. In the video i'm doing nothing. Litterally both of my hands are off my keyboard/mouse.

What more can i try to get rid of this issue, please help

Malnutrition · Feb 2, 2017

Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

If you are unsure if your operating system is 32 or 64 Bit please go HERE.

Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu"

If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.

Accept the default whitelist options,
If the additions.txt options box is not checked please select it.
Then select "Scan"

Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

Please Copy and Paste the contents of these logs in your next post for review by our Security Team

avaris · Feb 3, 2017

FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017
Ran by FIXIIE (administrator) on FIXIIE-PC (03-02-2017 02:29:50)
Running from D:\Downloads
Loaded Profiles: FIXIIE (Available Profiles: FIXIIE)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgfwsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Hi-Rez Studios) D:\Program Files\Smite\HiPatchService.exe
(Side Effects Software Inc.) C:\Windows\System32\hserver.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() D:\Program Files\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Tenda\W326U Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) X:\Program Files\Steam\Steam.exe
(Valve Corporation) X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
(Valve Corporation) X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
(Valve Corporation) X:\Program Files\Steam\GameOverlayUI.exe
(Valve Corporation) X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(WellWeWeb) D:\Program Files\CheVolume\CheVolume.exe
() D:\Program Files\CheVolume\CheVolumeHelper_x86.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27226072 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\FIXIIE\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Run: [Steam] => X:\Program Files\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Policies\Explorer: []
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: F - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {0424c103-0ca6-11e6-adc0-14dda977ff22} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {0bbf0c51-c8df-11e5-94c1-d43d7e93e91f} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {1b1edbeb-e9ad-11e6-bf85-14dda977ff22} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {4fe8f14f-89ff-11e5-8c65-b6c19a8f7e37} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {63a160a1-dee7-11e5-93dd-d43d7e93e91f} - H:\SETUP.EXE
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {64945568-bb2e-11e5-829e-d43d7e93e91f} - H:\MAXON-Start.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {74f4039c-a63e-11e5-bbc0-e71a59b7bd35} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {b405b0e3-b3c1-11e5-a119-d43d7e93e91f} - H:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {f77f826c-ed55-11e5-853d-14dda977ff22} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\FAHScreensaver.scr
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\Users\FIXIIE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Folding@home.lnk [2016-10-27]
ShortcutTarget: Folding@home.lnk -> D:\Program Files\FAHClient\HideConsole.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 195.67.199.30 8.8.8.8
Tcpip\..\Interfaces\{3BB419ED-B9DB-4E96-89B8-E440B7AC39E5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7816BBD9-6A68-4A91-8281-02D290E56F4E}: [DhcpNameServer] 195.67.199.30 8.8.8.8
Tcpip\..\Interfaces\{7FC0E632-6C4C-42E1-A5AE-4C83E8BAD706}: [DhcpNameServer] 195.67.199.30 8.8.8.8

Internet Explorer:
==================
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-20] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-20] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2016-05-21] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 14.0 Helper -> {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} -> D:\Program Files\Microsoft Visual 2015\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2015-07-07] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2016-05-21] (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)

FireFox:
========
FF ProfilePath: C:\Users\FIXIIE\AppData\Roaming\Mozilla\Firefox\Profiles\o0fv9j39.default-1476311955297 [2017-01-02]
FF Extension: (uBlock) - C:\Users\FIXIIE\AppData\Roaming\Mozilla\Firefox\Profiles\o0fv9j39.default-1476311955297\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2016-12-23]
FF Extension: (Adblock Plus) - C:\Users\FIXIIE\AppData\Roaming\Mozilla\Firefox\Profiles\o0fv9j39.default-1476311955297\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-05-09] ()
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-05-09] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.79.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2016-05-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.79.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2016-05-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Default [2016-04-10]
CHR Profile: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-02-03]
CHR Extension: (Google Translate) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-04-10]
CHR Extension: (Reverse Youtube Playlist) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ajhonbaagcobjdmbocblbebcmbmmbfmi [2017-01-11]
CHR Extension: (BetterTTV) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2016-06-18]
CHR Extension: (Google Drive) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-10]
CHR Extension: (YouTube) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-10]
CHR Extension: (Slinky Elegant) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bmanlajnpdncmhfkiccmbgeocgbncfln [2016-10-10]
CHR Extension: (Adblock Plus) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-09]
CHR Extension: (uBlock Origin) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-12-19]
CHR Extension: (Streamkeys) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ekpipjofdicppbepocohdlgenahaneen [2017-01-10]
CHR Extension: (TweetDeck by Twitter) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2016-04-10]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2016-12-17]
CHR Extension: (Momentum) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2017-01-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-10]
CHR Extension: (Chrome Media Router) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-16]
CHR Profile: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\System Profile [2016-04-17]

Opera:
=======
OPR Extension: (Adblock Plus) - C:\Users\FIXIIE\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-08-26]
StartMenuInternet: (HKLM) OperaStable - D:\Program Files\Opera\Launcher.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.)
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [971160 2017-01-09] (AVG Technologies CZ, s.r.o.)
R2 avgfws; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [1824184 2017-01-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5337600 2017-01-09] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [725976 2017-01-09] (AVG Technologies CZ, s.r.o.)
S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1369464 2016-01-15] (Disc Soft Ltd)
R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [814256 2016-05-03] (FileZilla Project)
R2 HiPatchService; D:\Program Files\Smite\HiPatchService.exe [9728 2016-08-30] (Hi-Rez Studios) [File not signed]
R2 HoudiniServer; C:\Windows\system32\hserver.exe [7731712 2015-10-10] (Side Effects Software Inc.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 mi-raysat_3dsmax2013_64; D:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe [86016 2011-09-14] () [File not signed]
S3 mi-raysat_3dsmax2016_64; D:\Program Files\AutoDesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [86016 2011-09-15] () [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3519984 2016-01-27] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
R2 RaAutoInstSrv_RT2870; C:\Program Files (x86)\Tenda\W326U Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe [110592 2009-10-01] (Ralink Technology, Corp.) [File not signed]
R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
S3 VSStandardCollectorService140; D:\Program Files\Microsoft Visual 2015\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [56040 2015-11-19] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [73992 2016-10-23] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312576 2016-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [267008 2016-10-05] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [298240 2016-11-30] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-01-16] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-01-16] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [511952 2016-07-26] (Intel Corporation)
R1 FACEIT; C:\Windows\System32\Drivers\FACEIT.sys [4085256 2017-01-15] ()
S2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [296448 2005-06-14] (Aladdin Knowledge Systems Ltd.) [File not signed]
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34963 2007-12-12] (Compuware Corporation) [File not signed]
S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [37024 2007-12-03] (Compuware Corporation) [File not signed]
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [34587 2007-11-28] (Compuware Corporation) [File not signed]
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-19] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-10-25] (Realtek Semiconductor Corporation )
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
R3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [41816 2016-11-03] (SteelSeries ApS)
R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [45928 2017-01-13] (SteelSeries ApS)
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 TEAM; system32\DRIVERS\RtTeam60.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-03 02:29 - 2017-02-03 02:29 - 00000000 ____D C:\FRST
2017-02-03 01:47 - 2017-02-03 01:47 - 390361163 ____N C:\Windows\MEMORY.DMP
2017-02-03 01:47 - 2017-02-03 01:47 - 00295016 _____ C:\Windows\Minidump\020317-25381-01.dmp
2017-02-03 01:47 - 2017-02-03 01:47 - 00000000 ____D C:\Windows\Minidump
2017-02-03 00:59 - 2017-02-03 02:17 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
2017-02-02 23:14 - 2017-02-02 23:14 - 00000025 _____ C:\Users\FIXIIE\Desktop\tabdownprob.txt
2017-02-02 23:09 - 2017-01-20 19:39 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-01-26 23:32 - 2017-01-26 23:32 - 00001031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2017-01-24 19:37 - 2017-01-24 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-01-24 17:58 - 2017-01-24 17:58 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-24 17:58 - 2017-01-20 15:07 - 00134080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-01-24 17:58 - 2016-12-16 01:33 - 00273696 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-01-24 17:58 - 2016-12-16 01:33 - 00266528 _____ C:\Windows\system32\vulkan-1.dll
2017-01-24 17:58 - 2016-12-16 01:33 - 00111392 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-01-24 17:58 - 2016-12-16 01:32 - 00125728 _____ C:\Windows\system32\vulkaninfo.exe
2017-01-24 17:56 - 2017-01-24 00:04 - 00217528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-01-24 17:56 - 2017-01-24 00:04 - 00047664 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 34934720 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 28209720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 19092912 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 19008392 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 16403200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 14677456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 14286392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-01-24 17:56 - 2017-01-20 17:36 - 11123424 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 11019192 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 09308896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 08990584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 03623992 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 03185720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437849.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 01591352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437849.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 01051072 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00990264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00960568 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00909760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00609216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00504104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00412720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00173272 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00156792 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00150760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00135840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-01-24 17:56 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-01-24 14:15 - 2017-01-24 14:15 - 00000000 ____D C:\Users\FIXIIE\Documents\4A Games
2017-01-24 14:06 - 2017-01-24 14:06 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\4A Games
2017-01-23 17:57 - 2017-01-23 18:33 - 00000487 _____ C:\Users\FIXIIE\Desktop\Emulator Dator.txt
2017-01-23 16:13 - 2017-01-23 16:13 - 00000000 ____D C:\ProgramData\IntelDLM
2017-01-23 16:11 - 2017-01-23 16:15 - 00003212 _____ C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Windows\System32\Tasks\Intel
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Users\FIXIIE\Downloads\Intel Components
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Intel
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\ProgramData\Intel
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Program Files\Intel Driver Update Utility
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility
2017-01-23 16:11 - 2016-10-18 17:14 - 00021984 _____ C:\Windows\system32\Drivers\semav6msr64.sys
2017-01-23 15:38 - 2017-01-06 02:10 - 00158264 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-01-23 15:38 - 2017-01-06 02:10 - 00126008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-01-23 15:38 - 2017-01-06 02:10 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-01-23 15:34 - 2017-01-23 15:44 - 00000000 ____D C:\Users\FIXIIE\Documents\Monitor-Driver
2017-01-23 15:34 - 2017-01-23 15:34 - 00000000 ____D C:\Intel
2017-01-15 15:34 - 2017-01-15 15:34 - 04085256 _____ C:\Windows\system32\Drivers\FACEIT.sys
2017-01-15 15:34 - 2017-01-15 15:34 - 00000727 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FACEIT Client.lnk
2017-01-13 13:09 - 2017-01-13 13:09 - 00000000 ____D C:\Users\FIXIIE\Documents\PS3 x64
2017-01-13 06:24 - 2017-01-13 06:24 - 00000000 ____D C:\Nexon
2017-01-13 06:23 - 2017-01-13 06:23 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\NexonLauncher
2017-01-13 06:23 - 2017-01-13 06:23 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\NexonLauncher
2017-01-13 06:12 - 2017-01-13 06:12 - 00000000 ____D C:\ProgramData\X360CE
2017-01-11 19:23 - 2017-01-11 19:43 - 00000000 ____D C:\Users\FIXIIE\Documents\Adobe
2017-01-11 14:41 - 2017-01-11 14:41 - 00000000 ____D C:\Users\FIXIIE\Documents\PCSX2
2017-01-11 02:38 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 02:38 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 02:38 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-11 02:38 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-11 02:38 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 02:38 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 02:38 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 02:38 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 02:38 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 02:38 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-11 02:38 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-10 17:28 - 2017-01-10 17:28 - 00000000 ____D C:\Windows\USB Vibration
2017-01-10 17:28 - 2017-01-10 17:28 - 00000000 ____D C:\Program Files (x86)\USB Vibration
2017-01-10 17:28 - 2009-12-21 22:29 - 00000000 ____D C:\Users\FIXIIE\Documents\playstation adapter Drivers
2017-01-10 17:28 - 2007-12-12 14:04 - 00034963 _____ (Compuware Corporation) C:\Windows\SysWOW64\Drivers\hid7906.sys
2017-01-10 17:28 - 2007-12-03 08:46 - 00037024 _____ (Compuware Corporation) C:\Windows\SysWOW64\Drivers\hid8101.sys
2017-01-10 17:28 - 2007-11-28 10:52 - 00034587 _____ (Compuware Corporation) C:\Windows\SysWOW64\Drivers\hid8103.sys
2017-01-10 06:33 - 2017-01-10 06:33 - 00000000 ____D C:\Windows\USB_Vibration
2017-01-10 06:33 - 2017-01-10 06:33 - 00000000 ____D C:\Program Files (x86)\USB_Vibration
2017-01-09 17:40 - 2017-01-09 17:40 - 00040489 _____ C:\Users\FIXIIE\Documents\Charakterreferenz.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-03 02:25 - 2015-11-08 06:00 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\Skype
2017-02-03 02:17 - 2015-12-15 12:05 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Adobe
2017-02-03 02:13 - 2009-07-14 06:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-03 02:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-02-03 02:11 - 2015-11-08 05:04 - 00000000 ____D C:\ProgramData\MFAData
2017-02-03 02:07 - 2016-10-27 11:13 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\FAHClient
2017-02-03 02:07 - 2016-02-17 13:21 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-03 02:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-03 01:51 - 2009-07-14 05:45 - 00016864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-03 01:51 - 2009-07-14 05:45 - 00016864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-03 00:15 - 2016-04-12 07:51 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Battle.net
2017-02-02 23:51 - 2016-01-30 17:17 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\OBS
2017-02-02 23:49 - 2015-11-08 05:34 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\vlc
2017-02-02 23:27 - 2015-12-19 12:08 - 00000000 ____D C:\Windows\pss
2017-02-02 23:15 - 2015-11-21 10:16 - 00000390 _____ C:\Windows\Tasks\update-sys.job
2017-02-02 23:10 - 2016-12-15 19:50 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-02 23:10 - 2016-12-04 02:03 - 00003742 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-02 23:10 - 2016-12-04 02:03 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-02 23:10 - 2016-12-04 02:03 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-02 23:10 - 2016-12-04 02:03 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-02 23:10 - 2016-12-04 02:03 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-02 23:10 - 2016-12-04 02:03 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-02 23:10 - 2015-11-08 04:45 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-02-02 23:10 - 2015-11-08 04:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-02 23:10 - 2015-11-08 04:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-02-02 22:52 - 2015-11-21 10:16 - 00000390 _____ C:\Windows\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000.job
2017-02-02 20:52 - 2016-09-20 11:38 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2017-01-27 01:08 - 2015-11-23 06:59 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 23:32 - 2016-04-29 10:49 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\UnrealEngine
2017-01-26 13:23 - 2016-12-24 22:15 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\steelseries-engine-3-client
2017-01-26 02:17 - 2016-05-21 15:34 - 00000000 ____D C:\Users\FIXIIE\Desktop\Dark Thoughts
2017-01-25 18:39 - 2015-11-11 00:18 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\uTorrent
2017-01-24 17:58 - 2015-11-08 04:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-24 00:04 - 2016-12-04 03:04 - 01600056 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-01-23 20:57 - 2016-01-03 21:21 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\CrashDumps
2017-01-23 19:05 - 2016-01-24 02:09 - 00000000 ____D C:\Users\FIXIIE\Documents\Dolphin Emulator
2017-01-23 16:34 - 2015-12-28 22:44 - 00000000 ____D C:\Program Files\Intel
2017-01-23 15:58 - 2016-04-03 19:40 - 00310194 _____ C:\Windows\ntbtlog.txt
2017-01-23 15:16 - 2016-12-15 19:50 - 00005110 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2017-01-20 19:39 - 2016-12-04 02:03 - 01872320 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 01464768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 16491120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 13378448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 04065808 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 03585120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00512960 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00496680 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00420408 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00042606 _____ C:\Windows\system32\nvinfo.pb
2017-01-20 16:13 - 2016-12-04 03:05 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 02479160 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00548800 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-01-20 15:07 - 2016-12-04 02:03 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-01-20 14:36 - 2016-12-15 19:50 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-01-18 16:12 - 2016-03-22 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-01-18 13:57 - 2016-12-04 03:05 - 07755067 _____ C:\Windows\system32\nvcoproc.bin
2017-01-16 06:14 - 2009-07-14 06:08 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-01-15 10:10 - 2016-04-20 19:51 - 00000132 _____ C:\Users\FIXIIE\AppData\Roaming\Adobe PNG Format CS5 Prefs
2017-01-14 07:51 - 2016-06-20 18:12 - 00000132 _____ C:\Users\FIXIIE\AppData\Roaming\Adobe Targa Format CS5 Prefs
2017-01-13 16:13 - 2016-12-07 00:57 - 01804672 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2017-01-13 16:13 - 2016-12-07 00:57 - 00045928 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\sshid.sys
2017-01-13 16:13 - 2016-12-07 00:57 - 00026376 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2017-01-13 06:27 - 2016-08-09 13:10 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\NXEPassportClient
2017-01-12 14:23 - 2016-05-19 17:10 - 00000000 ____D C:\Program Files (x86)\FileZilla Server
2017-01-12 11:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-11 19:53 - 2016-05-24 20:29 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-01-11 18:12 - 2015-11-08 03:38 - 00000000 ____D C:\Users\FIXIIE
2017-01-11 03:01 - 2015-11-08 16:14 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 03:00 - 2015-11-08 16:14 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 17:28 - 2015-11-08 03:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-08 06:17 - 2016-11-29 20:55 - 00000603 _____ C:\Users\FIXIIE\Desktop\prntscrn.txt
2017-01-04 18:04 - 2015-11-08 04:07 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Deployment

==================== Files in the root of some directories =======

2016-07-02 12:39 - 2016-11-15 05:23 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe BMP Format CS5 Prefs
2016-04-21 14:23 - 2016-06-25 17:52 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe IllExport Filter CS5 Prefs
2016-04-20 19:51 - 2017-01-15 10:10 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe PNG Format CS5 Prefs
2016-06-20 18:12 - 2017-01-14 07:51 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe Targa Format CS5 Prefs
2016-12-05 05:30 - 2016-12-05 06:19 - 0005186 _____ () C:\Users\FIXIIE\AppData\Roaming\pixplant3settings.txt
2016-04-06 03:49 - 2016-04-07 19:29 - 0000995 _____ () C:\Users\FIXIIE\AppData\Roaming\SAS7_000.DAT
2016-02-12 19:29 - 2016-07-05 05:10 - 0001456 _____ () C:\Users\FIXIIE\AppData\Local\Adobe Save for Web 12.0 Prefs
2016-01-26 19:49 - 2016-01-26 19:49 - 0007597 _____ () C:\Users\FIXIIE\AppData\Local\Resmon.ResmonCfg
2015-11-21 10:16 - 2015-11-21 10:16 - 0000003 _____ () C:\Users\FIXIIE\AppData\Local\updater.log
2015-11-21 10:16 - 2016-08-06 13:15 - 0000424 _____ () C:\Users\FIXIIE\AppData\Local\UserProducts.xml
2016-07-20 02:32 - 2016-07-20 02:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-08 23:06 - 2016-08-08 23:06 - 0000016 _____ () C:\ProgramData\mntemp
2016-12-15 19:50 - 2017-01-23 15:39 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-15 19:50 - 2017-01-23 15:16 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
2016-12-05 05:30 - 2016-12-05 05:30 - 0000000 _____ () C:\ProgramData\pixplant3settings.txt

Some files in TEMP:
====================
2016-05-19 18:25 - 2014-07-31 17:54 - 0015752 _____ (Autodesk, Inc.) C:\Users\FIXIIE\AppData\Local\Temp\AcDeltree.exe
2016-04-28 01:58 - 2015-08-06 22:30 - 2212144 _____ (Adobe Systems Incorporated) C:\Users\FIXIIE\AppData\Local\Temp\AdobeApplicationManager.exe
2016-04-21 15:27 - 2016-03-23 15:57 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_081313294700.exe
2016-05-13 18:36 - 2016-04-14 16:29 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_081653949844.exe
2016-06-01 15:34 - 2016-04-22 09:01 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_082136125835.exe
2016-07-27 09:00 - 2016-06-21 17:49 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_08465027878.exe
2016-08-23 00:37 - 2016-07-20 13:01 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_08564308837.exe
2016-05-19 18:02 - 2016-05-19 18:15 - 0009728 _____ () C:\Users\FIXIIE\AppData\Local\Temp\bassmod.dll
2016-10-27 11:41 - 2016-10-27 11:42 - 0160888 _____ () C:\Users\FIXIIE\AppData\Local\Temp\ce-swap.exe
2016-10-26 12:54 - 2016-10-26 12:54 - 0458116 _____ (Aladdin Knowledge Systems Ltd.) C:\Users\FIXIIE\AppData\Local\Temp\haspdinst_x64.exe
2016-04-17 21:47 - 2016-03-10 12:10 - 0037376 _____ (Microsoft) C:\Users\FIXIIE\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
2016-04-17 21:47 - 2015-10-14 12:50 - 0020480 _____ (Microsoft) C:\Users\FIXIIE\AppData\Local\Temp\HiRezLauncherControls.dll
2017-01-01 21:36 - 2017-01-01 21:36 - 2864736 _____ (Hola Networks Ltd.) C:\Users\FIXIIE\AppData\Local\Temp\Hola-Setup-x64-1.26.859.exe
2016-06-30 23:52 - 2016-06-30 23:52 - 4211112 _____ () C:\Users\FIXIIE\AppData\Local\Temp\npp.6.9.2.Installer.exe
2016-04-03 19:23 - 2016-12-11 19:23 - 0747648 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvSCPAPI.dll
2016-07-07 11:20 - 2016-09-16 23:31 - 0860776 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvSCPAPI64.dll
2016-09-22 00:02 - 2016-09-16 23:30 - 0426040 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvscpapisvr.exe
2016-06-07 15:08 - 2016-06-03 04:19 - 0386160 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvStereoApiI.dll
2016-07-07 11:20 - 2016-08-11 12:23 - 0485344 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvStereoApiI64.dll
2016-05-03 20:44 - 2016-12-11 19:23 - 0353336 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvStInst.exe
2016-12-04 02:03 - 2016-11-17 14:42 - 1135552 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetry.dll
2016-12-04 02:03 - 2017-01-06 02:10 - 0255032 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetryAPI32.dll
2016-12-04 02:03 - 2017-01-06 02:10 - 0335928 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetryAPI64.dll
2016-05-10 17:54 - 2016-05-10 17:55 - 45196928 _____ (Skype Technologies S.A.) C:\Users\FIXIIE\AppData\Local\Temp\SkypeSetup.exe
2016-06-13 02:23 - 2016-06-13 02:23 - 30533688 _____ () C:\Users\FIXIIE\AppData\Local\Temp\vlc-2.2.4-win32.exe
2015-08-03 00:58 - 2015-08-03 00:58 - 0118784 _____ () C:\Users\FIXIIE\AppData\Local\Temp\xmlUpdater.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-23 02:20

==================== End of FRST.txt ============================

Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2017
Ran by FIXIIE (03-02-2017 02:30:04)
Running from D:\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2015-11-08 02:38:57)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-459705389-3442733056-3860532926-500 - Administrator - Disabled)
FIXIIE (S-1-5-21-459705389-3442733056-3860532926-1000 - Administrator - Enabled) => C:\Users\FIXIIE
Guest (S-1-5-21-459705389-3442733056-3860532926-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-459705389-3442733056-3860532926-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Internet Security (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Internet Security (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

. . . (Version: 2.1.28.3 - Intel) Hidden
. . . (x32 Version: 2.6.2.4 - Intel) Hidden
µTorrent (HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent Inc.)
3D Ripper DX v1.8.2 (HKLM-x32\...\3D Ripper DX_is1) (Version: - Roman Lut)
ACA & MEP 2016 Object Enabler (Version: 7.8.41.0 - Autodesk) Hidden
ACAD Private (Version: 20.1.49.0 - Autodesk) Hidden
Adblock Plus för IE (32-bitars och 64-bitars) (HKLM\...\{1B922A28-D60F-450B-B434-82C21BAED9BC}) (Version: 1.5 - Eyeo GmbH)
Adobe After Effects CC 2015 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F0}) (Version: 13.5.0 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Dreamweaver CC 2015 (HKLM-x32\...\{EE2A0AA8-0386-11E5-8603-BC82F5DB1A71}) (Version: 16.1.3 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2015 (HKLM-x32\...\{38C72D42-0672-43B1-9E05-E7631684F9A1}) (Version: 9.0.0 - Adobe Systems Incorporated)
Ansel (Version: 378.49 - NVIDIA Corporation) Hidden
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Apple-programstöd (32-bitar) (HKLM-x32\...\{26356515-5821-40FA-9C3D-9785052A1062}) (Version: 4.3.1 - Apple Inc.)
Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{903D0F33-D3CF-48D6-967D-84004089428A}) (Version: 4.0.51203.1 - Microsoft Corporation)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
AutoCAD 2016 - English (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 Language Pack - English (Version: 20.1.49.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 (HKLM\...\Autodesk 3ds Max 2016) (Version: 18.0.873.0 - Autodesk)
Autodesk 3ds Max 2016 (Version: 18.0.873.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 Populate Data (HKLM\...\{57E92DED-DC7C-41E5-B9E1-76D83BD2EABE}) (Version: 18.0.0.0 - Autodesk)
Autodesk 3ds Max Design 2013 64-bit (HKLM\...\Autodesk 3ds Max Design 2013 64-bit) (Version: 15.0.0.347 - Autodesk)
Autodesk 3ds Max Design 2013 64-bit (Version: 15.0.0.347 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.19 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.14 - Autodesk)
Autodesk AutoCAD 2016 - English (HKLM\...\AutoCAD 2016 - English) (Version: 20.1.49.0 - Autodesk)
Autodesk Backburner 2013.0.0 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 2013.0.0 - Autodesk, Inc.)
Autodesk Backburner 2016 (HKLM-x32\...\{8C5F38D2-9EFE-49A4-B3F5-BF3210FED168}) (Version: 16.0.0.0 - Autodesk)
Autodesk Civil View for 3ds Max 2016 64-bit (HKLM\...\{1C4FFAF0-6DBB-4F7A-A386-46747D060826}) (Version: 18.0.0.0 - Autodesk)
Autodesk Civil View for 3ds Max Design 2013 (HKLM-x32\...\{FE6DCC8D-427F-405C-A779-C93B6D9F77A5}) (Version: 1.0.0.2 - Autodesk)
Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk DirectConnect 2012 64-bit (HKLM\...\Autodesk DirectConnect 2012 64-bit) (Version: 6.0.443.0 - Autodesk)
Autodesk DirectConnect 2012 64-bit (Version: 6.0.443.0 - Autodesk) Hidden
Autodesk DirectConnect 2013 64-bit (HKLM\...\Autodesk DirectConnect 2013 64-bit) (Version: 7.0.28.0 - Autodesk)
Autodesk DirectConnect 2013 64-bit (Version: 7.0.28.0 - Autodesk) Hidden
Autodesk DirectConnect 2016 64-bit (HKLM\...\Autodesk DirectConnect 2016 64-bit) (Version: 10.0.98.0 - Autodesk)
Autodesk DirectConnect 2016 64-bit (Version: 10.0.98.0 - Autodesk) Hidden
Autodesk Essential Skills Movies for 3ds Max Design 2013 64-bit (HKLM\...\{62CBE596-1BB8-4D7B-A056-103287BAD1C4}) (Version: 1.0.0.1 - Autodesk)
Autodesk FBX Plug-in 2013.1 - 3ds Max Design 2013 64-bit (HKLM\...\Autodesk FBX Plug-in 2013.1 - 3ds Max Design 2013 64-bit) (Version: - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2016 (HKLM\...\{9167CA34-4E58-49E3-8892-3C439739D2D3}) (Version: 18.0 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max Design 2013 64-bit (HKLM\...\{BC66B242-DF13-1664-851B-00123612ED98}) (Version: 15.0 - Autodesk)
Autodesk MatchMover 2012 64-bit (HKLM\...\{4529F749-C362-4119-AFA0-0A3F1CA924AB}) (Version: 14.00.0000 - Autodesk)
Autodesk Material Library 2013 (HKLM-x32\...\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2013 (HKLM-x32\...\{606E12B9-641F-4644-A22A-FF38AE980AFD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2013 (HKLM-x32\...\{58760EEC-8B6A-43F4-81AA-696E381DFADD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2016 (HKLM-x32\...\{415A5A54-325E-4815-9940-62A889CA3877}) (Version: 6.3.0.19 - Autodesk)
Autodesk Maya 2012 64-bit (HKLM\...\Autodesk Maya 2012 64-bit) (Version: 14.0.0.0 - Autodesk)
Autodesk Maya 2012 64-bit (Version: 14.0.0.0 - Autodesk) Hidden
Autodesk Maya 2016 (HKLM\...\Autodesk Maya 2016) (Version: 16.0.1312.0 - Autodesk)
Autodesk Maya 2016 (Version: 16.0.1312.0 - Autodesk) Hidden
Autodesk ReCap 2016 (HKLM\...\Autodesk ReCap 2016) (Version: 1.5.0.33 - Autodesk)
Autodesk ReCap 2016 (Version: 1.5.0.33 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max (HKLM\...\Autodesk Revit Interoperability for 3ds Max ) (Version: 16.0.394.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max (Version: 16.0.394.0 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max and 3ds Max Design 2013 64-bit (HKLM\...\{06E18300-BB64-1664-8E6A-2593FC67BB74}) (Version: 1.0.0.1 - Autodesk)
AVG (Version: 16.141.7998 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4756 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.141.7998 - AVG Technologies)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
BankID säkerhetsprogram (HKLM-x32\...\{1BDBF557-BA87-438F-9B28-AE4D836E35BA}) (Version: 7.1.0.20 - Finansiell ID-Teknik BID AB)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)
Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CheVolume 0.4.1.2 (HKLM-x32\...\CheVolume 0.4.1.2) (Version: - WellWeWeb)
CINEMA 4D 17.048 (HKLM\...\MAXONC60D9D75) (Version: 17.048 - MAXON Computer GmbH)
Composite 2012 64-bit (HKLM\...\{EA234BC3-39FE-4734-B72F-076086889F6D}) (Version: 7.0.0 - Autodesk)
Composite 2013 64-bit (HKLM\...\{2F808931-D235-4FC7-90CD-F8A890C97B2F}) (Version: 8.0.0 - Autodesk)
Counter-Strike (HKLM\...\Steam App 10) (Version: - Valve)
Counter-Strike: Global Offensive - SDK (HKLM\...\Steam App 745) (Version: - )
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
Crazybump (remove only) (HKLM-x32\...\Crazybump) (Version: - )
CRYENGINE Launcher (HKLM-x32\...\{F7916573-4BDD-4A9F-9E2F-CC8107845DC3}) (Version: 1.0.0 - Crytek GmbH)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
Curse Client (HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.2.0.0115 - Disc Soft Ltd)
DaVinci Resolve (HKLM\...\{2852CC67-7BE9-4972-BF96-8D4EC7486F97}) (Version: 10.1.0021 - Blackmagic Design)
Dotfuscator and Analytics Community Edition 5.19.0 (x32 Version: 5.19.0.2930 - PreEmptive Solutions) Hidden
Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
Epic Games Launcher (HKLM-x32\...\{4755FB10-B694-4B0F-BCDE-F390B957CD96}) (Version: 1.1.90.0 - Epic Games, Inc.)
Europe MapleStory (HKLM-x32\...\Europe MapleStory_is1) (Version: - Nexon)
FACEIT Client version 1.0 (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 1.0 - FACEIT LTD)
FAHClient (HKLM-x32\...\FAHClient) (Version: 7.4.4 - Stanford University)
FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.57 - FileZilla Project)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
FMW 1 (Version: 1.143.3 - AVG Technologies) Hidden
GCFScape 1.8.5 (HKLM\...\GCFScape_is1) (Version: - Ryan Gregg)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.3.9 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Houdini 15.0.244.16 (HKLM\...\Houdini 15.0.244.16) (Version: 15.0.244.16 - Side Effects Software)
IIS 10.0 Express (HKLM\...\{7A28A2B0-458B-4A58-84AC-C90D2D4B79FB}) (Version: 10.0.1735 - Microsoft Corporation)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Image Resizer for Windows (64 bit) (Version: 3.0.4802.35565 - Brice Lambson) Hidden
Image Resizer for Windows (HKLM-x32\...\{69d72156-6582-4556-8637-06f40aa7f85b}) (Version: 3.0.4802.35565 - Brice Lambson)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Chipset Device Software (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel(R) Network Connections 21.1.30.0 (HKLM\...\PROSetDX) (Version: 21.1.30.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{66e8e99a-eb6f-4403-9fc2-0ddd4d6f353e}) (Version: 2.6.2.4 - Intel)
J2SE Development Kit 5.0 Update 22 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0150220}) (Version: 1.5.0.220 - Sun Microsystems, Inc.)
Java 7 Update 79 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217079FF}) (Version: 7.0.790 - Oracle)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
KeyShot 5 64 bit (HKLM-x32\...\KeyShot 5_64) (Version: 5.0 64 bit - Luxion ApS)
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - )
Machinima Studio (HKLM\...\{517500ED-35B9-43C1-9F60-6B31E111E2D3}) (Version: 1.0.0 - BC)
Metro: Last Light (HKLM\...\Steam App 43160) (Version: - 4A Games)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.24720 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft PowerPoint 2010 (HKLM-x32\...\Office14.POWERPOINT) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Enterprise 2015 (HKLM-x32\...\{a47f6f59-0768-45af-8aa6-10ad157a603e}) (Version: 14.0.23107.156 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 sv-SE) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 sv-SE)) (Version: 50.1.0 - Mozilla)
MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.24720 - Microsoft Corporation) Hidden
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
NaturalMotion endorphin 2.5.2 (HKLM-x32\...\NaturalMotion endorphin_is1) (Version: - NaturalMotion Ltd.)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 378.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.3.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.3.0.95 - NVIDIA Corporation)
NVIDIA Graphics Driver 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.49 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.21 - NVIDIA Corporation)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX Plug-in for Autodesk Maya 2012 64 bit (HKLM\...\{FC4AD39F-9DCE-4BD0-B7D0-7C81CEB9F04B}) (Version: 2.60.0216.1828 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.3.5.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OctaneRender Demo 3.04 (HKLM-x32\...\OctaneRender Demo 3.04) (Version: 3.04 - OTOY)
Opera Stable 37.0.2178.43 (HKLM-x32\...\Opera 37.0.2178.43) (Version: 37.0.2178.43 - Opera Software)
Overwatch Test (HKLM-x32\...\Overwatch Test) (Version: - Blizzard Entertainment)
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
PixPlant 3.0.11 (HKLM\...\PixPlant3_is1) (Version: 3.0.11 - FaronStudio)
PowerISO (HKLM-x32\...\PowerISO) (Version: 6.5 - Power Software Ltd)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Qpad 5K Gaming Mouse Software (HKLM-x32\...\{5B4277DA-8A85-44B6-8086-DAA97C20B992}) (Version: 1.06 - Qpad)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
RealFlow 2015 (HKLM-x32\...\RealFlow 2015) (Version: - )
RealFlow Plugin for 3D Studio Max (HKLM-x32\...\RealFlowMax) (Version: 2014.0.3 - Next Limit)
RealFlow Plug-in for Cinema4D (HKLM-x32\...\RealFlowC4D) (Version: 1.0 - Next Limit)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.9.10.0 - Red Giant, LLC)
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (x32 Version: 14.0.24723 - Microsoft Corporation) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0000-0000-0000000FF1CE}_Office14.POWERPOINT_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SlimDX SDK (June 2010) (HKLM-x32\...\{59BB7F21-1987-4A1C-9DF3-82FEC6591C60}) (Version: 2.0.10.43 - SlimDX Group)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 3.16.3600.1 - Hi-Rez Studios)
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - Valve)
Spotify (HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Spotify) (Version: 1.0.29.92.g67727800 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries Engine 3.9.10 (HKLM\...\SteelSeries Engine 3) (Version: 3.9.10 - SteelSeries ApS)
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.24712 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
TGA Viewer (HKLM-x32\...\{4FA2DAFD-2D72-4ACF-BDD8-4178E8AFD459}_is1) (Version: - IdeaMK)
Tombraider (HKLM-x32\...\Tombraider_is1) (Version: - )
TP-LINK 300Mbps Wireless USB Adapter Drivrutin (HKLM-x32\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
Trapcode Particular 64 bit (HKLM-x32\...\InstallShield_{9497360C-4C41-4E05-81C0-BE56DF2ADFE8}) (Version: 2.1.1 - Red Giant Software)
Trapcode Particular 64 bit (Version: 2.1.1 - Red Giant Software) Hidden
Trapcode Suite v13.1.1 (HKLM-x32\...\{DFD2DC6B-C634-4C1C-81CC-5EF852E71CEE}_is1) (Version: 13.1.1 - Red Giant, LLC)
TypeScript Power Tool (x32 Version: 1.7.4.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.7.4.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 1.7.4.0 (HKLM-x32\...\{33e2204a-4ec6-4458-895a-47e2a404d990}) (Version: 1.7.24720.0 - Microsoft Corporation)
UE4 Prerequisites (x64) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (x32 Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
USB Network Driver (HKLM-x32\...\{66ED8E01-C915-41F5-B33E-C5C31F27B885}) (Version: 2007.07.3 - )
USB Vibration Joystick (HKLM-x32\...\{64B27517-3558-4A76-8641-5D161D7C9BE5}) (Version: v3.85 - Dragon rise)
W326U UnInstall (HKLM-x32\...\Tenda Wireless LAN Card Setup_is1) (Version: - )
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Vegas Pro 12.0 (64-bit) (HKLM\...\{64A98EF1-2680-11E3-A909-F04DA23A5C58}) (Version: 12.0.726 - Sony)
Windows Driver Package - Microsoft (xusb21) XnaComposite (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
Windows Speech Recognition Macros (HKLM-x32\...\{8DC197D6-F4AB-44E0-ACF7-210355E6F389}) (Version: 1.0.6862.19 - Microsoft Corporation)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio 2015 Update 1 (KB3022398) (HKLM-x32\...\{fcaa9dba-9438-48b6-ad91-4e9b4cc7084a}) (Version: 14.0.24720 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
World of Warcraft Public Test (HKLM-x32\...\World of Warcraft Public Test) (Version: - Blizzard Entertainment)
VS Update core components (x32 Version: 14.0.24720 - Microsoft Corporation) Hidden
VTFEdit 1.2.5 (HKLM-x32\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
VTFEdit 1.3.3 (HKLM\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)
ZBrush 4R7 (HKLM-x32\...\ZBrush 4R7 4R7) (Version: 4R7 - Pixologic)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Common Files\Autodesk Shared\DirectConnect2016 (64-bit)\bin\Aruba\Inventor Server\B (the data entry has 28 more characters).
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{1baa97d3-5504-47c3-9968-006c53f68ba2}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Common Files\Autodesk Shared\DirectConnect2016 (64-bit)\bin\Aruba\Inventor Server\B (the data entry has 28 more characters).
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Common Files\Autodesk Shared\DirectConnect2016 (64-bit)\bin\Aruba\Inventor Server\B (the data entry has 28 more characters).

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0210B291-3FCD-4635-965A-28A3219CF9B8} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe
Task: {136F6B88-3D8D-483F-B07F-4E7D3225F301} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {1694724D-1863-4810-8FD6-6319C4425A26} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-01-20] (NVIDIA Corporation)
Task: {1CEA884D-0EA4-43D2-82DF-DDB2CB31BDCD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-01-20] (NVIDIA Corporation)
Task: {259118CC-8076-4395-87B7-C4AE3F372AF0} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {2AC1F097-6A21-4A7E-B763-406A81CF58E7} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {35669D06-D2E1-43FE-ABA0-C5920A05E160} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {3AB65712-DC07-4B43-905A-629DD324E18C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)
Task: {518DFB82-8DFC-47D4-A4EA-FCD212089064} - System32\Tasks\AdobeAAMUpdater-1.0-FIXIIE-PC-FIXIIE => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-03-22] (Adobe Systems Incorporated)
Task: {519E8252-0DBE-4073-9D11-AB059EEBB8BC} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
Task: {55E456BB-05F1-4EBB-9FF2-CEB596E7DF3D} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {6941E2E1-2903-4F0C-80CD-F34B2CEF7A3A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {8A03348C-3F6E-45A6-B459-3CACA7B34BA4} - System32\Tasks\Opera scheduled Autoupdate 1444085072 => D:\Program Files\Opera\launcher.exe
Task: {961CFD4D-1976-4470-AFD6-EF852C3C9165} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {A90217D8-B2B0-47B0-9530-5C80FD627ECD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-01-20] (NVIDIA Corporation)
Task: {B6AE88C8-DA2A-46AA-A614-C944DE27325F} - System32\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {ED665B10-E27F-4117-83F5-EA3DDB75AC6F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Startprogrammet för appar i Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\FIXIIE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\FIXIIE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2fae1f4995fc9e7f\NexonLauncher.lnk -> D:\Program Files\Nexon Launcher\bin\nexon_client\nexon_client.exe (The NWJS Community) -> --user-data-dir="C:\Users\FIXIIE\AppData\Local\NexonLauncher\User Data" --profile-directory=Default --app-id=dobbaijafcbikgimjpakclacfgeagffm

==================== Loaded Modules (Whitelisted) ==============

2011-09-14 23:19 - 2011-09-14 23:19 - 00086016 _____ () D:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
2016-12-04 02:03 - 2017-01-20 19:39 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-04 02:03 - 2017-01-20 19:39 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-04 03:05 - 2017-01-20 16:13 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-11-17 22:05 - 2016-11-17 22:05 - 00156928 _____ () C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
2017-01-23 16:11 - 2016-11-17 22:16 - 00805632 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
2017-01-23 16:11 - 2016-11-17 22:18 - 01981184 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_modeler.dll
2017-01-23 16:11 - 2016-11-17 22:11 - 00247552 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\acpi_battery_input.dll
2017-01-23 16:11 - 2016-11-17 22:10 - 00212736 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\wifi_input.dll
2017-01-23 16:11 - 2016-11-17 22:11 - 00174848 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\devices_use_input.dll
2017-01-23 16:11 - 2016-11-17 22:10 - 00203520 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_system_power_state_input.dll
2017-01-23 16:11 - 2016-11-17 22:09 - 00206592 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_disktrace_input.dll
2017-01-23 16:11 - 2016-11-17 22:09 - 00336640 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_process_input.dll
2017-01-23 16:11 - 2016-11-17 22:06 - 00147712 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_winstat_input.dll
2017-01-23 16:11 - 2016-11-17 22:11 - 00213248 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\sema_thermal_input.dll
2017-01-23 16:11 - 2016-11-17 22:07 - 00229120 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_quality_and_reliability_input.dll
2017-01-23 16:11 - 2016-11-17 22:08 - 00224000 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_sampler_input.dll
2017-01-23 16:11 - 2016-11-17 22:06 - 00211712 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_stress_odometer_input.dll
2017-01-23 16:11 - 2016-11-17 22:08 - 00219904 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_turbo_input.dll
2016-11-13 02:32 - 2016-11-29 12:27 - 00103424 _____ () X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
2016-01-13 10:30 - 2016-01-13 10:30 - 00009728 _____ () D:\Program Files\CheVolume\CheVolumeHelper_x86.exe
2016-05-19 19:06 - 2016-02-24 05:48 - 00062024 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2016-05-19 19:06 - 2016-02-24 05:47 - 00110664 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2015-11-08 04:46 - 2017-01-20 19:39 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-04 02:03 - 2017-01-20 19:39 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-04 02:03 - 2017-01-20 19:39 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-28 12:50 - 2016-11-28 12:50 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll
2016-08-10 10:14 - 2016-08-10 10:14 - 40523480 _____ () C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\libcef.dll
2016-12-04 02:03 - 2017-01-20 19:38 - 64245184 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-12-04 02:03 - 2017-01-20 14:36 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-12-04 02:03 - 2017-01-20 14:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-12-04 02:03 - 2017-01-20 14:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-12-04 02:03 - 2017-01-20 14:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-12-04 02:03 - 2017-01-20 14:36 - 00537656 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-12-04 02:03 - 2017-01-20 14:36 - 00468024 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-12-04 02:03 - 2017-01-20 14:36 - 01066552 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-15 19:50 - 2017-01-20 14:36 - 01014840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
2015-03-21 07:14 - 2015-03-21 07:14 - 00007168 _____ () D:\Program Files\CheVolume\EasyLoad32.dll
2016-12-15 01:38 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-15 01:38 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-10-25 11:12 - 2016-12-23 19:28 - 00657184 _____ () X:\Program Files\Steam\SDL2.dll
2016-10-25 11:12 - 2016-09-01 02:02 - 04969248 _____ () X:\Program Files\Steam\v8.dll
2016-10-25 11:12 - 2016-09-01 02:02 - 01563936 _____ () X:\Program Files\Steam\icui18n.dll
2016-10-25 11:12 - 2016-09-01 02:02 - 01195296 _____ () X:\Program Files\Steam\icuuc.dll
2016-10-25 11:12 - 2017-01-19 02:30 - 02327840 _____ () X:\Program Files\Steam\video.dll
2016-10-25 11:12 - 2016-01-27 08:49 - 02549760 _____ () X:\Program Files\Steam\libavcodec-56.dll
2016-10-25 11:12 - 2016-01-27 08:49 - 00442880 _____ () X:\Program Files\Steam\libavutil-54.dll
2016-10-25 11:12 - 2016-01-27 08:49 - 00491008 _____ () X:\Program Files\Steam\libavformat-56.dll
2016-10-25 11:12 - 2016-01-27 08:49 - 00332800 _____ () X:\Program Files\Steam\libavresample-2.dll
2016-10-25 11:12 - 2016-01-27 08:49 - 00485888 _____ () X:\Program Files\Steam\libswscale-3.dll
2016-10-25 11:12 - 2017-01-19 02:30 - 00838432 _____ () X:\Program Files\Steam\bin\chromehtml.DLL
2016-10-25 11:12 - 2016-07-04 23:17 - 00266560 _____ () X:\Program Files\Steam\openvr_api.dll
2016-12-13 10:11 - 2017-01-05 04:12 - 68813088 _____ () X:\Program Files\Steam\bin\cef\cef.win7\libcef.dll
2016-10-25 11:12 - 2017-01-19 02:30 - 00383776 _____ () X:\Program Files\Steam\steam.dll
2016-10-25 11:12 - 2015-09-25 00:52 - 00119208 _____ () X:\Program Files\Steam\winh264.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00198144 _____ () X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00317952 _____ () X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00204288 _____ () X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00391168 _____ () X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll
2016-11-13 02:32 - 2017-01-20 13:52 - 06674944 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\engine.dll
2016-12-08 02:30 - 2016-12-08 17:05 - 25145344 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\phonon3d.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00167936 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\inputsystem.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 01173504 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\vphysics.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00862208 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\materialsystem.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00357376 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\datacache.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00611328 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\studiorender.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00165376 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00708096 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\vscript.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00135680 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\valve_avi.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00958976 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00395264 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\vgui2.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 03295744 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\scaleformui.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00578048 _____ () X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00143872 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\localize.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00230912 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 01096192 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll
2016-11-13 02:32 - 2017-01-20 13:52 - 00600064 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll
2016-11-13 02:32 - 2017-01-30 01:08 - 12911104 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\csgo\bin\client.dll
2016-11-13 02:32 - 2017-01-20 13:52 - 10579968 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\csgo\bin\server.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00094208 _____ () X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00091136 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll
2016-11-13 02:32 - 2016-11-13 02:32 - 00071680 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\mssmp3.asi
2016-11-13 02:32 - 2016-11-13 02:32 - 00013312 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\mssds3d.flt
2016-11-13 02:32 - 2016-11-13 02:32 - 00055808 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\msseax.flt
2016-11-13 02:32 - 2017-01-13 15:02 - 00973312 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll
2016-11-13 02:32 - 2017-01-13 15:02 - 00190464 _____ () x:\program files\steam\steamapps\common\counter-strike global offensive\bin\vaudio_celt.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8 [168]
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [138]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\hola.org -> hxxp://hola.org

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2016-05-19 18:15 - 00001138 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 na1r.services.adobe.com
127.0.0.1 hlrcv.stage.adobe.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\FIXIIE\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 195.67.199.30 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SteelSeries Engine 3.lnk => C:\Windows\pss\SteelSeries Engine 3.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK trådlösa konfigurationsverktyg.lnk => C:\Windows\pss\TP-LINK trådlösa konfigurationsverktyg.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupfolder: C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup
MSCONFIG\startupfolder: C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Folding@home.lnk => C:\Windows\pss\Folding@home.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: AvgUi => "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "D:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: FileZilla Server Interface => "C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe"
MSCONFIG\startupreg: ISUSPM => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Lightshot => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: ShadowPlay => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Speech Recognition => "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: Spotify => "C:\Users\FIXIIE\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\FIXIIE\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: USB Gamepad => C:\Windows\USB Vibration\dr100&110\USB Gamepad.exe -boot
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{C730BE89-74FB-4E05-9F03-695E2B015FF7}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{076EC2E3-8248-44E9-B0A9-02692C50197B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{EF718E83-4028-4BF0-BD64-AF6C0BAC5E14}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0D21F7F5-49C2-4903-BDA0-9DF6FB0792E2}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8BA2207C-A101-44F3-9659-EA42139FF8CE}] => D:\Program Files\Steam\Steam.exe
FirewallRules: [{99D0F951-3250-4D94-9C36-82F06943CF54}] => D:\Program Files\Steam\Steam.exe
FirewallRules: [{D6ACA3D6-558C-494E-9D00-CB8E58533A7D}] => D:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{34DDD7A1-86DF-4ECE-87BF-50E05526B183}] => D:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{1A7C4BEA-CFB7-4334-AF5C-2CAAF06745D6}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{182C8424-4593-4E1F-8DA7-D313AAABA78D}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41202.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41202.exe
FirewallRules: [UDP Query User{05C89008-4DF2-4E73-926D-DBE2F1DDCA42}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41202.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41202.exe
FirewallRules: [TCP Query User{2C61BE49-FD46-494C-B272-FDE820575DB7}D:\program files\hearthstone\hearthstone.exe] => D:\program files\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{6CAC4410-6D6D-4D14-8402-68FE592848F0}D:\program files\hearthstone\hearthstone.exe] => D:\program files\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{F8457AC2-B7CC-4021-AF9C-BE49AF31C974}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41372.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41372.exe
FirewallRules: [UDP Query User{D39DDDE2-6698-4D18-B33F-3B6AA8921841}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41372.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41372.exe
FirewallRules: [{9339FC2D-F3C8-4FE0-8FA9-6C4F8740D9D0}] => D:\Program Files\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{0CA00C4B-2900-4AD3-81A4-A961D200465D}] => D:\Program Files\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{A64701A8-7EA0-4853-8D8E-C47C454D8909}] => D:\Program Files\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{E324111F-7EF3-40E9-9DD3-8DF5CEBDE0A4}] => D:\Program Files\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [TCP Query User{1CA79EF6-DD76-4DE8-94A9-F929E6FFBA80}D:\program files\hirezgames\smite\binaries\win32\smite.exe] => D:\program files\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{D35A0372-41B8-40DF-946B-0D41D4C32CDB}D:\program files\hirezgames\smite\binaries\win32\smite.exe] => D:\program files\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{611F71E9-17F9-4488-BC8C-2783C7D84762}] => D:\Program Files\Microsoft Visual 2015\Common7\IDE\devenv.exe
FirewallRules: [{E976F507-4E27-4967-895B-7337DC4CC53F}] => D:\Program Files\Microsoft Visual 2015\Common7\IDE\devenv.exe
FirewallRules: [{552315E8-3287-443B-AAFE-505D91953E7D}] => D:\Program Files\Microsoft Visual 2015\Common7\IDE\devenv.exe
FirewallRules: [{0887317C-40B2-4C07-84B6-AF3EA2CC626B}] => D:\Program Files\Microsoft Visual 2015\Common7\IDE\devenv.exe
FirewallRules: [{2EF5C394-A2C2-41F7-B92A-4576A01A878E}] => D:\Program Files\Microsoft Visual 2015\Common7\IDE\devenv.exe
FirewallRules: [{499B38BD-92F6-4F10-8775-373D3D599E29}] => D:\Program Files\Microsoft Visual 2015\Common7\IDE\devenv.exe
FirewallRules: [{2EAEA719-4D1C-4BA1-B456-07E7D1A1EE0A}] => D:\Program Files\Microsoft Visual 2015\Common7\IDE\devenv.exe
FirewallRules: [{68482DE8-A95D-49D9-B225-B42E11CB9CD5}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BC93B346-78B1-4677-A11D-52025399430A}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BD9B8494-B96C-4AD2-99C1-8296608AB491}C:\users\fixiie\appdata\roaming\spotify\spotify.exe] => C:\users\fixiie\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{6F257C93-468B-49D4-ADD2-992ECFCA42EA}C:\users\fixiie\appdata\roaming\spotify\spotify.exe] => C:\users\fixiie\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{4ACE98A6-564B-47CD-8725-F08D82D16A3F}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41712.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41712.exe
FirewallRules: [UDP Query User{953F9BED-B93F-4470-B3DD-F21BEF29699F}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41712.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41712.exe
FirewallRules: [TCP Query User{D2B8AFD7-2B12-4655-AEC5-A28514CD7FAD}D:\program files\portal 2\portal2.exe] => D:\program files\portal 2\portal2.exe
FirewallRules: [UDP Query User{55978763-8D17-438E-B368-D000614D1F77}D:\program files\portal 2\portal2.exe] => D:\program files\portal 2\portal2.exe
FirewallRules: [TCP Query User{6CDCC8CC-4099-4CFE-8A5F-E021F15752BC}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41865.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41865.exe
FirewallRules: [UDP Query User{4CD02667-1C2B-4905-90A0-A0F7833CA4D0}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41865.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.5_41865.exe
FirewallRules: [TCP Query User{8D3E249C-ACE1-4775-861A-88475E5CD148}C:\users\fixiie\appdata\roaming\spotify\spotify.exe] => C:\users\fixiie\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{2376A732-963D-4E34-B8F1-2DBDCF537D4A}C:\users\fixiie\appdata\roaming\spotify\spotify.exe] => C:\users\fixiie\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A6A5CFBD-8CA9-47C1-BC19-BD8F2BA8D014}] => LPort=51001
FirewallRules: [{0E0B936B-12DB-4147-AE09-C9D4A23A1C52}] => C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{63E4A1AF-5FA1-4FCF-A590-B40C9F767A2A}] => C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [TCP Query User{2BEFCCBB-C9EC-4340-BFE5-CDB571ACB723}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.6_42094.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.6_42094.exe
FirewallRules: [UDP Query User{4A2E6EED-66F0-408E-B474-5373D370FE47}C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.6_42094.exe] => C:\users\fixiie\appdata\roaming\utorrent\updates\3.4.6_42094.exe
FirewallRules: [{924EDA58-EFB4-4E52-89F2-666420FCBAB4}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{71661FFD-8F04-40D9-897F-F44DBB0D8A6E}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E3EFFDE5-FCAE-498C-8C31-A863C3260C8E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{1AE940F1-FDED-4787-81C4-429ECC6EF34F}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6C37A3C3-2D3E-4F1E-A9FC-F32FBD7FD768}] => D:\Program Files\AutoDesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe
FirewallRules: [{12707B43-746B-46EB-BC94-187B6C88C674}] => D:\Program Files\AutoDesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe
FirewallRules: [{6E8E1519-65BA-41D3-9D46-74420337A877}] => D:\Program Files\AutoDesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64.exe
FirewallRules: [{50C44E96-A567-4A82-98BB-1BE9095EE649}] => D:\Program Files\AutoDesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64.exe
FirewallRules: [{A4A39402-E48B-4FE4-934E-C1D38E144B00}] => D:\Program Files\DaVinci Resolve\Resolve.exe
FirewallRules: [{0A6603EB-A8C5-4E08-BBF8-F7D237371D6F}] => D:\Program Files\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{204DAA5B-AC41-445F-810F-D55A58CFD7ED}] => D:\Program Files\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{160F9A39-B131-4ABC-A459-34E20758E0E4}] => D:\Program Files\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{567D0FDD-76E1-4256-83A6-2030FBD3BC7C}] => D:\Program Files\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{0896F6A1-AE7D-4CCE-A482-C519A67CE784}] => D:\Program Files\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{FC2F886D-0178-4F0F-B2D0-E4F411322B70}] => D:\Program Files\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{3A371709-B599-43E5-B555-11B80AD14A83}] => C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe
FirewallRules: [{9A299CB4-C2DF-4CC5-80E7-8297941DAA79}] => LPort=50248
FirewallRules: [{C0D6CB36-9B06-4E0D-B1DB-D636EAF96005}] => D:\Program Files\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
FirewallRules: [{99276054-7F05-48CE-BEB3-9575D6A79D33}] => D:\Program Files\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
FirewallRules: [{A859C55C-CF99-4F45-8D0F-237D9003338F}] => D:\Program Files\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64.exe
FirewallRules: [{EDEE1F6B-782C-474C-ADC0-4678A5E3B5F2}] => D:\Program Files\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64.exe
FirewallRules: [{72F943CA-9291-4A1C-9E54-C7BFCB7ED050}] => D:\Program Files\AutoDesk\3ds Max Design 2013\3dsmax.exe
FirewallRules: [{5CD763D7-7E54-4A29-81E8-9419F0923A4F}] => D:\Program Files\AutoDesk\3ds Max Design 2013\3dsmax.exe
FirewallRules: [{24732CED-303B-4064-8654-D1782A1F7555}] => C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{12AAE6AF-211A-4CFB-81AB-A9F0AAEB5424}] => C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
FirewallRules: [{DDE24B6D-7025-41D8-93BC-111EC40256B5}] => C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{27C67492-55A1-44BB-ACAE-5653A9EAED79}] => C:\Program Files (x86)\Autodesk\Backburner\manager.exe
FirewallRules: [{1D57DB63-255F-48C3-A164-8D61A578BE8A}] => C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [{B2D2FE9B-E6E2-455E-9431-296B31698E7F}] => C:\Program Files (x86)\Autodesk\Backburner\server.exe
FirewallRules: [{18739637-AE9C-45F8-A2E5-E48441D1E397}] => C:\Users\FIXIIE\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CC6D20CC-0030-434F-8167-959EEC0265E2}] => C:\Users\FIXIIE\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3E0B47C9-E201-4ECD-89F6-1F90A616E10E}] => C:\Users\FIXIIE\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{61139448-2066-4807-96A8-3BFB2D962CF6}] => C:\Users\FIXIIE\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3DCA8C86-5A7B-4280-94E9-C72B27B7A419}] => C:\Users\FIXIIE\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C4690747-8952-4FDC-A4D0-4F9E4CE1183C}] => C:\Users\FIXIIE\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{327F6C31-2DBE-4E30-9DF7-DB62BC0E3296}C:\users\fixiie\appdata\local\akamai\netsession_win.exe] => C:\users\fixiie\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{AB373BC7-8D19-4AE5-B922-AB90198E1141}C:\users\fixiie\appdata\local\akamai\netsession_win.exe] => C:\users\fixiie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{85AE67FA-A902-4528-BE9F-4D26B2C53147}] => D:\Program Files\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{118628DA-3E74-4241-9FC3-C0C9907BABD8}] => D:\Program Files\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{AC463D7C-5597-4997-9525-B013757DFB54}] => X:\steam\Steam.exe
FirewallRules: [{BD5E780F-7FAB-495C-A227-E08C2FE3FD68}] => X:\steam\Steam.exe
FirewallRules: [{D4530D41-559A-4BB1-87D8-1C6C835EDE0A}] => X:\Steam\steamapps\common\Half-Life\hl.exe
FirewallRules: [{6E613913-0023-40D2-9994-38B2D7EF4A5C}] => X:\Steam\steamapps\common\Half-Life\hl.exe
FirewallRules: [TCP Query User{21054210-2C55-42CC-B21D-2A0480454612}D:\program files\fahclient\fahclient.exe] => D:\program files\fahclient\fahclient.exe
FirewallRules: [UDP Query User{4E83A95D-CFE1-4A0D-A2D4-EC323D427324}D:\program files\fahclient\fahclient.exe] => D:\program files\fahclient\fahclient.exe
FirewallRules: [TCP Query User{222AD0E7-EA27-4671-B3CF-1C512F3345F1}D:\program files\fahclient\fahclient.exe] => D:\program files\fahclient\fahclient.exe
FirewallRules: [UDP Query User{D0DE2ABF-29CF-4B52-B3F6-1CCFC98545B4}D:\program files\fahclient\fahclient.exe] => D:\program files\fahclient\fahclient.exe
FirewallRules: [{709D524F-D564-48B9-91D8-02B632EEEEDA}] => X:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{34517D69-ACC5-4C2C-8F00-6E9DCF911A00}] => X:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9302BCF5-DE17-47FB-B2EC-9BC5CD422455}] => X:\KeyShot5\bin\keyshot5.exe
FirewallRules: [{70E36FDE-7A33-482A-9AAB-3073E592DDA8}] => X:\KeyShot5\bin\keyshot_daemon.exe
FirewallRules: [{4DE5A01D-81FB-4B59-8BB9-247E73B01101}] => C:\Program Files (x86)\Crazybump\CrazyBump.exe
FirewallRules: [{CF696391-92F7-4C8E-8B22-B776D99F2A6D}] => C:\Program Files (x86)\Crazybump\CrazyBump.exe
FirewallRules: [{8DA2F81F-DD37-477A-B038-F26EE2C2C7F8}] => D:\Program Files\Crazybump\CrazyBump.exe
FirewallRules: [{AAA53C65-BE6D-4337-8864-6F9A25086132}] => D:\Program Files\Crazybump\CrazyBump.exe
FirewallRules: [{A236714F-C2C3-40B8-8790-F4148E13371B}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [TCP Query User{827FBF53-69D6-4112-9FA5-B183C0798526}D:\program files\battle.net\battle.net.8180\battle.net.exe] => D:\program files\battle.net\battle.net.8180\battle.net.exe
FirewallRules: [UDP Query User{298639A5-C381-4ACE-9B9D-4DDA28AF65E5}D:\program files\battle.net\battle.net.8180\battle.net.exe] => D:\program files\battle.net\battle.net.8180\battle.net.exe
FirewallRules: [{3B102AD5-EABA-4C66-8D6C-9F11CE82711B}] => X:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{D1A1315E-3A9B-4284-8732-E0064360AB89}] => X:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{BE84E619-1904-42B7-B32C-D1C4A8FFDDEC}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2785F6EF-C3A8-4685-9838-7AC70D2E326D}] => X:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{D15510C4-B9A9-4E39-A63D-2EA34C1F290D}] => X:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{604FEEC6-8CD6-4B86-ADE0-ED08CD576415}] => X:\Program Files\Steam\Steam.exe
FirewallRules: [{8D291600-23CE-4ED3-9DEB-849CF738728B}] => X:\Program Files\Steam\Steam.exe
FirewallRules: [{14BFA718-E83D-48E4-A47F-4956DD2AAF78}] => X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{0AA1BC88-A069-4732-91EA-85CF05058767}] => X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E7B9499B-F510-4B24-B579-854905961857}] => X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{2D95F89B-2291-4B7D-9682-D334B7FAA1C8}] => X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{946D6D27-E843-4A1D-B92A-8F538DD97203}] => X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{DA78FD03-0895-4EF5-BFE4-BB70A183EE6A}] => X:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{87D1AFCD-9F3F-4E3C-A27E-F01253227935}] => C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{007A6014-35C5-44EA-A61D-D5BFAC8EB2BD}] => C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{6673C7D4-A4DE-425A-89A2-D1CC44B90491}] => C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{1F30B310-FC88-4AC8-A08A-20BD7937E830}] => C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{8E43BF22-D42A-43E6-A8F3-434BB2096A0E}] => LPort=3935
FirewallRules: [{BFD31DCD-9221-412C-9CBB-107C1D00926B}] => X:\Program Files\Steam\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{56ABB496-6C65-449F-A37E-B3D8D41ECD75}] => X:\Program Files\Steam\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [TCP Query User{6DFEA926-58B7-4172-B9B1-1F66A958640A}D:\program files\unreal4\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => D:\program files\unreal4\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{0934BCD6-8338-46B7-8F50-E22184160126}D:\program files\unreal4\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => D:\program files\unreal4\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe

==================== Restore Points =========================

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (02/03/2017 02:30:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe98b8c5c3
Faulting process id: 0xd20
Faulting application start time: 0x01d27dbd112fa98c
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 4ef375ed-e9b0-11e6-bf85-14dda977ff22

Error: (02/03/2017 02:30:13 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Connect.Service.ContentService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 02:30:13 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )
Description: UNHANDLED EXCEPTION. Process is terminating: True.
EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object.
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 02:30:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe98b6c5c3
Faulting process id: 0x21bc
Faulting application start time: 0x01d27dbd0af41cb0
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 48b8fa84-e9b0-11e6-bf85-14dda977ff22

Error: (02/03/2017 02:30:03 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Connect.Service.ContentService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 02:30:03 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )
Description: UNHANDLED EXCEPTION. Process is terminating: True.
EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object.
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 02:29:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe98b6c5c3
Faulting process id: 0xd7c
Faulting application start time: 0x01d27dbd04ba649a
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 427e7f1b-e9b0-11e6-bf85-14dda977ff22

Error: (02/03/2017 02:29:53 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Connect.Service.ContentService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 02:29:53 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )
Description: UNHANDLED EXCEPTION. Process is terminating: True.
EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object.
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 02:29:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe98b8c5c3
Faulting process id: 0xd24
Faulting application start time: 0x01d27dbcfe7ed7bd
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 3c43405f-e9b0-11e6-bf85-14dda977ff22

System errors:
=============
Error: (02/03/2017 02:30:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 130 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:30:03 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 129 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:29:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 128 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:29:42 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 127 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:29:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 126 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:29:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 125 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:29:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 124 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:29:01 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 123 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:28:50 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 122 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 02:28:40 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 121 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

CodeIntegrity:
===================================
Date: 2017-02-03 02:07:30.096
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:07:30.066
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:03:15.998
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:03:15.968
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:01:49.112
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:01:49.082
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:00:13.951
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:00:13.921
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 01:57:51.994
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 01:57:51.964
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 41%
Total physical RAM: 12230.83 MB
Available physical RAM: 7132.49 MB
Total Virtual: 24459.85 MB
Available Virtual: 18767.46 MB

==================== Drives ================================

Drive c: (SSD) (Fixed) (Total:119.24 GB) (Free:9.43 GB) NTFS
Drive d: (Standard) (Fixed) (Total:465.66 GB) (Free:215.41 GB) NTFS
Drive x: (wonderful) (Fixed) (Total:1862.89 GB) (Free:1528.09 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: D88E6ABB)
Partition 1: (Not Active) - (Size=119.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: D88E6ABF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

Malnutrition · Feb 3, 2017

Uuninstall the programs below with Geek Uninstaller.

µTorrent (HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent Inc.)
Java 7 Update 79 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217079FF}) (Version: 7.0.790 - Oracle)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)

I would personally stay away from AVG. If you choose to uninstall it then use Geek Uninstaller Force mode then reboot and run the uninstaller. Having AVG on your machine will cause many issues, so to start lets remove it and replace it. You can reinstall if after this if you wish,

Here are two great free ones that I suggest.

Sophos Home.
Panda Free.

Rogue Killer Scan.

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

Close all the running programs
Double click on downloaded setup.exe file to install the program.
Click on Start Scan button.
Click on another Start Scan button.
Wait until the Status box shows Scan Finished
Click on Delete.
Wait until the Status box shows Deleting Finished.
Click on Report and copy/paste the content of the Notepad into your next reply.
RKreport.txt could also be found on your desktop.
If more than one log is produced post all logs.

ZHP Scan.

Please download Zhp Cleaner to your desktop. Right Click the icon and select run as administrator.

2. Once you have started the program, you will need to click the scanner button.

The program will close all open browsers!
3. Once the scan is completed, the you will want to click the Repair button.

At the end of the process you may be asked to reboot your machine. After you reboot a report will open on your desktop.
Copy and paste the report here in your next reply.

Clean up temp files and reduce startup load with CCleaner.

Download CCleaner from here.
After install Click Options.
Go to monitoring.
Uncheck All Monitoring items.
Go to advanced -- Click close program after cleaning.
Go to settings -- click run ccleaner when the computer starts.
Now that you have ccleaner installed and set-up:
Open the program.
Go to Tools
Go to Startup
Now double click each item. To Disable.
Leave only your antivirus enabled.
Then disable All items in your scheduled task as well.
Unless they are related to windows defender.Or your antivirus.
Reboot the machine.

Malnutrition · Feb 3, 2017

Step 1: FRST Fix.

Click Here To download Fixlist.txt

Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Step 2:Upload File(s) to VirusTotal

Please go to VirusTotal.
Click the Choose File button.
Navigate to >>>>>>>> C:\Windows\System32\Drivers\FACEIT.sys
or simply copy and paste it.
Click the Scan it! button.
You might see a message saying File already analysed, if you do click Reanalyse.
Wait for all the scans to finish then copy and paste the web address from your broswer's address bar.
Example of web address :
Include the link in your next reply.

Step 3: Zemana Scan.

Please download Zemana AntiMalware and save it to your Desktop.

Install the program and once the installation is complete it will start automatically.
Click the Cog/Sproket Wheel,

at the top right of Zemana
Select Advanced - I have read the warning and wish to proceed.
Place a tick next to Detect Suspicious (Root CA) Certificates.
Then click the house icon in Zemana.
Then, press Scan to begin.
After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.

Open Zemana AntiMalware again.
Click on

icon and double click the latest report.
Now click File > Save As and choose your Desktop before pressing Save.
The only left thing is to Copy Paste saved report in your next message.

This will open a logfile, post that in your next reply

Malnutrition · Feb 3, 2017

On a side note. You are Running FRST D:\Downloads
The program is designed to work from the Desktop.
Make sure and have FRST & the Fixlist on the deskop, prior to pressing fix.

avaris · Feb 3, 2017

~ ZHPCleaner v2017.2.2.22 by Nicolas Coolman (2017/02/02)
~ Run by FIXIIE (Administrator) (03/02/2017 03:50:03)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\FIXIIE\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\FIXIIE\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)

---\\ Services (0)
~ No malicious or unnecessary items found.

---\\ Browser internet (0)
~ No malicious or unnecessary items found.

---\\ Hosts file (1)
~ The hosts file is legitimate (30)

---\\ Scheduled automatic tasks. (1)
DELETED task: [update-S-1-5-21-459705389-3442733056-3860532926-1000] [C:\Program Files (x86)\Skillbrains\Updater\Updater.exe (Not File) ] =>.Superfluous.Skillbrains

---\\ Explorer ( File, Folder) (23)
MOVED file: C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [Copyright 2009 - Starter Module] =>.Superfluous.Skillbrains
MOVED file: C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [Copyright 2009 - Starter Module] =>.Superfluous.Skillbrains
MOVED file: C:\Windows\Installer\wix{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{3540181E-340A-4E7A-B409-31663472B2F7}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{A37CDB58-AAE8-0000-8C13-E0F7BACB0D5F}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED folder: C:\Program Files (x86)\Skillbrains =>.Superfluous.Skillbrains
MOVED folder: C:\Users\FIXIIE\AppData\Local\CrashReportClient =>.Superfluous.CrashReports
MOVED folder: C:\ProgramData\Microsoft\Blend =>Adware.Suspect
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime
MOVED folder: C:\Windows\Installer\MSI12B8.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI1881.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI1B17.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI1BD4.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI2F5.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI44F3.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI9E80.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI9EA.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIA055.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIBA32.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIC6C.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSID06D.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSID11A.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSID52.tmp- =>.Superfluous.Empty

---\\ Registry ( Key, Value, Data) (10)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Lightshot [C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe (Not File)] =>.Superfluous.Skillbrains
DELETED key*: HKEY_USERS\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\SkillBrains [] =>.Superfluous.Skillbrains
DELETED key: HKCU\Software\SkillBrains [] =>.Superfluous.Skillbrains
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\013F0B4978CD4F642BC4FD01AF9EC688 [D:\Program Files\Autodesk\3ds Max Design 2013\UI_ln\Resources\Dark\Icons\Main\Gravity Space Warp - Gravity_Objects Space Warps - 32.png] =>PUP.Optional.GravitySpace
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Skillbrains [] =>.Superfluous.Skillbrains
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1 [Skillbrains] =>.Superfluous.Skillbrains
DELETED key*: HKCU\SOFTWARE\c4ad1f80810f2364727836575f208081 [] =>Hijacker.Browser
DELETED value: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface ["C:\Users\FIXIIE\AppData\Local\Akamai\netsession_win.exe"] =>.Superfluous.AkamaiHD
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{327F6C31-2DBE-4E30-9DF7-DB62BC0E3296}C:\users\fixiie\appdata\local\akamai\netsession_win.exe [C:\users\fixiie\appdata\local\akamai\netsession_win.exe] =>.Superfluous.AkamaiHD
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{AB373BC7-8D19-4AE5-B922-AB90198E1141}C:\users\fixiie\appdata\local\akamai\netsession_win.exe [C:\users\fixiie\appdata\local\akamai\netsession_win.exe] =>.Superfluous.AkamaiHD

---\\ Summary of the elements found (8)
https://www.anti-malware.top/2016/04/30/superfluous-skillbrains/ =>.Superfluous.Skillbrains
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.CrashReports
https://www.anti-malware.top/2016/05/01/definition-dun-logiciel-pup-lpi/ =>Adware.Suspect
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.GravitySpace
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AkamaiHD

---\\ Other deletions. (27)
~ Registry Keys Tracing deleted (27)
~ Remove the old reports ZHPCleaner. (0)

---\\ Result of repair
~ Repair carried out successfully

---\\ Statistics
~ Items scanned : 984
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 34

~ End of clean in 00h00mn18s
~====================
ZHPCleaner-[R]-03022017-03_50_21.txt
ZHPCleaner-~~-03022017-03_48_43.txt~~

avaris · Feb 3, 2017

Zemana AntiMalware 2.72.2.101 (Installed)

-------------------------------------------------------
Scan Result : Completed
Scan Date : 2017-2-3
Operating System : Windows 7 64-bit
Processor : 8X Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
BIOS Mode : Legacy
CUID : 1243CAAB6114CBDA31E0E8
Scan Type : System Scan
Duration : 2m 10s
Scanned Objects : 188125
Detected Objects : 5
Excluded Objects : 0
Read Level : SCSI
Auto Upload : Enabled
Detect All Extensions : Disabled
Scan Documents : Disabled
Domain Info : WORKGROUP,0,2

Detected Objects
-------------------------------------------------------

un-stop.org
Status : Scanned
Object : HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\32E50263DB84794D3537E36AA2791F44F76E8737\Blob
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Root CA
Cleaning Action : Delete
Related Objects :
Registry Entry - HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\32E50263DB84794D3537E36AA2791F44F76E8737\Blob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

Firefox Search
Status : Scanned
Object : Tyda.se - http://tyda.se
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Repair
Related Objects :
Browser Setting - Firefox Search

Firefox Search
Status : Scanned
Object : Prisjakt - http://prisjakt.nu
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Repair
Related Objects :
Browser Setting - Firefox Search

Firefox Search
Status : Scanned
Object : Prisjakt - http://prisjakt.nu
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Repair
Related Objects :
Browser Setting - Firefox Search

Firefox Search
Status : Scanned
Object : Allaannonser - http://allaannonser.se
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Repair
Related Objects :
Browser Setting - Firefox Search

Cleaning Result
-------------------------------------------------------
Cleaned : 5
Reported as safe : 0
Failed : 0

avaris · Feb 3, 2017

Also, Rogue Killer scan wouldn't let me report what was detected, followed the instruction perfectly. but it discovered a few and fixed it.

avaris · Feb 3, 2017

Fix result of Farbar Recovery Scan Tool (x64) Version: 29-01-2017
Ran by FIXIIE (03-02-2017 04:02:27) Run:1
Running from C:\Users\FIXIIE\Desktop
Loaded Profiles: FIXIIE (Available Profiles: FIXIIE & Guest)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
Closeprocesses:
Emptytemp:
RemoveProxy:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Policies\Explorer: []
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: F - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {0424c103-0ca6-11e6-adc0-14dda977ff22} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {0bbf0c51-c8df-11e5-94c1-d43d7e93e91f} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {1b1edbeb-e9ad-11e6-bf85-14dda977ff22} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {4fe8f14f-89ff-11e5-8c65-b6c19a8f7e37} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {63a160a1-dee7-11e5-93dd-d43d7e93e91f} - H:\SETUP.EXE
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {64945568-bb2e-11e5-829e-d43d7e93e91f} - H:\MAXON-Start.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {74f4039c-a63e-11e5-bbc0-e71a59b7bd35} - F:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {b405b0e3-b3c1-11e5-a119-d43d7e93e91f} - H:\AutoInst.exe
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\MountPoints2: {f77f826c-ed55-11e5-853d-14dda977ff22} - F:\AutoInst.exe
Startup: C:\Users\FIXIIE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Folding@home.lnk [2016-10-27]
ShortcutTarget: Folding@home.lnk -> D:\Program Files\FAHClient\HideConsole.exe ()
Tcpip\Parameters: [DhcpNameServer] 195.67.199.30 8.8.8.8
Tcpip\..\Interfaces\{3BB419ED-B9DB-4E96-89B8-E440B7AC39E5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7816BBD9-6A68-4A91-8281-02D290E56F4E}: [DhcpNameServer] 195.67.199.30 8.8.8.8
Tcpip\..\Interfaces\{7FC0E632-6C4C-42E1-A5AE-4C83E8BAD706}: [DhcpNameServer] 195.67.199.30 8.8.8.8
FF Extension: (Adblock Plus) - C:\Users\FIXIIE\AppData\Roaming\Mozilla\Firefox\Profiles\o0fv9j39.default-1476311955297\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-23]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
CHR Extension: (Adblock Plus) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-09]
S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 TEAM; system32\DRIVERS\RtTeam60.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK
C:\Windows\Tasks\update-sys.job
C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8
C:\Windows\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000.job
C:\Windows\system32\MRT.exe
C:\Windows\system32\MRT
2016-07-02 12:39 - 2016-11-15 05:23 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe BMP Format CS5 Prefs
2016-04-21 14:23 - 2016-06-25 17:52 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe IllExport Filter CS5 Prefs
2016-04-20 19:51 - 2017-01-15 10:10 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe PNG Format CS5 Prefs
2016-06-20 18:12 - 2017-01-14 07:51 - 0000132 _____ () C:\Users\FIXIIE\AppData\Roaming\Adobe Targa Format CS5 Prefs
2016-12-05 05:30 - 2016-12-05 06:19 - 0005186 _____ () C:\Users\FIXIIE\AppData\Roaming\pixplant3settings.txt
2016-04-06 03:49 - 2016-04-07 19:29 - 0000995 _____ () C:\Users\FIXIIE\AppData\Roaming\SAS7_000.DAT
2016-02-12 19:29 - 2016-07-05 05:10 - 0001456 _____ () C:\Users\FIXIIE\AppData\Local\Adobe Save for Web 12.0 Prefs
2016-01-26 19:49 - 2016-01-26 19:49 - 0007597 _____ () C:\Users\FIXIIE\AppData\Local\Resmon.ResmonCfg
2015-11-21 10:16 - 2015-11-21 10:16 - 0000003 _____ () C:\Users\FIXIIE\AppData\Local\updater.log
2015-11-21 10:16 - 2016-08-06 13:15 - 0000424 _____ () C:\Users\FIXIIE\AppData\Local\UserProducts.xml
2016-07-20 02:32 - 2016-07-20 02:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-08 23:06 - 2016-08-08 23:06 - 0000016 _____ () C:\ProgramData\mntemp
2016-12-15 19:50 - 2017-01-23 15:39 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-15 19:50 - 2017-01-23 15:16 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
2016-12-05 05:30 - 2016-12-05 05:30 - 0000000 _____ () C:\ProgramData\pixplant3settings.txt
2016-05-19 18:25 - 2014-07-31 17:54 - 0015752 _____ (Autodesk, Inc.) C:\Users\FIXIIE\AppData\Local\Temp\AcDeltree.exe
2016-04-28 01:58 - 2015-08-06 22:30 - 2212144 _____ (Adobe Systems Incorporated) C:\Users\FIXIIE\AppData\Local\Temp\AdobeApplicationManager.exe
2016-04-21 15:27 - 2016-03-23 15:57 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_081313294700.exe
2016-05-13 18:36 - 2016-04-14 16:29 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_081653949844.exe
2016-06-01 15:34 - 2016-04-22 09:01 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_082136125835.exe
2016-07-27 09:00 - 2016-06-21 17:49 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_08465027878.exe
2016-08-23 00:37 - 2016-07-20 13:01 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\FIXIIE\AppData\Local\Temp\avguirn_08564308837.exe
2016-05-19 18:02 - 2016-05-19 18:15 - 0009728 _____ () C:\Users\FIXIIE\AppData\Local\Temp\bassmod.dll
2016-10-27 11:41 - 2016-10-27 11:42 - 0160888 _____ () C:\Users\FIXIIE\AppData\Local\Temp\ce-swap.exe
2016-10-26 12:54 - 2016-10-26 12:54 - 0458116 _____ (Aladdin Knowledge Systems Ltd.) C:\Users\FIXIIE\AppData\Local\Temp\haspdinst_x64.exe
2016-04-17 21:47 - 2016-03-10 12:10 - 0037376 _____ (Microsoft) C:\Users\FIXIIE\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
2016-04-17 21:47 - 2015-10-14 12:50 - 0020480 _____ (Microsoft) C:\Users\FIXIIE\AppData\Local\Temp\HiRezLauncherControls.dll
2017-01-01 21:36 - 2017-01-01 21:36 - 2864736 _____ (Hola Networks Ltd.) C:\Users\FIXIIE\AppData\Local\Temp\Hola-Setup-x64-1.26.859.exe
2016-06-30 23:52 - 2016-06-30 23:52 - 4211112 _____ () C:\Users\FIXIIE\AppData\Local\Temp\npp.6.9.2.Installer.exe
2016-04-03 19:23 - 2016-12-11 19:23 - 0747648 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvSCPAPI.dll
2016-07-07 11:20 - 2016-09-16 23:31 - 0860776 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvSCPAPI64.dll
2016-09-22 00:02 - 2016-09-16 23:30 - 0426040 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvscpapisvr.exe
2016-06-07 15:08 - 2016-06-03 04:19 - 0386160 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvStereoApiI.dll
2016-07-07 11:20 - 2016-08-11 12:23 - 0485344 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvStereoApiI64.dll
2016-05-03 20:44 - 2016-12-11 19:23 - 0353336 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\nvStInst.exe
2016-12-04 02:03 - 2016-11-17 14:42 - 1135552 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetry.dll
2016-12-04 02:03 - 2017-01-06 02:10 - 0255032 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetryAPI32.dll
2016-12-04 02:03 - 2017-01-06 02:10 - 0335928 _____ (NVIDIA Corporation) C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetryAPI64.dll
2016-05-10 17:54 - 2016-05-10 17:55 - 45196928 _____ (Skype Technologies S.A.) C:\Users\FIXIIE\AppData\Local\Temp\SkypeSetup.exe
2016-06-13 02:23 - 2016-06-13 02:23 - 30533688 _____ () C:\Users\FIXIIE\AppData\Local\Temp\vlc-2.2.4-win32.exe
2015-08-03 00:58 - 2015-08-03 00:58 - 0118784 _____ () C:\Users\FIXIIE\AppData\Local\Temp\xmlUpdater.exe
C:\Users\FIXIIE\AppData\Local\Temp
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {0210B291-3FCD-4635-965A-28A3219CF9B8} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe
Task: {136F6B88-3D8D-483F-B07F-4E7D3225F301} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {1694724D-1863-4810-8FD6-6319C4425A26} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-01-20] (NVIDIA Corporation)
Task: {1CEA884D-0EA4-43D2-82DF-DDB2CB31BDCD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-01-20] (NVIDIA Corporation)
Task: {259118CC-8076-4395-87B7-C4AE3F372AF0} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {35669D06-D2E1-43FE-ABA0-C5920A05E160} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {3AB65712-DC07-4B43-905A-629DD324E18C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)
Task: {518DFB82-8DFC-47D4-A4EA-FCD212089064} - System32\Tasks\AdobeAAMUpdater-1.0-FIXIIE-PC-FIXIIE => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-03-22] (Adobe Systems Incorporated)
Task: {519E8252-0DBE-4073-9D11-AB059EEBB8BC} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
Task: {55E456BB-05F1-4EBB-9FF2-CEB596E7DF3D} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {6941E2E1-2903-4F0C-80CD-F34B2CEF7A3A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {8A03348C-3F6E-45A6-B459-3CACA7B34BA4} - System32\Tasks\Opera scheduled Autoupdate 1444085072 => D:\Program Files\Opera\launcher.exe
Task: {961CFD4D-1976-4470-AFD6-EF852C3C9165} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {A90217D8-B2B0-47B0-9530-5C80FD627ECD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-01-20] (NVIDIA Corporation)
Task: {B6AE88C8-DA2A-46AA-A614-C944DE27325F} - System32\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {ED665B10-E27F-4117-83F5-EA3DDB75AC6F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)
Task: C:\Windows\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
ShortcutWithArgument: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Startprogrammet för appar i Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\FIXIIE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\FIXIIE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2fae1f4995fc9e7f\NexonLauncher.lnk -> D:\Program Files\Nexon Launcher\bin\nexon_client\nexon_client.exe (The NWJS Community) -> --user-data-dir="C:\Users\FIXIIE\AppData\Local\NexonLauncher\User Data" --profile-directory=Default --app-id=dobbaijafcbikgimjpakclacfgeagffm
AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8 [168]
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [138]
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
IE trusted site: HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\hola.org -> hxxp://hola.org
Hosts:
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SteelSeries Engine 3.lnk => C:\Windows\pss\SteelSeries Engine 3.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK trådlösa konfigurationsverktyg.lnk => C:\Windows\pss\TP-LINK trådlösa konfigurationsverktyg.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupfolder: C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup
MSCONFIG\startupfolder: C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Folding@home.lnk => C:\Windows\pss\Folding@home.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: AvgUi => "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "D:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: FileZilla Server Interface => "C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe"
MSCONFIG\startupreg: ISUSPM => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Lightshot => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: ShadowPlay => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Speech Recognition => "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: Spotify => "C:\Users\FIXIIE\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\FIXIIE\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: USB Gamepad => C:\Windows\USB Vibration\dr100&110\USB Gamepad.exe -boot
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
EmptyTemp:
reboot:
end

*****************

Restore point was successfully created.
Processes closed successfully.

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully

========= End of RemoveProxy: =========

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ShadowPlay => value removed successfully
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value removed successfully
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F => key removed successfully
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0424c103-0ca6-11e6-adc0-14dda977ff22} => key removed successfully
HKCR\CLSID\{0424c103-0ca6-11e6-adc0-14dda977ff22} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0bbf0c51-c8df-11e5-94c1-d43d7e93e91f} => key removed successfully
HKCR\CLSID\{0bbf0c51-c8df-11e5-94c1-d43d7e93e91f} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1b1edbeb-e9ad-11e6-bf85-14dda977ff22} => key removed successfully
HKCR\CLSID\{1b1edbeb-e9ad-11e6-bf85-14dda977ff22} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4fe8f14f-89ff-11e5-8c65-b6c19a8f7e37} => key removed successfully
HKCR\CLSID\{4fe8f14f-89ff-11e5-8c65-b6c19a8f7e37} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{63a160a1-dee7-11e5-93dd-d43d7e93e91f} => key removed successfully
HKCR\CLSID\{63a160a1-dee7-11e5-93dd-d43d7e93e91f} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{64945568-bb2e-11e5-829e-d43d7e93e91f} => key removed successfully
HKCR\CLSID\{64945568-bb2e-11e5-829e-d43d7e93e91f} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{74f4039c-a63e-11e5-bbc0-e71a59b7bd35} => key removed successfully
HKCR\CLSID\{74f4039c-a63e-11e5-bbc0-e71a59b7bd35} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b405b0e3-b3c1-11e5-a119-d43d7e93e91f} => key removed successfully
HKCR\CLSID\{b405b0e3-b3c1-11e5-a119-d43d7e93e91f} => key not found.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f77f826c-ed55-11e5-853d-14dda977ff22} => key removed successfully
HKCR\CLSID\{f77f826c-ed55-11e5-853d-14dda977ff22} => key not found.
C:\Users\FIXIIE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Folding@home.lnk => moved successfully
D:\Program Files\FAHClient\HideConsole.exe => moved successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value removed successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3BB419ED-B9DB-4E96-89B8-E440B7AC39E5}\\DhcpNameServer => value removed successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7816BBD9-6A68-4A91-8281-02D290E56F4E}\\DhcpNameServer => value removed successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7FC0E632-6C4C-42E1-A5AE-4C83E8BAD706}\\DhcpNameServer => value removed successfully
C:\Users\FIXIIE\AppData\Roaming\Mozilla\Firefox\Profiles\o0fv9j39.default-1476311955297\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi => moved successfully
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3 => key removed successfully
C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll => moved successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9 => key removed successfully
C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll => not found.
C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb => moved successfully
NVIDIA Wireless Controller Service => service not found.
HKLM\System\CurrentControlSet\Services\IntcAzAudAddService => key removed successfully
IntcAzAudAddService => service removed successfully
HKLM\System\CurrentControlSet\Services\MBAMSwissArmy => key removed successfully
MBAMSwissArmy => service removed successfully
HKLM\System\CurrentControlSet\Services\TEAM => key removed successfully
TEAM => service removed successfully
HKLM\System\CurrentControlSet\Services\VGPU => key removed successfully
VGPU => service removed successfully
C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK => moved successfully
C:\Windows\Tasks\update-sys.job => moved successfully
C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
"C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8" => not found.
"C:\Windows\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000.job" => not found.
C:\Windows\system32\MRT.exe => moved successfully
C:\Windows\system32\MRT => moved successfully
C:\Users\FIXIIE\AppData\Roaming\Adobe BMP Format CS5 Prefs => moved successfully
C:\Users\FIXIIE\AppData\Roaming\Adobe IllExport Filter CS5 Prefs => moved successfully
C:\Users\FIXIIE\AppData\Roaming\Adobe PNG Format CS5 Prefs => moved successfully
C:\Users\FIXIIE\AppData\Roaming\Adobe Targa Format CS5 Prefs => moved successfully
C:\Users\FIXIIE\AppData\Roaming\pixplant3settings.txt => moved successfully
C:\Users\FIXIIE\AppData\Roaming\SAS7_000.DAT => moved successfully
C:\Users\FIXIIE\AppData\Local\Adobe Save for Web 12.0 Prefs => moved successfully
C:\Users\FIXIIE\AppData\Local\Resmon.ResmonCfg => moved successfully
C:\Users\FIXIIE\AppData\Local\updater.log => moved successfully
C:\Users\FIXIIE\AppData\Local\UserProducts.xml => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\ProgramData\mntemp => moved successfully
C:\ProgramData\NvTelemetryContainer.log => moved successfully
C:\ProgramData\NvTelemetryContainer.log_backup1 => moved successfully
C:\ProgramData\pixplant3settings.txt => moved successfully
"C:\Users\FIXIIE\AppData\Local\Temp\AcDeltree.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\AdobeApplicationManager.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\avguirn_081313294700.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\avguirn_081653949844.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\avguirn_082136125835.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\avguirn_08465027878.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\avguirn_08564308837.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\bassmod.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\ce-swap.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\haspdinst_x64.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\HiRezLauncherControls.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\Hola-Setup-x64-1.26.859.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\npp.6.9.2.Installer.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\nvSCPAPI.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\nvSCPAPI64.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\nvscpapisvr.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\nvStereoApiI.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\nvStereoApiI64.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\nvStInst.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetry.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetryAPI32.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\NvTelemetryAPI64.dll" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\SkypeSetup.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\vlc-2.2.4-win32.exe" => not found.
"C:\Users\FIXIIE\AppData\Local\Temp\xmlUpdater.exe" => not found.

"C:\Users\FIXIIE\AppData\Local\Temp" folder move:

Could not move "C:\Users\FIXIIE\AppData\Local\Temp" => Scheduled to move on reboot.

C:\Program Files (x86)\Google\Update\GoogleUpdate.exe => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0210B291-3FCD-4635-965A-28A3219CF9B8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0210B291-3FCD-4635-965A-28A3219CF9B8} => key removed successfully
C:\Windows\System32\Tasks\Red Giant Link => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Red Giant Link => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{136F6B88-3D8D-483F-B07F-4E7D3225F301} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{136F6B88-3D8D-483F-B07F-4E7D3225F301} => key removed successfully
C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1694724D-1863-4810-8FD6-6319C4425A26} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1694724D-1863-4810-8FD6-6319C4425A26} => key removed successfully
C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1CEA884D-0EA4-43D2-82DF-DDB2CB31BDCD} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1CEA884D-0EA4-43D2-82DF-DDB2CB31BDCD} => key removed successfully
C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{259118CC-8076-4395-87B7-C4AE3F372AF0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{259118CC-8076-4395-87B7-C4AE3F372AF0} => key removed successfully
C:\Windows\System32\Tasks\update-sys => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\update-sys => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{35669D06-D2E1-43FE-ABA0-C5920A05E160} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35669D06-D2E1-43FE-ABA0-C5920A05E160} => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3AB65712-DC07-4B43-905A-629DD324E18C} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3AB65712-DC07-4B43-905A-629DD324E18C} => key removed successfully
C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{518DFB82-8DFC-47D4-A4EA-FCD212089064} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{518DFB82-8DFC-47D4-A4EA-FCD212089064} => key removed successfully
C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-FIXIIE-PC-FIXIIE => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeAAMUpdater-1.0-FIXIIE-PC-FIXIIE => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{519E8252-0DBE-4073-9D11-AB059EEBB8BC} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{519E8252-0DBE-4073-9D11-AB059EEBB8BC} => key removed successfully
C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\USER_ESRV_SVC_QUEENCREEK => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{55E456BB-05F1-4EBB-9FF2-CEB596E7DF3D} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55E456BB-05F1-4EBB-9FF2-CEB596E7DF3D} => key removed successfully
C:\Windows\System32\Tasks\Intel\Intel Telemetry 2 => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Intel\Intel Telemetry 2 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6941E2E1-2903-4F0C-80CD-F34B2CEF7A3A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6941E2E1-2903-4F0C-80CD-F34B2CEF7A3A} => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{8A03348C-3F6E-45A6-B459-3CACA7B34BA4} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A03348C-3F6E-45A6-B459-3CACA7B34BA4} => key removed successfully
C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1444085072 => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1444085072 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{961CFD4D-1976-4470-AFD6-EF852C3C9165} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{961CFD4D-1976-4470-AFD6-EF852C3C9165} => key removed successfully
C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A90217D8-B2B0-47B0-9530-5C80FD627ECD} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A90217D8-B2B0-47B0-9530-5C80FD627ECD} => key removed successfully
C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6AE88C8-DA2A-46AA-A614-C944DE27325F} => key not found.
C:\Windows\System32\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000 => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\update-S-1-5-21-459705389-3442733056-3860532926-1000 => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ED665B10-E27F-4117-83F5-EA3DDB75AC6F} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED665B10-E27F-4117-83F5-EA3DDB75AC6F} => key removed successfully
C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => key removed successfully
C:\Windows\Tasks\update-S-1-5-21-459705389-3442733056-3860532926-1000.job => not found.
C:\Windows\Tasks\update-sys.job => not found.
C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Startprogrammet för appar i Chrome.lnk => Shortcut argument removed successfully.
C:\Users\FIXIIE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk => Shortcut argument removed successfully.
C:\Users\FIXIIE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2fae1f4995fc9e7f\NexonLauncher.lnk => Shortcut argument removed successfully.
C:\ProgramData\TEMP => ":0FF263E8" ADS removed successfully.
C:\ProgramData\TEMP => ":A1EDB939" ADS removed successfully.
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Software\Classes\AutoCADScriptFile => key removed successfully
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Software\Classes\.scr => key removed successfully
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hola.org => key removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Bonjour Service => key removed successfully
HKLM\System\CurrentControlSet\Services\Bonjour Service => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SteelSeries Engine 3.lnk => key removed successfully
C:\Windows\pss\SteelSeries Engine 3.lnk.CommonStartup => moved successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK trådlösa konfigurationsverktyg.lnk => key removed successfully
C:\Windows\pss\TP-LINK trådlösa konfigurationsverktyg.lnk.CommonStartup => moved successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => key removed successfully
C:\Windows\pss\Curse.lnk.Startup => moved successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => key removed successfully
C:\Windows\pss\CurseClientStartup.ccip.Startup => moved successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^FIXIIE^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Folding@home.lnk => key removed successfully
C:\Windows\pss\Folding@home.lnk.Startup => moved successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0 => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ADSKAppManager => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Autodesk Sync => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AvgUi => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\BCSSync => key not found.
HKLM\System\CurrentControlSet\Services\BCSSync => key not found.
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CCleaner Monitoring => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite Automount => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\FileZilla Server Interface => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ISUSPM => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Lightshot => key not found.
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NvBackend => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ShadowPlay => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Speech Recognition => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\USB Gamepad => key removed successfully
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\USB3MON => key removed successfully

========= netsh advfirewall reset =========

Ok.

========= End of CMD: =========

========= netsh advfirewall set allprofiles state ON =========

Ok.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10276310 B
Java, Flash, Steam htmlcache => 426085058 B
Windows/system/drivers => 12245274 B
Edge => 0 B
Chrome => 45170674 B
Firefox => 10646932 B
Opera => 4305920 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 66356 B
systemprofile32 => 168458 B
LocalService => 66228 B
NetworkService => 66228 B
FIXIIE => 92787177 B
Guest => 119999 B

RecycleBin => 544 B
EmptyTemp: => 574.1 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 03-02-2017 04:03:52)

C:\Users\FIXIIE\AppData\Local\Temp => moved successfully

==== End of Fixlog 04:03:52 ====

Malnutrition · Feb 3, 2017

You should be able to find the RK log on the C: drive. If not skip then do these scans to make sure we have gotten everything.

Step 1: Adware Cleaner Scan.

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Step 2: JRT Scan.

Please download Junkware Removal Tool and save it on your desktop.

Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log is saved to your desktop and will automatically open.
Please post the JRT log.

Step 3: HijackThis.

1- Please click HERE to download HijackThis.
2- Run the program.
3- Click on the Main Menu button if not already there.
4- Select Do a system scan and save a logfile.
5- Copy paste the log here.

Step 4: Fresh FRST Logs.

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

Right-click on FRST icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Make sure that Addition option is checked.
Press Scan button and wait.
The tool will produce two logfiles on your desktop: FRST.txt, and Addition.txt.

Please Copy & Paste them into your next reply

avaris · Feb 3, 2017

# AdwCleaner v6.043 - Logfile created 03/02/2017 at 04:38:02
# Updated on 27/01/2017 by Malwarebytes
# Database : 2017-02-02.4 [Server]
# Operating System : Windows 7 Ultimate Service Pack 1 (X64)
# Username : FIXIIE - FIXIIE-PC
# Running from : D:\Downloads\adwcleaner_6.043.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder deleted: C:\ProgramData\BSD\DriverHive
[-] Folder deleted: C:\ProgramData\BSD
[#] Folder deleted on reboot: C:\ProgramData\BSD\DriverHiveEngine
[#] Folder deleted on reboot: C:\ProgramData\Application Data\BSD\DriverHive
[#] Folder deleted on reboot: C:\ProgramData\Application Data\BSD
[#] Folder deleted on reboot: C:\ProgramData\Application Data\BSD\DriverHiveEngine

***** [ Files ] *****

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled Tasks ] *****

***** [ Registry ] *****

***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1146 Bytes] - [03/02/2017 04:38:02]
C:\AdwCleaner\AdwCleaner[S0].txt - [1439 Bytes] - [03/02/2017 04:37:40]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1292 Bytes] ##########

avaris · Feb 3, 2017

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Ultimate x64
Ran by FIXIIE (Administrator) on 2017-02-03 at 4:40:04,30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 8

Successfully deleted: C:\Users\FIXIIE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4YBDRLZR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\FIXIIE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GRU6NLN7 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\FIXIIE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HR989DL0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\FIXIIE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QUPU4350 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4YBDRLZR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GRU6NLN7 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HR989DL0 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QUPU4350 (Temporary Internet Files Folder)

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2017-02-03 at 4:41:19,03
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

avaris · Feb 3, 2017

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 04:45:49, on 2017-02-03
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
D:\Program Files\Zemana AntiMalware\ZAM.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
D:\Downloads\HijackThis (1).exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: Microsoft Web Test Recorder 14.0 Helper - {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} - D:\Program Files\Microsoft Visual 2015\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe" /lps=fmw
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe" /lps=av
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "X:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [CCleaner Monitoring] "D:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgfwsa.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - D:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Energy Server Service queencreek (ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: Tjänsten Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Tjänsten Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - D:\Program Files\Smite\HiPatchService.exe
O23 - Service: HoudiniServer - Unknown owner - C:\Windows\system32\hserver.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: mental ray 3.10 Satellite for Autodesk 3ds Max 2013 64-bit (mi-raysat_3dsmax2013_64) - Unknown owner - D:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
O23 - Service: mental ray Satellite for Autodesk 3ds Max 2016 64-bit (mi-raysat_3dsmax2016_64) - Unknown owner - D:\Program Files\AutoDesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RT2870 AutoInstall Service (RaAutoInstSrv_RT2870) - Ralink Technology, Corp. - C:\Program Files (x86)\Tenda\W326U Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK (SystemUsageReportSvc_QUEENCREEK) - Unknown owner - C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service queencreek (USER_ESRV_SVC_QUEENCREEK) - Unknown owner - C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAM Controller Service (ZAMSvc) - Copyright 2017. - D:\Program Files\Zemana AntiMalware\ZAM.exe

--
End of file - 10580 bytes

avaris · Feb 3, 2017

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017
Ran by FIXIIE (administrator) on FIXIIE-PC (03-02-2017 04:46:51)
Running from C:\Users\FIXIIE\Desktop
Loaded Profiles: FIXIIE (Available Profiles: FIXIIE & Guest)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgfwsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Hi-Rez Studios) D:\Program Files\Smite\HiPatchService.exe
(Side Effects Software Inc.) C:\Windows\System32\hserver.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() D:\Program Files\AutoDesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Tenda\W326U Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
(Copyright 2017.) D:\Program Files\Zemana AntiMalware\ZAM.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Piriform Ltd) D:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
(Trend Micro Inc.) D:\Downloads\HijackThis (1).exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ZAM] => D:\Program Files\Zemana AntiMalware\ZAM.exe [14416624 2017-02-02] (Copyright 2017.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27226072 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Run: [Steam] => X:\Program Files\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Run: [CCleaner Monitoring] => D:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\FAHScreensaver.scr
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 195.67.199.30 8.8.8.8
Tcpip\..\Interfaces\{7FC0E632-6C4C-42E1-A5AE-4C83E8BAD706}: [DhcpNameServer] 195.67.199.30 8.8.8.8

Internet Explorer:
==================
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 14.0 Helper -> {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} -> D:\Program Files\Microsoft Visual 2015\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2015-07-07] (Microsoft Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)

FireFox:
========
FF ProfilePath: C:\Users\FIXIIE\AppData\Roaming\Mozilla\Firefox\Profiles\o0fv9j39.default-1476311955297 [2017-02-03]
FF Extension: (uBlock) - C:\Users\FIXIIE\AppData\Roaming\Mozilla\Firefox\Profiles\o0fv9j39.default-1476311955297\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2016-12-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-05-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-05-09] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Default [2017-02-03]
CHR Profile: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-02-03]
CHR Extension: (Google Translate) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-04-10]
CHR Extension: (Reverse Youtube Playlist) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ajhonbaagcobjdmbocblbebcmbmmbfmi [2017-01-11]
CHR Extension: (BetterTTV) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2016-06-18]
CHR Extension: (Google Drive) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-10]
CHR Extension: (YouTube) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-10]
CHR Extension: (Slinky Elegant) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bmanlajnpdncmhfkiccmbgeocgbncfln [2016-10-10]
CHR Extension: (Adblock Plus) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-02-03]
CHR Extension: (uBlock Origin) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-12-19]
CHR Extension: (Streamkeys) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ekpipjofdicppbepocohdlgenahaneen [2017-01-10]
CHR Extension: (TweetDeck by Twitter) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2016-04-10]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2016-12-17]
CHR Extension: (Momentum) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2017-01-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-10]
CHR Extension: (Chrome Media Router) - C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-16]
CHR Profile: C:\Users\FIXIIE\AppData\Local\Google\Chrome\User Data\System Profile [2017-02-03]

Opera:
=======
OPR Extension: (Adblock Plus) - C:\Users\FIXIIE\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-08-26]
StartMenuInternet: (HKLM) OperaStable - D:\Program Files\Opera\Launcher.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.)
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [971160 2017-01-09] (AVG Technologies CZ, s.r.o.)
R2 avgfws; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [1824184 2017-01-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5337600 2017-01-09] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [725976 2017-01-09] (AVG Technologies CZ, s.r.o.)
S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1369464 2016-01-15] (Disc Soft Ltd)
R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 HiPatchService; D:\Program Files\Smite\HiPatchService.exe [9728 2016-08-30] (Hi-Rez Studios) [File not signed]
R2 HoudiniServer; C:\Windows\system32\hserver.exe [7731712 2015-10-10] (Side Effects Software Inc.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 mi-raysat_3dsmax2013_64; D:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe [86016 2011-09-14] () [File not signed]
S3 mi-raysat_3dsmax2016_64; D:\Program Files\AutoDesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [86016 2011-09-15] () [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3519984 2016-01-27] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
R2 RaAutoInstSrv_RT2870; C:\Program Files (x86)\Tenda\W326U Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe [110592 2009-10-01] (Ralink Technology, Corp.) [File not signed]
R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
S3 VSStandardCollectorService140; D:\Program Files\Microsoft Visual 2015\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [56040 2015-11-19] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 ZAMSvc; D:\Program Files\Zemana AntiMalware\ZAM.exe [14416624 2017-02-02] (Copyright 2017.)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [73992 2016-10-23] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312576 2016-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [267008 2016-10-05] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [298240 2016-11-30] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-01-16] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-01-16] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [511952 2016-07-26] (Intel Corporation)
R1 FACEIT; C:\Windows\System32\Drivers\FACEIT.sys [4085256 2017-01-15] ()
S2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [296448 2005-06-14] (Aladdin Knowledge Systems Ltd.) [File not signed]
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34963 2007-12-12] (Compuware Corporation) [File not signed]
S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [37024 2007-12-03] (Compuware Corporation) [File not signed]
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [34587 2007-11-28] (Compuware Corporation) [File not signed]
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-19] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-10-25] (Realtek Semiconductor Corporation )
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
R3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [41816 2016-11-03] (SteelSeries ApS)
R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [45928 2017-01-13] (SteelSeries ApS)
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-02-03] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2017-02-03] (Zemana Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-03 04:41 - 2017-02-03 04:41 - 00001867 _____ C:\Users\FIXIIE\Desktop\JRT.txt
2017-02-03 04:36 - 2017-02-03 04:38 - 00000000 ____D C:\AdwCleaner
2017-02-03 04:16 - 2017-02-03 04:16 - 00004761 _____ C:\Users\FIXIIE\Desktop\zemana.txt
2017-02-03 04:08 - 2017-02-03 04:46 - 00308799 _____ C:\Windows\ZAM.krnl.trace
2017-02-03 04:08 - 2017-02-03 04:46 - 00294084 _____ C:\Windows\ZAM_Guard.krnl.trace
2017-02-03 04:07 - 2017-02-03 04:07 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2017-02-03 04:07 - 2017-02-03 04:07 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
2017-02-03 04:07 - 2017-02-03 04:07 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Zemana
2017-02-03 04:07 - 2017-02-03 04:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2017-02-03 04:02 - 2017-02-03 04:03 - 00040954 _____ C:\Users\FIXIIE\Desktop\Fixlog.txt
2017-02-03 04:01 - 2017-02-03 04:46 - 00000000 ____D C:\FRST
2017-02-03 04:01 - 2017-02-03 02:28 - 02420736 _____ (Farbar) C:\Users\FIXIIE\Desktop\FRST64.exe
2017-02-03 04:00 - 2017-02-03 04:00 - 00085818 _____ C:\Users\FIXIIE\Desktop\Addition.txt
2017-02-03 03:58 - 2017-02-03 04:47 - 00018717 _____ C:\Users\FIXIIE\Desktop\FRST.txt
2017-02-03 03:53 - 2017-02-03 03:54 - 00000000 ____D C:\Users\FIXIIE\Desktop\backup for registry after Ccleaner
2017-02-03 03:52 - 2017-02-03 03:52 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-02-03 03:48 - 2017-02-03 03:50 - 00005964 _____ C:\Users\FIXIIE\Desktop\ZHPCleaner.txt
2017-02-03 03:42 - 2017-02-03 04:14 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\ZHP
2017-02-03 03:42 - 2017-02-03 03:44 - 00000836 _____ C:\Users\FIXIIE\Desktop\ZHPCleaner.lnk
2017-02-03 03:42 - 2017-02-03 03:42 - 02700800 _____ C:\Users\FIXIIE\Desktop\ZHPCleaner.exe
2017-02-03 03:17 - 2017-02-03 03:17 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-02-03 03:15 - 2017-02-03 03:14 - 25969736 _____ C:\Users\FIXIIE\Desktop\RogueKillerX64.exe
2017-02-03 03:14 - 2017-02-03 03:15 - 00000000 ____D C:\ProgramData\RogueKiller
2017-02-03 03:13 - 2017-02-03 03:13 - 00000000 ____D C:\Users\FIXIIE\.oracle_jre_usage
2017-02-03 03:12 - 2017-02-03 03:16 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\Geek Uninstaller
2017-02-03 03:01 - 2017-02-03 03:01 - 00000000 ____D C:\Users\Guest\AppData\Roaming\AVG
2017-02-03 03:00 - 2017-02-03 03:00 - 00000000 ____D C:\Users\Guest\Documents\4a games
2017-02-03 03:00 - 2017-02-03 03:00 - 00000000 ____D C:\Users\Guest\AppData\Roaming\NVIDIA
2017-02-03 02:59 - 2017-02-03 02:59 - 00000000 ____D C:\Users\Guest\AppData\Local\Steam
2017-02-03 02:58 - 2017-02-03 02:58 - 00002254 _____ C:\Users\Guest\Desktop\Google Chrome.lnk
2017-02-03 02:58 - 2017-02-03 02:58 - 00001416 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-02-03 02:58 - 2017-02-03 02:58 - 00000020 ___SH C:\Users\Guest\ntuser.ini
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 _SHDL C:\Users\Guest\My Documents
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 _SHDL C:\Users\Guest\Documents\My Videos
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 _SHDL C:\Users\Guest\Documents\My Pictures
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 _SHDL C:\Users\Guest\Documents\My Music
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Adobe
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest\AppData\Local\VirtualStore
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest\AppData\Local\NVIDIA
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest\AppData\Local\Google
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest\AppData\Local\CEF
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest\AppData\Local\Avg
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest\AppData\Local\Adobe
2017-02-03 02:58 - 2017-02-03 02:58 - 00000000 ____D C:\Users\Guest
2017-02-03 02:58 - 2016-05-19 18:08 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Macromedia
2017-02-03 02:58 - 2016-03-01 10:19 - 00000000 ____D C:\Users\Guest\AppData\Local\Microsoft Help
2017-02-03 02:58 - 2015-12-09 14:02 - 00000000 ____D C:\Users\Guest\AppData\Roaming\TuneUp Software
2017-02-03 02:58 - 2010-11-21 08:16 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Media Center Programs
2017-02-03 01:47 - 2017-02-03 03:55 - 00000000 ____D C:\Windows\Minidump
2017-02-03 00:59 - 2017-02-03 03:08 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
2017-02-02 23:14 - 2017-02-02 23:14 - 00000025 _____ C:\Users\FIXIIE\Desktop\tabdownprob.txt
2017-02-02 23:09 - 2017-01-20 19:39 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-01-26 23:32 - 2017-01-26 23:32 - 00001031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2017-01-24 19:37 - 2017-01-24 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-01-24 17:58 - 2017-01-24 17:58 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-24 17:58 - 2017-01-20 15:07 - 00134080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-01-24 17:58 - 2016-12-16 01:33 - 00273696 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-01-24 17:58 - 2016-12-16 01:33 - 00266528 _____ C:\Windows\system32\vulkan-1.dll
2017-01-24 17:58 - 2016-12-16 01:33 - 00111392 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-01-24 17:58 - 2016-12-16 01:32 - 00125728 _____ C:\Windows\system32\vulkaninfo.exe
2017-01-24 17:56 - 2017-01-24 00:04 - 00217528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-01-24 17:56 - 2017-01-24 00:04 - 00047664 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 34934720 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 28209720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 19092912 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 19008392 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 16403200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 14677456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 14286392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-01-24 17:56 - 2017-01-20 17:36 - 11123424 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 11019192 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 09308896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 08990584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 03623992 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 03185720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437849.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 01591352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437849.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 01051072 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00990264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00960568 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00909760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00609216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00504104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00412720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00173272 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00156792 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00150760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00135840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-01-24 17:56 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-01-24 17:56 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-01-24 14:15 - 2017-01-24 14:15 - 00000000 ____D C:\Users\FIXIIE\Documents\4A Games
2017-01-24 14:06 - 2017-01-24 14:06 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\4A Games
2017-01-23 17:57 - 2017-01-23 18:33 - 00000487 _____ C:\Users\FIXIIE\Desktop\Emulator Dator.txt
2017-01-23 16:13 - 2017-01-23 16:13 - 00000000 ____D C:\ProgramData\IntelDLM
2017-01-23 16:11 - 2017-02-03 04:02 - 00000000 ____D C:\Windows\System32\Tasks\Intel
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Users\FIXIIE\Downloads\Intel Components
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Intel
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\ProgramData\Intel
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Program Files\Intel Driver Update Utility
2017-01-23 16:11 - 2017-01-23 16:11 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility
2017-01-23 16:11 - 2016-10-18 17:14 - 00021984 _____ C:\Windows\system32\Drivers\semav6msr64.sys
2017-01-23 15:38 - 2017-01-06 02:10 - 00158264 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-01-23 15:38 - 2017-01-06 02:10 - 00126008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-01-23 15:38 - 2017-01-06 02:10 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-01-23 15:34 - 2017-01-23 15:44 - 00000000 ____D C:\Users\FIXIIE\Documents\Monitor-Driver
2017-01-23 15:34 - 2017-01-23 15:34 - 00000000 ____D C:\Intel
2017-01-15 15:34 - 2017-01-15 15:34 - 04085256 _____ C:\Windows\system32\Drivers\FACEIT.sys
2017-01-15 15:34 - 2017-01-15 15:34 - 00000727 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FACEIT Client.lnk
2017-01-13 13:09 - 2017-01-13 13:09 - 00000000 ____D C:\Users\FIXIIE\Documents\PS3 x64
2017-01-13 06:23 - 2017-01-13 06:23 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\NexonLauncher
2017-01-13 06:23 - 2017-01-13 06:23 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\NexonLauncher
2017-01-13 06:12 - 2017-01-13 06:12 - 00000000 ____D C:\ProgramData\X360CE
2017-01-11 19:23 - 2017-01-11 19:43 - 00000000 ____D C:\Users\FIXIIE\Documents\Adobe
2017-01-11 14:41 - 2017-01-11 14:41 - 00000000 ____D C:\Users\FIXIIE\Documents\PCSX2
2017-01-11 02:38 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 02:38 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 02:38 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 02:38 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-11 02:38 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-11 02:38 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-11 02:38 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 02:38 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 02:38 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 02:38 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 02:38 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 02:38 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-11 02:38 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-10 17:28 - 2017-01-10 17:28 - 00000000 ____D C:\Windows\USB Vibration
2017-01-10 17:28 - 2017-01-10 17:28 - 00000000 ____D C:\Program Files (x86)\USB Vibration
2017-01-10 17:28 - 2009-12-21 22:29 - 00000000 ____D C:\Users\FIXIIE\Documents\playstation adapter Drivers
2017-01-10 17:28 - 2007-12-12 14:04 - 00034963 _____ (Compuware Corporation) C:\Windows\SysWOW64\Drivers\hid7906.sys
2017-01-10 17:28 - 2007-12-03 08:46 - 00037024 _____ (Compuware Corporation) C:\Windows\SysWOW64\Drivers\hid8101.sys
2017-01-10 17:28 - 2007-11-28 10:52 - 00034587 _____ (Compuware Corporation) C:\Windows\SysWOW64\Drivers\hid8103.sys
2017-01-10 06:33 - 2017-01-10 06:33 - 00000000 ____D C:\Windows\USB_Vibration
2017-01-10 06:33 - 2017-01-10 06:33 - 00000000 ____D C:\Program Files (x86)\USB_Vibration
2017-01-09 17:40 - 2017-01-09 17:40 - 00040489 _____ C:\Users\FIXIIE\Documents\Charakterreferenz.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-02-03 04:43 - 2009-07-14 06:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-03 04:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-02-03 04:40 - 2016-02-17 13:21 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-03 04:39 - 2015-11-08 06:00 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\Skype
2017-02-03 04:38 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-03 04:38 - 2009-07-14 05:45 - 00016864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-03 04:38 - 2009-07-14 05:45 - 00016864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-03 04:12 - 2015-11-08 05:04 - 00000000 ____D C:\ProgramData\MFAData
2017-02-03 04:08 - 2015-11-08 03:38 - 00000000 ____D C:\Users\FIXIIE
2017-02-03 04:02 - 2016-01-16 09:06 - 00000000 ____D C:\Users\FIXIIE\AppData\LocalLow\Temp
2017-02-03 04:02 - 2015-12-19 12:08 - 00000000 ____D C:\Windows\pss
2017-02-03 03:55 - 2016-01-16 07:22 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\DAEMON Tools Lite
2017-02-03 03:55 - 2016-01-09 10:26 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\Sony
2017-02-03 03:55 - 2016-01-03 21:21 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\CrashDumps
2017-02-03 03:55 - 2015-12-18 08:25 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\TS3Client
2017-02-03 03:55 - 2015-11-08 12:32 - 00000000 ____D C:\Windows\Panther
2017-02-03 03:45 - 2016-12-23 11:42 - 00000000 ____D C:\Users\FIXIIE\AppData\LocalLow\Mozilla
2017-02-03 03:01 - 2016-10-27 11:13 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\FAHClient
2017-02-03 02:38 - 2016-05-19 17:10 - 00000000 ____D C:\Program Files (x86)\FileZilla Server
2017-02-03 02:17 - 2015-12-15 12:05 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Adobe
2017-02-03 00:15 - 2016-04-12 07:51 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Battle.net
2017-02-02 23:51 - 2016-01-30 17:17 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\OBS
2017-02-02 23:49 - 2015-11-08 05:34 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\vlc
2017-02-02 23:10 - 2015-11-08 04:45 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-02-02 23:10 - 2015-11-08 04:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-02 23:10 - 2015-11-08 04:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-02-02 20:52 - 2016-09-20 11:38 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2017-01-27 01:08 - 2015-11-23 06:59 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 23:32 - 2016-04-29 10:49 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\UnrealEngine
2017-01-26 13:23 - 2016-12-24 22:15 - 00000000 ____D C:\Users\FIXIIE\AppData\Roaming\steelseries-engine-3-client
2017-01-26 02:17 - 2016-05-21 15:34 - 00000000 ____D C:\Users\FIXIIE\Desktop\Dark Thoughts
2017-01-24 17:58 - 2015-11-08 04:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-24 00:04 - 2016-12-04 03:04 - 01600056 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-01-23 19:05 - 2016-01-24 02:09 - 00000000 ____D C:\Users\FIXIIE\Documents\Dolphin Emulator
2017-01-23 16:34 - 2015-12-28 22:44 - 00000000 ____D C:\Program Files\Intel
2017-01-20 19:39 - 2016-12-04 02:03 - 01872320 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 01464768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-01-20 19:39 - 2016-12-04 02:03 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 16491120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 13378448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 04065808 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 03585120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00512960 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00496680 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00420408 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2017-01-20 17:36 - 2016-12-04 03:04 - 00042606 _____ C:\Windows\system32\nvinfo.pb
2017-01-20 16:13 - 2016-12-04 03:05 - 06401984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 02479160 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00548800 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-01-20 16:13 - 2016-12-04 03:05 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-01-20 15:07 - 2016-12-04 02:03 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-01-20 14:36 - 2016-12-15 19:50 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-01-18 16:12 - 2016-03-22 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-01-18 13:57 - 2016-12-04 03:05 - 07755067 _____ C:\Windows\system32\nvcoproc.bin
2017-01-16 06:14 - 2009-07-14 06:08 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-01-13 16:13 - 2016-12-07 00:57 - 01804672 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2017-01-13 16:13 - 2016-12-07 00:57 - 00045928 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\sshid.sys
2017-01-13 16:13 - 2016-12-07 00:57 - 00026376 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2017-01-13 06:27 - 2016-08-09 13:10 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\NXEPassportClient
2017-01-12 11:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-11 19:53 - 2016-05-24 20:29 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-01-10 17:28 - 2015-11-08 03:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-08 06:17 - 2016-11-29 20:55 - 00000603 _____ C:\Users\FIXIIE\Desktop\prntscrn.txt
2017-01-04 18:04 - 2015-11-08 04:07 - 00000000 ____D C:\Users\FIXIIE\AppData\Local\Deployment

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-23 02:20

==================== End of FRST.txt ============================

avaris · Feb 3, 2017

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2017
Ran by FIXIIE (03-02-2017 04:47:04)
Running from C:\Users\FIXIIE\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2015-11-08 02:38:57)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-459705389-3442733056-3860532926-500 - Administrator - Disabled)
FIXIIE (S-1-5-21-459705389-3442733056-3860532926-1000 - Administrator - Enabled) => C:\Users\FIXIIE
Guest (S-1-5-21-459705389-3442733056-3860532926-501 - Limited - Enabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-459705389-3442733056-3860532926-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Internet Security (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Internet Security (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

. . . (Version: 2.1.28.3 - Intel) Hidden
. . . (x32 Version: 2.6.2.4 - Intel) Hidden
3D Ripper DX v1.8.2 (HKLM-x32\...\3D Ripper DX_is1) (Version: - Roman Lut)
ACA & MEP 2016 Object Enabler (Version: 7.8.41.0 - Autodesk) Hidden
ACAD Private (Version: 20.1.49.0 - Autodesk) Hidden
Adblock Plus för IE (32-bitars och 64-bitars) (HKLM\...\{1B922A28-D60F-450B-B434-82C21BAED9BC}) (Version: 1.5 - Eyeo GmbH)
Adobe After Effects CC 2015 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F0}) (Version: 13.5.0 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Dreamweaver CC 2015 (HKLM-x32\...\{EE2A0AA8-0386-11E5-8603-BC82F5DB1A71}) (Version: 16.1.3 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2015 (HKLM-x32\...\{38C72D42-0672-43B1-9E05-E7631684F9A1}) (Version: 9.0.0 - Adobe Systems Incorporated)
Ansel (Version: 378.49 - NVIDIA Corporation) Hidden
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Apple-programstöd (32-bitar) (HKLM-x32\...\{26356515-5821-40FA-9C3D-9785052A1062}) (Version: 4.3.1 - Apple Inc.)
Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{903D0F33-D3CF-48D6-967D-84004089428A}) (Version: 4.0.51203.1 - Microsoft Corporation)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
AutoCAD 2016 - English (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 Language Pack - English (Version: 20.1.49.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 (HKLM\...\Autodesk 3ds Max 2016) (Version: 18.0.873.0 - Autodesk)
Autodesk 3ds Max 2016 (Version: 18.0.873.0 - Autodesk) Hidden
Autodesk 3ds Max 2016 Populate Data (HKLM\...\{57E92DED-DC7C-41E5-B9E1-76D83BD2EABE}) (Version: 18.0.0.0 - Autodesk)
Autodesk 3ds Max Design 2013 64-bit (HKLM\...\Autodesk 3ds Max Design 2013 64-bit) (Version: 15.0.0.347 - Autodesk)
Autodesk 3ds Max Design 2013 64-bit (Version: 15.0.0.347 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.19 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.14 - Autodesk)
Autodesk AutoCAD 2016 - English (HKLM\...\AutoCAD 2016 - English) (Version: 20.1.49.0 - Autodesk)
Autodesk Backburner 2013.0.0 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 2013.0.0 - Autodesk, Inc.)
Autodesk Backburner 2016 (HKLM-x32\...\{8C5F38D2-9EFE-49A4-B3F5-BF3210FED168}) (Version: 16.0.0.0 - Autodesk)
Autodesk Civil View for 3ds Max 2016 64-bit (HKLM\...\{1C4FFAF0-6DBB-4F7A-A386-46747D060826}) (Version: 18.0.0.0 - Autodesk)
Autodesk Civil View for 3ds Max Design 2013 (HKLM-x32\...\{FE6DCC8D-427F-405C-A779-C93B6D9F77A5}) (Version: 1.0.0.2 - Autodesk)
Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk DirectConnect 2012 64-bit (HKLM\...\Autodesk DirectConnect 2012 64-bit) (Version: 6.0.443.0 - Autodesk)
Autodesk DirectConnect 2012 64-bit (Version: 6.0.443.0 - Autodesk) Hidden
Autodesk DirectConnect 2013 64-bit (HKLM\...\Autodesk DirectConnect 2013 64-bit) (Version: 7.0.28.0 - Autodesk)
Autodesk DirectConnect 2013 64-bit (Version: 7.0.28.0 - Autodesk) Hidden
Autodesk DirectConnect 2016 64-bit (HKLM\...\Autodesk DirectConnect 2016 64-bit) (Version: 10.0.98.0 - Autodesk)
Autodesk DirectConnect 2016 64-bit (Version: 10.0.98.0 - Autodesk) Hidden
Autodesk Essential Skills Movies for 3ds Max Design 2013 64-bit (HKLM\...\{62CBE596-1BB8-4D7B-A056-103287BAD1C4}) (Version: 1.0.0.1 - Autodesk)
Autodesk FBX Plug-in 2013.1 - 3ds Max Design 2013 64-bit (HKLM\...\Autodesk FBX Plug-in 2013.1 - 3ds Max Design 2013 64-bit) (Version: - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2016 (HKLM\...\{9167CA34-4E58-49E3-8892-3C439739D2D3}) (Version: 18.0 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max Design 2013 64-bit (HKLM\...\{BC66B242-DF13-1664-851B-00123612ED98}) (Version: 15.0 - Autodesk)
Autodesk MatchMover 2012 64-bit (HKLM\...\{4529F749-C362-4119-AFA0-0A3F1CA924AB}) (Version: 14.00.0000 - Autodesk)
Autodesk Material Library 2013 (HKLM-x32\...\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2013 (HKLM-x32\...\{606E12B9-641F-4644-A22A-FF38AE980AFD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.19 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2013 (HKLM-x32\...\{58760EEC-8B6A-43F4-81AA-696E381DFADD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2016 (HKLM-x32\...\{415A5A54-325E-4815-9940-62A889CA3877}) (Version: 6.3.0.19 - Autodesk)
Autodesk Maya 2012 64-bit (HKLM\...\Autodesk Maya 2012 64-bit) (Version: 14.0.0.0 - Autodesk)
Autodesk Maya 2012 64-bit (Version: 14.0.0.0 - Autodesk) Hidden
Autodesk Maya 2016 (HKLM\...\Autodesk Maya 2016) (Version: 16.0.1312.0 - Autodesk)
Autodesk Maya 2016 (Version: 16.0.1312.0 - Autodesk) Hidden
Autodesk ReCap 2016 (HKLM\...\Autodesk ReCap 2016) (Version: 1.5.0.33 - Autodesk)
Autodesk ReCap 2016 (Version: 1.5.0.33 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max (HKLM\...\Autodesk Revit Interoperability for 3ds Max ) (Version: 16.0.394.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max (Version: 16.0.394.0 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max and 3ds Max Design 2013 64-bit (HKLM\...\{06E18300-BB64-1664-8E6A-2593FC67BB74}) (Version: 1.0.0.1 - Autodesk)
AVG (Version: 16.141.7998 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4756 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.141.7998 - AVG Technologies)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
BankID säkerhetsprogram (HKLM-x32\...\{1BDBF557-BA87-438F-9B28-AE4D836E35BA}) (Version: 7.1.0.20 - Finansiell ID-Teknik BID AB)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)
Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform)
CINEMA 4D 17.048 (HKLM\...\MAXONC60D9D75) (Version: 17.048 - MAXON Computer GmbH)
Composite 2012 64-bit (HKLM\...\{EA234BC3-39FE-4734-B72F-076086889F6D}) (Version: 7.0.0 - Autodesk)
Composite 2013 64-bit (HKLM\...\{2F808931-D235-4FC7-90CD-F8A890C97B2F}) (Version: 8.0.0 - Autodesk)
Crazybump (remove only) (HKLM-x32\...\Crazybump) (Version: - )
CRYENGINE Launcher (HKLM-x32\...\{F7916573-4BDD-4A9F-9E2F-CC8107845DC3}) (Version: 1.0.0 - Crytek GmbH)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
Curse Client (HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.2.0.0115 - Disc Soft Ltd)
DaVinci Resolve (HKLM\...\{2852CC67-7BE9-4972-BF96-8D4EC7486F97}) (Version: 10.1.0021 - Blackmagic Design)
Dotfuscator and Analytics Community Edition 5.19.0 (x32 Version: 5.19.0.2930 - PreEmptive Solutions) Hidden
Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
Epic Games Launcher (HKLM-x32\...\{4755FB10-B694-4B0F-BCDE-F390B957CD96}) (Version: 1.1.90.0 - Epic Games, Inc.)
FACEIT Client version 1.0 (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 1.0 - FACEIT LTD)
FAHClient (HKLM-x32\...\FAHClient) (Version: 7.4.4 - Stanford University)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
FMW 1 (Version: 1.143.3 - AVG Technologies) Hidden
GCFScape 1.8.5 (HKLM\...\GCFScape_is1) (Version: - Ryan Gregg)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.3.9 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Houdini 15.0.244.16 (HKLM\...\Houdini 15.0.244.16) (Version: 15.0.244.16 - Side Effects Software)
IIS 10.0 Express (HKLM\...\{7A28A2B0-458B-4A58-84AC-C90D2D4B79FB}) (Version: 10.0.1735 - Microsoft Corporation)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Image Resizer for Windows (64 bit) (Version: 3.0.4802.35565 - Brice Lambson) Hidden
Image Resizer for Windows (HKLM-x32\...\{69d72156-6582-4556-8637-06f40aa7f85b}) (Version: 3.0.4802.35565 - Brice Lambson)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Chipset Device Software (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel(R) Network Connections 21.1.30.0 (HKLM\...\PROSetDX) (Version: 21.1.30.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{66e8e99a-eb6f-4403-9fc2-0ddd4d6f353e}) (Version: 2.6.2.4 - Intel)
J2SE Development Kit 5.0 Update 22 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0150220}) (Version: 1.5.0.220 - Sun Microsystems, Inc.)
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden
Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - )
Machinima Studio (HKLM\...\{517500ED-35B9-43C1-9F60-6B31E111E2D3}) (Version: 1.0.0 - BC)
Metro: Last Light (HKLM\...\Steam App 43160) (Version: - 4A Games)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.24720 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft PowerPoint 2010 (HKLM-x32\...\Office14.POWERPOINT) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Enterprise 2015 (HKLM-x32\...\{a47f6f59-0768-45af-8aa6-10ad157a603e}) (Version: 14.0.23107.156 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 sv-SE) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 sv-SE)) (Version: 50.1.0 - Mozilla)
MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.24720 - Microsoft Corporation) Hidden
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
NaturalMotion endorphin 2.5.2 (HKLM-x32\...\NaturalMotion endorphin_is1) (Version: - NaturalMotion Ltd.)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 378.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.3.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.3.0.95 - NVIDIA Corporation)
NVIDIA Graphics Driver 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.49 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.21 - NVIDIA Corporation)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX Plug-in for Autodesk Maya 2012 64 bit (HKLM\...\{FC4AD39F-9DCE-4BD0-B7D0-7C81CEB9F04B}) (Version: 2.60.0216.1828 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.3.5.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Overwatch Test (HKLM-x32\...\Overwatch Test) (Version: - Blizzard Entertainment)
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
PixPlant 3.0.11 (HKLM\...\PixPlant3_is1) (Version: 3.0.11 - FaronStudio)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Qpad 5K Gaming Mouse Software (HKLM-x32\...\{5B4277DA-8A85-44B6-8086-DAA97C20B992}) (Version: 1.06 - Qpad)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
RealFlow 2015 (HKLM-x32\...\RealFlow 2015) (Version: - )
RealFlow Plugin for 3D Studio Max (HKLM-x32\...\RealFlowMax) (Version: 2014.0.3 - Next Limit)
RealFlow Plug-in for Cinema4D (HKLM-x32\...\RealFlowC4D) (Version: 1.0 - Next Limit)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.9.10.0 - Red Giant, LLC)
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (x32 Version: 14.0.24723 - Microsoft Corporation) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0000-0000-0000000FF1CE}_Office14.POWERPOINT_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SlimDX SDK (June 2010) (HKLM-x32\...\{59BB7F21-1987-4A1C-9DF3-82FEC6591C60}) (Version: 2.0.10.43 - SlimDX Group)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 3.16.3600.1 - Hi-Rez Studios)
Spotify (HKU\S-1-5-21-459705389-3442733056-3860532926-1000\...\Spotify) (Version: 1.0.29.92.g67727800 - Spotify AB)
SteelSeries Engine 3.9.10 (HKLM\...\SteelSeries Engine 3) (Version: 3.9.10 - SteelSeries ApS)
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.24712 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
TGA Viewer (HKLM-x32\...\{4FA2DAFD-2D72-4ACF-BDD8-4178E8AFD459}_is1) (Version: - IdeaMK)
Tombraider (HKLM-x32\...\Tombraider_is1) (Version: - )
TP-LINK 300Mbps Wireless USB Adapter Drivrutin (HKLM-x32\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
Trapcode Particular 64 bit (HKLM-x32\...\InstallShield_{9497360C-4C41-4E05-81C0-BE56DF2ADFE8}) (Version: 2.1.1 - Red Giant Software)
Trapcode Particular 64 bit (Version: 2.1.1 - Red Giant Software) Hidden
Trapcode Suite v13.1.1 (HKLM-x32\...\{DFD2DC6B-C634-4C1C-81CC-5EF852E71CEE}_is1) (Version: 13.1.1 - Red Giant, LLC)
TypeScript Power Tool (x32 Version: 1.7.4.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.7.4.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 1.7.4.0 (HKLM-x32\...\{33e2204a-4ec6-4458-895a-47e2a404d990}) (Version: 1.7.24720.0 - Microsoft Corporation)
UE4 Prerequisites (x64) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (x32 Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
USB Network Driver (HKLM-x32\...\{66ED8E01-C915-41F5-B33E-C5C31F27B885}) (Version: 2007.07.3 - )
USB Vibration Joystick (HKLM-x32\...\{64B27517-3558-4A76-8641-5D161D7C9BE5}) (Version: v3.85 - Dragon rise)
W326U UnInstall (HKLM-x32\...\Tenda Wireless LAN Card Setup_is1) (Version: - )
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Vegas Pro 12.0 (64-bit) (HKLM\...\{64A98EF1-2680-11E3-A909-F04DA23A5C58}) (Version: 12.0.726 - Sony)
Windows Driver Package - Microsoft (xusb21) XnaComposite (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
Windows Speech Recognition Macros (HKLM-x32\...\{8DC197D6-F4AB-44E0-ACF7-210355E6F389}) (Version: 1.0.6862.19 - Microsoft Corporation)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio 2015 Update 1 (KB3022398) (HKLM-x32\...\{fcaa9dba-9438-48b6-ad91-4e9b4cc7084a}) (Version: 14.0.24720 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
World of Warcraft Public Test (HKLM-x32\...\World of Warcraft Public Test) (Version: - Blizzard Entertainment)
VS Update core components (x32 Version: 14.0.24720 - Microsoft Corporation) Hidden
VTFEdit 1.2.5 (HKLM-x32\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
VTFEdit 1.3.3 (HKLM\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)
Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.72.101 - Zemana Ltd.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{1baa97d3-5504-47c3-9968-006c53f68ba2}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-459705389-3442733056-3860532926-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> D:\Program Files\AutoDesk\AutoCad 2016\AutoCAD 2016\en-US\acadficn.dll (Autodesk, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2AC1F097-6A21-4A7E-B763-406A81CF58E7} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {5937D942-AC68-4C5B-9CCF-306F3EFBB9BE} - System32\Tasks\CCleanerSkipUAC => D:\Program Files\CCleaner\CCleaner.exe [2016-12-21] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2011-09-14 23:19 - 2011-09-14 23:19 - 00086016 _____ () D:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
2016-11-17 22:05 - 2016-11-17 22:05 - 00156928 _____ () C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
2016-12-04 02:03 - 2017-01-20 19:39 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-04 02:03 - 2017-01-20 19:39 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2017-01-23 16:11 - 2016-11-17 22:16 - 00805632 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
2017-01-23 16:11 - 2016-11-17 22:18 - 01981184 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_modeler.dll
2017-01-23 16:11 - 2016-11-17 22:11 - 00247552 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\acpi_battery_input.dll
2017-01-23 16:11 - 2016-11-17 22:10 - 00212736 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\wifi_input.dll
2017-01-23 16:11 - 2016-11-17 22:11 - 00174848 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\devices_use_input.dll
2017-01-23 16:11 - 2016-11-17 22:10 - 00203520 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_system_power_state_input.dll
2017-01-23 16:11 - 2016-11-17 22:09 - 00206592 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_disktrace_input.dll
2017-01-23 16:11 - 2016-11-17 22:09 - 00336640 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_process_input.dll
2017-01-23 16:11 - 2016-11-17 22:06 - 00147712 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_winstat_input.dll
2017-01-23 16:11 - 2016-11-17 22:11 - 00213248 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\sema_thermal_input.dll
2017-01-23 16:11 - 2016-11-17 22:07 - 00229120 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_quality_and_reliability_input.dll
2017-01-23 16:11 - 2016-11-17 22:08 - 00224000 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_sampler_input.dll
2017-01-23 16:11 - 2016-11-17 22:06 - 00211712 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_stress_odometer_input.dll
2017-01-23 16:11 - 2016-11-17 22:08 - 00219904 _____ () C:\Program Files\Intel\SUR\QUEENCREEK\intel_turbo_input.dll
2016-05-19 19:06 - 2016-02-24 05:48 - 00062024 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2016-05-19 19:06 - 2016-02-24 05:47 - 00110664 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2016-11-28 12:50 - 2016-11-28 12:50 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll
2015-11-08 04:46 - 2017-01-20 19:39 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-04 02:03 - 2017-01-20 19:39 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-04 02:03 - 2017-01-20 19:39 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-15 01:38 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-15 01:38 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2017-02-03 04:02 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-459705389-3442733056-3860532926-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\FIXIIE\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 195.67.199.30 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{E5CB9876-D0A7-4A50-A280-DEAFB8DB322A}] => X:\Program Files\Steam\Steam.exe
FirewallRules: [{4187CE53-B557-4086-842E-1015AA97333F}] => X:\Program Files\Steam\Steam.exe
FirewallRules: [{85583338-123D-4987-996C-1C134C6EA231}] => X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{B96BF048-FD63-48BE-B93C-813A7C4D0149}] => X:\Program Files\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{DF9BDC11-0F4A-4481-9C3D-389E5F63721E}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{96839586-F07A-4B31-B1C9-60D44D81B46B}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{755009B7-6D30-48EF-A4D9-7AC41E09AE5F}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{71331F76-4FC6-4FA1-BD62-200013BA3B10}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{1DA5DAE9-29AB-4BC3-9F30-85900445A91C}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{47534AA3-49FC-4F85-BC0A-92CE746C514A}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe

==================== Restore Points =========================

03-02-2017 04:40:04 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (02/03/2017 04:47:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe9882c5c3
Faulting process id: 0x1ab8
Faulting application start time: 0x01d27dd035a60ebd
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 736baf7f-e9c3-11e6-9b4e-14dda977ff22

Error: (02/03/2017 04:47:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Connect.Service.ContentService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 04:47:15 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )
Description: UNHANDLED EXCEPTION. Process is terminating: True.
EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object.
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 04:47:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe9882c5c3
Faulting process id: 0x1348
Faulting application start time: 0x01d27dd02f5fea14
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 6d258ad6-e9c3-11e6-9b4e-14dda977ff22

Error: (02/03/2017 04:47:05 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Connect.Service.ContentService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 04:47:05 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )
Description: UNHANDLED EXCEPTION. Process is terminating: True.
EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object.
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 04:46:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe9884c5c3
Faulting process id: 0x7bc
Faulting application start time: 0x01d27dd02919c2b1
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 66df6374-e9c3-11e6-9b4e-14dda977ff22

Error: (02/03/2017 04:46:54 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Connect.Service.ContentService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 04:46:54 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )
Description: UNHANDLED EXCEPTION. Process is terminating: True.
EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object.
at System.Data.SqlServerCe.SqlCeException.ToString()
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (02/03/2017 04:46:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Connect.Service.ContentService.exe, version: 20.1.49.0, time stamp: 0x54d43c57
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe9881c5c3
Faulting process id: 0x1b64
Faulting application start time: 0x01d27dd022d572f6
Faulting application path: C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
Faulting module path: unknown
Report Id: 60998d19-e9c3-11e6-9b4e-14dda977ff22

System errors:
=============
Error: (02/03/2017 04:47:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 47 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:47:05 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 46 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:46:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 45 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:46:44 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 44 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:46:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 43 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:46:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 42 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:46:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 41 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:46:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 40 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:45:51 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 39 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/03/2017 04:45:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Autodesk Content Service service terminated unexpectedly. It has done this 38 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

CodeIntegrity:
===================================
Date: 2017-02-03 04:38:58.596
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 04:38:58.566
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 04:14:03.151
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 04:14:03.121
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 04:03:38.552
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 04:03:38.522
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:48:06.436
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:48:06.406
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:07:30.096
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-02-03 02:07:30.066
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\drivers\hardlock.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 29%
Total physical RAM: 12230.83 MB
Available physical RAM: 8590.27 MB
Total Virtual: 24459.85 MB
Available Virtual: 21088.55 MB

==================== Drives ================================

Drive c: (SSD) (Fixed) (Total:119.24 GB) (Free:21.54 GB) NTFS
Drive d: (Standard) (Fixed) (Total:465.66 GB) (Free:215.33 GB) NTFS
Drive g: (Elements) (Fixed) (Total:465.73 GB) (Free:62.46 GB) NTFS
Drive x: (wonderful) (Fixed) (Total:1862.89 GB) (Free:1528.09 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: D88E6ABB)
Partition 1: (Not Active) - (Size=119.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: D88E6ABF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 465.7 GB) (Disk ID: B233BD37)
Partition 1: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Malnutrition · Feb 3, 2017

You should be able to find the Rogue Killer log in your downloads folder, if not then use the Everything Search engine to find it. If you can not find it then no worries.

Disable CCleaner Monitoring -- Set it to run at boot.

After install Click Options.
Go to monitoring.
Uncheck All Monitoring items.
Go to advanced -- Click close program after cleaning.
Go to settings -- click run ccleaner when the computer starts.

Scan the file C:\Windows\System32\Drivers\FACEIT.sys at virus total, as suggested in this post.

Eliminate Bad Settings with this nice tool.

Download SupRestric.exe save to your desktop.
Unzip it there.
Close all running programs.
Temporarily disable the antivirus
Double click the file to launch it.
Windows: 7/8/10 Vista and run as administrator
Click Yes at any prompt.
The analysis takes only a few moments.
The report is on the desktop ( CTR.txt )
Copy paste report in next reply.
A reboot is needed to complete the repairs. --
REBOOT YOUR MACHINE AFTER RUNNING THIS TOOL!!

Tell me how things are running now please.

Malnutrition · Feb 3, 2017

After the above steps and a reboot, then disable the windows firewall.

FW: AVG Internet Security (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Disable Windows Firewall Instructions here.

avaris · Feb 3, 2017

Rapport de Contrôle restrictions Pierre13 (CTR version 2.4.0.0 ) du 03\02\2017 à 05:09:08
PC de FIXIIE
Windows 7 Ultimate Service Pack 1 (64 bits)

réparation erreur 2203 effectuée.

Contrôle présence restrictions

PC vacciné contre sponsor Java.
Service Pare feu Windows activé.
Paramètres Pare feu Windows rétablis par défaut et activés.

238 restrictions contrôlées.

1 restriction(s) réparée(s).
Re démarrer le PC pour prendre en compte la ou les réparations.

Le rapport est sur le bureau (C:\Users\FIXIIE\Desktop\CTR.txt)

avaris · Feb 3, 2017

Didn't find the Rogue killer report file, looked in D:/Downloads and elsewhere too. FACEIT.sys does not exist either, checked in the parent & child of the folder u suggested.

avaris

Malnutrition

Malnurished Mod

avaris

Malnutrition

Malnurished Mod

Malnutrition

Malnurished Mod

Attachments

Malnutrition

Malnurished Mod

avaris

avaris

avaris

avaris

Malnutrition

Malnurished Mod

avaris

avaris

avaris

avaris

avaris

Malnutrition

Malnurished Mod

Attachments

Malnutrition

Malnurished Mod

avaris

avaris

Search

Search

Closed/Inactive My computer tabs out every 7-11th second