~ Report of ZHPDiag v2015.3.19.31 - Nicolas Coolman (19-03-2015)
~ Launched by houssam (19-03-2015 22:53:23)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Web forum address : http://forum.nicolascoolman.fr
~ Translated by
~ Version State : Updated version.
~ White List : Deactivate by user
~ Elevation of privilege : OK
~ User Account Control : Not Found


---\\ Internet browsers
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 23.0.1 (Defaut)
GCIE: Google Chrome v41.0.2272.89

---\\ Windows product information
~ Langage: Anglais
Windows Automatic Updates : OK
Windows Genuine Advantage : KO
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ System protection software

---\\ System optimization software

---\\ Sharing software PeerToPeer

---\\ Surveillance software

---\\ Information on the system
~ Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1015.3 MB (25% free)
System Restore: Activé (Enable)
System drive C: has 41 GB (84%) free of 49 GB

---\\ Connection to the system mode
~ Computer Name: USER
~ User Name: houssam
~ All Users Names: houssam, HelpAssistant, Guest, Administrator,
~ Unselected Option: None
Logged in as Administrator

---\\ Environment variables
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\houssam\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\houssam\Application Data\
~ %Desktop% : C:\Documents and Settings\houssam\سطح المكتب\
~ %Favorites% : C:\Documents and Settings\houssam\Favorites\
~ %LocalAppData% : C:\Documents and Settings\houssam\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\houssam\قائمة ابدأ\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumeration of the disk units
C: Hard drive, Flash drive, Thumb drive (Free 41 Go of 49 Go)
D: Hard drive, Flash drive, Thumb drive (Free 11 Go of 15 Go)
E: Hard drive, Flash drive, Thumb drive (Free 11 Go of 11 Go)
F: CD-ROM drive (Not Inserted)



---\\ State of the Windows Security Center
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
~ Security Center: 41 Scanned in 00mn 00s



---\\ Search Generic System Files
[MD5.CA3445DCE9EB70A2CA2504E0AF5C543F] - (.Microsoft Corporation - Windows Explorer.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\Explorer.exe [1031168]
[MD5.699A0AAC208A08A579169E06E455C2C4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.21-12-2009 - 19:59:15.) -- C:\WINDOWS\system32\wininet.dll [916480]
[MD5.BCEDF9DCCBC807108CE34C9834074C34] - (.Microsoft Corporation - Windows NT Logon Application.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [506880]
[MD5.7E775010EF291DA96AD17CA4B17137D7] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14-08-2008 - 11:04:36.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13-04-2008 - 21:10:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.9B6AF9E7E172249AFC4AF5576B506233] - (.Microsoft Corporation - FIPS Crypto Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.9354FAA5F4084CCB31A868BFA4BC2ED0] - (.Microsoft Corporation - i8042 Port Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [51712]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.421F7B922CEC5A5F340E7574A98F7B7C] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04-12-2009 - 19:22:22.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [455424]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.88FFA60E94CA89C489DB4C6A38994EBF] - (.Microsoft Corporation - Parallel Port Driver.) (.26-04-2010 - 16:59:05.) -- C:\WINDOWS\system32\Drivers\Parport.sys [79872]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13-04-2008 - 21:02:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.1AAFCAEED86CD38DB3C501610F28F131] - (.Microsoft Corporation - Redbook Audio Filter Driver.) (.14-04-2008 - 20:07:08.) -- C:\WINDOWS\system32\Drivers\redbook.sys [57472]
[MD5.E3EED80ADEA08F324A3722AB81E136D0] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.15-04-2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [52352]
~ Generic Processes: Scanned in 00mn 00s



---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 2/4
~ Mes Videos (My Videos) : 0/0
~ Mes Favoris (My Favorites) : 1/8
~ Mes Documents (My Documents) : 1/31
~ Mon Bureau (My Desktop) : 0/4
~ Menu demarrer (Programs) : 1/29
~ Hidden Files: Scanned in 00mn 00s



---\\ Process running
[MD5.F01F2D9C9D0FF3E0F84F23F7A105E922] - (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- c:\program files\idt\v114_ecs_d_6207.2v7_6099.8xp_g2.0v_rc_sdc\wdm\STacSV.exe [237665] [PID.1844]
[MD5.83BB030C71C9727DCFB2737005772C4E] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe [232264] [PID.616]
[MD5.BC68B555EFD9581265071B840AB3DFE7] - (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\Program Files\IDT\WDM\sttray.exe [446571] [PID.864]
[MD5.D2124327CB66F3727D26343122DBC4F5] - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe [5088456] [PID.872]
[MD5.58FBDA10FC403CF9F82ABD0A68129BA3] - (.ESET - ESET Service.) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1349576] [PID.1268]
[MD5.E9C6EF9437ECB30911488F9313AD821A] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [269848] [PID.1432]
[MD5.9201E92771F3D536DA4A53FDCC4B976B] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [809288] [PID.2704]
[MD5.9498CF0D334B282AA58D1DFC370738DE] - (.Microsoft Corporation - ‎‎Automatic Updates.) -- C:\WINDOWS\system32\wuauclt.exe [110592] [PID.2716]
[MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe [638816] [PID.1944]
[MD5.5A57C1F323CD62D767FECC514D5A58D5] - (.VideoLAN - VLC media player.) -- C:\Program Files\VideoLAN\VLC\vlc.exe [134424] [PID.2992]
[MD5.6577E0208F612DAF5DE5AD4081BE7696] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8187904] [PID.2000]
~ Processes Running: Scanned in 00mn 01s



---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
C:\Documents and Settings\houssam\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

---\\ Google Chrome Extension Folder
~ Google Lines Browser: 0 Scanned in 00mn 38s



---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.0] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
~ Firefox Browser: 3 Scanned in 00mn 00s



---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.VideoLAN - VLC media player Web Plugin.) (No version) -- (.not file.) =>.VideoLAN
~ IE Browser: 10 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (19)
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects (O2)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll
~ BHO: 2 Scanned in 00mn 00s



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [egui] . (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
O4 - HKUS\S-1-5-21-1935655697-1965331169-1644491937-1001\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1935655697-1965331169-1644491937-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
~ Application: Scanned in 00mn 00s



---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Orphan key
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll
~ Winsock: 3 Scanned in 00mn 00s



---\\ Reset Web Settings' hijack (O14)
O14 - IERESET.INF: SAFESITE_VALUE=SAFESITE_VALUE="ie.search.msn.com"
~ IE Paramètres WEB: Scanned in 00mn 00s



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A33A58A1-6A8C-4630-B917-4C9568441E59}: DhcpNameServer = 208.67.222.123 208.67.220.123
O17 - HKLM\System\CS1\Services\Tcpip\..\{A33A58A1-6A8C-4630-B917-4C9568441E59}: DhcpNameServer = 208.67.222.123 208.67.220.123
O17 - HKLM\System\CS2\Services\Tcpip\..\{A33A58A1-6A8C-4630-B917-4C9568441E59}: DhcpNameServer = 208.67.222.123 208.67.220.123
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 208.67.222.123 208.67.220.123
~ Domain: Scanned in 00mn 00s



---\\ Extra protocols (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ SSODL: 5 Scanned in 00mn 00s



---\\ SharedTaskScheduler (O22)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Browseui preloader - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll
~ STS/SSO: Scanned in 00mn 00s



---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: خدمة Google Update (gupdate) (gupdate) . (.Google Inc. - مثبِّت Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) - c:\program files\idt\v114_ecs_d_6207.2v7_6099.8xp_g2.0v_rc_sdc\wdm\STacSV.exe
~ Services: 3 Scanned in 00mn 05s



---\\ Windows Active Desktop & MHTML Editor (O24)
O24 - Desktop Component 0: الصفحة الرئيسية الحالية - file:About:Home
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\web\wallpaper\Bliss.bmp
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\web\wallpaper\Bliss.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Task Planned Automatically (039)
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848]
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [828]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [832]
~ Scheduled Task: 5 Scanned in 00mn 00s



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Internet Explorer Version Update - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - الأداة المساعدة لإعداد Microsoft Windows Media Player.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: تخصيصات المستعرض - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O40 - ASIC: تحديث سطح مكتب Windows - >{99820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - Windows Theme API.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 5 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - ‎‎Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: تحسينات الاستعراض - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shell Extension.) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation
O40 - ASIC: دفتر العناوين 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - ‎‎Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: تحديث سطح مكتب Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\41.0.2272.89\Installer\chrmstp.exe
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\WINDOWS\system32\macromed\flash\Flash10c.ocx
O40 - ASIC: Installed Component - S-1-5-21-1935655697-1965331169-1644491937-1001 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
O40 - ASIC: Installed Component - S-1-5-21-1935655697-1965331169-1644491937-1001 - >{X9B49E34-C7CC-11D0-8953-00A0C90347FF} -- Not Hexadécimal CLSID
~ Active Setup: 20 Scanned in 00mn 00s



---\\ Drivers launched at startup (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (eamonm) . (.ESET - Amon monitor.) - C:\WINDOWS\system32\DRIVERS\eamonm.sys
O41 - Driver: (eawdmfd) . (.Compaq Computer Corporation - Compaq EAWDMFD driver.) - C:\WINDOWS\system32\DRIVERS\eawdmfd.sys
O41 - Driver: (ehdrv) . (.ESET - ESET Helper driver.) - C:\WINDOWS\system32\DRIVERS\ehdrv.sys
O41 - Driver: (epfwtdi) . (.ESET - ESET Personal Firewall TDI filter.) - C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (IDMTDI) . (.Tonec Inc. - Internet Download Manager TDI Driver.) - C:\WINDOWS\system32\DRIVERS\idmtdi.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Processor Device Driver.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - HID Mouse Filter Driver.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Serial Device Driver.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Drivers: 75 Scanned in 00mn 00s



---\\ Software installed (O42)
O42 - Logiciel: BugOff 1.10 - (.Soeperman Enterprises Ltd..) [HKLM] -- BugOff
O42 - Logiciel: Google Chrome - (.Google Inc‎.‎.) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager
O42 - Logiciel: LG United Mobile Drivers - (.LG Electronics.) [HKLM] -- {5DB849D6-9392-4FB7-9ABB-87ED433152E5}
O42 - Logiciel: Mozilla Firefox 23.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 23.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WinRAR 5.10 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: تحديث أمان لـ Windows XP (KB923561)‎ - (.Microsoft Corporation.) [HKLM] -- KB923561
O42 - Logiciel: تحديث أمان لـ Windows XP (KB950762)‎ - (.Microsoft Corporation.) [HKLM] -- KB950762
O42 - Logiciel: تحديث أمان لـ Windows XP (KB950974)‎ - (.Microsoft Corporation.) [HKLM] -- KB950974
O42 - Logiciel: تحديث أمان لـ Windows XP (KB951066)‎ - (.Microsoft Corporation.) [HKLM] -- KB951066
O42 - Logiciel: تحديث أمان لـ Windows XP (KB951748)‎ - (.Microsoft Corporation.) [HKLM] -- KB951748
O42 - Logiciel: تحديث أمان لـ Windows XP (KB952004)‎ - (.Microsoft Corporation.) [HKLM] -- KB952004
O42 - Logiciel: تحديث أمان لـ Windows XP (KB952954)‎ - (.Microsoft Corporation.) [HKLM] -- KB952954
O42 - Logiciel: تحديث أمان لـ Windows XP (KB953155)‎ - (.Microsoft Corporation.) [HKLM] -- KB953155
O42 - Logiciel: تحديث أمان لـ Windows XP (KB954459)‎ - (.Microsoft Corporation.) [HKLM] -- KB954459
O42 - Logiciel: تحديث أمان لـ Windows XP (KB955069)‎ - (.Microsoft Corporation.) [HKLM] -- KB955069
O42 - Logiciel: تحديث أمان لـ Windows XP (KB956572)‎ - (.Microsoft Corporation.) [HKLM] -- KB956572
O42 - Logiciel: تحديث أمان لـ Windows XP (KB956744)‎ - (.Microsoft Corporation.) [HKLM] -- KB956744
O42 - Logiciel: تحديث أمان لـ Windows XP (KB956802)‎ - (.Microsoft Corporation.) [HKLM] -- KB956802
O42 - Logiciel: تحديث أمان لـ Windows XP (KB956803)‎ - (.Microsoft Corporation.) [HKLM] -- KB956803
O42 - Logiciel: تحديث أمان لـ Windows XP (KB956844)‎ - (.Microsoft Corporation.) [HKLM] -- KB956844
O42 - Logiciel: تحديث أمان لـ Windows XP (KB958644)‎ - (.Microsoft Corporation.) [HKLM] -- KB958644
O42 - Logiciel: تحديث أمان لـ Windows XP (KB958869)‎ - (.Microsoft Corporation.) [HKLM] -- KB958869
O42 - Logiciel: تحديث أمان لـ Windows XP (KB959426)‎ - (.Microsoft Corporation.) [HKLM] -- KB959426
O42 - Logiciel: تحديث أمان لـ Windows XP (KB960225)‎ - (.Microsoft Corporation.) [HKLM] -- KB960225
O42 - Logiciel: تحديث أمان لـ Windows XP (KB960803)‎ - (.Microsoft Corporation.) [HKLM] -- KB960803
O42 - Logiciel: تحديث أمان لـ Windows XP (KB960859)‎ - (.Microsoft Corporation.) [HKLM] -- KB960859
O42 - Logiciel: تحديث أمان لـ Windows XP (KB961501)‎ - (.Microsoft Corporation.) [HKLM] -- KB961501
O42 - Logiciel: تحديث أمان لـ Windows XP (KB969059)‎ - (.Microsoft Corporation.) [HKLM] -- KB969059
O42 - Logiciel: تحديث أمان لـ Windows XP (KB969947)‎ - (.Microsoft Corporation.) [HKLM] -- KB969947
O42 - Logiciel: تحديث أمان لـ Windows XP (KB970238)‎ - (.Microsoft Corporation.) [HKLM] -- KB970238
O42 - Logiciel: تحديث أمان لـ Windows XP (KB970483)‎ - (.Microsoft Corporation.) [HKLM] -- KB970483
O42 - Logiciel: تحديث أمان لـ Windows XP (KB971468)‎ - (.Microsoft Corporation.) [HKLM] -- KB971468
O42 - Logiciel: تحديث أمان لـ Windows XP (KB971657)‎ - (.Microsoft Corporation.) [HKLM] -- KB971657
O42 - Logiciel: تحديث أمان لـ Windows XP (KB972270)‎ - (.Microsoft Corporation.) [HKLM] -- KB972270
O42 - Logiciel: تحديث أمان لـ Windows XP (KB973354)‎ - (.Microsoft Corporation.) [HKLM] -- KB973354
O42 - Logiciel: تحديث أمان لـ Windows XP (KB973507)‎ - (.Microsoft Corporation.) [HKLM] -- KB973507
O42 - Logiciel: تحديث أمان لـ Windows XP (KB973869)‎ - (.Microsoft Corporation.) [HKLM] -- KB973869
O42 - Logiciel: تحديث أمان لـ Windows XP (KB973904)‎ - (.Microsoft Corporation.) [HKLM] -- KB973904
O42 - Logiciel: تحديث أمان لـ Windows XP (KB974112)‎ - (.Microsoft Corporation.) [HKLM] -- KB974112
O42 - Logiciel: تحديث أمان لـ Windows XP (KB974318)‎ - (.Microsoft Corporation.) [HKLM] -- KB974318
O42 - Logiciel: تحديث أمان لـ Windows XP (KB974392)‎ - (.Microsoft Corporation.) [HKLM] -- KB974392
O42 - Logiciel: تحديث أمان لـ Windows XP (KB974571)‎ - (.Microsoft Corporation.) [HKLM] -- KB974571
O42 - Logiciel: تحديث أمان لـ Windows XP (KB975025)‎ - (.Microsoft Corporation.) [HKLM] -- KB975025
O42 - Logiciel: تحديث أمان لـ Windows XP (KB975254)‎ - (.Microsoft Corporation.) [HKLM] -- KB975254
O42 - Logiciel: تحديث أمان لـ Windows XP (KB975560)‎ - (.Microsoft Corporation.) [HKLM] -- KB975560
O42 - Logiciel: تحديث أمان لـ Windows XP (KB975561)‎ - (.Microsoft Corporation.) [HKLM] -- KB975561
O42 - Logiciel: تحديث أمان لـ Windows XP (KB975713)‎ - (.Microsoft Corporation.) [HKLM] -- KB975713
O42 - Logiciel: تحديث أمان لـ Windows XP (KB977165)‎ - (.Microsoft Corporation.) [HKLM] -- KB977165
O42 - Logiciel: تحديث أمان لـ Windows XP (KB977914)‎ - (.Microsoft Corporation.) [HKLM] -- KB977914
O42 - Logiciel: تحديث أمان لـ Windows XP (KB978037)‎ - (.Microsoft Corporation.) [HKLM] -- KB978037
O42 - Logiciel: تحديث أمان لـ Windows XP (KB978251)‎ - (.Microsoft Corporation.) [HKLM] -- KB978251
O42 - Logiciel: تحديث أمان لـ Windows XP (KB978262)‎ - (.Microsoft Corporation.) [HKLM] -- KB978262
O42 - Logiciel: تحديث أمان لـ Windows XP (KB978706)‎ - (.Microsoft Corporation.) [HKLM] -- KB978706
O42 - Logiciel: تحديث لـ Windows XP (KB955839)‎ - (.Microsoft Corporation.) [HKLM] -- KB955839
O42 - Logiciel: تحديث لـ Windows XP (KB967715)‎ - (.Microsoft Corporation.) [HKLM] -- KB967715
O42 - Logiciel: تحديث لـ Windows XP (KB973815)‎ - (.Microsoft Corporation.) [HKLM] -- KB973815
O42 - Logiciel: حزمة موفر خدمة تشفير البطاقة الذكية الأساسية من Microsoft - (.Microsoft Corporation.) [HKLM] -- KB909520
O42 - Logiciel: ‏‏تحديث الأمان لـ Windows XP (KB941569) - (.Microsoft Corporation.) [HKLM] -- KB941569
~ Logic: 29 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DownloadManager]
[HKCU\Software\ESET]
[HKCU\Software\Google]
[HKCU\Software\IDT]
[HKCU\Software\Intel]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Policies]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\ESET]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\IDT]
[HKLM\Software\Intel]
[HKLM\Software\LG Electronics]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Skype]
[HKLM\Software\Soeperman Enterprises Ltd.]
[HKLM\Software\VideoLAN]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\mozilla.org]
~ Key Software: 131 Scanned in 00mn 00s



---\\ Contents of the Common Files folders (O43)
O43 - CFD: 17-03-2015 - 17:46:07 - [] ----D C:\Program Files\Common Files
O43 - CFD: 17-03-2015 - 16:09:37 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 19-03-2015 - 20:40:09 - [] ----D C:\Program Files\ESET
O43 - CFD: 17-03-2015 - 18:03:32 - [] ----D C:\Program Files\Google
O43 - CFD: 17-03-2015 - 17:46:27 - [] ----D C:\Program Files\IDT
O43 - CFD: 17-03-2015 - 17:46:10 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 17-03-2015 - 18:10:13 - [] ----D C:\Program Files\Internet Download Manager
O43 - CFD: 17-03-2015 - 16:10:58 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 17-03-2015 - 22:16:44 - [] ----D C:\Program Files\LG Electronics
O43 - CFD: 17-03-2015 - 16:10:46 - [] ----D C:\Program Files\Movie Maker
O43 - CFD: 18-03-2015 - 23:29:03 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 17-03-2015 - 20:53:43 - [] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 17-03-2015 - 16:11:03 - [] ----D C:\Program Files\NetMeeting
O43 - CFD: 17-03-2015 - 16:11:43 - [] ----D C:\Program Files\Online Services
O43 - CFD: 17-03-2015 - 16:11:00 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 17-03-2015 - 16:21:17 - [] ----D C:\Program Files\Sigmatel
O43 - CFD: 17-03-2015 - 16:41:52 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 17-03-2015 - 19:31:01 - [] ----D C:\Program Files\VideoLAN
O43 - CFD: 17-03-2015 - 16:11:32 - [] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 17-03-2015 - 16:12:46 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 17-03-2015 - 16:09:13 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 17-03-2015 - 16:11:46 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 17-03-2015 - 17:53:05 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 19-03-2015 - 22:52:57 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 17-03-2015 - 17:46:07 - [] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 17-03-2015 - 16:42:01 - [] ----D C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 17-03-2015 - 16:10:59 - [] ----D C:\Program Files\Common Files\MSSoap
O43 - CFD: 17-03-2015 - 18:04:24 - [] ----D C:\Program Files\Common Files\ODBC
O43 - CFD: 17-03-2015 - 16:11:02 - [] ----D C:\Program Files\Common Files\Services
O43 - CFD: 17-03-2015 - 18:04:20 - [] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 17-03-2015 - 16:10:22 - [] ----D C:\Program Files\Common Files\System
O43 - CFD: 17-03-2015 - 18:51:34 - [] ----D C:\Documents and Settings\All Users\Application Data\ESET
O43 - CFD: 17-03-2015 - 18:10:11 - [0] ----D C:\Documents and Settings\All Users\Application Data\IDM
O43 - CFD: 17-03-2015 - 16:12:43 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 17-03-2015 - 20:53:41 - [] ----D C:\Documents and Settings\All Users\Application Data\Mozilla
O43 - CFD: 17-03-2015 - 18:51:34 - [] ----D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\ESET
O43 - CFD: 17-03-2015 - 18:03:46 - [] ----D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\Google Chrome
O43 - CFD: 17-03-2015 - 18:10:10 - [] ----D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\Internet Download Manager
O43 - CFD: 17-03-2015 - 19:31:44 - [] ----D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\VideoLAN
O43 - CFD: 17-03-2015 - 17:53:05 - [] ----D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\WinRAR
O43 - CFD: 19-03-2015 - 22:52:58 - [] ----D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\ZHP =>.Nicolas Coolman
O43 - CFD: 17-03-2015 - 16:12:55 - [] R---D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\أدوات إدارية
O43 - CFD: 17-03-2015 - 16:10:08 - [] R---D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\البرامج الملحقة
O43 - CFD: 17-03-2015 - 18:03:14 - [] R---D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل
O43 - CFD: 17-03-2015 - 16:09:48 - [] R---D C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\تسالي
O43 - CFD: 17-03-2015 - 17:47:05 - [] ----D C:\Documents and Settings\houssam\Application Data\Adobe
O43 - CFD: 19-03-2015 - 20:43:39 - [] ----D C:\Documents and Settings\houssam\Application Data\DMCache
O43 - CFD: 17-03-2015 - 18:53:28 - [] ----D C:\Documents and Settings\houssam\Application Data\ESET
O43 - CFD: 17-03-2015 - 16:41:55 - [] ----D C:\Documents and Settings\houssam\Application Data\Identities
O43 - CFD: 17-03-2015 - 23:05:06 - [] ----D C:\Documents and Settings\houssam\Application Data\IDM
O43 - CFD: 17-03-2015 - 17:55:10 - [] ----D C:\Documents and Settings\houssam\Application Data\Macromedia
O43 - CFD: 17-03-2015 - 18:07:25 - [] -S--D C:\Documents and Settings\houssam\Application Data\Microsoft
O43 - CFD: 17-03-2015 - 22:10:55 - [] ----D C:\Documents and Settings\houssam\Application Data\Mozilla
O43 - CFD: 19-03-2015 - 17:51:08 - [] ----D C:\Documents and Settings\houssam\Application Data\vlc
O43 - CFD: 17-03-2015 - 18:06:01 - [] ----D C:\Documents and Settings\houssam\Application Data\WinRAR
O43 - CFD: 19-03-2015 - 22:54:12 - [] ----D C:\Documents and Settings\houssam\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 17-03-2015 - 18:53:28 - [] ----D C:\Documents and Settings\houssam\Local Settings\Application Data\ESET
O43 - CFD: 17-03-2015 - 18:03:48 - [] ----D C:\Documents and Settings\houssam\Local Settings\Application Data\Google
O43 - CFD: 17-03-2015 - 16:42:13 - [] -S--D C:\Documents and Settings\houssam\Local Settings\Application Data\Microsoft
O43 - CFD: 17-03-2015 - 22:10:49 - [] ----D C:\Documents and Settings\houssam\Local Settings\Application Data\Mozilla
O43 - CFD: 17-03-2015 - 18:10:10 - [] ----D C:\Documents and Settings\houssam\قائمة ابدأ\البرامج\Internet Download Manager
O43 - CFD: 17-03-2015 - 17:53:05 - [] ----D C:\Documents and Settings\houssam\قائمة ابدأ\البرامج\WinRAR
O43 - CFD: 17-03-2015 - 16:42:03 - [] R---D C:\Documents and Settings\houssam\قائمة ابدأ\البرامج\البرامج الملحقة
O43 - CFD: 17-03-2015 - 18:03:14 - [] R---D C:\Documents and Settings\houssam\قائمة ابدأ\البرامج\بدء التشغيل
~ Program Folder: 64 Scanned in 00mn 00s



---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.FC69F39F505CA51B4090B1CDADF02B69] - 12-03-2015 - 9:24:40 ---A- . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\system32\Drivers\idmtdi.sys [125304]
O44 - LFC:[MD5.FA579938B0733B87066546AFE951082C] - 17-03-2015 - 16:07:23 -SH-- . (...) -- C:\boot.ini [211]
O44 - LFC:[MD5.CC999E99A50BFC8BF637D6611BB5C234] - 17-03-2015 - 16:07:56 ---A- . (...) -- C:\WINDOWS\cmsetacl.log [200]
O44 - LFC:[MD5.15CABD0F7C00C47C70124907916AF3F1] - 17-03-2015 - 16:08:37 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
O44 - LFC:[MD5.88155247177638048422893737429D9E] - 17-03-2015 - 16:08:37 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\Drivers\termdd.sys [40840]
O44 - LFC:[MD5.17A64FEC9FA1E45876421A02E0909A95] - 17-03-2015 - 16:08:40 ---A- . (.Microsoft Corporation - WMI Snapin Helpers.) -- C:\WINDOWS\system32\mmfutil.dll [17408]
O44 - LFC:[MD5.8569938E62C218BF9D57A0CD4F8D48E0] - 17-03-2015 - 16:08:40 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\cmprops.dll [184320]
O44 - LFC:[MD5.4623EAB698442C50465B9DF8C6327CAB] - 17-03-2015 - 16:08:40 ---A- . (.Microsoft Corporation - Windows Product Activation Configuration WM.) -- C:\WINDOWS\system32\licwmi.dll [58880]
O44 - LFC:[MD5.D5B8BBEDD766D655ACDB33C22D1655B9] - 17-03-2015 - 16:08:41 ---A- . (.Microsoft Corporation - WMI Snapins.) -- C:\WINDOWS\system32\servdeps.dll [55808]
O44 - LFC:[MD5.51038C9C00955D4CE93DD296263B49E4] - 17-03-2015 - 16:08:46 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatq.dll [498688]
O44 - LFC:[MD5.202B223C7F86B734257BAB1CCD37FDB1] - 17-03-2015 - 16:08:47 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrv.dll [226304]
O44 - LFC:[MD5.DBA6E9AEDCB2F31210BF6E864F8DE69E] - 17-03-2015 - 16:08:47 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvut.dll [625664]
O44 - LFC:[MD5.2285E4F2E4FA15548F175A3A4E3E9306] - 17-03-2015 - 16:08:47 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsnap.dll [167424]
O44 - LFC:[MD5.A638009585C388E3B1843E04157EB599] - 17-03-2015 - 16:08:47 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comsvcs.dll [1267200]
O44 - LFC:[MD5.513CDFB4F460585A40B45010976490B8] - 17-03-2015 - 16:08:47 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comuid.dll [539648]
O44 - LFC:[MD5.53586A94E910EA6E41875BAB732BB7C9] - 17-03-2015 - 16:08:48 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\catsrvps.dll [85504]
O44 - LFC:[MD5.4C5227B5390297243DFE0BBFA3D2429F] - 17-03-2015 - 16:08:48 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\clbcatex.dll [110592]
O44 - LFC:[MD5.DE2660483ABC47DE86BA398EAA936BB2] - 17-03-2015 - 16:08:48 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\colbact.dll [60416]
O44 - LFC:[MD5.513B337D1CBE79FFB5104ED28231C90A] - 17-03-2015 - 16:08:48 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comaddin.dll [28160]
O44 - LFC:[MD5.7EAB2D9CCB00B373C7290086C9DA10D4] - 17-03-2015 - 16:08:48 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\comrepl.dll [97792]
O44 - LFC:[MD5.289755C6D5B97810B9E0971FA8FBAD96] - 17-03-2015 - 16:08:48 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\stclient.dll [59392]
O44 - LFC:[MD5.A1D2E6DD4FC0C9A4208717B11E0CA79C] - 17-03-2015 - 16:08:49 ---A- . (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144]
O44 - LFC:[MD5.B12E202081B0F54991A34F11229AA522] - 17-03-2015 - 16:08:49 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\dcomcnfg.exe [6144]
O44 - LFC:[MD5.4879E4741F31E4163EECD05707F9E6F3] - 17-03-2015 - 16:08:49 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxdm.dll [30720]
O44 - LFC:[MD5.5D1DAEBD107E610CA703C67D9558ED97] - 17-03-2015 - 16:08:49 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxex.dll [4096]
O44 - LFC:[MD5.2E28DE45CFB069123F8637C0BF4FD897] - 17-03-2015 - 16:08:49 ---A- . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\mtxlegih.dll [34304]
O44 - LFC:[MD5.5F3472A9434E4250E6599A953E2D140F] - 17-03-2015 - 16:08:49 R--A- . (.Microsoft Corporation - MS DTC log manager DLL.) -- C:\WINDOWS\system32\msdtclog.dll [58880]
O44 - LFC:[MD5.996041918B03A687403C1FEBFF0339A1] - 17-03-2015 - 16:08:50 ---A- . (.Microsoft Corporation - MS DTC helper APIs DLL.) -- C:\WINDOWS\system32\xolehlp.dll [11776]
O44 - LFC:[MD5.D1D2655EF775728F65773EE7C9A2AC9B] - 17-03-2015 - 16:08:50 R--A- . (.Microsoft Corporation - MS DTC OLE Transactions interface proxy DLL.) -- C:\WINDOWS\system32\msdtcprx.dll [428032]
O44 - LFC:[MD5.5A8C41D9BB3069F78D6D65060CD943A5] - 17-03-2015 - 16:08:50 R--A- . (.Microsoft Corporation - MS DTC transaction manager DLL.) -- C:\WINDOWS\system32\msdtctm.dll [956928]
O44 - LFC:[MD5.5FB9B56048D866B5F3F38B49DD66C36C] - 17-03-2015 - 16:08:51 ---A- . (.Microsoft Corporation - Configuration Backend Interface.) -- C:\WINDOWS\system32\cfgbkend.dll [38912]
O44 - LFC:[MD5.2E90E1AE376CF8208DF68E229C1022DA] - 17-03-2015 - 16:08:51 ---A- . (.Microsoft Corporation - DLL Interface to TermDD Device Driver.) -- C:\WINDOWS\system32\icaapi.dll [11264]
O44 - LFC:[MD5.FE81D3A2A5A6FFB3CE0BCCC28C2DDD1C] - 17-03-2015 - 16:08:51 ---A- . (.Microsoft Corporation - Query Process Utility.) -- C:\WINDOWS\system32\qprocess.exe [19968]
O44 - LFC:[MD5.C62B4BCB2447A9FED3531849AC64C872] - 17-03-2015 - 16:08:51 R--A- . (.Microsoft Corporation - MS DTC administrative component DLL.) -- C:\WINDOWS\system32\msdtcuiu.dll [161792]
O44 - LFC:[MD5.1E79FA34D1CF9E52AC1ADC2A851BC5BF] - 17-03-2015 - 16:08:51 R--A- . (.Microsoft Corporation - Microsoft database support DLL for Oracle.) -- C:\WINDOWS\system32\mtxoci.dll [91648]
O44 - LFC:[MD5.DAF957B90B21E7399EEC57C5D0BB8CAE] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop TSRDP Session Add-.) -- C:\WINDOWS\system32\rdsaddin.exe [13824]
O44 - LFC:[MD5.47B61AA3807EA393A970857B70ED72E0] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - Microsoft® Remote Desktop Help Session Mana.) -- C:\WINDOWS\system32\sessmgr.exe [141312]
O44 - LFC:[MD5.AED6FB412974B1EF0A657B266F8F995A] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - RDP Clip Monitor.) -- C:\WINDOWS\system32\rdpclip.exe [62976]
O44 - LFC:[MD5.1CEDA42CF2BD31EE341E01CA69A7C8E8] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\WINDOWS\system32\rdpwsx.dll [87176]
O44 - LFC:[MD5.D926F738784B3888FD7B6127B1E46010] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - RDSHost Client Module.) -- C:\WINDOWS\system32\rdchost.dll [147968]
O44 - LFC:[MD5.6DBE32C62978B7C28B5A55B1FC84D081] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - RDSHost Server Module.) -- C:\WINDOWS\system32\rdshost.exe [67072]
O44 - LFC:[MD5.4BA9227A5DE561C7883CD324EC2E38F7] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - Remote Desktop Connection.) -- C:\WINDOWS\system32\mstsc.exe [677888]
O44 - LFC:[MD5.58E202572D3251BF2687BF841EA00CE0] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - Terminal Server Service.) -- C:\WINDOWS\system32\termsrv.dll [295424]
O44 - LFC:[MD5.9F5A3B35A0D59C4D562C5F7669BAACCF] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - ‎‎Remote Sessions CPL Extension.) -- C:\WINDOWS\system32\remotepg.dll [60416]
O44 - LFC:[MD5.52BF7631044F83D4A04204FB5CFBC918] - 17-03-2015 - 16:08:52 ---A- . (.Microsoft Corporation - ‎‎Terminal Server MultiMedia Driver.) -- C:\WINDOWS\system32\rdpsnd.dll [19968]
O44 - LFC:[MD5.15D87326A578120EAE3A4A66546840E0] - 17-03-2015 - 16:08:53 R--A- . (.Microsoft Corporation - Terminal Services ActiveX Client.) -- C:\WINDOWS\system32\mstscax.dll [2066432]
O44 - LFC:[MD5.1D7F7A37A15E64D6B931B3B56E7E2E48] - 17-03-2015 - 16:08:54 ---A- . (.Microsoft Corporation - Anywhere access client.) -- C:\WINDOWS\system32\aaclient.dll [136192]
O44 - LFC:[MD5.8A654155094E5B2B9AA639AC1A8F6C17] - 17-03-2015 - 16:08:54 ---A- . (.Microsoft Corporation - RPC/HTTP Downlevel Side-by-side Runtime.) -- C:\WINDOWS\system32\rhttpaa.dll [290304]
O44 - LFC:[MD5.F80DF76491F0BF4DE61B8A6C709AAB75] - 17-03-2015 - 16:08:54 ---A- . (.Microsoft Corporation - TSGateway QEC.) -- C:\WINDOWS\system32\tsgqec.dll [53248]
O44 - LFC:[MD5.5327BFDA3391D9F0F7B796E856258E1B] - 17-03-2015 - 16:08:54 ---A- . (.Microsoft Corporation - Terminal Server Configuration WMI provider.) -- C:\WINDOWS\system32\tscfgwmi.dll [93696]
O44 - LFC:[MD5.6471A66807F5E104E4885F5B67349397] - 17-03-2015 - 16:08:55 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys [12040]
O44 - LFC:[MD5.6728E45B66F93C08F11DE2E316FC70DD] - 17-03-2015 - 16:08:55 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only,.) -- C:\WINDOWS\system32\Drivers\rdpwd.sys [139656]
O44 - LFC:[MD5.C56B6D0402371CF3700EB322EF3AAF61] - 17-03-2015 - 16:08:55 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys [21896]
O44 - LFC:[MD5.CC8E51EA73B13F951836D7892E8B1A9A] - 17-03-2015 - 16:08:56 ---A- . (.Microsoft Corporation - ‎‎Spider.) -- C:\WINDOWS\system32\spider.exe [538624]
O44 - LFC:[MD5.A399A3820AF6A28F948BCE464CFB0BBF] - 17-03-2015 - 16:08:56 ---A- . (.Microsoft Corporation - ‎‎Windows NT ClipBook Viewer.) -- C:\WINDOWS\system32\clipbrd.exe [101888]
O44 - LFC:[MD5.6734B21F490BE0AAE76CF496A13F81B6] - 17-03-2015 - 16:08:56 R--A- . (.Microsoft Corporation - ‎‎الرسام.) -- C:\WINDOWS\system32\mspaint.exe [342016]
O44 - LFC:[MD5.E6CB558F7C3C6B6E07341984F4D9AA21] - 17-03-2015 - 16:08:57 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hypertrm.dll [350720]
O44 - LFC:[MD5.9D8DE01CA5DE98CFF568A2553C796AED] - 17-03-2015 - 16:08:57 ---A- . (.Microsoft Corporation - Control Panel DLL.) -- C:\WINDOWS\system32\access.cpl [69120]
O44 - LFC:[MD5.8CDE07439443F21800FCB9B812B33303] - 17-03-2015 - 16:08:57 ---A- . (.Microsoft Corporation - ‎‎Media Player.) -- C:\WINDOWS\system32\mplay32.exe [123392]
O44 - LFC:[MD5.A1C3DB890F3E51EF5DB00D3AE3A8A51A] - 17-03-2015 - 16:08:57 ---A- . (.Microsoft Corporation - ‎‎Microsoft Accessibility Wizard.) -- C:\WINDOWS\system32\accwiz.exe [183296]
O44 - LFC:[MD5.88C863E0A2488A600879142B576CE94E] - 17-03-2015 - 16:08:57 ---A- . (.Microsoft Corporation - ‎‎Sound Recorder accessory.) -- C:\WINDOWS\system32\sndrec32.exe [131072]
O44 - LFC:[MD5.937D97D1F39DD1CB1AB79FCEF8AEB6C0] - 17-03-2015 - 16:08:59 ---A- . (...) -- C:\WINDOWS\system32\wmimgmt.msc [63488]
O44 - LFC:[MD5.CDD932EDCB756FB5F7CE5E2F090BA838] - 17-03-2015 - 16:09:04 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.h [768]
O44 - LFC:[MD5.8126F54F89B4C012F1C5470832565101] - 17-03-2015 - 16:09:04 ---A- . (...) -- C:\WINDOWS\system32\msdtcprf.ini [3714]
O44 - LFC:[MD5.9CEC3BBC64D3A837396F801E189B41A1] - 17-03-2015 - 16:09:04 ---A- . (.Microsoft Corporation - Message Utility.) -- C:\WINDOWS\system32\msg.exe [20992]
O44 - LFC:[MD5.44329650003A3127584805A62332C77E] - 17-03-2015 - 16:09:04 ---A- . (.Microsoft Corporation - Modem Connection Driver.) -- C:\WINDOWS\system32\cdmodem.dll [15872]
O44 - LFC:[MD5.F79479F584A72307BD71BFB8DB66047E] - 17-03-2015 - 16:09:04 ---A- . (.Microsoft Corporation - Session Logoff Utility.) -- C:\WINDOWS\system32\logoff.exe [15360]
O44 - LFC:[MD5.4A547D74B435E78418BE06406250C1D3] - 17-03-2015 - 16:09:05 ---A- . (...) -- C:\WINDOWS\system32\tslabels.h [3286]
O44 - LFC:[MD5.03C361FAB5AD67924C5150A384C62BE6] - 17-03-2015 - 16:09:05 ---A- . (...) -- C:\WINDOWS\system32\tslabels.ini [13223]
O44 - LFC:[MD5.F463BC45CD34ADE54F801746B6D322B1] - 17-03-2015 - 16:09:05 ---A- . (...) -- C:\WINDOWS\system32\usrlogon.cmd [1161]
O44 - LFC:[MD5.F9C425AED9CB3C422B46B6EFE70C40FE] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Query Session Utility.) -- C:\WINDOWS\system32\qwinsta.exe [22016]
O44 - LFC:[MD5.F8D3C57A56E101F8488DE5AC2342525F] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Query Terminal Server Utility.) -- C:\WINDOWS\system32\qappsrv.exe [16896]
O44 - LFC:[MD5.1311FC2943A7ABEB658101B87A4CF5FD] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Registry Initializer.) -- C:\WINDOWS\system32\regini.exe [33792]
O44 - LFC:[MD5.D9EED2624535E9D087DA047006ABCEB0] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Reset Session Utility.) -- C:\WINDOWS\system32\rwinsta.exe [15872]
O44 - LFC:[MD5.7444E20B20544682B74FB3AB882245CB] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Session Connection Utility.) -- C:\WINDOWS\system32\tscon.exe [14848]
O44 - LFC:[MD5.A54DFE79BCB0F852EA3626D792FEBBE0] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Session Disconnection Utility.) -- C:\WINDOWS\system32\tsdiscon.exe [14848]
O44 - LFC:[MD5.5FEB024F2CA573F85C97A1B4758F4D27] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Session Remote Control Utility.) -- C:\WINDOWS\system32\shadow.exe [14848]
O44 - LFC:[MD5.BFA12CB8E5C30BA1E4B6E3DE14AE43ED] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - System Shutdown Utility.) -- C:\WINDOWS\system32\tsshutdn.exe [16896]
O44 - LFC:[MD5.1AA47AABAD8806E5E4F9ED8204A31894] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Terminal Server Connection Configuration Ex.) -- C:\WINDOWS\system32\rdpcfgex.dll [4096]
O44 - LFC:[MD5.64A5B2C1EC4A6BD46ECC8DD2FCDFE9AF] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Terminal Services End Process Utility.) -- C:\WINDOWS\system32\tskill.exe [16384]
O44 - LFC:[MD5.7260B81EABC44D1E2D7DD32E71135E3B] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - Terminal Services Reset Utility.) -- C:\WINDOWS\system32\reset.exe [9728]
O44 - LFC:[MD5.209CAFD75E2D77CF7EFFF5063F01702B] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - ‎‎Entertainment Pack FreeCell Game.) -- C:\WINDOWS\system32\freecell.exe [55808]
O44 - LFC:[MD5.2BE50C1F87F41B9520D07BD8D3A0AFD5] - 17-03-2015 - 16:09:05 ---A- . (.Microsoft Corporation - ‎‎The Microsoft Hearts Network.) -- C:\WINDOWS\system32\mshearts.exe [127488]
O44 - LFC:[MD5.405E1EF8E3C88E9BCD2853382BB12430] - 17-03-2015 - 16:09:06 ---A- . (...) -- C:\WINDOWS\system32\bopomofo.uce [22984]
O44 - LFC:[MD5.4FDED87068052EEB9B72A97FDBC141DB] - 17-03-2015 - 16:09:06 ---A- . (...) -- C:\WINDOWS\system32\gb2312.uce [24006]
O44 - LFC:[MD5.10436571A79CD7AE3203174F8C2AB976] - 17-03-2015 - 16:09:06 ---A- . (.Microsoft Corporation - Unicode name Dll for UCE.) -- C:\WINDOWS\system32\getuname.dll [605696]
O44 - LFC:[MD5.B90950ED069886D56239D0FF49B7DA70] - 17-03-2015 - 16:09:06 ---A- . (.Microsoft Corporation - ‎‎Character Map.) -- C:\WINDOWS\system32\charmap.exe [80384]
O44 - LFC:[MD5.2080EA39DE7A24801DF7E7E0CAC4545E] - 17-03-2015 - 16:09:06 ---A- . (.Microsoft Corporation - ‎‎Entertainment Pack Minesweeper Game.) -- C:\WINDOWS\system32\winmine.exe [119808]
O44 - LFC:[MD5.A7F0208ADC0C99FBCBECCC4DE96DFCAB] - 17-03-2015 - 16:09:06 ---A- . (.Microsoft Corporation - ‎‎Solitaire Game Applet.) -- C:\WINDOWS\system32\sol.exe [57344]
O44 - LFC:[MD5.D10724339EA83817B22401F06154E423] - 17-03-2015 - 16:09:06 ---A- . (.Microsoft Corporation - ‎‎Windows Calculator application file.) -- C:\WINDOWS\system32\calc.exe [114688]
O44 - LFC:[MD5.DAC71A10A6A71CB6E3F427AE3283734B] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\Blue Lace 16.bmp [1272]
O44 - LFC:[MD5.73D70ED3EC3BBFD8FD35DF431C38F374] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\Coffee Bean.bmp [17062]
O44 - LFC:[MD5.39F43DBCE366B2561DF073B4C0839299] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\Soap Bubbles.bmp [65978]
O44 - LFC:[MD5.038F6AD6CEE43585D814CDBC7CDFD3EC] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\system32\ideograf.uce [60458]
O44 - LFC:[MD5.7C0C25F4BA1084C4ABBEEA2C74194C5F] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\system32\kanji_1.uce [6948]
O44 - LFC:[MD5.529BBD63519BBD654EF328454019693F] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\system32\kanji_2.uce [8484]
O44 - LFC:[MD5.7A7A04370A6030B9B0E8178DAD4A6E41] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\system32\korean.uce [12876]
O44 - LFC:[MD5.8CA32E9D986FA76F60EFBCFCD9D80A58] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\system32\shiftjis.uce [16740]
O44 - LFC:[MD5.30F5568679A54042F99CA9EC1102EBCD] - 17-03-2015 - 16:09:07 ---A- . (...) -- C:\WINDOWS\system32\subrange.uce [93702]
O44 - LFC:[MD5.3A8B85AB7B415BF3F8AFE285DFE0CE29] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\FeatherTexture.bmp [16730]
O44 - LFC:[MD5.203EF178BF8B0A8EC34E27E4DEDB6349] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\Gone Fishing.bmp [17336]
O44 - LFC:[MD5.1AC5E83598D4F2143B59A2D893C3279A] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\Greenstone.bmp [26582]
O44 - LFC:[MD5.280920B6773C74C3649A934257112BE1] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\Prairie Wind.bmp [65954]
O44 - LFC:[MD5.927A66BD587E31CB12D3AB25381658DC] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\Rhododendron.bmp [17362]
O44 - LFC:[MD5.5B4AC407E566076BB726BA91E067D313] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\River Sumida.bmp [26680]
O44 - LFC:[MD5.EB3BFC14E41FBAA41B4FD4489AA82D39] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\Santa Fe Stucco.bmp [65832]
O44 - LFC:[MD5.5290EA6951F4724259F423B12C8E1393] - 17-03-2015 - 16:09:08 ---A- . (...) -- C:\WINDOWS\Zapotec.bmp [9522]
O44 - LFC:[MD5.99CE50F8C9845B84E081B8B203B4182E] - 17-03-2015 - 16:09:12 ---A- . (.Microsoft Corporation - Metering Controls.) -- C:\WINDOWS\system32\avmeter.dll [16384]
O44 - LFC:[MD5.B11409D7A09F8F95299E4D4B9560817D] - 17-03-2015 - 16:09:12 ---A- . (.Microsoft Corporation - TAPI 3.0 Dialer and IP Multicast Conference.) -- C:\WINDOWS\system32\avtapi.dll [227840]
O44 - LFC:[MD5.BB62D6B7C6E0B1099D2CEE7A7AE26BAD] - 17-03-2015 - 16:09:12 ---A- . (.Microsoft Corporation - ‎‎Windows for Workgroups Chat (NT).) -- C:\WINDOWS\system32\winchat.exe [35328]
O44 - LFC:[MD5.90F1EE852CF8EF5B56B28DE9FE589D0E] - 17-03-2015 - 16:09:13 ---A- . (.Hilgraeve, Inc. - HyperTerminal Applet Library.) -- C:\WINDOWS\system32\hticons.dll [44544]
O44 - LFC:[MD5.7E1EEC1F1BBD8F6299B2F22ADEB1DA46] - 17-03-2015 - 16:09:13 ---A- . (.Microsoft Corporation - Wave Manipulation Component.) -- C:\WINDOWS\system32\avwav.dll [73216]
O44 - LFC:[MD5.24BC6ECC1CAD9E8C9A6680228BEB5D5A] - 17-03-2015 - 16:09:13 ---A- . (.Microsoft Corporation - ‎‎Volume Control.) -- C:\WINDOWS\system32\sndvol32.exe [139264]
O44 - LFC:[MD5.7C5A1A040492B57C07376D819989BB1A] - 17-03-2015 - 16:09:18 ---A- . (.Microsoft Corporation - Windows Write.) -- C:\WINDOWS\system32\write.exe [5632]
O44 - LFC:[MD5.9454B99BCBF2DD93D27A8B4173D78BBB] - 17-03-2015 - 16:09:24 ---A- . (...) -- C:\WINDOWS\msmqinst.log [10456]
O44 - LFC:[MD5.A852A4411C1124EF9F8B0B9DEF87C570] - 17-03-2015 - 16:09:28 ---A- . (...) -- C:\WINDOWS\DtcInstall.log [135]
O44 - LFC:[MD5.487403459F0B2F1A3ADEEF02496BD80E] - 17-03-2015 - 16:09:35 ---A- . (...) -- C:\WINDOWS\vb.ini [36]
O44 - LFC:[MD5.6C2F0BA210C2B53EF07653ABAC6C2490] - 17-03-2015 - 16:09:35 ---A- . (...) -- C:\WINDOWS\vbaddin.ini [37]
O44 - LFC:[MD5.4267A19299DF0B1769399754CCFA85ED] - 17-03-2015 - 16:09:45 ---A- . (...) -- C:\WINDOWS\system32\emptyregdb.dat [22144]
O44 - LFC:[MD5.049BD6A5E7224248BB78B28C8F2E9E8B] - 17-03-2015 - 16:10:07 ---A- . (...) -- C:\WINDOWS\netfxocm.log [2790]
O44 - LFC:[MD5.651CAAD8EC81315E749B3998B406B304] - 17-03-2015 - 16:10:10 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [11569]
O44 - LFC:[MD5.37FE70698FA4833231066A0877186525] - 17-03-2015 - 16:10:10 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [1487]
O44 - LFC:[MD5.82AF0865382DA2E86A8BE7FD03D7F8AC] - 17-03-2015 - 16:10:10 ---A- . (...) -- C:\WINDOWS\ocgen.log [16913]
O44 - LFC:[MD5.DADB3267CF9AA47E7EF8BBF043FBC4B8] - 17-03-2015 - 16:10:10 ---A- . (...) -- C:\WINDOWS\sessmgr.setup.log [1022]
O44 - LFC:[MD5.52DCDA358A9FAB08C2FC3C313C8BD76C] - 17-03-2015 - 16:10:18 ---A- . (.Microsoft Corporation - Internet Connection Wizard Autodialer.) -- C:\WINDOWS\system32\icwdial.dll [73728]
O44 - LFC:[MD5.797D78CC9D703CD12A698DDF6850C2E9] - 17-03-2015 - 16:10:18 ---A- . (.Microsoft Corporation - Internet Connection Wizard Library.) -- C:\WINDOWS\system32\inetcfg.dll [274432]
O44 - LFC:[MD5.E7956BAFEA98E96FA85AAADA19E3D2B9] - 17-03-2015 - 16:10:18 ---A- . (.Microsoft Corporation - Internet Signup.) -- C:\WINDOWS\system32\isign32.dll [81920]
O44 - LFC:[MD5.2142D7B8255D5809BC65BB48D0C9039B] - 17-03-2015 - 16:10:19 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icwphbk.dll [65536]
O44 - LFC:[MD5.8F97E67ECB9F450F3E0FF626641DA365] - 17-03-2015 - 16:10:19 ---A- . (.Microsoft Corporation - Task Scheduler Engine.) -- C:\WINDOWS\system32\schedsvc.dll [191488]
O44 - LFC:[MD5.140F3667F0BAE63675EF7DFABF4BF8C1] - 17-03-2015 - 16:10:19 ---A- . (.Microsoft Corporation - Task Scheduler Setup.) -- C:\WINDOWS\system32\mstinit.exe [12288]
O44 - LFC:[MD5.CA5D51B6CFC1A923B545A156ADEB444D] - 17-03-2015 - 16:10:19 ---A- . (.Microsoft Corporation - Task Scheduler interface DLL.) -- C:\WINDOWS\system32\mstask.dll [274944]
O44 - LFC:[MD5.2B964980F212E5EDAF3E3B4E495A4D5A] - 17-03-2015 - 16:10:21 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\WINDOWS\system32\inetres.dll [46592]
O44 - LFC:[MD5.DF88846AB74AF9623F992D4094DFAFB9] - 17-03-2015 - 16:10:21 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll [691712]
O44 - LFC:[MD5.4A99C2C7EACC29820D11449D97E7146A] - 17-03-2015 - 16:10:22 ---A- . (.Microsoft Corporation - Microsoft Internet Account Manager.) -- C:\WINDOWS\system32\msoeacct.dll [252928]
O44 - LFC:[MD5.649316A938E491A45C3B48C4D92605C5] - 17-03-2015 - 16:10:22 ---A- . (.Microsoft Corporation - Microsoft Outlook Express RT Lib.) -- C:\WINDOWS\system32\msoert2.dll [105984]
O44 - LFC:[MD5.271617E06C585C71A6D72C49AB479C40] - 17-03-2015 - 16:10:25 ---A- . (.Microsoft Corporation - Conferencing Utility Dll.) -- C:\WINDOWS\system32\msconf.dll [69632]
O44 - LFC:[MD5.E511EB340EB7E2D375FB5B0C961D8CC9] - 17-03-2015 - 16:10:26 ---A- . (.Intel Corporation - ISR Debug 32-bit Engine.) -- C:\WINDOWS\system32\isrdbg32.dll [32768]
O44 - LFC:[MD5.18BAB1FED8AE111795FD145491E0E027] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - Application Sharing Display Driver.) -- C:\WINDOWS\system32\mnmdd.dll [34560]
O44 - LFC:[MD5.110CF1BD7401D7A216115C947925E0D5] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - Microsoft H.261 ICM Driver.) -- C:\WINDOWS\system32\msh261.drv [188416]
O44 - LFC:[MD5.B89990793FCDD4824F5D61F50E9400CC] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - NMMKCERT Library.) -- C:\WINDOWS\system32\nmmkcert.dll [28672]
O44 - LFC:[MD5.906269382636737667322A5D4A33823D] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - SR CLIENT DLL.) -- C:\WINDOWS\system32\srclient.dll [67584]
O44 - LFC:[MD5.B57E685C65D8A5CB53DFC0DB97E3A590] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys [73344]
O44 - LFC:[MD5.1AB50091ED386CF814D2D187461C9A82] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - System Restore Restore Operation Library.) -- C:\WINDOWS\system32\srrstr.dll [239616]
O44 - LFC:[MD5.0C486E769D9F0BD558EDF1028D5B3A97] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - System Restore Service.) -- C:\WINDOWS\system32\srsvc.dll [170496]
O44 - LFC:[MD5.08487539537F00E88936307156839F82] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - User Location Services Component Module.) -- C:\WINDOWS\system32\ils.dll [81920]
O44 - LFC:[MD5.879A0067D316AE2430787491DE9CCDC0] - 17-03-2015 - 16:10:26 ---A- . (.Microsoft Corporation - ‎‎NetMeeting Remote Desktop Sharing.) -- C:\WINDOWS\system32\mnmsrvc.exe [32768]
O44 - LFC:[MD5.B3178E8FCB7581C7B346CB7A0E4AF1F6] - 17-03-2015 - 16:10:27 ---A- . (.Microsoft Corporation - Filter Library.) -- C:\WINDOWS\system32\fltlib.dll [16896]
O44 - LFC:[MD5.4B6748D2CEE409AFA68D8D56F9C1416E] - 17-03-2015 - 16:10:27 ---A- . (.Microsoft Corporation - Filter Manager Control Program.) -- C:\WINDOWS\system32\fltMc.exe [23040]
O44 - LFC:[MD5.B2CF4B0786F8212CB92ED2B50C6DB6B0] - 17-03-2015 - 16:10:27 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\Drivers\fltMgr.sys [129792]
O44 - LFC:[MD5.434E6964FABB205228CC203302EE492F] - 17-03-2015 - 16:10:48 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.0.) -- C:\WINDOWS\system32\bitsprx3.dll [7168]
O44 - LFC:[MD5.135765D32D105E8B2BD5784E58CF0DD0] - 17-03-2015 - 16:10:48 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service 2.5.) -- C:\WINDOWS\system32\bitsprx4.dll [7168]
O44 - LFC:[MD5.DFF0AEBFA0702300AC61C01DDCB5CF06] - 17-03-2015 - 16:10:48 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\bitsprx2.dll [8192]
O44 - LFC:[MD5.61160A7ED02FCE3AFF5A98C376EB3A24] - 17-03-2015 - 16:10:48 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service Pro.) -- C:\WINDOWS\system32\qmgrprxy.dll [18944]
O44 - LFC:[MD5.B2B94DB65227B0FE579E8DB3C9595E27] - 17-03-2015 - 16:10:48 ---A- . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O44 - LFC:[MD5.D603AE4D6C52E0FDF7FF4B95E22F927C] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Automatic Updates Control Panel.) -- C:\WINDOWS\system32\wuaucpl.cpl [161280]
O44 - LFC:[MD5.899FB8E4869F249F3E1ABB5504115C47] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Client.) -- C:\WINDOWS\system32\wuauclt1.exe [164864]
O44 - LFC:[MD5.FE61A5FD6A12FD4780442735ECC25484] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng.dll [1135616]
O44 - LFC:[MD5.86DAF128A3FC857669FD0FD44672C971] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O44 - LFC:[MD5.4D8B2FE3D2BDB57B524B045FB3500A70] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Windows Update Client API.) -- C:\WINDOWS\system32\wuapi.dll [430080]
O44 - LFC:[MD5.914C099E48DFC3DFCE73C24F332F80C7] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Windows Update Client UI Plugin.) -- C:\WINDOWS\system32\wucltui.dll [112128]
O44 - LFC:[MD5.10F58179365EEC3CC864524D968445FF] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Windows Update Web Control.) -- C:\WINDOWS\system32\wuweb.dll [120320]
O44 - LFC:[MD5.F701831B1F5BE782120B03D5DB914864] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\WINDOWS\system32\wups.dll [32256]
O44 - LFC:[MD5.9498CF0D334B282AA58D1DFC370738DE] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - ‎‎Automatic Updates.) -- C:\WINDOWS\system32\wuauclt.exe [110592]
O44 - LFC:[MD5.18B5ADF79FBB505066FA356759D933B7] - 17-03-2015 - 16:10:49 ---A- . (.Microsoft Corporation - ‎‎Windows Update AutoUpdate Engine.) -- C:\WINDOWS\system32\wuaueng1.dll [182784]
O44 - LFC:[MD5.28F1B580ECB8D285FD55D0229D1F1559] - 17-03-2015 - 16:11:00 ---A- . (.Microsoft Corporation - Internet Connection Wizard.) -- C:\WINDOWS\system32\icfgnt5.dll [16384]
O44 - LFC:[MD5.DED0D9875B78F0B21F91B092530C4561] - 17-03-2015 - 16:11:02 ---A- . (.Microsoft Corporation - Microsoft Internet Account Manager Resource.) -- C:\WINDOWS\system32\acctres.dll [64512]
O44 - LFC:[MD5.12C6EAAD60A67ACFF7F625941D1883EB] - 17-03-2015 - 16:11:03 ---A- . (.Microsoft Corporation - NetMeeting Event Logging DLL.) -- C:\WINDOWS\system32\nmevtmsg.dll [12288]
O44 - LFC:[MD5.B3C7D6782E07FFBEF2265EE8E1D25822] - 17-03-2015 - 16:11:03 ---A- . (.Microsoft Corporation - ‎‎Microsoft G.723.1 CODEC for MSACM.) -- C:\WINDOWS\system32\msg723.acm [118784]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 17-03-2015 - 16:11:10 ---A- . (...) -- C:\WINDOWS\desktop.ini [2]
O44 - LFC:[MD5.81051BCC2CF1BEDF378224B0A93E2877] - 17-03-2015 - 16:11:10 ---A- . (...) -- C:\WINDOWS\system32\desktop.ini [2]
O44 - LFC:[MD5.2F3CDC1D898FD25B2547F5BFEB01FD0D] - 17-03-2015 - 16:11:10 -SH-- . (...) -- C:\WINDOWS\winnt.bmp [48680]
O44 - LFC:[MD5.2F3CDC1D898FD25B2547F5BFEB01FD0D] - 17-03-2015 - 16:11:10 -SH-- . (...) -- C:\WINDOWS\winnt256.bmp [48680]
O44 - LFC:[MD5.842AE5EF97281DCAF10528A38898C408] - 17-03-2015 - 16:11:46 ---A- . (...) -- C:\WINDOWS\bitssetup.log [1880]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17-03-2015 - 16:11:51 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17-03-2015 - 16:11:51 R-HA- . (...) -- C:\WINDOWS\system32\cdplayer.exe.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17-03-2015 - 16:11:51 R-HA- . (...) -- C:\WINDOWS\system32\ncpa.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17-03-2015 - 16:11:51 R-HA- . (...) -- C:\WINDOWS\system32\nwc.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17-03-2015 - 16:11:51 R-HA- . (...) -- C:\WINDOWS\system32\sapi.cpl.manifest [749]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 17-03-2015 - 16:11:51 R-HA- . (...) -- C:\WINDOWS\system32\wuaucpl.cpl.manifest [749]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 17-03-2015 - 16:11:54 R-HA- . (...) -- C:\WINDOWS\system32\WindowsLogon.manifest [488]
O44 - LFC:[MD5.5D76C3FB736514E1D7C88791E7322784] - 17-03-2015 - 16:11:54 R-HA- . (...) -- C:\WINDOWS\system32\logonui.exe.manifest [488]
O44 - LFC:[MD5.421A35EB7E551EF59FC14B3B6B526604] - 17-03-2015 - 16:11:57 ---A- . (...) -- C:\WINDOWS\setuperr.log [173]
O44 - LFC:[MD5.3908FCC505CC5736E374C73ABFEF6676] - 17-03-2015 - 16:12:29 ---A- . (.Microsoft Corporation - Extended MAPI 1.0 for Windows NT.) -- C:\WINDOWS\system32\mapi32.dll [112128]
O44 - LFC:[MD5.ECC603DC73BB052F9E32ED3D42062462] - 17-03-2015 - 16:12:30 ---A- . (...) -- C:\WINDOWS\ODBCINST.INI [4117]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 17-03-2015 - 16:12:39 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
O44 - LFC:[MD5.2A44570770236D602FF1C0B51B61FBA1] - 17-03-2015 - 16:12:46 ---A- . (...) -- C:\WINDOWS\win.ini [507]
O44 - LFC:[MD5.D0396BC679764A61325817628C6D626B] - 17-03-2015 - 16:12:47 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
O44 - LFC:[MD5.3EF7083D3767E121CF89CECC71E1646A] - 17-03-2015 - 16:12:47 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17-03-2015 - 16:12:50 ---A- . (...) -- C:\AUTOEXEC.BAT [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17-03-2015 - 16:12:50 ---A- . (...) -- C:\CONFIG.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17-03-2015 - 16:12:50 ---A- . (...) -- C:\WINDOWS\control.ini [0]
O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 17-03-2015 - 16:12:50 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [2577]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17-03-2015 - 16:12:50 RSHA- . (...) -- C:\IO.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17-03-2015 - 16:12:50 RSHA- . (...) -- C:\MSDOS.SYS [0]
O44 - LFC:[MD5.5E92A5DAAA67839F6B0EFCDC01B40442] - 17-03-2015 - 16:13:03 ----- . (.Microsoft Corporation - Service Pack Messages.) -- C:\WINDOWS\system32\spmsg.dll [17784]
O44 - LFC:[MD5.5260C410D709D63696411E26E4E0F3BA] - 17-03-2015 - 16:13:04 ---A- . (...) -- C:\WINDOWS\KB978706.log [7221]
O44 - LFC:[MD5.20A4B75ABCDC4CBA30E8AC2901D81976] - 17-03-2015 - 16:13:09 ---A- . (...) -- C:\WINDOWS\KB978262.log [6942]
O44 - LFC:[MD5.3D38DEF9513FA1C570CE51E38741EE0C] - 17-03-2015 - 16:13:13 ---A- . (...) -- C:\WINDOWS\KB978251.log [8234]
O44 - LFC:[MD5.FB1C865DB8BD5ED47204566DDAFCD877] - 17-03-2015 - 16:13:18 ---A- . (...) -- C:\WINDOWS\KB978037.log [8069]
O44 - LFC:[MD5.A7E03C88DE2D5F3FB6E6E15048B32DC2] - 17-03-2015 - 16:13:23 ---A- . (...) -- C:\WINDOWS\KB977914.log [9836]
O44 - LFC:[MD5.C95F10D6945E9B785F3DE28209DB80F0] - 17-03-2015 - 16:13:31 ---A- . (...) -- C:\WINDOWS\KB977165.log [9871]
O44 - LFC:[MD5.E8A5221C7C5FCF0866ACA15DBDDD0A95] - 17-03-2015 - 16:13:35 ---A- . (...) -- C:\WINDOWS\KB975713.log [8183]
O44 - LFC:[MD5.95BC85862E74BCDC3F8B9854AF596DBA] - 17-03-2015 - 16:13:41 ---A- . (...) -- C:\WINDOWS\KB975561.log [8267]
O44 - LFC:[MD5.31EAC553137BBC00819E6BE61BFDEDBD] - 17-03-2015 - 16:13:47 ---A- . (...) -- C:\WINDOWS\KB975560.log [8839]
O44 - LFC:[MD5.968D8AC45DE4B965DADB04A2952CB869] - 17-03-2015 - 16:13:51 ---A- . (...) -- C:\WINDOWS\KB975254.log [8266]
O44 - LFC:[MD5.61A930DFB7A068BE51C167304513C57A] - 17-03-2015 - 16:13:56 ---A- . (...) -- C:\WINDOWS\KB975025.log [8128]
O44 - LFC:[MD5.BFAB63438F8B61DE1A8AD46BCF6898A0] - 17-03-2015 - 16:14:00 ---A- . (...) -- C:\WINDOWS\KB974571.log [8124]
O44 - LFC:[MD5.5C50407F4ACFF7D6A8BC24DD1D759FEE] - 17-03-2015 - 16:14:04 ---A- . (...) -- C:\WINDOWS\KB974392.log [8125]
O44 - LFC:[MD5.E80253699566D433007E4CCE43EBB1A0] - 17-03-2015 - 16:14:09 ---A- . (...) -- C:\WINDOWS\KB974318.log [8491]
O44 - LFC:[MD5.D0F648CBDF35825145C97DD2EAA6806E] - 17-03-2015 - 16:14:13 ---A- . (...) -- C:\WINDOWS\KB974112.log [8183]
O44 - LFC:[MD5.E637C9D07F898EB80CF9AB554CF7D244] - 17-03-2015 - 16:14:18 ---A- . (...) -- C:\WINDOWS\KB973904.log [9003]
O44 - LFC:[MD5.B4B71A50833827D09AA573CE9BD88F1D] - 17-03-2015 - 16:14:23 ---A- . (...) -- C:\WINDOWS\KB973869.log [8183]
O44 - LFC:[MD5.10C1456E40478633F01B5425499F5997] - 17-03-2015 - 16:14:28 ---A- . (...) -- C:\WINDOWS\KB973815.log [8250]
O44 - LFC:[MD5.CD4D20A281ECFBE7EAF63EB842984CAB] - 17-03-2015 - 16:14:32 ---A- . (...) -- C:\WINDOWS\KB973507.log [8202]
O44 - LFC:[MD5.230B6CCF5704D3B4596ABA3B7A93469F] - 17-03-2015 - 16:14:37 ---A- . (...) -- C:\WINDOWS\KB973354.log [8204]
O44 - LFC:[MD5.1331CFE7E91FFB6FD4DBD809FC426CC5] - 17-03-2015 - 16:14:40 ---A- . (...) -- C:\WINDOWS\KB973039.log [1086]
O44 - LFC:[MD5.5E5A9164DC1D353C47F2ED1C1CC251EF] - 17-03-2015 - 16:14:45 ---A- . (...) -- C:\WINDOWS\KB972270.log [8382]
O44 - LFC:[MD5.0DA58FBB343948F4580727FFA01F5648] - 17-03-2015 - 16:14:49 ---A- . (...) -- C:\WINDOWS\KB971657.log [8264]
O44 - LFC:[MD5.6A480678F2D555C5127EB4EEB0C042CC] - 17-03-2015 - 16:14:54 ---A- . (...) -- C:\WINDOWS\KB971468.log [8174]
O44 - LFC:[MD5.21B5FA0A186F86A135E62669FFEFBB48] - 17-03-2015 - 16:14:58 ---A- . (...) -- C:\WINDOWS\KB970483.log [8098]
O44 - LFC:[MD5.99F16DE16D718B417C711899723D2E39] - 17-03-2015 - 16:15:03 ---A- . (...) -- C:\WINDOWS\KB970238.log [8264]
O44 - LFC:[MD5.5658313C3D7F47EEDC9E9CB958B98520] - 17-03-2015 - 16:15:08 ---A- . (...) -- C:\WINDOWS\KB969947.log [8124]
O44 - LFC:[MD5.DFF056A866B9BBF21DD98C1EB88D67C6] - 17-03-2015 - 16:15:13 ---A- . (...) -- C:\WINDOWS\KB969059.log [8206]
O44 - LFC:[MD5.FB82DD61E78588B5B32E65DC7A5015FC] - 17-03-2015 - 16:15:21 ---A- . (...) -- C:\WINDOWS\KB967715.log [8127]
O44 - LFC:[MD5.A352175B0C7E37F23CEFF501674A3D40] - 17-03-2015 - 16:15:25 ---A- . (...) -- C:\WINDOWS\KB961501.log [8157]
O44 - LFC:[MD5.EB1618A06111FC206860B2DA3C880A45] - 17-03-2015 - 16:15:28 ---A- . (...) -- C:\WINDOWS\KB961118.log [1143]
O44 - LFC:[MD5.20267B66ABCA4DB15110A8ACFAADC936] - 17-03-2015 - 16:15:33 ---A- . (...) -- C:\WINDOWS\KB960859.log [8493]
O44 - LFC:[MD5.E3B072E120EA000C932AFA8C5CC0E389] - 17-03-2015 - 16:15:37 ---A- . (...) -- C:\WINDOWS\KB960803.log [8126]
O44 - LFC:[MD5.E904C888B712D6D37745A10C9F508045] - 17-03-2015 - 16:15:42 ---A- . (...) -- C:\WINDOWS\KB960225.log [8241]
O44 - LFC:[MD5.5E29F5F0037E59C0A3400D12197E9CD8] - 17-03-2015 - 16:15:47 ---A- . (...) -- C:\WINDOWS\KB959426.log [8555]
O44 - LFC:[MD5.FA822C007B2360910A52DC838EDAFF1E] - 17-03-2015 - 16:15:51 ---A- . (...) -- C:\WINDOWS\KB958869.log [6459]
O44 - LFC:[MD5.993B88EA6F20EEA8B1F60F941EEF38F8] - 17-03-2015 - 16:15:55 ---A- . (...) -- C:\WINDOWS\KB958644.log [8015]
O44 - LFC:[MD5.DD2332CDD4BFEE28361DD04924556850] - 17-03-2015 - 16:15:59 ---A- . (...) -- C:\WINDOWS\KB958469.log [1076]
O44 - LFC:[MD5.F8A7423038B09A31D7DD696D69816FB5] - 17-03-2015 - 16:16:03 ---A- . (...) -- C:\WINDOWS\KB956844.log [7956]
O44 - LFC:[MD5.6AE7B7D979EDB45B69D46B2105A9CE4F] - 17-03-2015 - 16:16:07 ---A- . (...) -- C:\WINDOWS\KB956803.log [7893]
O44 - LFC:[MD5.126DE2CEAA9A325EF825FE71E35667E8] - 17-03-2015 - 16:16:12 ---A- . (...) -- C:\WINDOWS\KB956802.log [7924]
O44 - LFC:[MD5.727BF4ACDD91FC657EE352D31192E770] - 17-03-2015 - 16:16:18 ---A- . (...) -- C:\WINDOWS\KB956744.log [8522]
O44 - LFC:[MD5.5184BE8838A02F6DBE106DE533CC76A8] - 17-03-2015 - 16:16:27 ---A- . (.Microsoft Corporation - Update RunOnce Service.) -- C:\WINDOWS\system32\spupdsvc.exe [26488]
O44 - LFC:[MD5.E1B84D622AAD4F3D674E60D8A7325A33] - 17-03-2015 - 16:16:29 ---A- . (...) -- C:\WINDOWS\KB956572.log [11552]
O44 - LFC:[MD5.52F23E260D572526AC83EDA91CB71241] - 17-03-2015 - 16:16:33 ---A- . (...) -- C:\WINDOWS\system32\TZLog.log [212272]
O44 - LFC:[MD5.C1509F8279594FBE53ED3FD35E44D8A3] - 17-03-2015 - 16:16:35 ---A- . (...) -- C:\WINDOWS\KB955839.log [18986]
O44 - LFC:[MD5.0C1317DDE960D72F644A15B5419905C4] - 17-03-2015 - 16:16:40 ---A- . (...) -- C:\WINDOWS\KB955069.log [7899]
O44 - LFC:[MD5.3BA07935EE74FA8BE0CB62613E602DD7] - 17-03-2015 - 16:16:45 ---A- . (...) -- C:\WINDOWS\KB954459.log [8066]
O44 - LFC:[MD5.10E068835021E0905DDA924C0CEC89CE] - 17-03-2015 - 16:16:49 ---A- . (...) -- C:\WINDOWS\KB953155.log [8354]
O44 - LFC:[MD5.9E38A5A35154CB08D22DF8E956360490] - 17-03-2015 - 16:16:54 ---A- . (...) -- C:\WINDOWS\KB952954.log [7981]
O44 - LFC:[MD5.53A2038CC6B1BD65EC67925082E8AC98] - 17-03-2015 - 16:16:59 ---A- . (...) -- C:\WINDOWS\KB952004.log [9514]
O44 - LFC:[MD5.EC86BA504A3A62A8C91565638AFC3C20] - 17-03-2015 - 16:17:05 ---A- . (...) -- C:\WINDOWS\KB951748.log [8998]
O44 - LFC:[MD5.5AB56E09B3A1ADC9487614EFA0D07C05] - 17-03-2015 - 16:17:10 ---A- . (...) -- C:\WINDOWS\KB951066.log [7902]
O44 - LFC:[MD5.004C883BDBDA7EAD02A43AC9D2E737DD] - 17-03-2015 - 16:17:14 ---A- . (...) -- C:\WINDOWS\KB950974.log [8059]
O44 - LFC:[MD5.281B58424ED67CF3941878535F0A1AEE] - 17-03-2015 - 16:17:19 ---A- . (...) -- C:\WINDOWS\KB950762.log [8011]
O44 - LFC:[MD5.DC4F9E2B6B91AC252033AC6FA7AACC17] - 17-03-2015 - 16:17:22 ---A- . (...) -- C:\WINDOWS\KB946648.log [1081]
O44 - LFC:[MD5.A53D25AE60E829AD970CEE1FD5C8BF1D] - 17-03-2015 - 16:17:30 ---A- . (...) -- C:\WINDOWS\KB941569.log [8476]
O44 - LFC:[MD5.6C1386E57CF4BAB2F6846896CA0F57A7] - 17-03-2015 - 16:17:36 ---A- . (...) -- C:\WINDOWS\KB923561.log [9719]
O44 - LFC:[MD5.7387AC6BDD8837CE0E135E47A64F79D1] - 17-03-2015 - 16:17:40 ---A- . (...) -- C:\WINDOWS\basecsp.log [6878]
O44 - LFC:[MD5.27D3351EE01923CF43CB69B0B45D9097] - 17-03-2015 - 16:18:10 ---A- . (...) -- C:\WINDOWS\Drvs.Debug [1194]
O44 - LFC:[MD5.C6301D9FB30C312F8FAE0C29C97D5051] - 17-03-2015 - 16:21:13 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\system32\Drivers\sthda.sys [1392498]
O44 - LFC:[MD5.DB57A530C4A4E8364A03BB9F94355ECC] - 17-03-2015 - 16:21:13 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\system32\stacapi.dll [454769]
O44 - LFC:[MD5.F563A64AA9EA7B911F36A63E3969D40F] - 17-03-2015 - 16:21:13 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\system32\staco.dll [169472]
O44 - LFC:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 17-03-2015 - 16:21:16 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\Drivers\drmk.sys [60160]
O44 - LFC:[MD5.E82A496C3961EFC6828B508C310CE98F] - 17-03-2015 - 16:21:16 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\system32\Drivers\portcls.sys [146048]
O44 - LFC:[MD5.35E468BD880762AE345588F97BB56DFE] - 17-03-2015 - 16:21:16 ---A- . (.Microsoft Corporation - User CSA Library.) -- C:\WINDOWS\system32\ksuser.dll [4096]
O44 - LFC:[MD5.53A250B681B81584BE9DA4C2048CDFE0] - 17-03-2015 - 16:21:16 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\WINDOWS\system32\ksproxy.ax [129536]
O44 - LFC:[MD5.5FE18FFF6FBCF218290042009EAB023D] - 17-03-2015 - 16:21:22 ---A- . (.Sonic Focus, Inc - SFNG32.SYS.) -- C:\WINDOWS\system32\Drivers\sfng32.sys [41728]
O44 - LFC:[MD5.482068F766AE1B79C12DE149897CEC74] - 17-03-2015 - 16:26:29 ---A- . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\WINDOWS\system32\Drivers\intelide.sys [5504]
O44 - LFC:[MD5.3529828EC571FB2F64F6B142F9109993] - 17-03-2015 - 16:27:09 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\Drivers\Rtnicxp.sys [105088]
O44 - LFC:[MD5.3A0BEFA97F1F3A50B6D64E8881AEF389] - 17-03-2015 - 16:27:29 R--A- . (...) -- C:\WINDOWS\LoadDll.dll [40960]
O44 - LFC:[MD5.53CE0799C9384CAC99942FF032285F21] - 17-03-2015 - 16:27:29 R--A- . (.Compaq Computer Corp. - Easy Access PS/2 Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\eaps2kbd.sys [24035]
O44 - LFC:[MD5.E54E3A335B3A03AD0252E50BB92A633C] - 17-03-2015 - 16:27:29 R--A- . (.Compaq Computer Corporation - Compaq EAWDMFD driver.) -- C:\WINDOWS\system32\Drivers\EAWDMFD.SYS [24348]
O44 - LFC:[MD5.6999AF9DD980655E68F3740284AC10D7] - 17-03-2015 - 16:27:29 R--A- . (.Windows (R) 2000 DDK provider - Infrared Class Coinstaller.) -- C:\WINDOWS\system32\FltrCoi.dll [18841]
O44 - LFC:[MD5.DE4C5379216ACE6197B77D0D6C6C8D8A] - 17-03-2015 - 16:27:48 ---A- . (...) -- C:\WINDOWS\system32\igxpxa32.cpa [524850]
O44 - LFC:[MD5.54EABEC05A84181FCEDD7F974850116C] - 17-03-2015 - 16:27:48 ---A- . (...) -- C:\WINDOWS\system32\igxpxa32.vp [929]
O44 - LFC:[MD5.7DEF9DFBDE081CAC48105CFCEC4F385C] - 17-03-2015 - 16:27:48 ---A- . (...) -- C:\WINDOWS\system32\igxpxk32.vp [2096]
O44 - LFC:[MD5.5290ADD11755B7D6225DB00FE83DFBAF] - 17-03-2015 - 16:27:48 ---A- . (...) -- C:\WINDOWS\system32\igxpxs32.vp [27024]
O44 - LFC:[MD5.2C583A920BD1E6411674A6EC360B828E] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - CoInstaller: Almador Second Function, AIM 3.) -- C:\WINDOWS\system32\iAlmCoIn_v4543.dll [61440]
O44 - LFC:[MD5.A9846CC8B3DFEBEEEF4D73ED6476D984] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - Component GHAL Driver.) -- C:\WINDOWS\system32\ialmdev5.dll [238650]
O44 - LFC:[MD5.586519871167D5D3D41EF32E61E492BF] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - Controller Hub for Intel Graphics Driver.) -- C:\WINDOWS\system32\ialmdnt5.dll [121467]
O44 - LFC:[MD5.6826E1E4D27C3E88777C9AD273A2FFB9] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - Controller Hub for Intel Graphics Driver.) -- C:\WINDOWS\system32\ialmrnt5.dll [45694]
O44 - LFC:[MD5.EDB09E9C4D9D83A178059392CCE49FEA] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - DirectDraw(R) Driver for Intel(R) Graphics.) -- C:\WINDOWS\system32\ialmdd5.dll [956026]
O44 - LFC:[MD5.0F0194C4B635C10C3F785E4FEE52D641] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\ialmnt5.sys [1166972]
O44 - LFC:[MD5.192840362CF251B9998068E72FE990E5] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - OpenGL(R) Device Driver for Intel(R) Graphi.) -- C:\WINDOWS\system32\igldev32.dll [294912]
O44 - LFC:[MD5.A3C6A20071E69AAB1608281544366F4E] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - OpenGL(R) Driver for Intel(R) Graphics Acce.) -- C:\WINDOWS\system32\iglicd32.dll [2334720]
O44 - LFC:[MD5.CE0ABD6758C26BE16F48446C2AE98E54] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - Uninstall Utility for Intel(R) Graphics Tec.) -- C:\WINDOWS\system32\ialmrem.dll [49152]
O44 - LFC:[MD5.9CCA783AC94DED99F23985142D5F3991] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - hccutils Module.) -- C:\WINDOWS\system32\hccutils.dll [102400]
O44 - LFC:[MD5.E44733C30F7FE6A1CE7A6B1D2B335CFC] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [159744]
O44 - LFC:[MD5.F38092DE1D6A8CBB11B6B6D0F07E268E] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [135168]
O44 - LFC:[MD5.0C4F98B5C863283DF112EB0A9AF33E4B] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxcfg Module.) -- C:\WINDOWS\system32\igfxcfg.exe [524288]
O44 - LFC:[MD5.6008B79D575F8D8510E03C521EF24F27] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxcpl Module.) -- C:\WINDOWS\system32\igfxcpl.cpl [122880]
O44 - LFC:[MD5.1180852DBFADAFC375DBBA1F6B23EEE7] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll [208896]
O44 - LFC:[MD5.6D07EBC2DADAD53232398C9B609989AD] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxdo Module.) -- C:\WINDOWS\system32\igfxdo.dll [135168]
O44 - LFC:[MD5.86459B513E33109A678AC452C7C695C6] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxext Module.) -- C:\WINDOWS\system32\igfxexps.dll [24576]
O44 - LFC:[MD5.E749F5B4BB6301CAAB8BD49B9544B8BD] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxext Module.) -- C:\WINDOWS\system32\igfxext.exe [163840]
O44 - LFC:[MD5.94BC8EF4808BCDC0D3AD8F0F4FB92FD9] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxpph Module.) -- C:\WINDOWS\system32\igfxpph.dll [204800]
O44 - LFC:[MD5.C99F84346380334E0DCCC74637327944] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrara.lrc [159744]
O44 - LFC:[MD5.8C04CDD56E7B1957D6087A524620ADDE] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrchs.lrc [110592]
O44 - LFC:[MD5.AA00E1F166DC7FDD6C74D08DE6DE36BB] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrcht.lrc [110592]
O44 - LFC:[MD5.10B0CAF7EA76B952AE354FBB974ECEE1] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrcsy.lrc [176128]
O44 - LFC:[MD5.EA0EFE4BB13CE0BE0F81A0E13BD34F6B] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrdan.lrc [172032]
O44 - LFC:[MD5.DDDF48C2E584F125335CA9107AD68F6F] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrdeu.lrc [192512]
O44 - LFC:[MD5.868275D229802CE8B1B9538EDBD6BBB9] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrell.lrc [192512]
O44 - LFC:[MD5.8C83E643E864F4CCBDAA851D12564924] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrenu.lrc [172032]
O44 - LFC:[MD5.3324AA2DE207BAF0C3141F1C94C6783C] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxresp.lrc [188416]
O44 - LFC:[MD5.471DE258E422A4070D059312C63ECF83] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrfin.lrc [176128]
O44 - LFC:[MD5.229FE9801E06748B442E8FEF2B3E8FE5] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrfra.lrc [184320]
O44 - LFC:[MD5.FFFCE9ACFBC9E44D1F8BF22195C41E12] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrheb.lrc [155648]
O44 - LFC:[MD5.7AF217A5A77B30722936B8519128EBBF] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrhun.lrc [180224]
O44 - LFC:[MD5.103916AC2DE96FE0911C29C90A6D1D26] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrita.lrc [188416]
O44 - LFC:[MD5.D50826B5AA9F894BCF70E43EC55CF306] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrjpn.lrc [131072]
O44 - LFC:[MD5.75D1F5B9601E1BC3F590D49F5B017B4B] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrkor.lrc [126976]
O44 - LFC:[MD5.DECDE253A3E7C07990F5FDF67C15FC36] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrnld.lrc [188416]
O44 - LFC:[MD5.1E325B40E867D81064E4F5D10B3F9DFB] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrnor.lrc [176128]
O44 - LFC:[MD5.FED694C91C8762EB05CCEC7EA33EF902] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrplk.lrc [180224]
O44 - LFC:[MD5.BA895C263F1C10BBEE954FE79C85EADE] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrptb.lrc [180224]
O44 - LFC:[MD5.4ECC4A96DD6DD433B3DA881859A23831] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrptg.lrc [180224]
O44 - LFC:[MD5.AF3239F823114D7CC415B74164925AF5] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrrus.lrc [180224]
O44 - LFC:[MD5.6F99A64D775CCAC17291B2C9CA833E1F] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrsve.lrc [172032]
O44 - LFC:[MD5.A4FB9C3B46E3ADDA0B299FD75212E6B0] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrtha.lrc [163840]
O44 - LFC:[MD5.D5523EAB57D02B9EF08A483E4DDEBC94] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrtrk.lrc [172032]
O44 - LFC:[MD5.BE4F9A74D02F06538F0025A3AC39A8F1] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxress Module.) -- C:\WINDOWS\system32\igfxress.dll [3293184]
O44 - LFC:[MD5.30DB789A2D61DBE9BFCC07E3E9F3CDA8] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.dll [48128]
O44 - LFC:[MD5.1D4F13DBB57C5152FC9A5DABBCFC78B4] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [249856]
O44 - LFC:[MD5.4543A97F241A59B7A684429DAEC0777A] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - igfxzoom Module.) -- C:\WINDOWS\system32\igfxzoom.exe [163840]
O44 - LFC:[MD5.2022C54B3A79A51C9538CE47D1F50BC3] - 17-03-2015 - 16:27:48 ---A- . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [131072]
O44 - LFC:[MD5.032622313D3C84CFD9C30C18E337555C] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuARA.dll [40960]
O44 - LFC:[MD5.5F80A6D20140044872CBF9C27402E7E6] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuARB.dll [40960]
O44 - LFC:[MD5.01FCBEAB36F6F72A5B6E2587B91FCE76] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuCHS.dll [40960]
O44 - LFC:[MD5.54A5814FFE14E276D9EB5543E34A6A52] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuCHT.dll [40960]
O44 - LFC:[MD5.C20C460BD9714DF6D52549079C9F7291] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuCSY.dll [40960]
O44 - LFC:[MD5.35C4650EE5F1C353B8BBDCD4C1A2ABEF] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuDAN.dll [40960]
O44 - LFC:[MD5.7CC4934AADB62B69E4A494CC3E1CADC0] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuDEU.dll [40960]
O44 - LFC:[MD5.D35BA47A4D81C635A2C230293014B944] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuELL.dll [40960]
O44 - LFC:[MD5.C1348F73AD0D29628658C094F18EAE98] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuENG.dll [40960]
O44 - LFC:[MD5.E5BDED07D314B2B4720ED5D347BE391A] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuESP.dll [40960]
O44 - LFC:[MD5.B6ABA3B38B8CA80A6E15E42229E94520] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuFIN.dll [40960]
O44 - LFC:[MD5.4628AD341E154583C870EA75D8F143CC] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuFRA.dll [40960]
O44 - LFC:[MD5.32B51C3806E38CD78D6B4129A94CB2FA] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuFRC.dll [40960]
O44 - LFC:[MD5.6CE41144ECCAE3D746C67CDAA33C3373] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuHEB.dll [40960]
O44 - LFC:[MD5.483622BD39E6F7C17B3684FF0C8E9503] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuHUN.dll [40960]
O44 - LFC:[MD5.2D6643FDD22A7C0799CFAA6D57ACA5D0] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuITA.dll [40960]
O44 - LFC:[MD5.22585DA2D56B9210A9DF1ECCA7620E1E] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuJPN.dll [40960]
O44 - LFC:[MD5.8EBFC605B99ACE8A3AC444D699A8A000] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuKOR.dll [40960]
O44 - LFC:[MD5.EA2F7C5AEE00D7788D3C4C53E1671070] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuNLD.dll [40960]
O44 - LFC:[MD5.0128C152A13CC488A35CD62531732B13] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuNOR.dll [40960]
O44 - LFC:[MD5.F656E1C556ECDE31EC59719F814269B9] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuPLK.dll [40960]
O44 - LFC:[MD5.982A754B174FE0DD7CAA69CDE3CDDC82] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuPTB.dll [40960]
O44 - LFC:[MD5.DBDEE03ED91D14FD1D3060876C6956B4] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuPTG.dll [40960]
O44 - LFC:[MD5.153B848696C7E969E2341A348CB203F2] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuRUS.dll [40960]
O44 - LFC:[MD5.633FBF7A68CEEA7259DF9E6D40C8FC83] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuSVE.dll [40960]
O44 - LFC:[MD5.2192F0D80E9090C99F4DEEECD20DDB0F] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuTHA.dll [40960]
O44 - LFC:[MD5.96A1D5F58F657D3F33E70CFD8CE6358B] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmuTRK.dll [40960]
O44 - LFC:[MD5.E02A22D378C2BE4DEE62775CF8512888] - 17-03-2015 - 16:27:48 ---A- . (.Intel(r) Corporation - Uninstset Installation Utility.) -- C:\WINDOWS\system32\ialmudlg.exe [114688]
O44 - LFC:[MD5.1C59745CF3A5F820D3E3854B95272263] - 17-03-2015 - 16:28:00 ---A- . (...) -- C:\WINDOWS\system32\igfxCoIn_v4926.dll [147456]
O44 - LFC:[MD5.CBAE8185F15210BE3F9E09F5BF14E94E] - 17-03-2015 - 16:28:00 ---A- . (.Intel Corporation - Component GHAL Driver.) -- C:\WINDOWS\system32\igxpdv32.dll [1670144]
O44 - LFC:[MD5.8BF96C13124872CC1054D7F8CC9F5A26] - 17-03-2015 - 16:28:00 ---A- . (.Intel Corporation - DirectDraw(R) Driver for Intel(R) Graphics.) -- C:\WINDOWS\system32\igxpdx32.dll [2643968]
O44 - LFC:[MD5.74DBB7ED3ABB6C9F0D8E1A2CCADDF4FB] - 17-03-2015 - 16:28:00 ---A- . (.Intel Corporation - Intel Graphics 2D Driver.) -- C:\WINDOWS\system32\igxpgd32.dll [151040]
O44 - LFC:[MD5.C1A0DEB3A8E701D53C7B25A7735B9CD2] - 17-03-2015 - 16:28:00 ---A- . (.Intel Corporation - Intel Graphics 2D Rotation Driver.) -- C:\WINDOWS\system32\igxprd32.dll [57344]
O44 - LFC:[MD5.48846B31BE5A4FA662CCFDE7A1BA86B9] - 17-03-2015 - 16:28:00 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\igxpmp32.sys [5854752]
O44 - LFC:[MD5.9332F6AE88A48582442840E87802C34D] - 17-03-2015 - 16:28:00 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrsky.lrc [176128]
O44 - LFC:[MD5.EA6FDCCF244B7EED1A06C1FCF252FF77] - 17-03-2015 - 16:28:00 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxrslv.lrc [172032]
O44 - LFC:[MD5.E1302133D5A57E3A64466335DFBBF789] - 17-03-2015 - 16:28:18 ---A- . (...) -- C:\WINDOWS\DPINST.LOG [438604]
O44 - LFC:[MD5.2F13E69E6A8280D1490AB0C5EAC3A867] - 17-03-2015 - 16:28:45 ---A- . (...) -- C:\WINDOWS\comsetup.log [15671]
O44 - LFC:[MD5.E48C37D62CB8C8293D1291DAC2396C15] - 17-03-2015 - 16:28:45 ---A- . (...) -- C:\WINDOWS\iis6.log [48849]
O44 - LFC:[MD5.7D725F9AA34F6E21B2A4F3A23E75507F] - 17-03-2015 - 16:28:45 ---A- . (...) -- C:\WINDOWS\imsins.log [4512]
O44 - LFC:[MD5.49BABEA865144203C5FAB0828E1911CF] - 17-03-2015 - 16:28:45 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [7849]
O44 - LFC:[MD5.9209AFF09D7CB2597A49E33518022E8F] - 17-03-2015 - 16:28:45 ---A- . (...) -- C:\WINDOWS\system32\$winnt$.inf [842]
O44 - LFC:[MD5.79902BA553EC85F526FC74E298E59817] - 17-03-2015 - 16:28:45 ---A- . (...) -- C:\WINDOWS\tabletoc.log [1252]
O44 - LFC:[MD5.CC077F5EDEEFA2953A98342E8A97C95B] - 17-03-2015 - 16:28:45 ---A- . (...) -- C:\WINDOWS\tsoc.log [10867]
O44 - LFC:[MD5.D4E8EE5E426B45A1F94064BEA9553058] - 17-03-2015 - 16:30:14 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [151584]
O44 - LFC:[MD5.444282D855D6404179C34CA714311DC1] - 17-03-2015 - 16:30:28 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192]
O44 - LFC:[MD5.BAAC37FF69633608FEDA28D84236C149] - 17-03-2015 - 16:30:47 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [1084]
O44 - LFC:[MD5.D70B320AC83665FBC8FCD333204A53BD] - 17-03-2015 - 16:40:55 ---A- . (...) -- C:\WINDOWS\setuplog.txt [736964]
O44 - LFC:[MD5.4F9B6F09A27115A9CE6792BDE56D7479] - 17-03-2015 - 16:40:57 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206]
O44 - LFC:[MD5.91752F74EF483DF69C03A0B396901DDD] - 17-03-2015 - 16:41:57 ---A- . (...) -- C:\WINDOWS\wmsetup.log [3098]
O44 - LFC:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 17-03-2015 - 16:42:36 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\Drivers\MSPCLOCK.sys [5376]
O44 - LFC:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 17-03-2015 - 16:42:37 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\Drivers\MSPQM.sys [4992]
O44 - LFC:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 17-03-2015 - 16:42:38 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\Drivers\MSKSSRV.sys [7552]
O44 - LFC:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 17-03-2015 - 16:42:39 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\Drivers\sysaudio.sys [60800]
O44 - LFC:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 17-03-2015 - 16:42:40 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filt.) -- C:\WINDOWS\system32\Drivers\drmkaud.sys [2944]
O44 - LFC:[MD5.692BCF44383D056AED41B045A323D378] - 17-03-2015 - 16:42:41 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\Drivers\kmixer.sys [172416]
O44 - LFC:[MD5.8BED39E3C35D6A489438B8141717A557] - 17-03-2015 - 16:42:43 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\Drivers\aec.sys [142592]
O44 - LFC:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 17-03-2015 - 16:42:44 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\Drivers\swmidi.sys [56576]
O44 - LFC:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 17-03-2015 - 16:42:45 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\Drivers\DMusic.sys [52864]
O44 - LFC:[MD5.6768ACF64B18196494413695F0C3A00F] - 17-03-2015 - 16:42:46 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\Drivers\wdmaud.sys [83072]
O44 - LFC:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 17-03-2015 - 16:42:47 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\Drivers\splitter.sys [6272]
O44 - LFC:[MD5.44F9B06E918CD66CE0D2F8A58ADD930F] - 17-03-2015 - 17:45:35 ---A- . (...) -- C:\WINDOWS\OEWABLog.txt [1006]
O44 - LFC:[MD5.BC68B555EFD9581265071B840AB3DFE7] - 17-03-2015 - 17:46:27 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\sttray.exe [446571]
O44 - LFC:[MD5.C7ECE9EEA686D8A679F1811C49E5389E] - 17-03-2015 - 17:46:27 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\system32\idtsg.cpl [8106089]
O44 - LFC:[MD5.F01F2D9C9D0FF3E0F84F23F7A105E922] - 17-03-2015 - 17:46:27 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\system32\stacsv.exe [237665]
O44 - LFC:[MD5.D080865677EE82CB9B25DE0E604686DB] - 17-03-2015 - 17:46:27 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\system32\stlang.dll [2854912]
O44 - LFC:[MD5.C99F84346380334E0DCCC74637327944] - 17-03-2015 - 17:47:24 ---A- . (.Intel Corporation - igfxres Module.) -- C:\WINDOWS\system32\igfxres.dll [159744]
O44 - LFC:[MD5.19D690F9845A71353A5814850F20B2E5] - 17-03-2015 - 18:03:23 ---A- . (.Microsoft Corporation - Property Pages for Storage Devices.) -- C:\WINDOWS\system32\storprop.dll [74240]
O44 - LFC:[MD5.6019F4829BC11A5F9DB99A3F241D0B47] - 17-03-2015 - 18:03:23 ---A- . (.Microsoft Corporation - ‎‎المفكرة.) -- C:\WINDOWS\NOTEPAD.EXE [69120]
O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 17-03-2015 - 18:03:24 ----- . (...) -- C:\WINDOWS\system32\CONFIG.TMP [2577]
O44 - LFC:[MD5.30475F091008E24550523515A023270D] - 17-03-2015 - 18:03:24 ---A- . (...) -- C:\WINDOWS\system32\AUTOEXEC.NT [1688]
O44 - LFC:[MD5.DEB43BF90D36884805FF960AF0ADEB6A] - 17-03-2015 - 18:03:24 ---A- . (.Microsoft Corporation - Battery Class Installer.) -- C:\WINDOWS\system32\batt.dll [8704]
O44 - LFC:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 17-03-2015 - 18:03:24 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\Drivers\irenum.sys [11264]
O44 - LFC:[MD5.C7BCA9600BD7C5D7DCD39040BD1FC37D] - 17-03-2015 - 18:03:25 ---A- . (.Microsoft Corporation - ‎‎Task Manager.) -- C:\WINDOWS\TASKMAN.EXE [15360]
O44 - LFC:[MD5.BE2360FD51377567CD9F9AA589DE4373] - 17-03-2015 - 18:03:27 ---A- . (.Digi International - DGSETUP DLL.) -- C:\WINDOWS\system32\dgsetup.dll [85020]
O44 - LFC:[MD5.9ADACE75251FF532225E5A345C4826E8] - 17-03-2015 - 18:03:27 ---A- . (.Digi International, Inc. - Digi RealPort® Driver Upgrade.) -- C:\WINDOWS\system32\dgrpsetu.dll [176157]
O44 - LFC:[MD5.64C89A95EEA425DCBC353F59100A8495] - 17-03-2015 - 18:03:27 ---A- . (.Equinox Systems Inc. - Equinox Multiport Serial Coinstaller.) -- C:\WINDOWS\system32\EqnClass.Dll [103424]
O44 - LFC:[MD5.2AC75AFA1CD0C277B64B121F32031A51] - 17-03-2015 - 18:03:27 ---A- . (.Microsoft Corporation - Infrared Class Coinstaller.) -- C:\WINDOWS\system32\irclass.dll [13312]
O44 - LFC:[MD5.D115F230FE925D9CB6F4D2C8D67D930D] - 17-03-2015 - 18:03:27 ---A- . (.Perle Systems Ltd. - Specialix MPS NT Upgrade CoInstaller.) -- C:\WINDOWS\system32\spxcoins.dll [24661]
O44 - LFC:[MD5.43E9BF932134A6B970D830B2FD73E0A1] - 17-03-2015 - 18:03:30 ---A- . (.Microsoft Corporation - Thai Wordbreaker.) -- C:\WINDOWS\system32\ftlx041e.dll [6144]
O44 - LFC:[MD5.F3C139AD492C4F73353057442E6995CE] - 17-03-2015 - 18:03:31 ---A- . (...) -- C:\WINDOWS\system32\c_10021.nls [66082]
O44 - LFC:[MD5.D1562E05429D020288346E40E856E4D6] - 17-03-2015 - 18:03:31 R--A- . (.Microsoft Corporation - Thai Kedmanee (non-ShiftLock) Keyboard Layo.) -- C:\WINDOWS\system32\kbdth2.dll [6144]
O44 - LFC:[MD5.96A8EF151A9065B672722CB2D1AACAA6] - 17-03-2015 - 18:03:31 R--A- . (.Microsoft Corporation - Thai Kedmanee Keyboard Layout.) -- C:\WINDOWS\system32\kbdth0.dll [5632]
O44 - LFC:[MD5.4BF6B859B0F88A040337A7BE72EFF6C6] - 17-03-2015 - 18:03:31 R--A- . (.Microsoft Corporation - Thai Pattachote (non-ShiftLock) Keyboard La.) -- C:\WINDOWS\system32\kbdth3.dll [6144]
O44 - LFC:[MD5.7493C533074A782A32EA9C95B92B7549] - 17-03-2015 - 18:03:31 R--A- . (.Microsoft Corporation - Thai Pattachote Keyboard Layout.) -- C:\WINDOWS\system32\kbdth1.dll [5632]
O44 - LFC:[MD5.72233F1A1D788A84D4687A258CC97CBF] - 17-03-2015 - 18:03:39 ---A- . (...) -- C:\WINDOWS\system32\c_10005.nls [66082]
O44 - LFC:[MD5.A99203A3397A9DB352C5D8DFBDA230A8] - 17-03-2015 - 18:03:39 ---A- . (...) -- C:\WINDOWS\system32\c_862.nls [66594]
O44 - LFC:[MD5.95E586416CEB2CE10B33B99C1666F0F0] - 17-03-2015 - 18:03:39 R--A- . (.Microsoft Corporation - KBDHEB Keyboard Layout.) -- C:\WINDOWS\system32\kbdheb.dll [5632]
O44 - LFC:[MD5.4D4C7CED88E5621F21A4911A44CADACC] - 17-03-2015 - 18:03:43 ---A- . (...) -- C:\WINDOWS\system32\C_28596.NLS [66082]
O44 - LFC:[MD5.77F127766D758EB2C6451E221A0C7F7D] - 17-03-2015 - 18:03:43 ---A- . (...) -- C:\WINDOWS\system32\c_708.nls [66082]
O44 - LFC:[MD5.C58563DF50115E935BC811FFBCE1FC89] - 17-03-2015 - 18:03:43 ---A- . (...) -- C:\WINDOWS\system32\c_864.nls [66594]
O44 - LFC:[MD5.465E698788EC46B5E59A755CB0DE850A] - 17-03-2015 - 18:03:44 ---A- . (.Microsoft Corporation - US IBM Arabic 238_L Keyboard Layout.) -- C:\WINDOWS\system32\kbdusa.dll [5632]
O44 - LFC:[MD5.06F51F0DB84A39971ED58494D74B4413] - 17-03-2015 - 18:03:44 R--A- . (.Microsoft Corporation - Divehi Phonetic Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv1.dll [5632]
O44 - LFC:[MD5.CAF392A3760059BD37B7EC609FB38603] - 17-03-2015 - 18:03:44 R--A- . (.Microsoft Corporation - Divehi Typewriter Keyboard Layout.) -- C:\WINDOWS\system32\kbddiv2.dll [5632]
O44 - LFC:[MD5.57661CF9DD51CCA83D95168B6EB917A1] - 17-03-2015 - 18:03:44 R--A- . (.Microsoft Corporation - Farsi Keyboard Layout.) -- C:\WINDOWS\system32\kbdfa.dll [5632]
O44 - LFC:[MD5.AF60CEA47DDD190219D34193AA20DC24] - 17-03-2015 - 18:03:44 R--A- . (.Microsoft Corporation - Syriac Phoenetic Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr2.dll [5632]
O44 - LFC:[MD5.6CBB0B1EC2CBCA77EE835ECB41EC293E] - 17-03-2015 - 18:03:44 R--A- . (.Microsoft Corporation - Syriac Standard Keyboard Layout.) -- C:\WINDOWS\system32\kbdsyr1.dll [5632]
O44 - LFC:[MD5.F28021B36DB7446EEE9191DF0F375E5B] - 17-03-2015 - 18:03:44 R--A- . (.Microsoft Corporation - Urdu Keyboard Layout.) -- C:\WINDOWS\system32\kbdurdu.dll [5632]
O44 - LFC:[MD5.89FD6D6E233393794FB75CF79DDC1E06] - 17-03-2015 - 18:03:47 R--A- . (.Microsoft Corporation - Vietnamese Keyboard Layout.) -- C:\WINDOWS\system32\kbdvntc.dll [5632]
O44 - LFC:[MD5.1971039B4CDC0E149D24E4E3D541FE30] - 17-03-2015 - 18:03:48 ---A- . (.Microsoft Corporation - ISCII Code Page Translation DLL.) -- C:\WINDOWS\system32\c_iscii.dll [10752]
O44 - LFC:[MD5.EF526E79DDA50F7D485D69CFED588AFC] - 17-03-2015 - 18:03:48 R--A- . (.Microsoft Corporation - Devanagari Keyboard Layout.) -- C:\WINDOWS\system32\kbdindev.dll [5632]
O44 - LFC:[MD5.19FAD78874BE0F1FBCF53BF12EA6DBAA] - 17-03-2015 - 18:03:48 R--A- . (.Microsoft Corporation - Gujarati Keyboard Layout.) -- C:\WINDOWS\system32\kbdinguj.dll [5632]
O44 - LFC:[MD5.4C673595A9D602A2538C66B18F4AB4CF] - 17-03-2015 - 18:03:48 R--A- . (.Microsoft Corporation - Hindi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinhin.dll [5632]
O44 - LFC:[MD5.6D9ECF2339372BDB45F95360B46FF8A6] - 17-03-2015 - 18:03:48 R--A- . (.Microsoft Corporation - Marathi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinmar.dll [5632]
O44 - LFC:[MD5.67AC20320D132CE7A7C1DA72A0218155] - 17-03-2015 - 18:03:48 R--A- . (.Microsoft Corporation - Punjabi/Gurmukhi Keyboard Layout.) -- C:\WINDOWS\system32\kbdinpun.dll [6144]
O44 - LFC:[MD5.F7E2CC65C02A934320D703DBFE10D353] - 17-03-2015 - 18:03:48 R--A- . (.Microsoft Corporation - Tamil Keyboard Layout.) -- C:\WINDOWS\system32\kbdintam.dll [5632]
O44 - LFC:[MD5.E98DC261A6D62610293FF0CBDA8CAF65] - 17-03-2015 - 18:03:49 R--A- . (.Microsoft Corporation - Georgian Keyboard Layout.) -- C:\WINDOWS\system32\kbdgeo.dll [5120]
O44 - LFC:[MD5.E45CA3CFF30837DF97F243B5696C1944] - 17-03-2015 - 18:03:49 R--A- . (.Microsoft Corporation - Kannada Keyboard Layout.) -- C:\WINDOWS\system32\kbdinkan.dll [5632]
O44 - LFC:[MD5.4EAEF9D95F2FFFE7051E504747F80AE6] - 17-03-2015 - 18:03:49 R--A- . (.Microsoft Corporation - Telugu Keyboard Layout.) -- C:\WINDOWS\system32\kbdintel.dll [5632]
O44 - LFC:[MD5.6CB26848BCDAA361B6EE21264FB362C3] - 17-03-2015 - 18:03:50 ---A- . (...) -- C:\WINDOWS\system32\c_20127.nls [66082]
O44 - LFC:[MD5.7632BC16B236A935B2F9ED6B1AC4B679] - 17-03-2015 - 18:03:50 ---A- . (.Microsoft Corporation - Thai Word Breaker.) -- C:\WINDOWS\system32\Thawbrkr.dll [185344]
O44 - LFC:[MD5.0EC03162E932B49E635A79445CCE1E4C] - 17-03-2015 - 18:03:50 R--A- . (.Microsoft Corporation - Eastern Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarme.dll [5120]
O44 - LFC:[MD5.1004B259E77BEF2033CAF435760D95A6] - 17-03-2015 - 18:03:50 R--A- . (.Microsoft Corporation - Western Armenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdarmw.dll [5120]
O44 - LFC:[MD5.6F8A509550FE8C92D07EE0143BF29BA1] - 17-03-2015 - 18:03:53 ---A- . (...) -- C:\WINDOWS\system32\c_10010.nls [66082]
O44 - LFC:[MD5.D2CA471D36A69D17F82D5C1B64FAEE39] - 17-03-2015 - 18:03:53 ---A- . (...) -- C:\WINDOWS\system32\c_10029.nls [66082]
O44 - LFC:[MD5.9CA501D2A8E6909C5B2E8C9274682BF1] - 17-03-2015 - 18:03:53 ---A- . (...) -- C:\WINDOWS\system32\c_10082.nls [66082]
O44 - LFC:[MD5.21E928C8E6ED8EEAB0D1AAEE82ACDD76] - 17-03-2015 - 18:03:53 ---A- . (...) -- C:\WINDOWS\system32\c_852.nls [66594]
O44 - LFC:[MD5.615DDBB5CBBAE8301C1E7FA95F1E66A3] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Albania Keyboard Layout.) -- C:\WINDOWS\system32\KBDAL.DLL [6656]
O44 - LFC:[MD5.5B46568257EE49714564511D58E0DE53] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Croatian/Slovenian Keyboard Layout.) -- C:\WINDOWS\system32\kbdcr.dll [6656]
O44 - LFC:[MD5.36E68E02AF2206FC4A8C73CAEABE1FB0] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Czech Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz.dll [7168]
O44 - LFC:[MD5.AFA30A44ED11A5F9A059A2767AB6A81A] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz1.dll [6656]
O44 - LFC:[MD5.90535C13EB54E1F2C95478F1B99DCCEB] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Czech_Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdcz2.dll [6656]
O44 - LFC:[MD5.F3D1EEC756847C70E65335E8CA1AE64B] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Hungarian 101-key Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu1.dll [5632]
O44 - LFC:[MD5.CF92D95B5CB6649CB9D7E8D7616487A7] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Hungarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdhu.dll [6656]
O44 - LFC:[MD5.D199B05901C2407FC0F87444A24A4F3C] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Polish Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl.dll [6656]
O44 - LFC:[MD5.897663C8606357A8E86E57CDEA8EE219] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Polish Programmer's Keyboard Layout.) -- C:\WINDOWS\system32\kbdpl1.dll [5632]
O44 - LFC:[MD5.C2E62748C875A310A6D5B10498238A68] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Romanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdro.dll [5632]
O44 - LFC:[MD5.552221E92D6BF55F8358B927F00696C3] - 17-03-2015 - 18:03:53 R--A- . (.Microsoft Corporation - Serbian_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdycl.dll [6656]
O44 - LFC:[MD5.DCCE231E5BDF1401AC0F770EE16902AA] - 17-03-2015 - 18:03:54 R--A- . (.Microsoft Corporation - Slovak Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl.dll [6656]
O44 - LFC:[MD5.93033C3EA80FB24B198B24DDECA07D4A] - 17-03-2015 - 18:03:54 R--A- . (.Microsoft Corporation - Slovak(QWERTY) Keyboard Layout.) -- C:\WINDOWS\system32\kbdsl1.dll [6656]
O44 - LFC:[MD5.5D038EEABA8EA438F6B5ABD5E91BC851] - 17-03-2015 - 18:03:55 ---A- . (...) -- C:\WINDOWS\system32\C_28594.NLS [66082]
O44 - LFC:[MD5.3E969213F35127D83DAB48FF1283E8E4] - 17-03-2015 - 18:03:55 ---A- . (...) -- C:\WINDOWS\system32\c_855.nls [66594]
O44 - LFC:[MD5.5CD475CA7B87844DE1E0483B536F9AAE] - 17-03-2015 - 18:03:55 ---A- . (...) -- C:\WINDOWS\system32\c_866.nls [66594]
O44 - LFC:[MD5.BBB6C3346064C6AECEE6AD9F144B1AEA] - 17-03-2015 - 18:03:55 R--A- . (.Microsoft Corporation - Estonia Keyboard Layout.) -- C:\WINDOWS\system32\kbdest.dll [6144]
O44 - LFC:[MD5.C047165ED75FF85DB5A89EFEE3DA1133] - 17-03-2015 - 18:03:55 R--A- . (.Microsoft Corporation - Latvia Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv.dll [6144]
O44 - LFC:[MD5.27D72BCF2B495FCDA073DBA5F189D7A1] - 17-03-2015 - 18:03:55 R--A- . (.Microsoft Corporation - Latvia-QWERTY Keyboard Layout.) -- C:\WINDOWS\system32\kbdlv1.dll [6144]
O44 - LFC:[MD5.F5B3B152A1D2752BC88928EB1E031B7E] - 17-03-2015 - 18:03:55 R--A- . (.Microsoft Corporation - Lithuania Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt.dll [5632]
O44 - LFC:[MD5.AF05A41DBD1B0424B5CB47092152C7F6] - 17-03-2015 - 18:03:55 R--A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\WINDOWS\system32\kbdlt1.dll [5632]
O44 - LFC:[MD5.B537ACFAB9E70F0EF48DB696A08ADC81] - 17-03-2015 - 18:03:57 ---A- . (...) -- C:\WINDOWS\system32\C_28597.NLS [66082]
O44 - LFC:[MD5.0A206B5CACD3CA70D2044DA691304765] - 17-03-2015 - 18:03:57 ---A- . (...) -- C:\WINDOWS\system32\c_10006.nls [66082]
O44 - LFC:[MD5.BAC7072B365F9648CA318154BA7E03EC] - 17-03-2015 - 18:03:57 ---A- . (...) -- C:\WINDOWS\system32\c_737.nls [66594]
O44 - LFC:[MD5.780C444EB16B65E6DE96F794A732DA12] - 17-03-2015 - 18:03:57 ---A- . (...) -- C:\WINDOWS\system32\c_869.nls [66594]
O44 - LFC:[MD5.8BE0D77A873730B4EB1DAB7C6622CD46] - 17-03-2015 - 18:03:57 ---A- . (...) -- C:\WINDOWS\system32\c_875.nls [66082]
O44 - LFC:[MD5.1E81E1F3D5ACB3371CF73C1DE8F800BF] - 17-03-2015 - 18:03:57 R--A- . (.Microsoft Corporation - Greek IBM 220 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe220.dll [5632]
O44 - LFC:[MD5.D26533FDF72381947F823882BBA4A196] - 17-03-2015 - 18:03:57 R--A- . (.Microsoft Corporation - Greek IBM 220 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela2.dll [6144]
O44 - LFC:[MD5.AC81A176BA35D1D7A5CD53137F3160FE] - 17-03-2015 - 18:03:57 R--A- . (.Microsoft Corporation - Greek IBM 319 Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe319.dll [5632]
O44 - LFC:[MD5.F2312B8A76FD584ACD1D956688BEB6F8] - 17-03-2015 - 18:03:57 R--A- . (.Microsoft Corporation - Greek IBM 319 Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdhela3.dll [6656]
O44 - LFC:[MD5.83C99B438B3D6DBE7B838DA783E173AC] - 17-03-2015 - 18:03:57 R--A- . (.Microsoft Corporation - Greek Keyboard Layout.) -- C:\WINDOWS\system32\kbdhe.dll [5632]
O44 - LFC:[MD5.A93447C87DDB6B1945F1F5F87EAB68DC] - 17-03-2015 - 18:03:57 R--A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdgkl.dll [6144]
O44 - LFC:[MD5.90CC52E8B52F0EC3A41D14FFBE789324] - 17-03-2015 - 18:03:57 R--A- . (.Microsoft Corporation - Greek_Polytonic Keyboard Layout.) -- C:\WINDOWS\system32\kbdhept.dll [8192]
O44 - LFC:[MD5.AF4A866226BD04ACF06135088D75BB63] - 17-03-2015 - 18:03:58 ---A- . (...) -- C:\WINDOWS\system32\c_10007.nls [66082]
O44 - LFC:[MD5.E22D1B9AC7854C0A654E4C4232074E49] - 17-03-2015 - 18:03:59 ---A- . (...) -- C:\WINDOWS\system32\C_28595.NLS [66082]
O44 - LFC:[MD5.314E85390BEBDAE5D1E11DB2D8CBC6E9] - 17-03-2015 - 18:03:59 ---A- . (...) -- C:\WINDOWS\system32\c_10017.nls [66082]
O44 - LFC:[MD5.0304318F189E3CC4A99FCCCB0A68147F] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Azerbaijan_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdaze.dll [5632]
O44 - LFC:[MD5.A1FA7A83F9D98D84419A8E64286284F4] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\WINDOWS\system32\kbdblr.dll [5632]
O44 - LFC:[MD5.1DF6E4758611E1328567BFE4D1B28E27] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\WINDOWS\system32\kbdbu.dll [5632]
O44 - LFC:[MD5.95D9106D39AB410A7F7EE513F181F84C] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Kazak_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdkaz.dll [5632]
O44 - LFC:[MD5.472DC9CA4FAB709FB869D07CABE0A3DE] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Kyrgyz Keyboard Layout.) -- C:\WINDOWS\system32\kbdkyr.dll [5632]
O44 - LFC:[MD5.AFB384BAF26264B257A51453F7D516CD] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\WINDOWS\system32\kbdmon.dll [5632]
O44 - LFC:[MD5.B6E962B7AC1CB4A78876953D369BE6DD] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Russia(Typewriter) Keyboard Layout.) -- C:\WINDOWS\system32\kbdru1.dll [5632]
O44 - LFC:[MD5.C6F23BC1411E91C179B0635893BB40A1] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Russian Keyboard Layout.) -- C:\WINDOWS\system32\kbdru.dll [5632]
O44 - LFC:[MD5.E5D4673C83271FEEE1ED73E1E281A42B] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Serbian_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdycc.dll [5632]
O44 - LFC:[MD5.F2D1EEF5ADCD5995C015AB3CB15C9415] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Tatar_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbdtat.dll [5632]
O44 - LFC:[MD5.3DDE3DC57C54452A313DC20F3019F8E3] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Ukrainian Keyboard Layout.) -- C:\WINDOWS\system32\kbdur.dll [5632]
O44 - LFC:[MD5.4F9CFFBF05831BB81833FC64A5329C36] - 17-03-2015 - 18:03:59 R--A- . (.Microsoft Corporation - Uzbek_Cyrillic Keyboard Layout.) -- C:\WINDOWS\system32\kbduzb.dll [5632]
O44 - LFC:[MD5.EFFDFF60A38CF648811BBCDD722ECF5E] - 17-03-2015 - 18:04:01 ---A- . (...) -- C:\WINDOWS\system32\c_10081.nls [66082]
O44 - LFC:[MD5.C37A21EE1ADFDC13FC707D97073148ED] - 17-03-2015 - 18:04:01 ---A- . (...) -- C:\WINDOWS\system32\c_28599.nls [66082]
O44 - LFC:[MD5.A8764750B22B528D85A691A52CB21856] - 17-03-2015 - 18:04:01 ---A- . (...) -- C:\WINDOWS\system32\c_857.nls [66594]
O44 - LFC:[MD5.712A218557F99D136735E0545E5AE223] - 17-03-2015 - 18:04:01 R--A- . (.Microsoft Corporation - Azeri-Latin Keyboard Layout.) -- C:\WINDOWS\system32\kbdazel.dll [5632]
O44 - LFC:[MD5.188E56B70419D8353B8D4F3E381D9E52] - 17-03-2015 - 18:04:01 R--A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuf.dll [6144]
O44 - LFC:[MD5.5D569F2951F878EF01D7723DC08682E9] - 17-03-2015 - 18:04:01 R--A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\WINDOWS\system32\kbdtuq.dll [6144]
O44 - LFC:[MD5.35448F3A71EBBECF8E997FAD3A99327D] - 17-03-2015 - 18:04:03 ---A- . (...) -- C:\WINDOWS\system32\c_28603.nls [66082]
O44 - LFC:[MD5.1D13436E6E07CC475031FB9CAF9C49D0] - 17-03-2015 - 18:04:19 ---A- . (...) -- C:\WINDOWS\system.ini [231]
O44 - LFC:[MD5.619548D523CCAB16AD0B4E192B426542] - 17-03-2015 - 18:04:20 ---A- . (...) -- C:\WINDOWS\regopt.log [1162]
O44 - LFC:[MD5.05A0BA97C0804E9146C18E134625665A] - 17-03-2015 - 18:04:30 ---A- . (...) -- C:\WINDOWS\system32\pid.PNF [4444]
O44 - LFC:[MD5.5188AAA7BF2FBF2F3C3ED8730BA60F71] - 17-03-2015 - 18:05:47 ---A- . (.Microsoft Corporation - USB UI Dll.) -- C:\WINDOWS\system32\usbui.dll [73728]
O44 - LFC:[MD5.D507C1400284176573224903819FFDA3] - 17-03-2015 - 18:06:01 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8139 NDIS 5.0 Driver.) -- C:\WINDOWS\system32\Drivers\RTL8139.sys [20992]
O44 - LFC:[MD5.1AAFCAEED86CD38DB3C501610F28F131] - 17-03-2015 - 18:06:33 ---A- . (.Microsoft Corporation - Redbook Audio Filter Driver.) -- C:\WINDOWS\system32\Drivers\redbook.sys [57472]
O44 - LFC:[MD5.D9DB30910F522BBC973F53CA1AFEB5E6] - 17-03-2015 - 18:06:55 ---A- . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17-03-2015 - 18:07:09 ---A- . (...) -- C:\WINDOWS\Sti_Trace.log [0]
O44 - LFC:[MD5.D9F724AA26C010A217C97606B160ED68] - 17-03-2015 - 18:07:14 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\Drivers\audstub.sys [3072]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17-03-2015 - 18:07:22 ---A- . (...) -- C:\WINDOWS\system32\h323log.txt [0]
O44 - LFC:[MD5.A32426D9B14A089EAA1D922E0C5801A9] - 17-03-2015 - 22:09:31 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\system32\Drivers\USBSTOR.SYS [26368]
O44 - LFC:[MD5.E8136F9587F15A4172949F15E2DBEE5D] - 17-03-2015 - 22:16:49 ---A- . (...) -- C:\WINDOWS\setupact.log [174500]
O44 - LFC:[MD5.229FE7514D247A7A3F118B7A77BAB9DC] - 17-03-2015 - 22:16:51 ---A- . (...) -- C:\WINDOWS\setupapi.log [696523]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 19-03-2015 - 11:46:29 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19-03-2015 - 11:46:49 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.14339FD96A441C6A549A2151F9F2ACF0] - 19-03-2015 - 11:50:55 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [650458]
O44 - LFC:[MD5.FBEB557E3C57D516C0864C31B3B10DF9] - 19-03-2015 - 11:50:56 ---A- . (...) -- C:\WINDOWS\system32\perfc001.dat [40118]
O44 - LFC:[MD5.8772EF5F4B6DB1E9D7B3CD549CC23F14] - 19-03-2015 - 11:50:56 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [40128]
O44 - LFC:[MD5.FA6ED28495D3826ACE2B134454DC5AC9] - 19-03-2015 - 11:50:56 ---A- . (...) -- C:\WINDOWS\system32\perfh001.dat [251674]
O44 - LFC:[MD5.C0800DEE54F833AAF875DF29E9AD89D6] - 19-03-2015 - 11:50:56 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [311740]
O44 - LFC:[MD5.6BCE28BFDE92408406C0497A5631B851] - 19-03-2015 - 15:53:14 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [41284]
O44 - LFC:[MD5.5ED142A6C4AE1A169412D93A0A4DCEC5] - 19-03-2015 - 19:03:48 ---A- . (...) -- C:\WINDOWS\wiaservc.log [48]
O44 - LFC:[MD5.A6306BE908813588CCA192C5FBD63E10] - 19-03-2015 - 19:03:49 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.4B14767033E41BE1FD952BCED287A573] - 19-03-2015 - 9:42:16 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [18290]
~ Files: 519 Scanned in 00mn 16s



---\\ Export authorized application key (O47)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Google\Chrome\Application\chrome.exe" [Enabled] .(.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
~ Keys Export: 5 Scanned in 00mn 00s



---\\ Local Security Authority-LSA Deny (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Windows Security Configuration Editor Client Engine.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Safe Boot Control (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ CSB: 21 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ MountPoints2 Shell Key (MPSK) (O51)
O51 - MPSK:{e8b4bc04-cce9-11e4-88dc-0019213b1d36}\AutoRun\command. (...) -- G:\LGAutoRun.exe (.not file.)
~ Keys: Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
~ TDSD: 12 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ MWPS: 5 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSMHelp"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ System Drivers List (SDL) (O58)
O58 - SDL:26-04-2010 - 16:58:09 ---A- . (.RAVISENT Technologies Inc. - CineMaster C 1.2 WDM Main Driver.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:26-04-2010 - 16:58:09 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\Drivers\cpqdap01.sys [11776]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys [799872]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys [153600]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys [5888]
O58 - SDL:22-09-2014 - 8:20:06 ---A- . (.ESET - Amon monitor.) -- C:\WINDOWS\system32\Drivers\eamonm.sys [191928]
O58 - SDL:12-12-2008 - 5:12:12 R--A- . (.Compaq Computer Corp. - Easy Access PS/2 Keyboard Filter Driver.) -- C:\WINDOWS\system32\Drivers\eaps2kbd.sys [24035]
O58 - SDL:12-12-2008 - 5:12:12 R--A- . (.Compaq Computer Corporation - Compaq EAWDMFD driver.) -- C:\WINDOWS\system32\Drivers\EAWDMFD.SYS [24348]
O58 - SDL:22-09-2014 - 8:20:06 ---A- . (.ESET - ESET Helper driver.) -- C:\WINDOWS\system32\Drivers\ehdrv.sys [135296]
O58 - SDL:22-09-2014 - 8:20:06 ---A- . (.ESET - ESET Personal Firewall driver.) -- C:\WINDOWS\system32\Drivers\epfw.sys [176448]
O58 - SDL:22-09-2014 - 8:20:06 ---A- . (.ESET - ESET Personal Firewall NDIS filter.) -- C:\WINDOWS\system32\Drivers\epfwndis.sys [39464]
O58 - SDL:22-09-2014 - 8:20:06 ---A- . (.ESET - ESET Personal Firewall TDI filter.) -- C:\WINDOWS\system32\Drivers\epfwtdi.sys [63160]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:23-03-2006 - 5:47:06 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\ialmnt5.sys [1166972]
O58 - SDL:12-03-2015 - 9:24:40 ---A- . (.Tonec Inc. - Internet Download Manager TDI Driver.) -- C:\WINDOWS\system32\Drivers\idmtdi.sys [125304]
O58 - SDL:15-02-2008 - 6:12:06 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\Drivers\igxpmp32.sys [5854752]
O58 - SDL:26-04-2010 - 16:58:09 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\nikedrv.sys [12032]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:26-04-2010 - 16:58:09 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\Drivers\rio8drv.sys [12032]
O58 - SDL:26-04-2010 - 16:58:09 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\Drivers\riodrv.sys [12032]
O58 - SDL:13-04-2008 - 21:05:40 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8139 NDIS 5.0 Driver.) -- C:\WINDOWS\system32\Drivers\RTL8139.sys [20992]
O58 - SDL:25-02-2008 - 13:54:56 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\Drivers\Rtnicxp.sys [105088]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\Drivers\secdrv.sys [20480]
O58 - SDL:13-10-2007 - 7:40:58 ---A- . (.Sonic Focus, Inc - SFNG32.SYS.) -- C:\WINDOWS\system32\Drivers\sfng32.sys [41728]
O58 - SDL:25-03-2009 - 3:40:52 ---A- . (.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) -- C:\WINDOWS\system32\Drivers\sthda.sys [1392498]
O58 - SDL:26-04-2010 - 16:58:09 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\Drivers\tsbvcap.sys [21376]
O58 - SDL:26-04-2010 - 16:58:09 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9029]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4768]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27866]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [33840]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:15-04-2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 42 Scanned in 00mn 02s



---\\ Last modified or created user files (O61)
O61 - LFC: 12-03-2015 - 22:54:38 ---A- . (...) -- C:\Documents and Settings\houssam\My Documents\Downloads\IDMGrHlp.exe [0]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.ESET.) -- C:\Documents and Settings\houssam\Local Settings\Temp\InstHelper.exe [307400]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\houssam\Application Data\IDM\idmmzcc5\components11\idmmzcc.dll [26136]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\houssam\Application Data\IDM\idmmzcc5\components11\idmmzcc64.dll [31256]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\houssam\Application Data\IDM\idmmzcc5\components2\idmcchandler2.dll [332824]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\houssam\Application Data\IDM\idmmzcc5\components2\idmcchandler2_64.dll [460824]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\houssam\Application Data\IDM\idmmzcc5\components2\idmmzcc.dll [34216]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\houssam\Application Data\IDM\idmmzcc5\components2\idmmzcc64.dll [28512]
O61 - LFC: 17-03-2015 - 22:54:38 ---A- . (.Tonec Inc..) -- C:\Documents and Settings\houssam\Application Data\IDM\idmmzcc5\components\idmmzcc.dll [34216]
O61 - LFC: 17-03-2015 - 22:54:39 ---A- . (...) -- C:\Documents and Settings\houssam\My Documents\Downloads\Programs\Firefox Setup Stub 36.0.1.exe [243640]
O61 - LFC: 17-03-2015 - 22:54:39 ---A- . (...) -- C:\Documents and Settings\houssam\My Documents\Downloads\Programs\vlc-2.2.0-win32.exe [28509232]
O61 - LFC: 17-03-2015 - 22:54:39 ---A- . (.Mozilla.) -- C:\Documents and Settings\houssam\My Documents\Downloads\Programs\Firefox Setup 23.0.1.exe [22558568]
O61 - LFC: 18-03-2015 - 22:54:39 ---A- . (.Skype Technologies S.A..) -- C:\Documents and Settings\houssam\My Documents\Downloads\Programs\SkypeSetup.exe [1380448]
O61 - LFC: 19-03-2015 - 22:54:38 ---A- . (...) -- C:\Documents and Settings\houssam\Local Settings\Application Data\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
O61 - LFC: 19-03-2015 - 22:54:39 ---A- . (.ESET.) -- C:\Documents and Settings\houssam\My Documents\Downloads\Programs\esetsmartinstaller_fra.exe [2347384]
O61 - LFC: 19-03-2015 - 22:54:39 ---A- . (.Nicolas Coolman.) -- C:\Documents and Settings\houssam\My Documents\Downloads\Programs\ZHPDiag2.exe [6876452] =>.Nicolas Coolman
~ 1016 Fichiers temporaires (Temporary files)
~ 37 Fichiers cookies (Cookies files)
~ Files: 16 Scanned in 00mn 01s



---\\ List all tools cleaner (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ List all legacy services(LALS) (O64)
O64 - Services: CurCS - 15-04-2008 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\eamonm.sys (eamonm) .(.ESET - Amon monitor.) - LEGACY_EAMONM
O64 - Services: CurCS - 12-12-2008 - C:\WINDOWS\system32\DRIVERS\eawdmfd.sys (eawdmfd) .(.Compaq Computer Corporation - Compaq EAWDMFD driver.) - LEGACY_EAWDMFD
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\ehdrv.sys (ehdrv) .(.ESET - ESET Helper driver.) - LEGACY_EHDRV
O64 - Services: CurCS - 01-10-2014 - C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ekrn) .(.ESET - ESET Service.) - LEGACY_EKRN
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\epfw.sys (epfw) .(.ESET - ESET Personal Firewall driver.) - LEGACY_EPFW
O64 - Services: CurCS - 22-09-2014 - C:\WINDOWS\system32\DRIVERS\epfwtdi.sys (epfwtdi) .(.ESET - ESET Personal Firewall TDI filter.) - LEGACY_EPFWTDI
O64 - Services: CurCS - 12-03-2015 - C:\WINDOWS\system32\DRIVERS\idmtdi.sys (IDMTDI) .(.Tonec Inc. - Internet Download Manager TDI Driver.) - LEGACY_IDMTDI
O64 - Services: CurCS - 25-03-2009 - c:\program files\idt\v114_ecs_d_6207.2v7_6099.8xp_g2.0v_rc_sdc\wdm\STacSV.exe (STacSV) .(.IDT, Inc. - IDT PC Audio - SHANGHAI DEVELOPMENT CENTER.) - LEGACY_STACSV
~ Legacy: 100 Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - ‎‎Registry Editor.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
~ FASS Keys: 10 Scanned in 00mn 00s



---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - () - http://search.live.com
~ Keys: Scanned in 00mn 00s



---\\ Search Svchost Services (SSS) (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Software installation Service.) -- C:\WINDOWS\system32\appmgmts.dll [162304]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77824]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - Logical Disk Manager service dll.) -- C:\WINDOWS\system32\dmserver.dll [23040]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - DHCP Client Service.) -- C:\WINDOWS\system32\dhcpcsvc.dll [126976]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - No Comment.) -- C:\WINDOWS\system32\es.dll [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - ‎‎Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [96768]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - إدارة اتصالات شبكة الاتصال.) -- C:\WINDOWS\system32\netman.dll [197632]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll [245248]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Removable Storage Manager.) -- C:\WINDOWS\system32\ntmssvc.dll [435200]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Task Scheduler Engine.) -- C:\WINDOWS\system32\schedsvc.dll [191488]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [18432]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\system32\ipnathlp.dll [331264]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - System Restore Service.) -- C:\WINDOWS\system32\srsvc.dll [170496]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\WINDOWS\system32\tapisrv.dll [249344]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - ‎‎Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Windows Time Service.) -- C:\WINDOWS\system32\w32time.dll [175104]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Wireless Zero Configuration Service.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - Advanced Windows 32 Base API.) -- C:\WINDOWS\system32\advapi32.dll [681472]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [144896]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Quarantine Agent Service Run-Time.) -- C:\WINDOWS\system32\qagentrt.dll [288768]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - ‎‎Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136]
~ Services: 38 Scanned in 00mn 00s



---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 15-04-2008 224768 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Auto 17-03-2015 107848 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 17-03-2015 107848 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 14-08-2013 117656 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 01-10-2014 1349576 | (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
SR - | Auto 25-03-2009 237665 | (STacSV) . (.IDT, Inc..) - c:\program files\idt\v114_ecs_d_6207.2v7_6099.8xp_g2.0v_rc_sdc\wdm\STacSV.exe
~ Services: Scanned in 00mn 11s



---\\ Search Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by houssam at 19-03-2015 22:55:09
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll intelide.sys PCIIDEX.SYS
1 nt!IofCallDriver[0x804E13B9] >> \Device\Harddisk0\DR0[0x86332AB8]
3 CLASSPNP[0xF7616FD7] >> nt!IofCallDriver[0x804E13B9] >> \Device\Ide\IdeDeviceP1T1L0-e[0x8635AB00]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 12 Scanned in 00mn 02s



---\\ Search Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by houssam at 19-03-2015 22:55:11
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13008 - (19-03-2015)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

~ Additionnel Scan: 86825 Items scanned in 00mn 31s



---\\ Additional information about modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects (O2)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Auto loading programs from Registry and folders (O4)
~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50)
~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.MountPoints2 Shell Key (MPSK) (O51)
~ AMI: 5 Scanned in 00mn 00s



End of the scan (1390 lines in 02mn 30s)(0.4)