Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-09-2013
Ran by SYSTEM on MININT-MQK0QB9 on 23-09-2013 09:46:46
Running from H:\
Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
[b]ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.[/b]

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [PC Monitor Operations] - C:\Program Files\PC Monitor\pcmontask.exe [519640 2013-08-28] (MMSOFT Design Ltd.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Winlogon: [Shell] explorer.exe [0 2011-02-24] ()
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [606040 2013-08-15] (Razer Inc.)
HKU\Andreas\...\Run: [Advanced SystemCare 6] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit)
HKU\Andreas\...\Run: [Advanced SystemCare 7] - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2171712 2013-07-31] (IObit)
HKU\Andreas\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3551576 2013-09-18] (Electronic Arts)
HKU\Andreas\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-20] (Skype Technologies S.A.)
HKU\Andreas\...\Run: [Actual Multiple Monitors] - C:\Program Files (x86)\Actual Multiple Monitors\ActualMultipleMonitorsCenter.exe [1783088 2013-08-30] (Actual Tools)
BootExecute: autocheck pwNativeautocheck autochk * 
AlternateShell: 

==================== Services (Whitelisted) =================

S4 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
S4 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [896320 2013-07-28] (IObit)
S4 CPluginService; C:\Program Files\COMODO\PC TuneUP\CPluginService.exe [2282696 2013-02-07] (Comodo Security Solutions, Inc.)
S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2013-01-29] ()
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2143040 2013-07-24] (IObit)
S2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 mcmscsvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNASvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
S2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
S2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
S2 PlugPlay; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-05-04] ()
S4 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2012-10-05] (Wajam)
S2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] ()
S4 Hamachi2Svc; 

==================== Drivers (Whitelisted) ====================

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] ()
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-07-01] ()
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-07-01] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2013-07-01] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2013-07-01] ()
S3 RTCore64; C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-17] ()
S3 RTCore64; C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-17] ()
S3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39096 2013-08-20] (Razer Inc)
S0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] ()
S3 BCMH43XX; system32\DRIVERS\bcmwlhigh664.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 mfeavfk01; No ImagePath
S5 mountmgr; C:\Windows\System32\Drivers\mountmgr.sys [94592 2010-11-20] (Microsoft Corporation)
S3 NPF; system32\DRIVERS\npf.sys [x]
S5 nvUpdatusService; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2155296 2013-08-27] (NVIDIA Corporation)
S5 PC Monitor; C:\Program Files\PC Monitor\PCMonitorSrv.exe [581592 2013-08-28] ()
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-23 09:46 - 2013-09-23 09:46 - 00000000 ____D C:\FRST
2013-09-20 04:55 - 2013-09-20 04:55 - 00001268 _____ C:\Program Files (x86)\The Elder Scrolls V Skyrim - Shortcut.lnk
2013-09-20 04:07 - 2013-09-20 04:07 - 00466456 _____ (Creative Labs) C:\Windows\System32\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\System32\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-09-20 04:04 - 2013-09-20 04:22 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\FEZ
2013-09-20 04:04 - 2013-09-12 04:51 - 00012005 _____ C:\Users\Andreas\AppData\Roaming\alsoft.ini
2013-09-18 04:52 - 2013-09-18 04:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-18 04:52 - 2013-08-20 05:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2013-09-18 04:52 - 2013-08-20 05:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll
2013-09-18 04:52 - 2013-08-20 05:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-18 04:52 - 2013-06-17 06:10 - 00000000 ____D C:\Users\UpdatusUser\Documents\Visual Studio 2010
2013-09-18 04:52 - 2013-04-25 05:57 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-09-18 04:52 - 2013-01-02 08:32 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-09-18 04:50 - 2013-09-18 04:50 - 22321072 _____ (NVIDIA Corporation) C:\Users\Andreas\Downloads\GeForce_Experience_v1.6.1.0.exe
2013-09-17 08:37 - 2013-09-17 08:38 - 01322784 _____ C:\Users\Andreas\Downloads\RayGun's+MTA+Powerrun+77.rar
2013-09-17 08:05 - 2013-09-17 08:05 - 00010763 _____ C:\Users\Andreas\Downloads\Unlimited+Ammo.zip
2013-09-17 08:04 - 2013-09-17 08:04 - 00008616 _____ C:\Users\Andreas\Downloads\igr (2).zip
2013-09-17 07:48 - 2013-09-17 07:48 - 00971989 _____ C:\Users\Andreas\Downloads\Super+Car+Mod.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams (1).rar
2013-09-17 06:27 - 2013-09-17 06:28 - 00062602 _____ C:\Windows\DPINST.LOG
2013-09-15 09:23 - 2013-09-15 09:23 - 00001501 _____ C:\Users\Andreas\Desktop\Just Cause 2 - Shortcut.lnk
2013-09-15 09:23 - 2013-09-15 09:23 - 00000220 _____ C:\Users\Andreas\Desktop\Just Cause 2.url
2013-09-15 09:21 - 2013-09-15 09:21 - 00008616 _____ C:\Users\Andreas\Downloads\igr (1).zip
2013-09-15 07:51 - 2013-09-20 05:20 - 00002388 _____ C:\Windows\PWCMDLST.BAK
2013-09-15 07:07 - 2013-09-15 07:07 - 00001235 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk
2013-09-15 07:07 - 2013-07-01 00:25 - 03151040 _____ C:\Windows\System32\pwNative.exe
2013-09-15 07:07 - 2013-07-01 00:25 - 00019032 ____N C:\Windows\System32\pwdrvio.sys
2013-09-15 07:07 - 2013-07-01 00:25 - 00012384 ____N C:\Windows\System32\pwdspio.sys
2013-09-15 07:06 - 2013-09-15 07:07 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.0
2013-09-15 07:04 - 2013-09-15 07:04 - 20198792 _____ (MiniTool Solution Ltd.                                      ) C:\Users\Andreas\Downloads\pwhe8.exe
2013-09-12 09:40 - 2013-09-12 09:40 - 00000000 ____D C:\Program Files (x86)\Actual Multiple Monitors
2013-09-12 09:38 - 2013-09-12 09:39 - 09564880 _____ (Actual Tools                                                ) C:\Users\Andreas\Downloads\ammsetup.exe
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 __SHD C:\Users\Andreas\AppData\Roaming\Common
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 ____D C:\ProgramData\Binary Fortress Software
2013-09-12 09:30 - 2013-09-12 09:30 - 10137008 _____ (Binary Fortress Software                                    ) C:\Users\Andreas\Downloads\DisplayFusionSetup-5.1.exe
2013-09-12 05:45 - 2013-08-09 21:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-12 05:45 - 2013-08-09 21:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-12 05:45 - 2013-08-09 21:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-12 05:45 - 2013-08-09 21:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-12 05:45 - 2013-08-09 21:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-12 05:45 - 2013-08-09 21:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-09-12 05:45 - 2013-08-09 19:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 05:45 - 2013-08-09 19:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 05:45 - 2013-08-09 19:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-09-12 05:45 - 2013-08-09 19:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 05:45 - 2013-08-09 18:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-09-12 05:45 - 2013-08-09 18:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 21:20 - 2013-08-07 17:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-09-11 21:20 - 2013-08-04 18:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys
2013-09-11 21:20 - 2013-08-01 18:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-09-11 21:20 - 2013-08-01 18:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-09-11 21:20 - 2013-08-01 18:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-09-11 21:20 - 2013-08-01 18:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-09-11 21:20 - 2013-08-01 18:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-09-11 21:20 - 2013-08-01 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-09-11 21:20 - 2013-08-01 18:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-09-11 21:20 - 2013-08-01 18:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-09-11 21:20 - 2013-08-01 18:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 21:20 - 2013-08-01 17:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 21:20 - 2013-08-01 17:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 21:20 - 2013-08-01 17:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 21:20 - 2013-08-01 17:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 21:20 - 2013-08-01 17:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-09-11 21:20 - 2013-08-01 16:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-09-11 21:20 - 2013-08-01 16:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 21:20 - 2013-08-01 16:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 21:20 - 2013-08-01 16:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 21:20 - 2013-08-01 16:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 21:20 - 2013-08-01 16:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 16:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 16:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 16:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 21:20 - 2013-07-25 18:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-09-11 21:20 - 2013-07-25 17:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 21:19 - 2013-07-25 18:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-09-11 21:19 - 2013-07-25 17:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 02:38 - 2013-09-09 02:38 - 00000000 ____D C:\Users\Andreas\AppData\Local\Sniper Elite Nazi Zombie Army
2013-09-07 11:22 - 2013-09-07 11:22 - 00008616 _____ C:\Users\Andreas\Downloads\igr.zip
2013-09-07 11:11 - 2013-09-07 11:11 - 02095895 _____ C:\Users\Andreas\Downloads\Superman+Fly+Mod+Version+4.zip
2013-09-06 10:15 - 2013-09-06 10:15 - 01941528 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll
2013-09-06 10:15 - 2013-09-06 10:15 - 00000000 ____D C:\Users\Andreas\AppData\Local\Criterion Games
2013-09-06 10:13 - 2013-09-13 22:34 - 00055545 _____ C:\Windows\DirectX.log
2013-09-06 10:13 - 2013-09-06 10:13 - 03823312 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_25.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03807440 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_27.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03544272 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_24.dll
2013-09-05 05:50 - 2013-09-05 05:49 - 04170112 _____ C:\Users\Andreas\Desktop\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:49 - 2013-09-05 05:49 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:33 - 2013-09-05 05:33 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804.jar
2013-09-05 05:29 - 2013-09-05 06:06 - 00000000 ____D C:\Users\Andreas\Desktop\Backup
2013-09-05 05:24 - 2013-09-05 05:24 - 01870868 _____ C:\Users\Andreas\Downloads\minecraftforge-universal-1.6.2-9.10.0.804.jar
2013-09-05 05:23 - 2013-09-05 05:23 - 05129877 _____ C:\Users\Andreas\Downloads\Flans Mod 1.6.2 Test Release 2.zip
2013-09-05 04:38 - 2013-09-20 06:25 - 00005843 _____ C:\Windows\setupact.log
2013-09-05 04:38 - 2013-09-05 04:38 - 00000000 _____ C:\Windows\setuperr.log
2013-09-05 04:37 - 2013-09-12 08:47 - 00014676 _____ C:\Windows\PFRO.log
2013-09-05 04:36 - 2013-09-05 04:36 - 73297920 _____ C:\Windows\System32\config\SOFTWARE.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 02142208 _____ C:\Windows\System32\config\DEFAULT.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00102400 _____ C:\Windows\System32\config\SAM.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00028672 _____ C:\Windows\System32\config\SECURITY.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00000000 _____ C:\asc_rdflag
2013-09-04 22:48 - 2013-09-04 22:48 - 00000000 ____D C:\Users\Andreas\PycharmProjects
2013-09-04 22:46 - 2013-09-04 22:46 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\JetBrains
2013-09-04 22:45 - 2013-09-04 22:45 - 00000000 ____D C:\Users\Andreas\.PyCharm20
2013-09-04 22:44 - 2013-09-04 22:44 - 00000000 ____D C:\Program Files (x86)\JetBrains
2013-09-04 22:43 - 2013-09-04 22:43 - 131540128 _____ C:\Users\Andreas\Downloads\pycharm-2.7.3.exe
2013-09-02 04:11 - 2013-09-04 04:33 - 00000000 ____D C:\Program Files (x86)\EVGA Precision X
2013-09-02 04:11 - 2013-09-02 04:11 - 00001088 _____ C:\Users\Andreas\Desktop\EVGA Precision X.lnk
2013-09-02 04:10 - 2013-09-02 04:10 - 15963736 _____ C:\Users\Andreas\Downloads\EVGAPrecisionX.zip
2013-08-31 02:14 - 2013-08-31 02:14 - 00000000 __SHD C:\ProgramData\DSS
2013-08-31 02:04 - 2013-08-31 02:04 - 00000000 ____D C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-08-28 20:29 - 2013-08-28 20:29 - 00796672 _____ (Razer Inc) C:\Windows\SysWOW64\rzdevicedll.dll

==================== One Month Modified Files and Folders =======

2013-09-23 09:46 - 2013-09-23 09:46 - 00000000 ____D C:\FRST
2013-09-23 09:14 - 2009-07-13 15:42 - 20268032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imageres.dll
2013-09-23 09:10 - 2011-08-11 03:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\xmllite.dll
2013-09-23 09:09 - 2013-08-13 23:29 - 01217024 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-09-23 09:07 - 2009-07-13 15:57 - 20268032 _____ (Microsoft Corporation) C:\Windows\System32\imageres.dll
2013-09-22 22:25 - 2013-08-13 23:28 - 01910208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-09-20 08:45 - 2013-07-21 08:55 - 00000300 _____ C:\Windows\Tasks\Driver Booster Startup.job
2013-09-20 08:45 - 2011-08-06 09:47 - 01291470 _____ C:\Windows\WindowsUpdate.log
2013-09-20 08:30 - 2012-12-31 11:02 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-20 08:12 - 2012-05-08 12:54 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-20 07:59 - 2012-05-08 12:54 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 07:56 - 2011-09-17 07:03 - 00001010 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1726719542-1575880402-97123675-1001UA.job
2013-09-20 06:42 - 2012-12-31 13:36 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Skype
2013-09-20 06:37 - 2013-05-03 09:17 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-20 06:37 - 2012-05-08 12:54 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-20 06:32 - 2009-07-13 20:45 - 00023904 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 06:32 - 2009-07-13 20:45 - 00023904 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 06:25 - 2013-09-05 04:38 - 00005843 _____ C:\Windows\setupact.log
2013-09-20 06:25 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-20 06:24 - 2011-08-06 10:07 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-20 05:20 - 2013-09-15 07:51 - 00002388 _____ C:\Windows\PWCMDLST.BAK
2013-09-20 04:55 - 2013-09-20 04:55 - 00001268 _____ C:\Program Files (x86)\The Elder Scrolls V Skyrim - Shortcut.lnk
2013-09-20 04:42 - 2013-05-03 10:44 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-09-20 04:42 - 2013-01-01 00:08 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-09-20 04:41 - 2012-12-31 14:10 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-09-20 04:22 - 2013-09-20 04:04 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\FEZ
2013-09-20 04:07 - 2013-09-20 04:07 - 00466456 _____ (Creative Labs) C:\Windows\System32\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\System32\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-09-20 04:05 - 2009-07-13 21:13 - 00785060 _____ C:\Windows\System32\PerfStringBackup.INI
2013-09-20 03:34 - 2013-01-01 07:47 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{6EF4FA9F-22D6-4447-8CC3-A8329DE5A362}
2013-09-18 05:47 - 2012-12-31 15:37 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\.minecraft
2013-09-18 04:54 - 2013-04-23 04:31 - 00000000 ____D C:\Users\Andreas\AppData\Local\NVIDIA
2013-09-18 04:53 - 2011-08-06 10:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-18 04:53 - 2011-08-06 10:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-18 04:53 - 2011-08-06 10:06 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-18 04:52 - 2013-09-18 04:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-18 04:50 - 2013-09-18 04:50 - 22321072 _____ (NVIDIA Corporation) C:\Users\Andreas\Downloads\GeForce_Experience_v1.6.1.0.exe
2013-09-17 09:53 - 2013-01-08 08:06 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Spotify
2013-09-17 08:38 - 2013-09-17 08:37 - 01322784 _____ C:\Users\Andreas\Downloads\RayGun's+MTA+Powerrun+77.rar
2013-09-17 08:25 - 2013-01-08 08:06 - 00000000 ____D C:\Users\Andreas\AppData\Local\Spotify
2013-09-17 08:05 - 2013-09-17 08:05 - 00010763 _____ C:\Users\Andreas\Downloads\Unlimited+Ammo.zip
2013-09-17 08:04 - 2013-09-17 08:04 - 00008616 _____ C:\Users\Andreas\Downloads\igr (2).zip
2013-09-17 07:48 - 2013-09-17 07:48 - 00971989 _____ C:\Users\Andreas\Downloads\Super+Car+Mod.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams (1).rar
2013-09-17 06:28 - 2013-09-17 06:27 - 00062602 _____ C:\Windows\DPINST.LOG
2013-09-15 09:23 - 2013-09-15 09:23 - 00001501 _____ C:\Users\Andreas\Desktop\Just Cause 2 - Shortcut.lnk
2013-09-15 09:23 - 2013-09-15 09:23 - 00000220 _____ C:\Users\Andreas\Desktop\Just Cause 2.url
2013-09-15 09:21 - 2013-09-15 09:21 - 00008616 _____ C:\Users\Andreas\Downloads\igr (1).zip
2013-09-15 08:34 - 2012-12-31 12:51 - 00000000 ____D C:\users\Andreas
2013-09-15 07:14 - 2013-03-13 07:00 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-15 07:07 - 2013-09-15 07:07 - 00001235 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk
2013-09-15 07:07 - 2013-09-15 07:06 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.0
2013-09-15 07:04 - 2013-09-15 07:04 - 20198792 _____ (MiniTool Solution Ltd.                                      ) C:\Users\Andreas\Downloads\pwhe8.exe
2013-09-13 22:59 - 2012-05-08 12:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 22:59 - 2012-05-08 12:54 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 22:59 - 2011-08-06 18:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-13 22:34 - 2013-09-06 10:13 - 00055545 _____ C:\Windows\DirectX.log
2013-09-12 09:40 - 2013-09-12 09:40 - 00000000 ____D C:\Program Files (x86)\Actual Multiple Monitors
2013-09-12 09:40 - 2013-08-21 05:42 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Actual Tools
2013-09-12 09:40 - 2013-08-21 05:42 - 00000000 ____D C:\ProgramData\Actual Tools
2013-09-12 09:39 - 2013-09-12 09:38 - 09564880 _____ (Actual Tools                                                ) C:\Users\Andreas\Downloads\ammsetup.exe
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 __SHD C:\Users\Andreas\AppData\Roaming\Common
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 ____D C:\ProgramData\Binary Fortress Software
2013-09-12 09:30 - 2013-09-12 09:30 - 10137008 _____ (Binary Fortress Software                                    ) C:\Users\Andreas\Downloads\DisplayFusionSetup-5.1.exe
2013-09-12 08:50 - 2009-07-13 20:45 - 00443040 _____ C:\Windows\System32\FNTCACHE.DAT
2013-09-12 08:47 - 2013-09-05 04:37 - 00014676 _____ C:\Windows\PFRO.log
2013-09-12 05:44 - 2013-01-01 07:27 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-12 04:51 - 2013-09-20 04:04 - 00012005 _____ C:\Users\Andreas\AppData\Roaming\alsoft.ini
2013-09-12 04:35 - 2013-01-01 07:20 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-09-11 21:23 - 2013-08-13 02:24 - 00000000 ____D C:\Windows\System32\MRT
2013-09-11 21:19 - 2011-08-06 16:03 - 79143768 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-11 11:56 - 2011-09-17 07:03 - 00000958 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1726719542-1575880402-97123675-1001Core.job
2013-09-11 08:03 - 2013-05-12 11:10 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-09-11 04:46 - 2013-01-01 07:20 - 00000000 ____D C:\Program Files\McAfee
2013-09-11 04:43 - 2011-08-13 11:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-09-11 04:42 - 2013-01-25 11:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-11 04:42 - 2011-08-13 11:32 - 00000000 ____D C:\ProgramData\Skype
2013-09-09 02:38 - 2013-09-09 02:38 - 00000000 ____D C:\Users\Andreas\AppData\Local\Sniper Elite Nazi Zombie Army
2013-09-07 11:22 - 2013-09-07 11:22 - 00008616 _____ C:\Users\Andreas\Downloads\igr.zip
2013-09-07 11:11 - 2013-09-07 11:11 - 02095895 _____ C:\Users\Andreas\Downloads\Superman+Fly+Mod+Version+4.zip
2013-09-07 07:31 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2013-09-06 10:15 - 2013-09-06 10:15 - 01941528 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll
2013-09-06 10:15 - 2013-09-06 10:15 - 00000000 ____D C:\Users\Andreas\AppData\Local\Criterion Games
2013-09-06 10:13 - 2013-09-06 10:13 - 03823312 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_25.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03807440 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_27.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03544272 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_24.dll
2013-09-05 06:06 - 2013-09-05 05:29 - 00000000 ____D C:\Users\Andreas\Desktop\Backup
2013-09-05 05:49 - 2013-09-05 05:50 - 04170112 _____ C:\Users\Andreas\Desktop\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:49 - 2013-09-05 05:49 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:33 - 2013-09-05 05:33 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804.jar
2013-09-05 05:24 - 2013-09-05 05:24 - 01870868 _____ C:\Users\Andreas\Downloads\minecraftforge-universal-1.6.2-9.10.0.804.jar
2013-09-05 05:23 - 2013-09-05 05:23 - 05129877 _____ C:\Users\Andreas\Downloads\Flans Mod 1.6.2 Test Release 2.zip
2013-09-05 04:38 - 2013-09-05 04:38 - 00000000 _____ C:\Windows\setuperr.log
2013-09-05 04:36 - 2013-09-05 04:36 - 73297920 _____ C:\Windows\System32\config\SOFTWARE.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 02142208 _____ C:\Windows\System32\config\DEFAULT.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00102400 _____ C:\Windows\System32\config\SAM.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00028672 _____ C:\Windows\System32\config\SECURITY.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00000000 _____ C:\asc_rdflag
2013-09-04 22:48 - 2013-09-04 22:48 - 00000000 ____D C:\Users\Andreas\PycharmProjects
2013-09-04 22:46 - 2013-09-04 22:46 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\JetBrains
2013-09-04 22:45 - 2013-09-04 22:45 - 00000000 ____D C:\Users\Andreas\.PyCharm20
2013-09-04 22:44 - 2013-09-04 22:44 - 00000000 ____D C:\Program Files (x86)\JetBrains
2013-09-04 22:43 - 2013-09-04 22:43 - 131540128 _____ C:\Users\Andreas\Downloads\pycharm-2.7.3.exe
2013-09-04 05:21 - 2012-05-15 12:09 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-04 04:33 - 2013-09-02 04:11 - 00000000 ____D C:\Program Files (x86)\EVGA Precision X
2013-09-02 04:11 - 2013-09-02 04:11 - 00001088 _____ C:\Users\Andreas\Desktop\EVGA Precision X.lnk
2013-09-02 04:10 - 2013-09-02 04:10 - 15963736 _____ C:\Users\Andreas\Downloads\EVGAPrecisionX.zip
2013-08-31 02:14 - 2013-08-31 02:14 - 00000000 __SHD C:\ProgramData\DSS
2013-08-31 02:13 - 2013-03-13 06:59 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-08-31 02:04 - 2013-08-31 02:04 - 00000000 ____D C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-08-29 05:00 - 2013-08-22 11:23 - 00000000 ____D C:\Program Files\PC Monitor
2013-08-28 20:29 - 2013-08-28 20:29 - 00796672 _____ (Razer Inc) C:\Windows\SysWOW64\rzdevicedll.dll
2013-08-26 04:36 - 2009-07-13 21:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Andreas\AppData\Local\Temp\ammemb.dll
C:\Users\Andreas\AppData\Local\Temp\ammemb64.dll
C:\Users\Andreas\AppData\Local\Temp\i4jdel0.exe
C:\Users\Andreas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Andreas\AppData\Local\Temp\SkypeSetup.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2011-08-06 16:00] - [2011-02-24 22:19] - 0000000 ____A () 

C:\Windows\explorer.exe IS INFECTED. <===== ATTENTION!

C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info =========================== 

Percentage of memory in use: 10%
Total physical RAM: 8190.49 MB
Available physical RAM: 7333.9 MB
Total Pagefile: 8188.69 MB
Available Pagefile: 7327.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:303.33 GB) (Free:36.29 GB) NTFS
Drive d: () (Fixed) (Total:157.22 GB) (Free:154.71 GB) NTFS
Drive e: () (Fixed) (Total:5.11 GB) (Free:4.77 GB) NTFS
Drive g: (GRMCULXFRER_EN_DVD) (CDROM) (Total:3.09 GB) (Free:0 GB) UDF
Drive h: () (Removable) (Total:15.02 GB) (Free:15.02 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: FB5F70AD)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=303 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=162 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 15 GB) (Disk ID: 2FEA8A8F)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)


LastRegBack: 2013-09-11 11:59

==================== End Of Log ============================