Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2020 Ran by gordon gillesby (administrator) on SUWM-ZEKER (MSI MS-7522) (16-12-2020 15:17:53) Running from h:\Users\gordon gillesby\Desktop\fightback Loaded Profiles: gordon gillesby Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States) Default browser not detected! Boot Mode: Safe Mode (with Networking) ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Nikolaos Bozinis -> ZabKat) C:\Program Files\zabkat\xplorer2_ult\xplorer2_64.exe (SUPERAntiSpyware.com -> SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe ==================== Registry (Whitelisted) =================== ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0202D977-D853-489A-B6A0-0BF26F1C643E} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1706496 2020-06-17] () [File not signed] Task: {03AFC7FA-D085-4093-A610-72FAEDCE9504} - System32\Tasks\Opera scheduled Autoupdate 1470598498 => H:\drpbx\Dropbox\Opera\launcher.exe [1529880 2020-11-25] (Opera Software AS -> Opera Software) Task: {060AE614-F508-418B-A2DB-78E9A20ABCA7} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation) Task: {2299D8AD-ECDB-4A0A-8194-1371B12F4F30} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation) Task: {35A10BD4-F347-4856-89D4-F8AE5F937319} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation) Task: {3D47CE17-D707-4B9E-A27E-5036099426E9} - System32\Tasks\SUPERAntiSpyware Scheduled Task 84e34cf0-7d54-4b25-bad7-e4c96999aec2 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [49944 2013-11-07] (SUPERAntiSpyware.com -> SUPERAdBlocker.com) -> "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" /TASK:84e34cf0-7d54-4b25-bad7-e4c96999aec2 Task: {3D7F18D8-40BE-4E6A-8EC1-82646DDA2D3D} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f h:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log Task: {3DCA6CF4-7BD6-4A00-97D8-D61B94CCDDD6} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f h:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {498DD82C-D6E1-4248-AD9C-9B2F2FBFE3BA} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-128045027-2202696068-637555015-1000Core => h:\Users\gordon gillesby\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-08] (Dropbox, Inc -> Dropbox, Inc.) Task: {54106CD2-3D62-4527-9A06-FC29565FE053} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation) Task: {5E2A4E19-0BDD-4249-803C-26F726B48E52} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation) Task: {65BEDA36-E246-48E4-86FF-A2B596A18201} - System32\Tasks\{C262A551-78C3-48CA-9246-A09D5EE9A079} => C:\Windows\system32\pcalua.exe -a H:\Users\GORDON~1\AppData\Local\Temp\jre-8u121-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION Task: {6B52472F-D1C5-44F1-A6D7-541D7D1E13EE} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation) Task: {709F4F78-CCB2-4E08-8467-DC76395C5C95} - System32\Tasks\{12854B82-845F-4A2E-8DFA-B5FCF08D390B} => C:\Windows\system32\pcalua.exe -a H:\Users\GORDON~1\AppData\Local\Temp\jre-8u91-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION Task: {7698BB43-8A38-4C14-9817-1AEE22A0018D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-128045027-2202696068-637555015-1000UA => h:\Users\gordon gillesby\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-08] (Dropbox, Inc -> Dropbox, Inc.) Task: {899FAD9E-F4EE-47E5-90A9-2EF7B8A64EDE} - System32\Tasks\CorelUpdateHelperTask-507BAD98598D2DA640EFDDC4298A381D => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [1662200 2019-02-27] (Corel Corporation -> Corel Corporation) Task: {944F5ABD-9754-4E03-A39A-91097D0B83F7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.) Task: {AFC0B7AE-0741-40DB-92C6-58BA2FB7BFA5} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation) Task: {BC5B8AC6-9A9E-4E00-BD71-3FF4AF10854E} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation) Task: {BD242356-E23F-4D1A-851F-6D83D3B86B21} - System32\Tasks\{D733A3C6-4EF6-4062-B290-CBEF2F27033C} => C:\Windows\system32\pcalua.exe -a "M:\0 - TBIoS\IKM\(purchased)\SampleTank_2_XT\Install SampleTank 2 XT.exe" Task: {C2E9F79A-1B6B-4B30-9032-83AE3FE974EE} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [1662200 2019-02-27] (Corel Corporation -> Corel Corporation) Task: {D95D40D8-4FBC-4432-8EDC-4CD14145F187} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_453_Plugin.exe [1502776 2020-11-14] (Adobe Inc. -> Adobe) Task: {DB3933E1-A852-4DC8-A402-C1FE10E707D2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation) Task: {E6061670-E242-4F22-A5D4-40DB6339D2B6} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_pepper.exe [1452600 2019-08-14] (Adobe Inc. -> Adobe) Task: {F877F2EB-A561-4546-AD4F-235E24191098} - System32\Tasks\Tweaking.com - Registry Backup => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe [1471384 2016-11-18] (Tweaking LLC -> Tweaking.com) Task: {F877F37F-C918-4704-A781-8D0D07074A2C} - System32\Tasks\Opera scheduled Autoupdate 1431536379 => H:\drpbx\Dropbox\Opera\launcher.exe [1529880 2020-11-25] (Opera Software AS -> Opera Software) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-128045027-2202696068-637555015-1000Core.job => h:\Users\gordon gillesby\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-128045027-2202696068-637555015-1000UA.job => h:\Users\gordon gillesby\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 84e34cf0-7d54-4b25-bad7-e4c96999aec2.job => C:\Program Files\SUPERAntiSpyware\SASTask.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{05790225-BC12-441D-A1C6-BA6C2D022BD1}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{639FB995-D22D-4A5B-85DD-C812DEF10FBC}: [DhcpNameServer] 192.168.0.1 HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION FireFox: ======== FF ProfilePath: h:\Users\gordon gillesby\AppData\Roaming\Mozilla\Firefox\Profiles\cqow5bny.default [2020-12-13] FF Extension: (LastPass) - h:\Users\gordon gillesby\AppData\Roaming\Mozilla\Firefox\Profiles\cqow5bny.default\Extensions\support@lastpass.com [2020-12-13] [Legacy] FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2019-02-15] [not signed] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_453.dll [2020-11-14] (Adobe Inc. -> ) FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.) FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2018-04-22] (LastPass (Marvasol Inc) -> LastPass) FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_453.dll [2020-11-14] (Adobe Inc. -> ) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google Inc -> Google, Inc.) FF Plugin-x32: @ilok.com/iLokHelper,version=3.1.0.7 -> C:\Program Files (x86)\PACE Anti-Piracy\iLok\NPPaceILok.dll [2010-11-08] (PACE Anti-Piracy, Inc. -> PACE Anti-Piracy, Inc) FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2018-04-22] (LastPass (Marvasol Inc) -> LastPass) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 11\npnitromozilla.dll [2018-01-24] (Nitro Software, Inc. -> Nitro Software, Inc.) StartMenuInternet: FIREFOX.EXE - H:\drpbx\Dropbox\Firefox\firefox.exe Opera: ======= OPR DownloadDir: H:\downloads OPR Extension: (Rich Hints Agent) - h:\Users\gordon gillesby\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-10-24] OPR Extension: (Nimbus Screenshot & Screen Video Recorder) - h:\Users\gordon gillesby\AppData\Roaming\Opera Software\Opera Stable\Extensions\gjpihpkhgfngnbhhfdehlcmgfahbciip [2017-11-23] OPR Extension: (LastPass: Free Password Manager) - h:\Users\gordon gillesby\AppData\Roaming\Opera Software\Opera Stable\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2020-12-10] OPR Extension: (YouTube Downloader) - h:\Users\gordon gillesby\AppData\Roaming\Opera Software\Opera Stable\Extensions\kclijeogghhkmenkommbnjobhnndpfba [2015-06-30] StartMenuInternet: (HKLM) OperaStable - H:\drpbx\Dropbox\Opera\Launcher.exe ==================== Services (Whitelisted) =================== ===================== Drivers (Whitelisted) =================== ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) (Whitelisted) ========= (If an entry is included in the fixlist, the file/folder will be moved.) 2060-01-11 02:23 - 2060-01-11 02:23 - 000000000 _____ C:\Windows\00000000.0x0 2020-12-16 15:17 - 2020-12-16 15:18 - 000000000 ____D C:\FRST 2020-12-16 14:41 - 2020-12-16 15:17 - 000000000 ____D h:\Users\gordon gillesby\Desktop\fightback 2020-12-16 14:08 - 2020-12-13 12:01 - 000367481 _____ h:\Users\gordon gillesby\Desktop\How to Fix Corrupt Windows 7 Profile - Logged in as Temporary Profile.pdf 2020-12-16 14:07 - 2020-12-16 14:34 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2020-12-16 14:07 - 2020-12-16 14:34 - 000220160 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2020-12-16 14:07 - 2020-12-16 14:07 - 000001799 _____ h:\Users\Public\Desktop\Malwarebytes.lnk 2020-12-16 14:07 - 2020-12-16 14:07 - 000001799 _____ h:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2020-12-16 14:07 - 2020-12-16 14:07 - 000001799 _____ C:\ProgramData\Desktop\Malwarebytes.lnk 2020-12-16 14:07 - 2020-12-16 14:06 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys 2020-12-16 14:06 - 2020-12-16 14:06 - 000000000 ____D C:\Program Files\Malwarebytes 2020-12-13 16:51 - 2020-12-13 16:51 - 000000928 _____ h:\Users\gordon gillesby\Desktop\ACID Pro 7.lnk 2020-12-13 16:43 - 2020-12-13 16:43 - 000000943 _____ h:\Users\Public\Desktop\ACID Pro 10 x64 (2).lnk 2020-12-13 16:43 - 2020-12-13 16:43 - 000000943 _____ C:\ProgramData\Desktop\ACID Pro 10 x64 (2).lnk 2020-12-13 13:54 - 2020-12-11 18:07 - 000398752 _____ (Bleeping Computer, LLC) h:\Users\gordon gillesby\AppData\unhide.exe 2020-12-12 19:05 - 2020-12-16 14:32 - 000000000 ____D C:\Windows\system32\MpEngineStore 2020-12-12 17:58 - 2020-12-12 17:58 - 000001921 _____ h:\Users\gordon gillesby\Desktop\Customize Fences.lnk 2020-12-12 17:48 - 2020-12-16 14:34 - 000701510 _____ C:\Windows\ntbtlog.txt 2020-12-11 12:02 - 2020-12-11 12:12 - 000003718 _____ C:\Windows\system32\Tasks\Tweaking.com - Registry Backup 2020-12-09 17:35 - 2020-12-09 17:35 - 000000000 ____D h:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2020-12-02 13:12 - 2020-11-23 08:36 - 001769688 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe 2020-12-02 13:12 - 2020-11-23 08:36 - 001769688 _____ C:\Windows\system32\vulkaninfo.exe 2020-12-02 13:12 - 2020-11-23 08:36 - 001370328 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2020-12-02 13:12 - 2020-11-23 08:36 - 001370328 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2020-12-02 13:12 - 2020-11-23 08:36 - 001054936 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll 2020-12-02 13:12 - 2020-11-23 08:36 - 001054936 _____ C:\Windows\system32\vulkan-1.dll 2020-12-02 13:12 - 2020-11-23 08:36 - 000917728 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll 2020-12-02 13:12 - 2020-11-23 08:36 - 000917728 _____ C:\Windows\SysWOW64\vulkan-1.dll 2020-12-02 13:12 - 2020-11-23 08:36 - 000467864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2020-12-02 13:12 - 2020-11-23 08:36 - 000450456 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2020-12-02 13:12 - 2020-11-23 08:36 - 000346352 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2020-12-02 13:12 - 2020-11-23 08:35 - 155446000 _____ (NVIDIA Corporation) C:\Windows\system32\nvoptix.dll 2020-12-02 13:12 - 2020-11-23 08:35 - 053091568 _____ (NVIDIA Corporation) C:\Windows\system32\nvrtum64.dll 2020-12-02 13:12 - 2020-11-23 08:35 - 039598320 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl64.dll 2020-12-02 13:12 - 2020-11-23 08:35 - 009086192 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler64.dll 2020-12-02 13:12 - 2020-11-23 08:35 - 008485272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler32.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 036083440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 033987480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl32.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 032555248 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2020-12-02 13:12 - 2020-11-23 08:34 - 001506200 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 001161112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000670616 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000556440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000425712 _____ C:\Windows\system32\nvofapi64.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000377584 _____ C:\Windows\SysWOW64\nvofapi.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000218864 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000199064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000186608 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2020-12-02 13:12 - 2020-11-23 08:34 - 000167832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 040632560 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler64.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 022068632 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 019286936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 007295384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 006561688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 002097392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 001733016 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6445751.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 001583344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 001482992 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6445751.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 000545176 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2020-12-02 13:12 - 2020-11-23 08:33 - 000473496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2020-12-02 13:12 - 2020-11-23 08:32 - 035490200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler32.dll 2020-12-02 13:12 - 2020-11-23 08:32 - 000684440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcbl64.dll 2020-12-02 13:12 - 2020-11-23 08:31 - 006092840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2020-12-02 13:12 - 2020-11-22 07:08 - 000056543 _____ C:\Windows\system32\nvinfo.pb ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-12-16 14:38 - 2014-03-20 17:08 - 000468684 _____ C:\Windows\system32\perfh011.dat 2020-12-16 14:38 - 2014-03-20 17:08 - 000144914 _____ C:\Windows\system32\perfc011.dat 2020-12-16 14:38 - 2014-03-20 17:00 - 000565750 _____ C:\Windows\system32\perfh006.dat 2020-12-16 14:38 - 2014-03-20 17:00 - 000122466 _____ C:\Windows\system32\perfc006.dat 2020-12-16 14:38 - 2014-03-20 16:43 - 000449266 _____ C:\Windows\system32\prfh0404.dat 2020-12-16 14:38 - 2014-03-20 16:43 - 000137904 _____ C:\Windows\system32\prfc0404.dat 2020-12-16 14:38 - 2014-03-20 16:36 - 000771044 _____ C:\Windows\system32\prfh0416.dat 2020-12-16 14:38 - 2014-03-20 16:36 - 000171580 _____ C:\Windows\system32\prfc0416.dat 2020-12-16 14:38 - 2014-03-20 16:27 - 000785982 _____ C:\Windows\system32\prfh0816.dat 2020-12-16 14:38 - 2014-03-20 16:27 - 000176644 _____ C:\Windows\system32\prfc0816.dat 2020-12-16 14:38 - 2014-03-20 16:19 - 000797570 _____ C:\Windows\system32\perfh015.dat 2020-12-16 14:38 - 2014-03-20 16:19 - 000180196 _____ C:\Windows\system32\perfc015.dat 2020-12-16 14:38 - 2014-03-20 16:12 - 000712716 _____ C:\Windows\system32\perfh01F.dat 2020-12-16 14:38 - 2014-03-20 16:12 - 000163840 _____ C:\Windows\system32\perfc01F.dat 2020-12-16 14:38 - 2014-03-20 15:59 - 000431866 _____ C:\Windows\system32\prfh0804.dat 2020-12-16 14:38 - 2014-03-20 15:59 - 000142406 _____ C:\Windows\system32\prfc0804.dat 2020-12-16 14:38 - 2014-03-20 15:36 - 000781390 _____ C:\Windows\system32\perfh019.dat 2020-12-16 14:38 - 2014-03-20 15:36 - 000174428 _____ C:\Windows\system32\perfc019.dat 2020-12-16 14:38 - 2014-03-20 15:29 - 000550416 _____ C:\Windows\system32\perfh014.dat 2020-12-16 14:38 - 2014-03-20 15:29 - 000118450 _____ C:\Windows\system32\perfc014.dat 2020-12-16 14:38 - 2014-03-20 15:23 - 000666062 _____ C:\Windows\system32\perfh008.dat 2020-12-16 14:38 - 2014-03-20 15:23 - 000135860 _____ C:\Windows\system32\perfc008.dat 2020-12-16 14:38 - 2014-03-20 15:16 - 000719698 _____ C:\Windows\system32\perfh01D.dat 2020-12-16 14:38 - 2014-03-20 15:16 - 000165760 _____ C:\Windows\system32\perfc01D.dat 2020-12-16 14:38 - 2014-03-20 15:09 - 000480426 _____ C:\Windows\system32\perfh012.dat 2020-12-16 14:38 - 2014-03-20 15:09 - 000143198 _____ C:\Windows\system32\perfc012.dat 2020-12-16 14:38 - 2014-03-20 15:03 - 000725134 _____ C:\Windows\system32\perfh005.dat 2020-12-16 14:38 - 2014-03-20 15:03 - 000165192 _____ C:\Windows\system32\perfc005.dat 2020-12-16 14:38 - 2014-03-20 14:46 - 000801262 _____ C:\Windows\system32\perfh013.dat 2020-12-16 14:38 - 2014-03-20 14:46 - 000176774 _____ C:\Windows\system32\perfc013.dat 2020-12-16 14:38 - 2014-03-20 14:35 - 000537996 _____ C:\Windows\system32\perfh00B.dat 2020-12-16 14:38 - 2014-03-20 14:35 - 000125462 _____ C:\Windows\system32\perfc00B.dat 2020-12-16 14:38 - 2014-03-20 14:29 - 000741740 _____ C:\Windows\system32\perfh00E.dat 2020-12-16 14:38 - 2014-03-20 14:29 - 000196308 _____ C:\Windows\system32\perfc00E.dat 2020-12-16 14:38 - 2014-03-20 14:19 - 000802940 _____ C:\Windows\system32\perfh00A.dat 2020-12-16 14:38 - 2014-03-20 14:19 - 000182984 _____ C:\Windows\system32\perfc00A.dat 2020-12-16 14:38 - 2014-03-20 14:13 - 000447270 _____ C:\Windows\system32\perfh00D.dat 2020-12-16 14:38 - 2014-03-20 14:13 - 000107572 _____ C:\Windows\system32\perfc00D.dat 2020-12-16 14:38 - 2014-03-20 14:04 - 000797938 _____ C:\Windows\system32\perfh010.dat 2020-12-16 14:38 - 2014-03-20 14:04 - 000170666 _____ C:\Windows\system32\perfc010.dat 2020-12-16 14:38 - 2014-03-20 13:58 - 000803248 _____ C:\Windows\system32\perfh00C.dat 2020-12-16 14:38 - 2014-03-20 13:58 - 000535124 _____ C:\Windows\system32\perfh001.dat 2020-12-16 14:38 - 2014-03-20 13:58 - 000173308 _____ C:\Windows\system32\perfc00C.dat 2020-12-16 14:38 - 2014-03-20 13:58 - 000117586 _____ C:\Windows\system32\perfc001.dat 2020-12-16 14:38 - 2014-03-20 13:48 - 000755356 _____ C:\Windows\system32\perfh007.dat 2020-12-16 14:38 - 2014-03-20 13:48 - 000172688 _____ C:\Windows\system32\perfc007.dat 2020-12-16 14:38 - 2009-07-13 23:13 - 019389288 _____ C:\Windows\system32\PerfStringBackup.INI 2020-12-16 14:38 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\inf 2020-12-16 14:32 - 2019-04-18 18:16 - 000011564 _____ C:\Windows\system32\DVCState-{0000000A-00000000-00000000-00001102-00000004-40011102}.rfx 2020-12-16 14:32 - 2019-04-18 18:16 - 000000924 _____ C:\Windows\system32\BMXCtrlState-{0000000A-00000000-00000000-00001102-00000004-40011102}.rfx 2020-12-16 14:32 - 2019-04-18 18:16 - 000000924 _____ C:\Windows\system32\BMXBkpCtrlState-{0000000A-00000000-00000000-00001102-00000004-40011102}.rfx 2020-12-16 14:32 - 2019-04-18 18:16 - 000000072 _____ C:\Windows\system32\BMXStateBkp-{0000000A-00000000-00000000-00001102-00000004-40011102}.rfx 2020-12-16 14:32 - 2019-04-18 18:16 - 000000072 _____ C:\Windows\system32\BMXState-{0000000A-00000000-00000000-00001102-00000004-40011102}.rfx 2020-12-16 14:31 - 2015-04-27 16:26 - 000000000 ____D h:\ProgramData\NVIDIA 2020-12-16 14:31 - 2009-07-13 23:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2020-12-16 14:19 - 2009-07-13 22:45 - 000030112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2020-12-16 14:19 - 2009-07-13 22:45 - 000030112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2020-12-16 14:06 - 2015-10-15 12:15 - 000000000 ____D h:\ProgramData\Malwarebytes 2020-12-16 13:58 - 2015-06-12 12:45 - 000000958 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-128045027-2202696068-637555015-1000UA.job 2020-12-16 13:53 - 2018-04-22 14:33 - 000000000 ____D C:\Program Files (x86)\LastPass 2020-12-16 13:53 - 2015-04-24 11:57 - 000254496 _____ C:\GDIPFONTCACHEV1.DAT 2020-12-13 16:45 - 2009-07-13 22:57 - 000001409 _____ h:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2020-12-13 16:39 - 2019-08-14 14:53 - 001121944 _____ C:\Windows\system32\FNTCACHE.DAT 2020-12-13 13:50 - 2009-07-13 20:34 - 393687040 _____ C:\Windows\system32\config\software.old 2020-12-13 13:50 - 2009-07-13 20:34 - 393687040 _____ C:\Windows\system32\config\software.old 2020-12-13 13:50 - 2009-07-13 20:34 - 361607168 _____ C:\Windows\system32\config\components.old 2020-12-13 13:50 - 2009-07-13 20:34 - 361607168 _____ C:\Windows\system32\config\components.old 2020-12-13 13:50 - 2009-07-13 20:34 - 034340864 _____ C:\Windows\system32\config\system.old 2020-12-13 13:50 - 2009-07-13 20:34 - 034340864 _____ C:\Windows\system32\config\system.old 2020-12-13 13:50 - 2009-07-13 20:34 - 008388608 _____ C:\Windows\system32\config\default.old 2020-12-13 13:50 - 2009-07-13 20:34 - 008388608 _____ C:\Windows\system32\config\default.old 2020-12-13 13:50 - 2009-07-13 20:34 - 000118784 _____ C:\Windows\system32\config\sam.old 2020-12-13 13:50 - 2009-07-13 20:34 - 000118784 _____ C:\Windows\system32\config\sam.old 2020-12-13 13:50 - 2009-07-13 20:34 - 000028672 _____ C:\Windows\system32\config\security.old 2020-12-13 13:50 - 2009-07-13 20:34 - 000028672 _____ C:\Windows\system32\config\security.old 2020-12-13 13:34 - 2015-04-24 11:57 - 000000000 ____D C:\Windows\system32\Stardock 2020-12-13 13:34 - 2015-04-24 11:49 - 000000000 ____D C:\Windows\system32\%LOCALAPPDATA% 2020-12-13 13:19 - 2018-04-24 13:20 - 000000000 ____D C:\Program Files\7-Zip 2020-12-13 13:19 - 2017-12-06 14:20 - 000000000 ____D C:\Program Files\Bulk Rename Utility 2020-12-13 13:19 - 2014-03-20 12:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Security Client 2020-12-13 13:19 - 2014-03-20 12:21 - 000000000 ____D C:\Program Files\Microsoft Security Client 2020-12-13 13:19 - 2009-07-13 23:32 - 000000000 ____D C:\Windows\Downloaded Program Files 2020-12-13 13:19 - 2009-07-13 23:32 - 000000000 ____D C:\Program Files\Windows Sidebar 2020-12-13 13:19 - 2009-07-13 23:32 - 000000000 ____D C:\Program Files\Microsoft Games 2020-12-13 13:19 - 2009-07-13 23:32 - 000000000 ____D C:\Program Files (x86)\Windows Sidebar 2020-12-13 13:19 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\Help 2020-12-13 13:19 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\AppCompat 2020-12-13 13:19 - 2009-07-13 21:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared 2020-12-13 13:18 - 2016-04-16 08:54 - 000000000 ____D C:\Windows\system32\Tasks\Apple 2020-12-13 13:18 - 2015-05-30 15:56 - 000000000 ____D C:\Windows\pss 2020-12-13 13:18 - 2015-04-24 13:50 - 000000000 ____D C:\Windows\system32\Tasks\Games 2020-12-13 13:18 - 2014-03-20 10:47 - 000000000 ____D C:\Windows\system32\MRT 2020-12-13 13:18 - 2009-07-13 23:32 - 000000000 ____D C:\Windows\Offline Web Pages 2020-12-13 13:18 - 2009-07-13 22:45 - 000000000 ____D C:\Windows\Setup 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 __RSD C:\Windows\Media 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\TAPI 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\system32\sysprep 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\system32\NDF 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\system32\ias 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\servicing 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\security 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\rescache 2020-12-13 13:18 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\PLA 2020-12-13 13:16 - 2018-07-02 13:47 - 000000000 ____D h:\Users\gordon gillesby\Desktop\DocsTuts 2020-12-13 13:16 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\registration 2020-12-12 18:05 - 2014-03-22 12:12 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2020-12-12 17:48 - 2010-11-21 01:16 - 000000000 ____D C:\Windows\CSC 2020-12-11 14:58 - 2018-08-22 16:22 - 000000906 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-128045027-2202696068-637555015-1000Core.job 2020-12-11 12:55 - 2018-04-22 14:33 - 000000000 ____D h:\Users\gordon gillesby\AppData\LocalLow\LastPass 2020-12-10 18:50 - 2017-11-23 12:34 - 000000000 ____D h:\Users\gordon gillesby\AppData\LocalLow\Mozilla 2020-12-10 16:03 - 2018-04-24 13:54 - 000000000 ____D h:\ProgramData\Microsoft\Windows\Start Menu\Programs\Agent Ransack 2020-12-09 17:55 - 2014-03-26 17:27 - 000000096 _____ h:\ProgramData\autobk.inc 2020-12-09 17:55 - 2014-03-26 17:27 - 000000096 _____ C:\Windows\system32\w3data.vss 2020-12-09 17:55 - 2014-03-26 17:27 - 000000096 _____ C:\Windows\system32\msvcsv60.dll 2020-12-09 17:55 - 2014-03-23 11:45 - 000000176 _____ C:\Windows\msocreg32.dat 2020-12-09 17:37 - 2017-12-24 17:15 - 000000000 ____D C:\Program Files (x86)\Mp3tag 2020-12-09 17:35 - 2017-12-24 17:15 - 000000892 _____ h:\Users\Public\Desktop\Mp3tag.lnk 2020-12-09 17:35 - 2017-12-24 17:15 - 000000892 _____ C:\ProgramData\Desktop\Mp3tag.lnk 2020-12-02 13:02 - 2016-12-21 11:22 - 000003840 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1470598498 2020-12-02 12:57 - 2019-10-27 15:08 - 000003704 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-10-27 15:08 - 000003704 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-05-29 17:26 - 000004146 _____ C:\Windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-05-29 17:26 - 000003940 _____ C:\Windows\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-05-29 17:26 - 000003798 _____ C:\Windows\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-05-29 17:26 - 000003790 _____ C:\Windows\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-05-29 17:26 - 000003704 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-05-29 17:26 - 000003704 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:57 - 2019-05-29 17:26 - 000001141 _____ h:\Users\Public\Desktop\GeForce Experience.lnk 2020-12-02 12:57 - 2019-05-29 17:26 - 000001141 _____ C:\ProgramData\Desktop\GeForce Experience.lnk 2020-12-02 12:57 - 2015-04-24 12:14 - 000000000 ____D h:\ProgramData\NVIDIA Corporation 2020-12-02 12:57 - 2015-04-24 12:14 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2020-12-02 12:57 - 2015-04-24 12:14 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2020-12-02 12:56 - 2019-05-29 17:26 - 000003738 _____ C:\Windows\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-12-02 12:56 - 2019-05-29 17:26 - 000003494 _____ C:\Windows\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-11-23 08:36 - 2017-11-23 14:45 - 000572144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2020-11-23 08:34 - 2019-10-27 15:25 - 046446488 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2020-11-23 08:32 - 2018-09-19 15:08 - 044245072 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2020-11-23 08:31 - 2018-03-27 14:07 - 023234720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2020-11-23 08:31 - 2015-08-11 00:08 - 039256616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2020-11-23 08:31 - 2015-08-11 00:08 - 027476240 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2020-11-23 08:31 - 2015-04-27 16:24 - 007214968 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2020-11-22 03:45 - 2016-08-23 12:56 - 000991032 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2020-11-22 03:45 - 2016-08-23 12:56 - 000084456 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2020-11-22 03:45 - 2015-04-27 16:26 - 005510968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2020-11-22 03:45 - 2015-04-27 16:26 - 002636264 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2020-11-22 03:45 - 2015-04-27 16:26 - 001759032 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2020-11-22 03:45 - 2015-04-27 16:26 - 000194360 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2020-11-22 03:45 - 2015-04-27 16:26 - 000121144 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll ==================== Files in the root of some directories ======== 2018-06-13 18:06 - 2018-06-16 10:38 - 001466495 _____ () C:\Program Files (x86)\unins000.dat 2018-06-13 18:06 - 2018-06-16 10:37 - 000722680 _____ () C:\Program Files (x86)\unins000.exe 2014-04-13 17:32 - 2018-08-12 12:58 - 000003917 _____ () C:\Program Files (x86)\unins001.dat 2014-04-13 17:32 - 2018-08-12 12:57 - 000685338 _____ () C:\Program Files (x86)\unins001.exe 2014-03-22 14:45 - 2018-04-22 14:34 - 022762520 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe 2018-05-25 17:54 - 2020-12-09 17:49 - 000000002 _____ () h:\Users\gordon gillesby\AppData\Roaming\ExplorerFavorites.txt 2011-07-27 02:56 - 2011-07-27 02:56 - 000325968 _____ () h:\Users\gordon gillesby\AppData\Roaming\lua5.1.dll 2011-07-27 02:56 - 2011-07-27 02:56 - 000011264 _____ () h:\Users\gordon gillesby\AppData\Roaming\lua51.dll 2018-07-29 11:56 - 2018-07-29 11:56 - 000197976 _____ () h:\Users\gordon gillesby\AppData\Roaming\MAnalyzerpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000052733 _____ () h:\Users\gordon gillesby\AppData\Roaming\MAutopanpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000003862 _____ () h:\Users\gordon gillesby\AppData\Roaming\MAutoPitchpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000052804 _____ () h:\Users\gordon gillesby\AppData\Roaming\MBandPasspresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000001235 _____ () h:\Users\gordon gillesby\AppData\Roaming\mbasestyleconfigurationpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000055445 _____ () h:\Users\gordon gillesby\AppData\Roaming\MChoruspresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000000142 _____ () h:\Users\gordon gillesby\AppData\Roaming\mcolorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000035633 _____ () h:\Users\gordon gillesby\AppData\Roaming\MCompressorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000032977 _____ () h:\Users\gordon gillesby\AppData\Roaming\MDelaypresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000027279 _____ () h:\Users\gordon gillesby\AppData\Roaming\MDistortionpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000001095 _____ () h:\Users\gordon gillesby\AppData\Roaming\menvelopepresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000002820 _____ () h:\Users\gordon gillesby\AppData\Roaming\MEqualizerAreasEditorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000041050 _____ () h:\Users\gordon gillesby\AppData\Roaming\MEqualizerpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000076741 _____ () h:\Users\gordon gillesby\AppData\Roaming\MFlangerpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000050727 _____ () h:\Users\gordon gillesby\AppData\Roaming\MFreqShifterpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000020335 _____ () h:\Users\gordon gillesby\AppData\Roaming\MHarmonizerpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000038926 _____ () h:\Users\gordon gillesby\AppData\Roaming\MLimiterpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000146381 _____ () h:\Users\gordon gillesby\AppData\Roaming\MModulatorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000002658 _____ () h:\Users\gordon gillesby\AppData\Roaming\MModulatorspresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000005694 _____ () h:\Users\gordon gillesby\AppData\Roaming\MNoiseGeneratorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000014426 _____ () h:\Users\gordon gillesby\AppData\Roaming\MOscillatorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000046900 _____ () h:\Users\gordon gillesby\AppData\Roaming\MPhaserpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000003771 _____ () h:\Users\gordon gillesby\AppData\Roaming\MRingModulatorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000039028 _____ () h:\Users\gordon gillesby\AppData\Roaming\MSaturatorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000018401 _____ () h:\Users\gordon gillesby\AppData\Roaming\MSignalGeneratorpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000002564 _____ () h:\Users\gordon gillesby\AppData\Roaming\MSpectralAnalyzerPrefilterpresets.xml 2014-03-26 17:27 - 2020-12-09 17:55 - 000000096 _____ () h:\Users\gordon gillesby\AppData\Roaming\msregsvv.dll 2018-07-29 11:56 - 2018-07-29 11:56 - 000009557 _____ () h:\Users\gordon gillesby\AppData\Roaming\MStereoExpanderpresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000044992 _____ () h:\Users\gordon gillesby\AppData\Roaming\MTremolopresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000000109 _____ () h:\Users\gordon gillesby\AppData\Roaming\MUtilitypresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000001011 _____ () h:\Users\gordon gillesby\AppData\Roaming\MValueToColor5presets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000047418 _____ () h:\Users\gordon gillesby\AppData\Roaming\MVibratopresets.xml 2018-07-29 11:56 - 2018-07-29 11:56 - 000033111 _____ () h:\Users\gordon gillesby\AppData\Roaming\MWaveShaperpresets.xml 2020-12-09 17:55 - 2020-12-09 17:55 - 000001274 _____ () h:\Users\gordon gillesby\AppData\Roaming\plugin_scan_state_VST2_x64.scan 2020-12-09 17:55 - 2020-12-09 17:55 - 000001198 _____ () h:\Users\gordon gillesby\AppData\Roaming\plugin_scan_state_VST3_x32.scan 2018-07-29 11:56 - 2018-07-29 11:56 - 000018604 _____ () h:\Users\gordon gillesby\AppData\Roaming\StepSequencepresets.xml 2018-04-14 12:25 - 2018-04-14 12:25 - 000002133 _____ () h:\Users\gordon gillesby\AppData\Local\D3019F48D7E2476fBA3B785F4C9D339F.Test Label.lbx 2020-10-12 14:56 - 2020-10-12 18:05 - 000004608 _____ () h:\Users\gordon gillesby\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2018-04-21 11:16 - 2018-04-21 11:16 - 000000724 _____ () h:\Users\gordon gillesby\AppData\Local\recently-used.xbel 2019-03-18 17:47 - 2020-10-05 16:39 - 000007609 _____ () h:\Users\gordon gillesby\AppData\Local\Resmon.ResmonCfg 2016-08-23 13:00 - 2020-12-16 14:36 - 016166912 _____ () h:\Users\gordon gillesby\AppData\Local\SageThumbs.db3 ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) LastRegBack: 2020-03-28 10:38 ==================== End of FRST.txt ========================