cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 21/04/2015 12:40:23 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\HP\Downloads
64bit- Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000410 | Country: Italie | Language: ITA | Date Format: dd/MM/yyyy

3,91 Gb Total Physical Memory | 0,43 Gb Available Physical Memory | 10,88% Memory free
8,50 Gb Paging File | 2,86 Gb Available in Paging File | 33,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 244,14 Gb Total Space | 178,12 Gb Free Space | 72,96% Space Free | Partition Type: NTFS
Drive D: | 221,62 Gb Total Space | 102,53 Gb Free Space | 46,27% Space Free | Partition Type: NTFS

Computer Name: HOUSSAM | User Name: HP | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2015/04/21 12:36:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\HP\Downloads\OTL.exe
PRC - [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2015/04/08 14:42:32 | 000,376,944 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2015/04/02 20:38:15 | 043,382,072 | ---- | M] (Dropbox, Inc.) -- C:\Users\HP\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2015/03/30 10:59:06 | 005,448,464 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
PRC - [2015/03/30 10:59:05 | 017,653,008 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer.exe
PRC - [2015/03/30 10:37:31 | 000,229,136 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\tv_w32.exe
PRC - [2015/02/10 23:26:16 | 001,058,688 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
PRC - [2015/02/10 17:05:02 | 011,127,632 | ---- | M] (TechSmith Corporation) -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
PRC - [2015/02/10 17:05:00 | 007,076,176 | ---- | M] (TechSmith Corporation) -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\CamRecorder.exe
PRC - [2015/02/10 14:32:00 | 000,046,080 | ---- | M] (TechSmith Corporation) -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\TscHelp.exe
PRC - [2014/12/19 09:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014/11/21 06:12:46 | 007,229,752 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014/10/01 14:40:28 | 001,349,576 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2014/06/04 10:22:10 | 002,024,800 | ---- | M] (Wondershare) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
PRC - [2013/07/23 05:47:24 | 000,239,696 | ---- | M] () -- C:\ProgramData\MobileBrServ\mbbService.exe
PRC - [2012/08/28 12:00:32 | 001,327,104 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
PRC - [2012/08/28 11:55:16 | 000,393,216 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
PRC - [2012/06/06 15:31:56 | 003,076,096 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
PRC - [2012/06/05 15:56:28 | 000,266,240 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\Browny02\BrYNSvc.exe
PRC - [2010/09/04 07:18:36 | 000,663,552 | ---- | M] () -- C:\Program Files (x86)\Xenu\Xenu.exe
PRC - [2010/05/20 16:26:28 | 000,762,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\vVX1000.exe
PRC - [2010/03/09 00:42:02 | 000,029,984 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
PRC - [2010/03/09 00:40:36 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
PRC - [2010/03/05 20:11:30 | 000,636,192 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
PRC - [2009/05/05 16:06:06 | 000,222,496 | ---- | M] (Acresso Corporation) -- C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/04/20 10:38:23 | 000,043,008 | ---- | M] () -- c:\users\hp\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxt7ikb.dll
MOD - [2015/04/13 23:55:41 | 014,980,424 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\PepperFlash\pepflashplayer.dll
MOD - [2015/04/13 23:55:40 | 001,252,680 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libglesv2.dll
MOD - [2015/04/13 23:55:39 | 000,080,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libegl.dll
MOD - [2015/03/28 22:22:12 | 000,397,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\7950655216951a291ff375b54d5e33fd\System.Xml.Linq.ni.dll
MOD - [2015/03/28 22:21:34 | 000,189,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\fedb1433422296012c8ce48902458bf1\UIAutomationTypes.ni.dll
MOD - [2015/03/28 22:21:34 | 000,100,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\b6d5fa75e3cc493fa9d509124d5962ba\UIAutomationProvider.ni.dll
MOD - [2015/03/28 22:21:30 | 000,019,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1da2af67#\ec0186df42481a76a115b9fdb30b4f42\PresentationFramework-SystemDrawing.ni.dll
MOD - [2015/03/28 22:21:30 | 000,018,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio49d6fefe#\dcf2b1a7011858156e5b759de2e5e598\PresentationFramework-SystemXml.ni.dll
MOD - [2015/03/28 22:21:30 | 000,013,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio4b37ff64#\877c3d0263392551522f9655dbf747b6\PresentationFramework-SystemXmlLinq.ni.dll
MOD - [2015/03/28 22:21:29 | 000,016,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio84a7b877#\0dbb2348461d98c3319e8a3fa729eb68\PresentationFramework-SystemData.ni.dll
MOD - [2015/03/28 17:44:24 | 018,524,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\97e6b67983d07a066b68b3ae8be2f53d\PresentationFramework.ni.dll
MOD - [2015/03/28 17:44:14 | 001,870,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cc4d9093563dadee370788bbc3ecf4fb\System.Xaml.ni.dll
MOD - [2015/03/28 17:44:14 | 000,239,616 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Comp46f2b404#\f0553d9d8cd2698cba2bb38dee5112b6\System.ComponentModel.DataAnnotations.ni.dll
MOD - [2015/03/28 17:44:08 | 007,248,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\9a6093eb864d6729de75ec4b955dddb1\System.Data.ni.dll
MOD - [2015/03/28 17:43:59 | 010,914,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b52bc540630c3aa5de542c382af35c20\PresentationCore.ni.dll
MOD - [2015/03/28 17:43:57 | 002,785,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\293cfe2c05a8ee921726927fd00ea81c\System.Runtime.Serialization.ni.dll
MOD - [2015/03/28 17:43:56 | 001,630,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\72269ea7cc6281139e4d155e7c57dc67\System.Drawing.ni.dll
MOD - [2015/03/28 17:43:54 | 000,802,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\df55f04bc0ebe6c1abde4bc467bf4d03\System.ServiceModel.Internals.ni.dll
MOD - [2015/03/28 17:43:53 | 001,613,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\8fe9ee0386d99c1bc266b451bad79483\Microsoft.CSharp.ni.dll
MOD - [2015/03/28 17:43:53 | 000,121,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\98e3281d79512c9a2a0a89e3bc2e554f\SMDiagnostics.ni.dll
MOD - [2015/03/28 17:43:50 | 000,389,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\7a02afe307442182f401f2fea0595a5a\System.Dynamic.ni.dll
MOD - [2015/03/28 17:43:45 | 006,995,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b9f7adbc90a2bcbe8eb9e6e8d2bb975b\System.Core.ni.dll
MOD - [2015/03/28 17:43:42 | 007,559,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9ba07396ae369d010c5c3927a82ef426\System.Xml.ni.dll
MOD - [2015/03/28 17:43:41 | 003,905,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\cd235caf797fb017f140016be88f33b7\WindowsBase.ni.dll
MOD - [2015/03/28 17:43:39 | 000,462,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\e7d92730b571b31e62c2cf257f04a974\PresentationFramework.Aero.ni.dll
MOD - [2015/03/28 17:43:35 | 000,958,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\28586400bcaf94c13a9fd0dff4a1e090\System.Configuration.ni.dll
MOD - [2015/03/28 17:43:33 | 009,925,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\e40da7a49f8c3f0108e7c835b342f382\System.ni.dll
MOD - [2015/03/28 17:43:27 | 000,145,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\1346fe7d35b70702029e422970db1201\System.Numerics.ni.dll
MOD - [2015/03/28 17:43:26 | 016,501,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\51e2934144ba15628ba5a31be2dae7dc\mscorlib.ni.dll
MOD - [2015/03/04 23:45:31 | 000,750,080 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Dropbox\bin\libGLESv2.dll
MOD - [2015/03/04 23:45:31 | 000,047,616 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Dropbox\bin\libEGL.dll
MOD - [2015/03/04 23:45:30 | 000,865,280 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
MOD - [2015/03/04 23:45:30 | 000,200,704 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
MOD - [2015/02/10 14:31:22 | 002,259,456 | ---- | M] () -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\SingleBandCompressor_Win32.dll
MOD - [2015/02/10 14:31:20 | 002,826,368 | ---- | M] () -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\ConsumerRestoration_Win32.dll
MOD - [2014/06/04 10:21:50 | 000,571,904 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
MOD - [2014/05/19 17:19:02 | 000,137,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
MOD - [2012/03/13 11:43:58 | 006,103,552 | ---- | M] () -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\QtGui4.dll
MOD - [2012/03/13 11:36:02 | 000,295,424 | ---- | M] () -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\QtXml4.dll
MOD - [2012/03/13 11:35:54 | 001,718,784 | ---- | M] () -- C:\Program Files (x86)\TechSmith\Camtasia Studio 8\QtCore4.dll
MOD - [2010/09/04 07:18:36 | 000,663,552 | ---- | M] () -- C:\Program Files (x86)\Xenu\Xenu.exe
MOD - [2009/02/27 17:38:20 | 000,139,264 | R--- | M] () -- C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
MOD - [2007/08/29 00:14:10 | 000,759,648 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSPTLS.DLL


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV:[b]64bit:[/b] - [2014/10/01 14:40:28 | 001,349,576 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2015/04/15 13:50:29 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/04/04 10:41:05 | 000,169,640 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/03/30 10:59:06 | 005,448,464 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
SRV - [2015/03/10 11:33:52 | 000,234,344 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2015/03/10 11:33:35 | 000,417,640 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2014/12/19 09:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/04/03 21:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/07/23 05:47:24 | 000,239,696 | ---- | M] () [Auto | Running] -- C:\ProgramData\MobileBrServ\mbbService.exe -- (Mobile Broadband HL Service)
SRV - [2013/04/30 10:57:00 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2012/07/09 01:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2012/06/05 15:56:28 | 000,266,240 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Running] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc)
SRV - [2010/03/09 00:40:36 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) [Auto | Running] -- C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe -- (PDFProFiltSrvPP)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2015/04/21 11:06:48 | 000,129,752 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:[b]64bit:[/b] - [2015/04/21 09:01:03 | 000,079,064 | ---- | M] (Malwarebytes Corporation) [Kernel | Boot | Unknown] -- C:\Windows\SysNative\drivers\oynl.sys -- (mjlerek)
DRV:[b]64bit:[/b] - [2015/03/10 11:33:38 | 000,107,392 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:[b]64bit:[/b] - [2014/11/21 06:14:22 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:[b]64bit:[/b] - [2014/11/21 06:14:08 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2014/09/22 08:20:06 | 000,243,440 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2014/09/22 08:20:06 | 000,222,280 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:[b]64bit:[/b] - [2014/09/22 08:20:06 | 000,169,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2014/09/22 08:20:06 | 000,063,160 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:[b]64bit:[/b] - [2014/09/22 08:20:06 | 000,044,632 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV:[b]64bit:[/b] - [2013/04/30 10:57:00 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:[b]64bit:[/b] - [2013/04/30 10:56:42 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:[b]64bit:[/b] - [2011/10/21 19:30:03 | 012,310,112 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2011/09/22 10:49:56 | 000,056,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2011/05/20 10:53:44 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2011/05/13 03:21:04 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:[b]64bit:[/b] - [2011/05/13 03:21:04 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV:[b]64bit:[/b] - [2011/03/23 16:20:30 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C60x64.sys -- (L1C)
DRV:[b]64bit:[/b] - [2010/10/29 17:11:42 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:[b]64bit:[/b] - [2010/05/20 16:26:28 | 002,060,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VX1000.sys -- (VX1000)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/07/14 02:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2009/07/14 02:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2009/07/14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2009/07/14 02:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2013/04/30 10:57:00 | 000,016,056 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=698&systemid=2&v=n9397-117&apn_uid=9900420705204095&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}: "URL" = http://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm074^YYA^it&si=flvrunner&ptb=A82C5752-7DB5-43B1-AE2F-A94DFC340231&ind=2013100106&n=77fd784a&psa=&st=sb&searchfor={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=698&systemid=2&v=n9397-117&apn_uid=9900420705204095&apn_dtid=IME002&o=APN10641&apn_ptnrs=AG2&q={searchTerms}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.it/
IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 62 5D B5 27 D9 A7 CE 01 [binary data]
IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\..\SearchScopes,DefaultScope = {01602724-AB5A-49A4-8A07-A6D462F4BECB}
IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\..\SearchScopes\{01602724-AB5A-49A4-8A07-A6D462F4BECB}: "URL" = http://www.google.com/search?hl=en&q={searchTerms}
IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\..\SearchScopes\{229E62DC-AE41-4E49-9BCC-2600AF0A56B2}: "URL" = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
IE - HKU\S-1-5-21-542018073-123050673-2440164694-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "TN"
FF - prefs.js..browser.search.region: "TN"


FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll File not found
FF - HKLM\Software\MozillaPlugins\@ei.Zwinky_5q.com/Plugin: C:\Program Files (x86)\Zwinky_5qEI\Installr\1.bin\NP5qEISB.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2: C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013/06/18 18:40:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HP\AppData\Roaming\mozilla\Extensions
[2015/04/02 11:40:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions
[2015/03/14 13:46:51 | 000,000,000 | ---D | M] (SeoQuake) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
[2015/04/01 15:55:56 | 000,000,000 | ---D | M] (iMacros for Firefox) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}
[2015/03/31 10:55:12 | 000,000,000 | ---D | M] (Flash and Video Download) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
[2015/03/05 18:57:37 | 000,000,000 | ---D | M] (ADB Helper) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions\adbhelper@mozilla.org
[2015/04/02 11:40:15 | 000,000,000 | ---D | M] (Valence) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions\fxdevtools-adapters@mozilla.org
[2015/04/21 11:33:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\5ipmfagq.default\extensions
[2015/04/06 20:01:54 | 000,000,000 | ---D | M] (SeoQuake) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\5ipmfagq.default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
[2014/10/13 17:51:30 | 000,000,000 | ---D | M] ("Ultimate Finder") -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\5ipmfagq.default\extensions\{7c231677-e4fb-44ac-80a5-c87fcb7c2be9}
[2014/09/04 17:48:30 | 000,000,000 | ---D | M] ("Website Tipster") -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\5ipmfagq.default\extensions\{bda388db-b4e9-4193-b83a-bca1947df5c3}
[2013/09/24 10:42:35 | 000,000,000 | ---D | M] (SweetPacks Toolbar for Firefox) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\5ipmfagq.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2014/09/04 17:36:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles5ipmfagq.default\extensions
[2014/09/04 17:36:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles5ipmfagq.default\extensions\staged
[2015/03/14 13:46:50 | 000,410,579 | ---- | M] () (No name found) -- C:\Users\HP\AppData\Roaming\mozilla\firefox\profiles\0sahagmv.dev-edition-default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi
[2015/04/09 13:48:54 | 000,389,136 | ---- | M] () (No name found) -- C:\Users\HP\AppData\Roaming\mozilla\firefox\profiles\5ipmfagq.default\extensions\langpack-it@firefox.mozilla.org.xpi
[2014/05/09 20:20:08 | 000,006,057 | ---- | M] () -- C:\Users\HP\AppData\Roaming\mozilla\firefox\profiles\5ipmfagq.default\searchplugins\bingp.xml
[2015/04/08 14:42:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/04/08 14:42:33 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

O1 HOSTS File: ([2015/04/20 11:29:51 | 000,001,472 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost# 127.0.0.1 activation.cloud.techsmith.com
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-542018073-123050673-2440164694-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-542018073-123050673-2440164694-1000\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:[b]64bit:[/b] - HKLM..\Run: [EPSON Stylus DX3800 Series] C:\Windows\SysNative\spool\DRIVERS\x64\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [VX1000] C:\Windows\vVX1000.exe (Microsoft Corporation)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDF5 Registry Controller] C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PPort12reminder] C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [tuto4pc_it_25] File not found
O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-542018073-123050673-2440164694-1000..\Run: [AirDroid 3] C:\Program Files (x86)\AirDroid\AirDroid.exe /start File not found
O4 - HKU\S-1-5-21-542018073-123050673-2440164694-1000..\Run: [GoogleChromeAutoLaunch_AF07ADB424B82216064A05A2CAB71EA4] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKU\S-1-5-21-542018073-123050673-2440164694-1000..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation)
O4 - HKU\S-1-5-21-542018073-123050673-2440164694-1000..\Run: [TrafficTravisv4] C:\Users\HP\AppData\Roaming\Traffic Travis v4\TrafficTravisV4.exe (Doubledot Media Ltd)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\HP\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: Apri con PDF Viewer Plus - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O8 - Extra context menu item: Apri con PDF Viewer Plus - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {DB9DE2A8-D1BA-472A-B1F8-39697899DEF7} http://aiosardegna.dvrdns.org/HiDvrOcx.cab (HiDvrOcx Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 193.95.59.20 193.95.57.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{46E5DA02-6DF0-485B-8B6D-C7EFDAF94D81}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{71F82491-4C05-4A5B-8A06-43D19D493E63}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{98E91B8F-199C-4260-ABE4-5F0802B43596}: DhcpNameServer = 193.95.59.20 193.95.57.20
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:[b]64bit:[/b] - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\x64\mgrldr.dll) - File not found
O20 - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\mgrldr.dll) - File not found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:[b]64bit:[/b] - HKLM IFEO\browsemngr.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\browsermngr.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\bundlesweetimsetup.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\cltmngsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\delta babylon.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\delta tb.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\delta2.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\deltainstaller.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\deltasetup.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\deltatb.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\deltatb_2501-c733154b.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\iminentsetup.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\rjatydimofu.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\sweetimsetup.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:[b]64bit:[/b] - HKLM IFEO\tbdelta.exetoolbar783881609.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsemngr.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsermngr.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bundlesweetimsetup.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\cltmngsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\delta babylon.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\delta tb.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\delta2.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\deltainstaller.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\deltasetup.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\deltatb.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\deltatb_2501-c733154b.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\iminentsetup.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\rjatydimofu.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\sweetimsetup.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\tbdelta.exetoolbar783881609.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{2ec9f9b2-b8e4-11e4-9729-386077faea64}\Shell - "" = AutoRun
O33 - MountPoints2\{2ec9f9b2-b8e4-11e4-9729-386077faea64}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f3b298c7-3f14-11e2-856e-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{f3b298c7-3f14-11e2-856e-806e6f6e6963}\Shell\AutoRun\command - "" = E:\DriverPackSolution.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

MsConfig:64bit - State: "startup" - Reg Error: Key error.

SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1} - .NET Framework
ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1} - .NET Framework
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:[b]64bit:[/b] vidc.tsc2 - C:\Windows\SysWOW64\tsc2_codec64.dll (TechSmith Corporation)
Drivers32:[b]64bit:[/b] vidc.tscc - C:\Windows\SysWOW64\tsccvid64.dll (TechSmith Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.tsc2 - C:\Windows\SysWOW64\tsc2_codec32.dll (TechSmith Corporation)
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2015/04/21 09:01:03 | 000,079,064 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\oynl.sys
[2015/04/18 13:35:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Traffic Travis v4
[2015/04/18 13:35:38 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\Traffic Travis v4
[2015/04/18 13:35:21 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\Affilorama
[2015/04/15 18:52:20 | 000,000,000 | ---D | C] -- C:\Users\HP\Desktop\annnonce
[2015/04/14 16:36:21 | 000,000,000 | R--D | C] -- C:\Users\HP\Dropbox
[2015/04/09 18:24:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xenu's Link Sleuth
[2015/04/09 11:09:20 | 000,000,000 | ---D | C] -- C:\Users\HP\Desktop\thebootstrapthemes-realestate
[2015/04/08 14:42:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/04/08 14:08:58 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\PhotoFiltre Studio X
[2015/04/08 14:08:54 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
[2015/04/08 14:08:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
[2015/04/08 14:08:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PhotoFiltre Studio X
[2015/04/08 13:59:15 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2015/04/07 10:56:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2015/04/07 10:56:01 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2015/04/07 10:56:01 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2015/04/04 10:40:55 | 000,000,000 | ---D | C] -- C:\Program Files\Firefox Developer Edition
[2015/04/03 18:02:29 | 000,000,000 | ---D | C] -- C:\Users\HP\Documents\openElement
[2015/04/03 17:59:00 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\openElement
[2015/04/03 17:55:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\openElement 1.48 R3
[2015/04/03 17:55:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\openElement
[2015/04/03 17:55:41 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Local\Element Technologie
[2015/04/03 17:55:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Element Technologie
[2015/04/03 16:39:04 | 000,000,000 | ---D | C] -- C:\Users\HP\Documents\Artisteer Templates
[2015/04/02 20:52:59 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\Apple Computer
[2015/04/02 20:52:59 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Local\Apple Computer
[2015/04/02 20:52:42 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\Artisteer
[2015/04/02 20:50:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Artisteer 4
[2015/04/01 18:58:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xenu
[2015/03/28 17:54:29 | 000,000,000 | ---D | C] -- C:\Users\HP\Documents\Sarbacane Desktop
[2015/03/28 17:54:27 | 000,000,000 | ---D | C] -- C:\Users\HP\.Sarbacane
[2015/03/28 17:47:12 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Roaming\Nvu
[2015/03/28 17:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nvu
[2015/03/28 17:47:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nvu
[2015/03/28 17:36:54 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Local\Deployment
[1 C:\Users\HP\Desktop\*.tmp files -> C:\Users\HP\Desktop\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/04/21 12:45:37 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/04/21 11:52:01 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf4fef3911ea5a.job
[2015/04/21 11:51:15 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/04/21 11:06:48 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/04/21 09:01:03 | 000,079,064 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\oynl.sys
[2015/04/20 19:52:03 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1ceaa1f4793d7cb.job
[2015/04/20 11:27:26 | 001,665,250 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/04/20 11:27:26 | 000,736,234 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2015/04/20 11:27:26 | 000,652,990 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/04/20 11:27:26 | 000,148,690 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2015/04/20 11:27:26 | 000,121,392 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/04/20 10:46:37 | 000,020,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/04/20 10:46:37 | 000,020,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/04/20 10:37:25 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2015/04/20 10:37:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/04/20 10:37:02 | 3147,706,368 | -HS- | M] () -- C:\hiberfil.sys
[2015/04/18 10:05:01 | 000,208,911 | ---- | M] () -- C:\Users\HP\Desktop\curriculum-vitae-europeo Enzo fran..pdf
[2015/04/18 09:54:37 | 000,002,181 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/04/15 13:50:28 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/04/15 13:50:28 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/04/14 13:34:18 | 000,001,123 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2015/04/14 13:33:50 | 000,001,005 | ---- | M] () -- C:\Users\HP\Desktop\Dropbox.lnk
[2015/04/13 13:41:44 | 000,007,605 | ---- | M] () -- C:\Users\HP\AppData\Local\resmon.resmoncfg
[2015/04/09 18:24:31 | 000,000,951 | ---- | M] () -- C:\Users\HP\Desktop\Xenu.lnk
[2015/04/08 14:08:54 | 000,001,096 | ---- | M] () -- C:\Users\HP\Desktop\PhotoFiltre Studio X.lnk
[2015/04/08 13:59:14 | 000,000,112 | -H-- | M] () -- C:\5DCB97786E4D
[2015/04/08 13:59:14 | 000,000,040 | -H-- | M] () -- C:\93126B91FCB4
[2015/04/06 12:52:21 | 000,049,906 | ---- | M] () -- C:\Users\HP\Desktop\aio.html
[2015/04/03 17:56:22 | 000,001,185 | ---- | M] () -- C:\Users\Public\Desktop\openElement.lnk
[2015/04/03 16:51:40 | 000,034,308 | ---- | M] () -- C:\Windows\SysWow64\bassmod.dll
[2015/04/02 11:47:42 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2015/03/31 16:59:29 | 000,053,323 | ---- | M] () -- C:\Users\HP\Desktop\Autodichiarazione_veridicita_dati.pdf
[2015/03/28 17:45:55 | 001,628,086 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2015/03/28 13:59:55 | 000,001,242 | ---- | M] () -- C:\Users\HP\Desktop\Paint.lnk
[1 C:\Users\HP\Desktop\*.tmp files -> C:\Users\HP\Desktop\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/04/21 12:45:36 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015/04/18 10:05:00 | 000,208,911 | ---- | C] () -- C:\Users\HP\Desktop\curriculum-vitae-europeo Enzo fran..pdf
[2015/04/13 13:16:45 | 000,007,605 | ---- | C] () -- C:\Users\HP\AppData\Local\resmon.resmoncfg
[2015/04/09 18:24:31 | 000,000,951 | ---- | C] () -- C:\Users\HP\Desktop\Xenu.lnk
[2015/04/08 14:08:54 | 000,001,096 | ---- | C] () -- C:\Users\HP\Desktop\PhotoFiltre Studio X.lnk
[2015/04/08 13:59:14 | 000,000,112 | -H-- | C] () -- C:\5DCB97786E4D
[2015/04/08 13:59:14 | 000,000,040 | -H-- | C] () -- C:\93126B91FCB4
[2015/04/06 12:52:21 | 000,049,906 | ---- | C] () -- C:\Users\HP\Desktop\aio.html
[2015/04/03 17:56:22 | 000,001,185 | ---- | C] () -- C:\Users\Public\Desktop\openElement.lnk
[2015/04/03 16:51:40 | 000,034,308 | ---- | C] () -- C:\Windows\SysWow64\bassmod.dll
[2015/03/31 16:56:10 | 000,053,323 | ---- | C] () -- C:\Users\HP\Desktop\Autodichiarazione_veridicita_dati.pdf
[2015/03/28 13:59:55 | 000,001,242 | ---- | C] () -- C:\Users\HP\Desktop\Paint.lnk
[2015/02/11 12:48:31 | 001,628,086 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014/05/03 16:57:10 | 000,000,247 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2014/05/03 16:57:10 | 000,000,064 | ---- | C] () -- C:\Windows\brpcfx.ini
[2014/05/03 16:56:08 | 000,006,616 | ---- | C] () -- C:\Windows\BRPARAM.INI
[2014/05/03 16:53:01 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2014/05/03 16:53:00 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2013/12/17 17:13:07 | 000,004,096 | -H-- | C] () -- C:\Users\HP\AppData\Local\keyfile3.drm
[2013/10/21 10:43:48 | 000,000,600 | ---- | C] () -- C:\Users\HP\AppData\Local\PUTTY.RND
[2013/09/24 11:15:23 | 000,000,000 | ---- | C] () -- C:\Users\HP\.TFileChooserFavourites

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2009/07/14 03:41:54 | 014,161,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2009/07/14 03:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.dll /s >[/color]

[color=#A23BEC]< %APPDATA%\*. >[/color]
[2015/04/08 14:02:29 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Adobe
[2013/10/08 13:28:52 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Advanced System Protector
[2015/04/18 13:35:21 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Affilorama
[2015/04/02 20:52:59 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Apple Computer
[2015/04/02 20:52:42 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Artisteer
[2013/11/11 13:29:49 | 000,000,000 | R--D | M] -- C:\Users\HP\AppData\Roaming\Brother
[2013/10/04 10:05:38 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\CheckPoint
[2014/10/08 10:19:15 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\ControlCenter4
[2015/02/22 14:31:39 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\DMCache
[2014/12/15 11:35:23 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Downloaded Installations
[2015/04/20 10:39:19 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Dropbox
[2013/10/01 12:12:57 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\DRPSu
[2013/10/14 21:39:12 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\DVDVideoSoft
[2014/09/09 18:34:51 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\ESET
[2015/02/11 12:56:16 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\FDSoftware
[2014/07/24 14:37:23 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\FileZilla
[2014/05/03 17:05:05 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\FLEXnet
[2013/09/24 10:29:35 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\GoforFiles
[2013/09/09 17:22:58 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Google
[2015/04/08 14:09:02 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Identities
[2014/05/03 16:51:30 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\InstallShield
[2013/06/18 19:12:00 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Macromedia
[2014/08/28 16:34:07 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Malwarebytes
[2009/07/14 17:35:18 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Media Center Programs
[2015/02/12 18:05:56 | 000,000,000 | --SD | M] -- C:\Users\HP\AppData\Roaming\Microsoft
[2013/06/18 18:40:33 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Mozilla
[2013/09/26 13:22:26 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\MusicNet
[2012/12/06 11:23:54 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Nero
[2014/12/15 15:51:03 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Nitro
[2014/12/15 20:29:44 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Nitro PDF
[2015/02/18 13:40:47 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Notepad++
[2014/05/03 16:49:22 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Nuance
[2015/03/28 17:47:12 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Nvu
[2015/04/03 17:59:00 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\openElement
[2014/09/04 11:28:45 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\PDF Architect 2
[2014/09/04 11:20:56 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\pdfforge
[2015/04/08 17:00:53 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\PhotoFiltre Studio X
[2013/09/27 10:43:31 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\SeeSimilar02
[2015/04/21 12:39:39 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Skype
[2013/10/08 13:38:53 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Systweak
[2014/01/03 13:12:54 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\TeamViewer
[2015/02/11 13:08:31 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\TechSmith
[2013/09/19 11:37:20 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\tinySpell
[2015/04/18 13:35:47 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Traffic Travis v4
[2015/03/10 19:07:20 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\uTorrent
[2015/02/19 15:36:17 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\VideoScribeDesktop
[2013/10/10 11:44:34 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\vlc
[2014/09/04 17:36:56 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\WebExtend
[2013/10/01 12:06:28 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Wondershare
[2013/06/18 19:05:14 | 000,000,000 | ---D | M] -- C:\Users\HP\AppData\Roaming\Zoiper

[color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
[2015/04/02 20:38:15 | 043,382,072 | ---- | M] (Dropbox, Inc.) -- C:\Users\HP\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2015/04/02 20:39:26 | 000,265,856 | ---- | M] (Dropbox, Inc.) -- C:\Users\HP\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2015/04/02 20:38:20 | 001,032,456 | ---- | M] (Dropbox, Inc.) -- C:\Users\HP\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2013/10/30 19:17:26 | 000,002,238 | R--- | M] () -- C:\Users\HP\AppData\Roaming\Microsoft\Installer\{E0CE9B9E-D892-4B16-AE9F-1CFF107E11FC}\_262722ae.exe
[2015/03/05 18:57:37 | 000,818,176 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions\adbhelper@mozilla.org\win32\adb.exe
[2015/04/02 11:40:14 | 000,069,632 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\0sahagmv.dev-edition-default\extensions\fxdevtools-adapters@mozilla.org\tools\win32\ios-webkit-debug-proxy.exe
[2014/10/15 08:54:56 | 019,886,592 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Traffic Travis v4\phantomjs.exe
[2015/04/15 10:55:52 | 024,041,088 | ---- | M] (Doubledot Media Ltd) -- C:\Users\HP\AppData\Roaming\Traffic Travis v4\TrafficTravisV4.exe
[2014/03/13 06:56:46 | 006,797,440 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Traffic Travis v4\TT4ProjectMigrator.exe
[2015/04/15 10:55:54 | 001,761,408 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Traffic Travis v4\TTBugReporter.exe
[2014/05/13 14:23:02 | 001,526,288 | ---- | M] (Doubledot Media Ltd) -- C:\Users\HP\AppData\Roaming\Traffic Travis v4\TTUpdater.exe
[2015/04/18 13:35:18 | 001,282,379 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Traffic Travis v4\unins000.exe
[2014/10/15 08:54:56 | 000,237,184 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Traffic Travis v4\xdelta.exe
[2014/06/24 23:09:06 | 002,273,456 | ---- | M] (Wondershare ) -- C:\Users\HP\AppData\Roaming\Wondershare\Wondershare Helper Compact\Wondershare Helper Compact.exe

[color=#A23BEC]< %temp%\*.exe /s >[/color]
[2015/04/07 10:57:27 | 000,372,936 | ---- | M] (ESET) -- C:\Users\HP\AppData\Local\Temp\InstHelper.exe
[2015/02/21 12:37:41 | 029,546,352 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\Lifecam3.0.204.0.exe
[2015/03/28 17:36:45 | 000,712,304 | ---- | M] (Sarbacane) -- C:\Users\HP\AppData\Local\Temp\SarbacaneInstall40.exe
[2015/04/04 20:56:26 | 045,205,504 | ---- | M] (Skype Technologies S.A.) -- C:\Users\HP\AppData\Local\Temp\SkypeSetup.exe
[2015/02/16 14:39:09 | 000,559,000 | ---- | M] (Ask Partner Network) -- C:\Users\HP\AppData\Local\Temp\uttBA26.tmp.exe
[2012/11/02 11:08:34 | 000,118,784 | ---- | M] () -- C:\Users\HP\AppData\Local\Temp\xmlUpdater.exe
[105 C:\Users\HP\AppData\Local\Temp\*.tmp files -> C:\Users\HP\AppData\Local\Temp\*.tmp -> ]
[2009/02/27 17:38:10 | 000,225,280 | ---- | M] (Brother Industries, Ltd.) -- C:\Users\HP\AppData\Local\Temp\{A06C686D-A05E-420A-A66F-56D294BB91BE}\{E2A97415-BD97-4867-B906-05E39E9EE51F}\BrLogRx.exe
[2010/01/25 09:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) -- C:\Users\HP\AppData\Local\Temp\{A06C686D-A05E-420A-A66F-56D294BB91BE}\{E2A97415-BD97-4867-B906-05E39E9EE51F}\Browny02\BrYNSvc.exe
[2010/06/10 14:42:44 | 002,621,440 | R--- | M] (Brother Industries, Ltd.) -- C:\Users\HP\AppData\Local\Temp\{A06C686D-A05E-420A-A66F-56D294BB91BE}\{E2A97415-BD97-4867-B906-05E39E9EE51F}\Browny02\Company\BrStMonW.exe
[2009/10/23 09:01:54 | 000,053,248 | ---- | M] (Brother Industories, Ltd.) -- C:\Users\HP\AppData\Local\Temp\{A06C686D-A05E-420A-A66F-56D294BB91BE}\{E2A97415-BD97-4867-B906-05E39E9EE51F}\DevSearch\DeviceSearch.exe
[2010/01/29 16:44:16 | 000,118,784 | ---- | M] (Brother Industries, Ltd.) -- C:\Users\HP\AppData\Local\Temp\{A06C686D-A05E-420A-A66F-56D294BB91BE}\{E2A97415-BD97-4867-B906-05E39E9EE51F}\DrvLangChg\DrvLangChg.exe
[2009/07/13 12:12:40 | 001,047,632 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\{A06C686D-A05E-420A-A66F-56D294BB91BE}\Drivers\DPInst.exe
[2015/03/04 15:11:55 | 000,704,536 | ---- | M] (mozilla.org) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\setup.exe
[2015/03/04 13:59:27 | 000,337,064 | ---- | M] (Mozilla Foundation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\crashreporter.exe
[2015/03/04 13:59:28 | 000,422,568 | ---- | M] (Mozilla Corporation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\firefox.exe
[2015/03/04 13:59:40 | 000,169,640 | ---- | M] (Mozilla Foundation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\maintenanceservice.exe
[2015/03/04 13:59:41 | 000,185,488 | ---- | M] (Mozilla Corporation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\maintenanceservice_installer.exe
[2015/03/04 13:59:48 | 000,230,056 | ---- | M] (Mozilla Corporation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\plugin-container.exe
[2015/03/04 13:59:50 | 000,205,480 | ---- | M] (Mozilla Corporation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\plugin-hang-ui.exe
[2015/03/04 13:59:53 | 000,321,192 | ---- | M] (Mozilla Foundation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\updater.exe
[2015/03/04 13:59:54 | 000,091,088 | ---- | M] (Mozilla Corporation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\webapp-uninstaller.exe
[2015/03/04 13:59:55 | 000,140,968 | ---- | M] (Mozilla Foundation) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\webapprt-stub.exe
[2015/03/04 15:12:52 | 000,924,408 | ---- | M] (mozilla.org) -- C:\Users\HP\AppData\Local\Temp\7zS41BC.tmp\core\uninstall\helper.exe
[2014/11/07 20:05:22 | 000,889,416 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\Camtasia_Setup\Prerequisites\DotNetFX40\dotNetFx40_Full_setup.exe
[2015/04/06 14:38:26 | 000,084,784 | ---- | M] () -- C:\Users\HP\AppData\Local\Temp\ish10367951\fciv.exe
[2010/05/20 16:25:56 | 000,666,992 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setupstb.exe
[2010/05/20 16:26:26 | 000,525,680 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\dx90c\dxsetup.exe
[2010/05/20 16:26:26 | 000,286,576 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\auchecker.exe
[2010/05/20 16:26:26 | 000,158,576 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\icepick.exe
[2010/05/20 16:26:26 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifecam.exe
[2010/05/20 16:26:26 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeenc2.exe
[2010/05/20 16:26:26 | 000,119,152 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeexp.exe
[2010/05/20 16:26:26 | 000,095,088 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifetray.exe
[2010/05/20 16:26:28 | 000,054,128 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mmins.exe
[2010/05/20 16:26:28 | 000,139,632 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams32.exe
[2010/05/20 16:26:28 | 000,199,536 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams64.exe
[2010/05/20 16:26:28 | 000,762,736 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1000.exe
[2010/05/20 16:26:30 | 000,762,736 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3000.exe
[2010/05/20 16:26:32 | 000,764,784 | ---- | M] (Microsoft Corporation
) -- C:\Users\HP\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6000.exe
[2010/04/03 07:37:56 | 005,399,424 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\Microsoft .NET Framework 4 Setup_4.0.30319\dotNetFx40LP_Full_x86_x64fr.exe
[2010/03/18 22:16:28 | 000,078,152 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\Microsoft .NET Framework 4 Setup_4.0.30319\Setup.exe
[2010/03/18 21:58:36 | 000,096,088 | ---- | M] (Microsoft Corporation) -- C:\Users\HP\AppData\Local\Temp\Microsoft .NET Framework 4 Setup_4.0.30319\SetupUtility.exe
[2015/03/09 18:05:40 | 000,298,096 | ---- | M] (Mozilla Foundation) -- C:\Users\HP\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
[2007/11/07 09:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\consrv.dll >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2009/07/14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\atl.dll
[2009/07/14 03:15:21 | 000,462,848 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\FirewallAPI.dll
[2009/07/14 03:15:28 | 010,973,696 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\ieframe.dll
[2009/07/14 03:15:28 | 000,186,368 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\iepeers.dll

[color=#A23BEC]< %windir%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\SysWOW64\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\explorer.exe
[2009/07/14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe

[color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
[2009/07/14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009/07/14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009/07/14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\SysNative\winlogon.exe
[2009/07/14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2014/11/21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe

[color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color]
"Debug" =
"" = mnmsrvc
"Kmode" = \SystemRoot\System32\win32k.sys
"Optional" = Posix [binary data]
"Posix" = %SystemRoot%\system32\psxss.exe
"Required" = DebugWindows [binary data]
"Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s >[/color]
"ProfilesDirectory" = %SystemDrive%\Users -- [2013/10/15 15:54:06 | 000,000,000 | R--D | M]
"Default" = %SystemDrive%\Users\Default -- [2012/12/06 10:51:21 | 000,000,000 | RH-D | M]
"Public" = %SystemDrive%\Users\Public -- [2014/09/04 17:37:08 | 000,000,000 | R--D | M]
"ProgramData" = %SystemDrive%\ProgramData -- [2015/04/08 13:59:15 | 000,000,000 | -H-D | M]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18]
"Flags" = 12
"State" = 0
"RefCount" = 1
"Sid" = 01 01 00 00 00 00 00 05 12 00 00 00 [binary data]
"ProfileImagePath" = %systemroot%\system32\config\systemprofile -- [2013/08/30 09:19:40 | 000,000,000 | ---D | M]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"ProfileImagePath" = C:\Windows\ServiceProfiles\LocalService -- [2014/01/13 09:55:38 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
"ProfileImagePath" = C:\Windows\ServiceProfiles\NetworkService -- [2014/01/13 09:55:38 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-542018073-123050673-2440164694-1000]
"ProfileImagePath" = C:\Users\HP -- [2015/04/14 16:36:21 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
"Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 19 8A 4E 20 B1 9A 55 07 56 F5 71 91 E8 03 00 00 [binary data]
"ProfileLoadTimeLow" = 0
"ProfileLoadTimeHigh" = 0
"RefCount" = 5
"RunLogonScriptSync" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-542018073-123050673-2440164694-1004]
"ProfileImagePath" = C:\Users\LogMeInRemoteUser -- [2013/11/11 12:10:10 | 000,000,000 | ---D | M]
"Flags" = 1
"State" = 256
"Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 19 8A 4E 20 B1 9A 55 07 56 F5 71 91 EC 03 00 00 [binary data]
"ProfileLoadTimeLow" = 0
"ProfileLoadTimeHigh" = 0
"RefCount" = 0

[color=#A23BEC]< HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s >[/color]
"CompletionChar" = 64
"DefaultColor" = 0
"EnableExtensions" = 1
"PathCompletionChar" = 64

[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s >[/color]
"CompletionChar" = 9
"DefaultColor" = 0
"EnableExtensions" = 1
"PathCompletionChar" = 9

[color=#A23BEC]< nslookup www.google.fr /c >[/color]
Serveur : UnKnown
Address: 193.95.59.20
Nom : WWW.GOOGLE.FR
Address: 216.58.212.99

[color=#A23BEC]< ipconfig /all /c >[/color]
Configuration IP de Windows
Nom de l'h te . . . . . . . . . . : Houssam
Suffixe DNS principal . . . . . . :
Type de noeud. . . . . . . . . . : Hybride
Routage IP activ . . . . . . . . : Non
Proxy WINS activ . . . . . . . . : Non
Carte Ethernet Connexion au r seau local :
Suffixe DNS propre & la connexion. . . :
Description. . . . . . . . . . . . . . : Atheros AR8152/8158 PCI-E Fast Ethernet Controller
Adresse physique . . . . . . . . . . . : 38-60-77-FA-EA-64
DHCP activ . . . . . . . . . . . . . . : Oui
Configuration automatique activ e. . . : Oui
Adresse IPv6 de liaison locale. . . . .: fe80::999:fd6d:ae58:d027%11(pr f r )
Adresse IPv4. . . . . . . . . . . . . .: 192.168.1.133(pr f r )
Masque de sous-r seau. . . .ÿ. . . . . : 255.255.255.0
Bail obtenu. . . . . . . . .ÿ. . . . . : luned 20 aprile 2015 10:37:20
Bail expirant. . . . . . . . .ÿ. . . . : mercoled 22 aprile 2015 11:23:31
Passerelle par d faut. . . .ÿ. . . . . : 192.168.1.1
Serveur DHCP . . . . . . . . . . . . . : 192.168.1.1
IAID DHCPv6 . . . . . . . . . . . : 238575735
DUID de client DHCPv6. . . . . . . . : 00-01-00-01-18-52-18-96-38-60-77-FA-8F-4C
Serveurs DNS. . . . . . . . . . . . . : 193.95.59.20
193.95.57.20
NetBIOS sur Tcpip. . . . . . . . . . . : Activ

[color=#A23BEC]< ping www.google.fr /c >[/color]
Envoi d'une requÆte 'ping' sur WWW.GOOGLE.FR [216.58.211.195] avec 32 octets de donn esÿ:
R ponse de 216.58.211.195ÿ: octets=32 temps=40 ms TTL=50
R ponse de 216.58.211.195ÿ: octets=32 temps=43 ms TTL=50
R ponse de 216.58.211.195ÿ: octets=32 temps=54 ms TTL=50
R ponse de 216.58.211.195ÿ: octets=32 temps=48 ms TTL=50
Statistiques Ping pour 216.58.211.195:
Paquetsÿ: envoy s = 4, re! us = 4, perdus = 0 (perte 0%),
Dur e approximative des boucles en millisecondes :
Minimum = 40ms, Maximum = 54ms, Moyenne = 46ms

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color]
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2015/04/08 14:42:30 | 000,923,920 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2015/04/08 14:42:30 | 000,923,920 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2015/04/08 14:42:30 | 000,923,920 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" [2015/04/08 14:42:32 | 000,376,944 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -preferences [2015/04/08 14:42:32 | 000,376,944 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode [2015/04/08 14:42:32 | 000,376,944 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --make-default-browser [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --hide-icons [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --show-icons [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show [2009/07/14 03:14:21 | 000,176,128 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall [2009/07/14 03:14:21 | 000,176,128 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide [2009/07/14 03:14:21 | 000,176,128 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -extoff [2009/07/14 03:17:29 | 000,673,048 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files (x86)\Internet Explorer\iexplore.exe [2009/07/14 03:17:29 | 000,673,048 | ---- | M] (Microsoft Corporation)

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color]
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /HIDESHORTCUTS [2015/04/08 14:42:30 | 000,923,920 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /SHOWSHORTCUTS [2015/04/08 14:42:30 | 000,923,920 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /SETASDEFAULTAPPGLOBAL [2015/04/08 14:42:30 | 000,923,920 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE" [2015/04/08 14:42:32 | 000,376,944 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE" -PREFERENCES [2015/04/08 14:42:32 | 000,376,944 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE" -SAFE-MODE [2015/04/08 14:42:32 | 000,376,944 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --MAKE-DEFAULT-BROWSER [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --HIDE-ICONS [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --SHOW-ICONS [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" [2015/04/13 23:55:42 | 000,812,872 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -SHOW [2009/07/14 03:39:12 | 000,073,728 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -REINSTALL [2009/07/14 03:39:12 | 000,073,728 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -HIDE [2009/07/14 03:39:12 | 000,073,728 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE" -EXTOFF [2009/07/14 03:17:29 | 000,673,048 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE [2009/07/14 03:17:29 | 000,673,048 | ---- | M] (Microsoft Corporation)

[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2015/02/24 15:57:16 | 000,030,504 | ---- | M] ()(C:\Users\HP\Documents\?????-??????-528x415.jpg) -- C:\Users\HP\Documents\E:3D)-'DEH*I-528x415.jpg
[2015/02/24 15:57:03 | 000,030,504 | ---- | C] ()(C:\Users\HP\Documents\?????-??????-528x415.jpg) -- C:\Users\HP\Documents\E:3D)-'DEH*I-528x415.jpg

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 83 bytes -> C:\Users\HP\Desktop\feedback mahdi.xls:com.dropbox.attributes
@Alternate Data Stream - 83 bytes -> C:\Users\HP\Desktop\DECLARATION.docx:com.dropbox.attributes
@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences

< End of report >

Publicité


Signaler le contenu de ce document

Publicité