Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-09-2013
Ran by SYSTEM on MININT-3FKA7KR on 23-09-2013 10:24:51
Running from H:\
Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
[b]ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.[/b]

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [PC Monitor Operations] - C:\Program Files\PC Monitor\pcmontask.exe [519640 2013-08-28] (MMSOFT Design Ltd.)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Winlogon: [Shell] explorer.exe [0 2011-02-24] ()
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1532992 2013-03-13] (McAfee, Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [606040 2013-08-15] (Razer Inc.)
HKU\Andreas\...\Run: [Advanced SystemCare 6] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit)
HKU\Andreas\...\Run: [Advanced SystemCare 7] - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2171712 2013-07-31] (IObit)
HKU\Andreas\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3551576 2013-09-18] (Electronic Arts)
HKU\Andreas\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-20] (Skype Technologies S.A.)
HKU\Andreas\...\Run: [Actual Multiple Monitors] - C:\Program Files (x86)\Actual Multiple Monitors\ActualMultipleMonitorsCenter.exe [1783088 2013-08-30] (Actual Tools)
BootExecute: autocheck pwNativeautocheck autochk * 
AlternateShell: 

==================== Services (Whitelisted) =================

S4 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
S4 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [896320 2013-07-28] (IObit)
S4 CPluginService; C:\Program Files\COMODO\PC TuneUP\CPluginService.exe [2282696 2013-02-07] (Comodo Security Solutions, Inc.)
S4 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2013-01-29] ()
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2143040 2013-07-24] (IObit)
S2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 mcmscsvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McNASvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.)
S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.)
S2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
S2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation)
S2 PlugPlay; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-05-04] ()
S4 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2012-10-05] (Wajam)
S2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] ()
S4 Hamachi2Svc; 

==================== Drivers (Whitelisted) ====================

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] ()
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-07-01] ()
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-07-01] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2013-07-01] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2013-07-01] ()
S3 RTCore64; C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-17] ()
S3 RTCore64; C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-17] ()
S3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39096 2013-08-20] (Razer Inc)
S0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] ()
S3 BCMH43XX; system32\DRIVERS\bcmwlhigh664.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 mfeavfk01; No ImagePath
S5 mountmgr; C:\Windows\System32\Drivers\mountmgr.sys [94592 2010-11-20] (Microsoft Corporation)
S3 NPF; system32\DRIVERS\npf.sys [x]
S5 nvUpdatusService; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2155296 2013-08-27] (NVIDIA Corporation)
S5 PC Monitor; C:\Program Files\PC Monitor\PCMonitorSrv.exe [581592 2013-08-28] ()
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

========================== Drivers MD5 =======================

C:\Windows\System32\DRIVERS\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 1C7857B62DE5994A75B054A9FD4C3825
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\athrx.sys E857EEE6B92AAA473EBB3465ADD8F7E7
C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\System32\drivers\cfwids.sys D2B3252AD4EB499C935A56467997AA3C
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys AAFCB52FE0037207FB6FBEA070D25EFE
C:\Windows\system32\drivers\compbatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys AF2E16242AA723F68F461B6EAE2EAD3D
C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hamachi.sys 1E6438D4EA6E1174A3B3B1EDC4DE660B
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\System32\drivers\HipShieldK.sys A894FB2CAE6A29F5D9C8EDA47B074623
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\RTKVHD64.sys D739148367AAE1DA0C12160DE141ECED
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 97A7070AEA4C058B6418519E869A63B4
C:\Windows\System32\Drivers\ksecpkg.sys 7EFB9333E4ECCE6AE4AE9D777D9E553E
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ladfGSCamd64.sys 305BB2AC00D46542E0A653AB63F4ABB1
C:\Windows\System32\DRIVERS\ladfGSRamd64.sys 28CDDC7D478A6313F55077416DCBD0DE
C:\Windows\System32\drivers\LGBusEnum.sys FA529FB35694C24BF98A9EF67C1CD9D0
C:\Windows\System32\drivers\LGVirHid.sys 94B29CE153765E768F004FB3440BE2B0
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\mfeapfk.sys B1720E97FABBDF7D30B36DAF19C3DEE8
C:\Windows\System32\drivers\mfeavfk.sys 113F1534B80D65DFDCA660F19967A3B7
C:\Windows\System32\drivers\mfefirek.sys 56107E9145C7DAC812D8F281743EC0E5
C:\Windows\System32\drivers\mfehidk.sys EF0F85EDBDF6C0AB467E88E0CEE2B346
C:\Windows\System32\drivers\mferkdet.sys 6E3A46BF6CBB80450CC24F80FE03ED5A
C:\Windows\System32\drivers\mfewfpk.sys 2802D09F1B6ED502237539563F3C4992
C:\Windows\System32\DRIVERS\MOBK.sys 3800C23D0D90C59AAFCDEFDC82B5C4AF
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\drivers\nvhda64v.sys 554964B900AE2954B8B589B6287034AC
C:\Windows\System32\DRIVERS\nvlddmkm.sys 537045E3B550F9508DE2D646ED782BA9
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\System32\drivers\nvvad64v.sys 220B120EF4C36B4A3E23FAEC91E2FCE3
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\System32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\pwdrvio.sys 6DAD398D60B9F6BAF0D3C53184C3CA4D
C:\Windows\system32\pwdrvio.sys 6DAD398D60B9F6BAF0D3C53184C3CA4D
C:\Windows\system32\pwdspio.sys FE194DD23B549C1C397EB1102EC84EDC
C:\Windows\system32\pwdspio.sys FE194DD23B549C1C397EB1102EC84EDC
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Program Files (x86)\EVGA Precision X\RTCore64.sys 1440C0DA81C700BD61142BC569477D81
C:\Program Files (x86)\EVGA Precision X\RTCore64.sys 1440C0DA81C700BD61142BC569477D81
C:\Windows\System32\DRIVERS\Rt64win7.sys 130DD683DCC902F47A4AC35201D07E2F
C:\Windows\System32\DRIVERS\rzendpt.sys FC0E21FC29EE09C694F32A9FA41100AD
C:\Windows\System32\DRIVERS\rzudd.sys FD77BEF30136A74D0C88F3D718FDF28C
C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\Drivers\SmartDefragDriver.sys DD0443BC6CC78A19FD399817F8C51401
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\SysWow64\speedfan.sys 0FFE35F0B0CD5A324BBE22F02569AE3B
C:\Windows\SysWow64\speedfan.sys 0FFE35F0B0CD5A324BBE22F02569AE3B
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\synth3dvsc.sys C3A39C4079305480972D29C44B868C78
C:\Windows\System32\drivers\tcpip.sys DB74544B75566C974815E79A62433F29
C:\Windows\System32\DRIVERS\tcpip.sys DB74544B75566C974815E79A62433F29
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\system32\drivers\terminpt.sys EF4469AB69EB15E5D3754E6AEAFBCD3D
C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
C:\Windows\System32\drivers\tsusbflt.sys 17C6B51CBCCDED95B3CC14E22791F85E
C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07
C:\Windows\System32\drivers\tsusbhub.sys E1748D04AE40118B62BC18AC86032192
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
C:\Windows\System32\drivers\usbaudio.sys 82E8F44688E6FAC57B5B7C6FC7ADBC2A
C:\Windows\System32\DRIVERS\usbccgp.sys 6F1A3157A1C89435352CEB543CDB359C
C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbehci.sys C025055FE7B87701EB042095DF1A2D7B
C:\Windows\System32\DRIVERS\usbhub.sys 287C6C9410B111B68B52CA298F7B8C24
C:\Windows\system32\drivers\usbohci.sys 9840FC418B4CBD632D3D0A667A725C31
C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\System32\DRIVERS\usbuhci.sys 62069A34518BCF9C1FD9E74B3F6DB7CD
C:\Windows\System32\DRIVERS\VClone.sys FD911873C0BB6945FA38C16E9A2B58F9
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\system32\drivers\vmbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 442783E2CB0DA19873B7A63833FF4CB4
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWow64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-23 09:46 - 2013-09-23 09:46 - 00000000 ____D C:\FRST
2013-09-20 04:55 - 2013-09-20 04:55 - 00001268 _____ C:\Program Files (x86)\The Elder Scrolls V Skyrim - Shortcut.lnk
2013-09-20 04:07 - 2013-09-20 04:07 - 00466456 _____ (Creative Labs) C:\Windows\System32\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\System32\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-09-20 04:04 - 2013-09-20 04:22 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\FEZ
2013-09-20 04:04 - 2013-09-12 04:51 - 00012005 _____ C:\Users\Andreas\AppData\Roaming\alsoft.ini
2013-09-18 04:52 - 2013-09-18 04:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-18 04:52 - 2013-08-20 05:33 - 00039200 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2013-09-18 04:52 - 2013-08-20 05:32 - 00029984 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll
2013-09-18 04:52 - 2013-08-20 05:32 - 00028448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-09-18 04:52 - 2013-06-17 06:10 - 00000000 ____D C:\Users\UpdatusUser\Documents\Visual Studio 2010
2013-09-18 04:52 - 2013-04-25 05:57 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2013-09-18 04:52 - 2013-01-02 08:32 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-09-18 04:50 - 2013-09-18 04:50 - 22321072 _____ (NVIDIA Corporation) C:\Users\Andreas\Downloads\GeForce_Experience_v1.6.1.0.exe
2013-09-17 08:37 - 2013-09-17 08:38 - 01322784 _____ C:\Users\Andreas\Downloads\RayGun's+MTA+Powerrun+77.rar
2013-09-17 08:05 - 2013-09-17 08:05 - 00010763 _____ C:\Users\Andreas\Downloads\Unlimited+Ammo.zip
2013-09-17 08:04 - 2013-09-17 08:04 - 00008616 _____ C:\Users\Andreas\Downloads\igr (2).zip
2013-09-17 07:48 - 2013-09-17 07:48 - 00971989 _____ C:\Users\Andreas\Downloads\Super+Car+Mod.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams (1).rar
2013-09-17 06:27 - 2013-09-17 06:28 - 00062602 _____ C:\Windows\DPINST.LOG
2013-09-15 09:23 - 2013-09-15 09:23 - 00001501 _____ C:\Users\Andreas\Desktop\Just Cause 2 - Shortcut.lnk
2013-09-15 09:23 - 2013-09-15 09:23 - 00000220 _____ C:\Users\Andreas\Desktop\Just Cause 2.url
2013-09-15 09:21 - 2013-09-15 09:21 - 00008616 _____ C:\Users\Andreas\Downloads\igr (1).zip
2013-09-15 07:51 - 2013-09-20 05:20 - 00002388 _____ C:\Windows\PWCMDLST.BAK
2013-09-15 07:07 - 2013-09-15 07:07 - 00001235 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk
2013-09-15 07:07 - 2013-07-01 00:25 - 03151040 _____ C:\Windows\System32\pwNative.exe
2013-09-15 07:07 - 2013-07-01 00:25 - 00019032 ____N C:\Windows\System32\pwdrvio.sys
2013-09-15 07:07 - 2013-07-01 00:25 - 00012384 ____N C:\Windows\System32\pwdspio.sys
2013-09-15 07:06 - 2013-09-15 07:07 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.0
2013-09-15 07:04 - 2013-09-15 07:04 - 20198792 _____ (MiniTool Solution Ltd.                                      ) C:\Users\Andreas\Downloads\pwhe8.exe
2013-09-12 09:40 - 2013-09-12 09:40 - 00000000 ____D C:\Program Files (x86)\Actual Multiple Monitors
2013-09-12 09:38 - 2013-09-12 09:39 - 09564880 _____ (Actual Tools                                                ) C:\Users\Andreas\Downloads\ammsetup.exe
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 __SHD C:\Users\Andreas\AppData\Roaming\Common
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 ____D C:\ProgramData\Binary Fortress Software
2013-09-12 09:30 - 2013-09-12 09:30 - 10137008 _____ (Binary Fortress Software                                    ) C:\Users\Andreas\Downloads\DisplayFusionSetup-5.1.exe
2013-09-12 05:45 - 2013-08-09 21:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-12 05:45 - 2013-08-09 21:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-12 05:45 - 2013-08-09 21:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-12 05:45 - 2013-08-09 21:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-12 05:45 - 2013-08-09 21:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-12 05:45 - 2013-08-09 21:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-09-12 05:45 - 2013-08-09 21:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-09-12 05:45 - 2013-08-09 19:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 05:45 - 2013-08-09 19:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 05:45 - 2013-08-09 19:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 05:45 - 2013-08-09 19:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-09-12 05:45 - 2013-08-09 19:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 05:45 - 2013-08-09 18:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-09-12 05:45 - 2013-08-09 18:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 21:20 - 2013-08-07 17:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-09-11 21:20 - 2013-08-04 18:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys
2013-09-11 21:20 - 2013-08-01 18:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-09-11 21:20 - 2013-08-01 18:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-09-11 21:20 - 2013-08-01 18:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-09-11 21:20 - 2013-08-01 18:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-09-11 21:20 - 2013-08-01 18:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-09-11 21:20 - 2013-08-01 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-09-11 21:20 - 2013-08-01 18:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-09-11 21:20 - 2013-08-01 18:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-09-11 21:20 - 2013-08-01 18:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 21:20 - 2013-08-01 17:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 21:20 - 2013-08-01 17:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 21:20 - 2013-08-01 17:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 21:20 - 2013-08-01 17:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 21:20 - 2013-08-01 17:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 17:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-09-11 21:20 - 2013-08-01 16:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-09-11 21:20 - 2013-08-01 16:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 21:20 - 2013-08-01 16:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 21:20 - 2013-08-01 16:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 21:20 - 2013-08-01 16:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 21:20 - 2013-08-01 16:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 16:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 16:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 21:20 - 2013-08-01 16:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 21:20 - 2013-07-25 18:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-09-11 21:20 - 2013-07-25 17:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 21:19 - 2013-07-25 18:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-09-11 21:19 - 2013-07-25 17:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 02:38 - 2013-09-09 02:38 - 00000000 ____D C:\Users\Andreas\AppData\Local\Sniper Elite Nazi Zombie Army
2013-09-07 11:22 - 2013-09-07 11:22 - 00008616 _____ C:\Users\Andreas\Downloads\igr.zip
2013-09-07 11:11 - 2013-09-07 11:11 - 02095895 _____ C:\Users\Andreas\Downloads\Superman+Fly+Mod+Version+4.zip
2013-09-06 10:15 - 2013-09-06 10:15 - 01941528 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll
2013-09-06 10:15 - 2013-09-06 10:15 - 00000000 ____D C:\Users\Andreas\AppData\Local\Criterion Games
2013-09-06 10:13 - 2013-09-13 22:34 - 00055545 _____ C:\Windows\DirectX.log
2013-09-06 10:13 - 2013-09-06 10:13 - 03823312 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_25.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03807440 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_27.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03544272 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_24.dll
2013-09-05 05:50 - 2013-09-05 05:49 - 04170112 _____ C:\Users\Andreas\Desktop\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:49 - 2013-09-05 05:49 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:33 - 2013-09-05 05:33 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804.jar
2013-09-05 05:29 - 2013-09-05 06:06 - 00000000 ____D C:\Users\Andreas\Desktop\Backup
2013-09-05 05:24 - 2013-09-05 05:24 - 01870868 _____ C:\Users\Andreas\Downloads\minecraftforge-universal-1.6.2-9.10.0.804.jar
2013-09-05 05:23 - 2013-09-05 05:23 - 05129877 _____ C:\Users\Andreas\Downloads\Flans Mod 1.6.2 Test Release 2.zip
2013-09-05 04:38 - 2013-09-20 06:25 - 00005843 _____ C:\Windows\setupact.log
2013-09-05 04:38 - 2013-09-05 04:38 - 00000000 _____ C:\Windows\setuperr.log
2013-09-05 04:37 - 2013-09-12 08:47 - 00014676 _____ C:\Windows\PFRO.log
2013-09-05 04:36 - 2013-09-05 04:36 - 73297920 _____ C:\Windows\System32\config\SOFTWARE.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 02142208 _____ C:\Windows\System32\config\DEFAULT.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00102400 _____ C:\Windows\System32\config\SAM.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00028672 _____ C:\Windows\System32\config\SECURITY.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00000000 _____ C:\asc_rdflag
2013-09-04 22:48 - 2013-09-04 22:48 - 00000000 ____D C:\Users\Andreas\PycharmProjects
2013-09-04 22:46 - 2013-09-04 22:46 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\JetBrains
2013-09-04 22:45 - 2013-09-04 22:45 - 00000000 ____D C:\Users\Andreas\.PyCharm20
2013-09-04 22:44 - 2013-09-04 22:44 - 00000000 ____D C:\Program Files (x86)\JetBrains
2013-09-04 22:43 - 2013-09-04 22:43 - 131540128 _____ C:\Users\Andreas\Downloads\pycharm-2.7.3.exe
2013-09-02 04:11 - 2013-09-04 04:33 - 00000000 ____D C:\Program Files (x86)\EVGA Precision X
2013-09-02 04:11 - 2013-09-02 04:11 - 00001088 _____ C:\Users\Andreas\Desktop\EVGA Precision X.lnk
2013-09-02 04:10 - 2013-09-02 04:10 - 15963736 _____ C:\Users\Andreas\Downloads\EVGAPrecisionX.zip
2013-08-31 02:14 - 2013-08-31 02:14 - 00000000 __SHD C:\ProgramData\DSS
2013-08-31 02:04 - 2013-08-31 02:04 - 00000000 ____D C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-08-28 20:29 - 2013-08-28 20:29 - 00796672 _____ (Razer Inc) C:\Windows\SysWOW64\rzdevicedll.dll

==================== One Month Modified Files and Folders =======

2013-09-23 09:46 - 2013-09-23 09:46 - 00000000 ____D C:\FRST
2013-09-23 09:14 - 2009-07-13 15:42 - 20268032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imageres.dll
2013-09-23 09:10 - 2011-08-11 03:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\xmllite.dll
2013-09-23 09:09 - 2013-08-13 23:29 - 01217024 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2013-09-23 09:07 - 2009-07-13 15:57 - 20268032 _____ (Microsoft Corporation) C:\Windows\System32\imageres.dll
2013-09-22 22:25 - 2013-08-13 23:28 - 01910208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-09-20 08:45 - 2013-07-21 08:55 - 00000300 _____ C:\Windows\Tasks\Driver Booster Startup.job
2013-09-20 08:45 - 2011-08-06 09:47 - 01291470 _____ C:\Windows\WindowsUpdate.log
2013-09-20 08:30 - 2012-12-31 11:02 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-20 08:12 - 2012-05-08 12:54 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-20 07:59 - 2012-05-08 12:54 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 07:56 - 2011-09-17 07:03 - 00001010 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1726719542-1575880402-97123675-1001UA.job
2013-09-20 06:42 - 2012-12-31 13:36 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Skype
2013-09-20 06:37 - 2013-05-03 09:17 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-20 06:37 - 2012-05-08 12:54 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-20 06:32 - 2009-07-13 20:45 - 00023904 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 06:32 - 2009-07-13 20:45 - 00023904 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 06:25 - 2013-09-05 04:38 - 00005843 _____ C:\Windows\setupact.log
2013-09-20 06:25 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-20 06:24 - 2011-08-06 10:07 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-20 05:20 - 2013-09-15 07:51 - 00002388 _____ C:\Windows\PWCMDLST.BAK
2013-09-20 04:55 - 2013-09-20 04:55 - 00001268 _____ C:\Program Files (x86)\The Elder Scrolls V Skyrim - Shortcut.lnk
2013-09-20 04:42 - 2013-05-03 10:44 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-09-20 04:42 - 2013-01-01 00:08 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-09-20 04:41 - 2012-12-31 14:10 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-09-20 04:22 - 2013-09-20 04:04 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\FEZ
2013-09-20 04:07 - 2013-09-20 04:07 - 00466456 _____ (Creative Labs) C:\Windows\System32\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\System32\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-09-20 04:07 - 2013-09-20 04:07 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-09-20 04:05 - 2009-07-13 21:13 - 00785060 _____ C:\Windows\System32\PerfStringBackup.INI
2013-09-20 03:34 - 2013-01-01 07:47 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{6EF4FA9F-22D6-4447-8CC3-A8329DE5A362}
2013-09-18 05:47 - 2012-12-31 15:37 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\.minecraft
2013-09-18 04:54 - 2013-04-23 04:31 - 00000000 ____D C:\Users\Andreas\AppData\Local\NVIDIA
2013-09-18 04:53 - 2011-08-06 10:07 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-18 04:53 - 2011-08-06 10:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-18 04:53 - 2011-08-06 10:06 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-18 04:52 - 2013-09-18 04:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-09-18 04:50 - 2013-09-18 04:50 - 22321072 _____ (NVIDIA Corporation) C:\Users\Andreas\Downloads\GeForce_Experience_v1.6.1.0.exe
2013-09-17 09:53 - 2013-01-08 08:06 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Spotify
2013-09-17 08:38 - 2013-09-17 08:37 - 01322784 _____ C:\Users\Andreas\Downloads\RayGun's+MTA+Powerrun+77.rar
2013-09-17 08:25 - 2013-01-08 08:06 - 00000000 ____D C:\Users\Andreas\AppData\Local\Spotify
2013-09-17 08:05 - 2013-09-17 08:05 - 00010763 _____ C:\Users\Andreas\Downloads\Unlimited+Ammo.zip
2013-09-17 08:04 - 2013-09-17 08:04 - 00008616 _____ C:\Users\Andreas\Downloads\igr (2).zip
2013-09-17 07:48 - 2013-09-17 07:48 - 00971989 _____ C:\Users\Andreas\Downloads\Super+Car+Mod.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams.rar
2013-09-17 07:47 - 2013-09-17 07:47 - 00000775 _____ C:\Users\Andreas\Downloads\grapplingparams (1).rar
2013-09-17 06:28 - 2013-09-17 06:27 - 00062602 _____ C:\Windows\DPINST.LOG
2013-09-15 09:23 - 2013-09-15 09:23 - 00001501 _____ C:\Users\Andreas\Desktop\Just Cause 2 - Shortcut.lnk
2013-09-15 09:23 - 2013-09-15 09:23 - 00000220 _____ C:\Users\Andreas\Desktop\Just Cause 2.url
2013-09-15 09:21 - 2013-09-15 09:21 - 00008616 _____ C:\Users\Andreas\Downloads\igr (1).zip
2013-09-15 08:34 - 2012-12-31 12:51 - 00000000 ____D C:\users\Andreas
2013-09-15 07:14 - 2013-03-13 07:00 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-15 07:07 - 2013-09-15 07:07 - 00001235 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk
2013-09-15 07:07 - 2013-09-15 07:06 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.0
2013-09-15 07:04 - 2013-09-15 07:04 - 20198792 _____ (MiniTool Solution Ltd.                                      ) C:\Users\Andreas\Downloads\pwhe8.exe
2013-09-13 22:59 - 2012-05-08 12:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 22:59 - 2012-05-08 12:54 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 22:59 - 2011-08-06 18:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-13 22:34 - 2013-09-06 10:13 - 00055545 _____ C:\Windows\DirectX.log
2013-09-12 09:40 - 2013-09-12 09:40 - 00000000 ____D C:\Program Files (x86)\Actual Multiple Monitors
2013-09-12 09:40 - 2013-08-21 05:42 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Actual Tools
2013-09-12 09:40 - 2013-08-21 05:42 - 00000000 ____D C:\ProgramData\Actual Tools
2013-09-12 09:39 - 2013-09-12 09:38 - 09564880 _____ (Actual Tools                                                ) C:\Users\Andreas\Downloads\ammsetup.exe
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 __SHD C:\Users\Andreas\AppData\Roaming\Common
2013-09-12 09:31 - 2013-09-12 09:31 - 00000000 ____D C:\ProgramData\Binary Fortress Software
2013-09-12 09:30 - 2013-09-12 09:30 - 10137008 _____ (Binary Fortress Software                                    ) C:\Users\Andreas\Downloads\DisplayFusionSetup-5.1.exe
2013-09-12 08:50 - 2009-07-13 20:45 - 00443040 _____ C:\Windows\System32\FNTCACHE.DAT
2013-09-12 08:47 - 2013-09-05 04:37 - 00014676 _____ C:\Windows\PFRO.log
2013-09-12 05:44 - 2013-01-01 07:27 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-12 04:51 - 2013-09-20 04:04 - 00012005 _____ C:\Users\Andreas\AppData\Roaming\alsoft.ini
2013-09-12 04:35 - 2013-01-01 07:20 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-09-11 21:23 - 2013-08-13 02:24 - 00000000 ____D C:\Windows\System32\MRT
2013-09-11 21:19 - 2011-08-06 16:03 - 79143768 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-11 11:56 - 2011-09-17 07:03 - 00000958 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1726719542-1575880402-97123675-1001Core.job
2013-09-11 08:03 - 2013-05-12 11:10 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-09-11 04:46 - 2013-01-01 07:20 - 00000000 ____D C:\Program Files\McAfee
2013-09-11 04:43 - 2011-08-13 11:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-09-11 04:42 - 2013-01-25 11:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-11 04:42 - 2011-08-13 11:32 - 00000000 ____D C:\ProgramData\Skype
2013-09-09 02:38 - 2013-09-09 02:38 - 00000000 ____D C:\Users\Andreas\AppData\Local\Sniper Elite Nazi Zombie Army
2013-09-07 11:22 - 2013-09-07 11:22 - 00008616 _____ C:\Users\Andreas\Downloads\igr.zip
2013-09-07 11:11 - 2013-09-07 11:11 - 02095895 _____ C:\Users\Andreas\Downloads\Superman+Fly+Mod+Version+4.zip
2013-09-07 07:31 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2013-09-06 10:15 - 2013-09-06 10:15 - 01941528 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll
2013-09-06 10:15 - 2013-09-06 10:15 - 00000000 ____D C:\Users\Andreas\AppData\Local\Criterion Games
2013-09-06 10:13 - 2013-09-06 10:13 - 03823312 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_25.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03807440 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_27.dll
2013-09-06 10:13 - 2013-09-06 10:13 - 03544272 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_24.dll
2013-09-05 06:06 - 2013-09-05 05:29 - 00000000 ____D C:\Users\Andreas\Desktop\Backup
2013-09-05 05:49 - 2013-09-05 05:50 - 04170112 _____ C:\Users\Andreas\Desktop\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:49 - 2013-09-05 05:49 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804 (1).jar
2013-09-05 05:33 - 2013-09-05 05:33 - 04170112 _____ C:\Users\Andreas\Downloads\minecraftforge-installer-1.6.2-9.10.0.804.jar
2013-09-05 05:24 - 2013-09-05 05:24 - 01870868 _____ C:\Users\Andreas\Downloads\minecraftforge-universal-1.6.2-9.10.0.804.jar
2013-09-05 05:23 - 2013-09-05 05:23 - 05129877 _____ C:\Users\Andreas\Downloads\Flans Mod 1.6.2 Test Release 2.zip
2013-09-05 04:38 - 2013-09-05 04:38 - 00000000 _____ C:\Windows\setuperr.log
2013-09-05 04:36 - 2013-09-05 04:36 - 73297920 _____ C:\Windows\System32\config\SOFTWARE.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 02142208 _____ C:\Windows\System32\config\DEFAULT.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00102400 _____ C:\Windows\System32\config\SAM.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00028672 _____ C:\Windows\System32\config\SECURITY.iodefrag.bak
2013-09-05 04:36 - 2013-09-05 04:36 - 00000000 _____ C:\asc_rdflag
2013-09-04 22:48 - 2013-09-04 22:48 - 00000000 ____D C:\Users\Andreas\PycharmProjects
2013-09-04 22:46 - 2013-09-04 22:46 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\JetBrains
2013-09-04 22:45 - 2013-09-04 22:45 - 00000000 ____D C:\Users\Andreas\.PyCharm20
2013-09-04 22:44 - 2013-09-04 22:44 - 00000000 ____D C:\Program Files (x86)\JetBrains
2013-09-04 22:43 - 2013-09-04 22:43 - 131540128 _____ C:\Users\Andreas\Downloads\pycharm-2.7.3.exe
2013-09-04 05:21 - 2012-05-15 12:09 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-04 04:33 - 2013-09-02 04:11 - 00000000 ____D C:\Program Files (x86)\EVGA Precision X
2013-09-02 04:11 - 2013-09-02 04:11 - 00001088 _____ C:\Users\Andreas\Desktop\EVGA Precision X.lnk
2013-09-02 04:10 - 2013-09-02 04:10 - 15963736 _____ C:\Users\Andreas\Downloads\EVGAPrecisionX.zip
2013-08-31 02:14 - 2013-08-31 02:14 - 00000000 __SHD C:\ProgramData\DSS
2013-08-31 02:13 - 2013-03-13 06:59 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-08-31 02:04 - 2013-08-31 02:04 - 00000000 ____D C:\Windows\1C4551A64743409391E41477CD655043.TMP
2013-08-29 05:00 - 2013-08-22 11:23 - 00000000 ____D C:\Program Files\PC Monitor
2013-08-28 20:29 - 2013-08-28 20:29 - 00796672 _____ (Razer Inc) C:\Windows\SysWOW64\rzdevicedll.dll
2013-08-26 04:36 - 2009-07-13 21:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Andreas\AppData\Local\Temp\ammemb.dll
C:\Users\Andreas\AppData\Local\Temp\ammemb64.dll
C:\Users\Andreas\AppData\Local\Temp\i4jdel0.exe
C:\Users\Andreas\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Andreas\AppData\Local\Temp\SkypeSetup.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2011-08-06 16:00] - [2011-02-24 22:19] - 0000000 ____A () 

C:\Windows\explorer.exe IS INFECTED. <===== ATTENTION!

C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== BCD ================================

Windows Boot Manager
--------------------
identifier              {bootmgr}
device                  partition=Y:
path                    \bootmgr
description             Windows Boot Manager
locale                  en-US
inherit                 {globalsettings}
default                 {default}
resumeobject            {6c7bf0d3-c0a7-11e0-8766-d23f9512a83f}
displayorder            {default}
toolsdisplayorder       {memdiag}
timeout                 30

Windows Boot Loader
-------------------
identifier              {default}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Windows 7
locale                  en-US
inherit                 {bootloadersettings}
osdevice                partition=C:
systemroot              \Windows
resumeobject            {6c7bf0d3-c0a7-11e0-8766-d23f9512a83f}
nx                      OptIn

Windows Boot Loader
-------------------
identifier              {6c7bf0d5-c0a7-11e0-8766-d23f9512a83f}
device                  ramdisk=[C:]\Recovery\6c7bf0d5-c0a7-11e0-8766-d23f9512a83f\Winre.wim,{6c7bf0d6-c0a7-11e0-8766-d23f9512a83f}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment (recovered) 
locale                  
osdevice                ramdisk=[C:]\Recovery\6c7bf0d5-c0a7-11e0-8766-d23f9512a83f\Winre.wim,{6c7bf0d6-c0a7-11e0-8766-d23f9512a83f}
systemroot              \windows
winpe                   Yes

Resume from Hibernate
---------------------
identifier              {6c7bf0d3-c0a7-11e0-8766-d23f9512a83f}
device                  partition=C:
path                    \Windows\system32\winresume.exe
description             Windows Resume Application
locale                  en-US
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Windows Memory Tester
---------------------
identifier              {memdiag}
device                  partition=Y:
path                    \boot\memtest.exe
description             Windows Memory Diagnostic
locale                  en-US
inherit                 {globalsettings}
badmemoryaccess         Yes

EMS Settings
------------
identifier              {emssettings}
bootems                 Yes

Debugger Settings
-----------------
identifier              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

RAM Defects
-----------
identifier              {badmemory}

Global Settings
---------------
identifier              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Boot Loader Settings
--------------------
identifier              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Hypervisor Settings
-------------------
identifier              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Resume Loader Settings
----------------------
identifier              {resumeloadersettings}
inherit                 {globalsettings}

Device options
--------------
identifier              {6c7bf0d6-c0a7-11e0-8766-d23f9512a83f}
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\6c7bf0d5-c0a7-11e0-8766-d23f9512a83f\boot.sdi


==================== Memory info =========================== 

Percentage of memory in use: 12%
Total physical RAM: 8190.49 MB
Available physical RAM: 7153.56 MB
Total Pagefile: 8188.69 MB
Available Pagefile: 7249.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.89 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:303.33 GB) (Free:36.29 GB) NTFS
Drive d: () (Fixed) (Total:157.22 GB) (Free:154.71 GB) NTFS
Drive e: () (Fixed) (Total:5.11 GB) (Free:4.77 GB) NTFS
Drive g: (GRMCULXFRER_EN_DVD) (CDROM) (Total:3.09 GB) (Free:0 GB) UDF
Drive h: () (Removable) (Total:15.02 GB) (Free:15.02 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: FB5F70AD)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=303 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=162 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 15 GB) (Disk ID: 2FEA8A8F)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)


LastRegBack: 2013-09-11 11:59

==================== End Of Log ============================