Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-05-2015
Ran by Agnès (administrator) on AGNÈS-PC on 27-05-2015 13:48:48
Running from C:\Users\Agnès\Downloads
Loaded Profiles: Agnès (Available Profiles: Agnès)
Platform: Windows 7 Home Premium (X64) OS Language: Français (France)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Spartacs) C:\Program Files (x86)\Free Video Grabber 6.6\07bade38-c79b-4f34-9c14-ae1ac538d21e.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Small Island Development) C:\ProgramData\BssBJaHEjER\qpEuTSDr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
( ) C:\Program Files (x86)\v04BlockAndSurf\BlockAndSurfC.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(HQPure) C:\Program Files (x86)\HQPureV1.8\95b1002a-ce14-49a9-aff9-33ccfb34c56d-6.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(FileProperties_CompanyName) C:\Program Files (x86)\videos+ MediaPlayer+\f2b68ce7-eaeb-4e75-ac89-b2b7145353fa-6.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nicolas Coolman) C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-08-07] (Egis Technology Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [828960 2009-08-05] (Acer Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-27] (Avast Software s.r.o.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28917376 2015-05-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2015-05-25] (Glarysoft Ltd)
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\...\MountPoints2: {eefa75af-2d48-11e4-8fc5-001f16caabe0} - "F:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> c:\windows\system32\ACER.SCR [438272 2009-07-08] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-05-26] (Microsoft Corporation)
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-27] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll [2009-08-07] (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll [2009-08-07] (Egis Technology Inc.)
BootExecute: autocheck autochk * BootDefrag.exesasnative64
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:52633;https=127.0.0.1:52633
ProxyServer: [S-1-5-21-2531059883-2664103884-2697017122-1000] => http=127.0.0.1:13830;https=127.0.0.1:13830
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=http://istart.webssearches.com/?type=hp&ts=1404485047&from=amt&uid=WDCXWD5000BEVT-22ZAT0_WD-WX40A791507315073
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1404485047&from=amt&uid=WDCXWD5000BEVT-22ZAT0_WD-WX40A791507315073&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp&ts=1404485047&from=amt&uid=WDCXWD5000BEVT-22ZAT0_WD-WX40A791507315073
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=ds&ts=1404485047&from=amt&uid=WDCXWD5000BEVT-22ZAT0_WD-WX40A791507315073&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&m=aspire_5738&r=27360110j516l03g8z1m5t47i1w09q
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&m=aspire_5738&r=27360110j516l03g8z1m5t47i1w09q
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1404485047&from=amt&uid=WDCXWD5000BEVT-22ZAT0_WD-WX40A791507315073&q={searchTerms}
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1404485047&from=amt&uid=WDCXWD5000BEVT-22ZAT0_WD-WX40A791507315073&q={searchTerms}
SearchScopes: HKLM -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = http://www.default-search.net/search?sid=492&aid=246&itype=n&ver=13467&tm=434&src=ds&p={searchTerms}
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDY5BLiS4cCE-YX7U8gT6n2_UOFQ3xzq6vq1wJf-KO_OYqnCB8fkHsIsow6tgF4yxzpJ4CEa6ww8HC-WXJcGkDj69TlPUle5U7-zpYmUegl8TiC4tKwEvn-cl8_Rz7iSNJj61H6jGHdEU0Kn2OyMQFcK_KOdCF1DTwOQdeN0vcLSUS4lWaEQyg,,&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = http://www.default-search.net/search?sid=492&aid=246&itype=n&ver=13467&tm=434&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.certified-toolbar.com?si=77302&st=bs&tid=18195&ver=5.7&ts=1407595587640&tguid=77302-18195-1407595587640-5317F82425AFB2979D9414BDA98DD8BA&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDY5BLiS4cCE-YX7U8gT6n2_UOFQ3xzq6vq1wJf-KO_OYqnCB8fkHsIsow6tgF4yxzpJ4CEa6ww8HC-WXJcGkDj69TlPUle5U7-zpYmUegl8TiC4tKwEvn-cl8_Rz7iSNJj61H6jGHdEU0Kn2Kgw88mx1mrfRZ-oDEJFpuaCWjaap-4pRg,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=tuto_14_18&cd=2XzuyEtN2Y1L1QzutD0CyCtDyByCyCtB0FtDyDtC0Ezz0F0AtN0D0Tzu0SzytCyBtN1L2XzutBtFtBtCtFtCtCtFtBtN1L1Czu2Z2Y2Z1F1VtCyE1VtCzztN1L1G1B1V1N2Y1L1Qzu2StD0ByDzztB0AtCtCtGtC0D0FyEtG0C0EzyzytG0C0CzzyCtGyD0CyC0DzztBtA0F0A0Ezyzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyB0A0DtByB0A0DtGtAzzzz0EtGtBtAzz0CtGyCyCyD0FtGyC0BzyyByC0CtC0B0D0DtByC2Q&cr=2016819802&ir=
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_cmi_14_37_ch&cd=2XzuyEtN2Y1L1QzutD0CyCtDyByCyCtB0FtDyDtC0Ezz0F0AtN0D0Tzu0SzyzzyDtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AyE0A0CtB0FtCtGyE0FtCyEtGzz0AzztCtG0EtAyD0CtGyB0F0C0A0B0DtC0F0EtB0FtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBzz0DzzyBtB0EyDtG0B0EyCzytGyE0BtByBtGzy0DyDtDtG0F0F0A0DyBtBzztCzy0E0C0F2Q&cr=1530447023&ir=
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3324369&octid=EB_ORIGINAL_CTID&ISID=M6FC02EF5-AA7C-4217-84D9-A44CFD615C84&SearchSource=58&CUI=&UM=6&UP=SPB8FFA75D-4734-441F-94E1-9E12756F79A1&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = http://www.default-search.net/search?sid=492&aid=246&itype=n&ver=13467&tm=434&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_coinis_14_48_ch&cd=2XzuyEtN2Y1L1QzutD0CyCtDyByCyCtB0FtDyDtC0Ezz0F0AtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyCzz0D0C0AyE0B0CtG0B0EyDtDtGyB0B0B0DtG0Czy0A0FtGyDtCtAtB0E0D0B0AtA0C0DyD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CtB0BtD0EyEtAzytGyCyD0D0DtGyE0F0EtAtGzyzzyCzytGyBzy0D0CyE0FtA0A0D0EzytD2Q&cr=1992245923&ir=
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_cmi_14_37_ch&cd=2XzuyEtN2Y1L1QzutD0CyCtDyByCyCtB0FtDyDtC0Ezz0F0AtN0D0Tzu0SzyzzyDtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AyE0A0CtB0FtCtGyE0FtCyEtGzz0AzztCtG0EtAyD0CtGyB0F0C0A0B0DtC0F0EtB0FtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBzz0DzzyBtB0EyDtG0B0EyCzytGyE0BtByBtGzy0DyDtDtG0F0F0A0DyBtBzztCzy0E0C0F2Q&cr=1505862192&ir=
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?q={searchTerms}
BHO: No Name -> {11111111-1111-1111-1111-110611171154} -> No File
BHO: No Name -> {11111111-1111-1111-1111-110611171162} -> No File
BHO: No Name -> {11111111-1111-1111-1111-110611421101} -> No File
BHO: No Name -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> No File
BHO: No Name -> {6CB99040-7828-4C37-AC01-F15758F43E4D} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-27] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: No Name -> {A18EA34C-6D33-4298-8A54-7F16499904C0} -> No File
BHO: No Name -> {a52ac60e-22bf-42ec-b60f-eb7f41164c87} -> No File
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110611171154} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110611171162} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110611421101} -> No File
BHO-x32: No Name -> {116A3232-FFD2-E653-A41B-953268ED14F9} -> No File
BHO-x32: No Name -> {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} -> No File
BHO-x32: No Name -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> No File
BHO-x32: No Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> No File
BHO-x32: No Name -> {6CB99040-7828-4C37-AC01-F15758F43E4D} -> No File
BHO-x32: No Name -> {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-27] (Avast Software s.r.o.)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: No Name -> {a52ac60e-22bf-42ec-b60f-eb7f41164c87} -> No File
BHO-x32: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO-x32: No Name -> {d6708803-e150-4146-a314-0253663d2cec} -> No File
BHO-x32: No Name -> {E3F1CA13-EA0E-4617-8D03-3EAA6A94A7E0} -> No File
Toolbar: HKLM - No Name - {a52ac60e-22bf-42ec-b60f-eb7f41164c87} - No File
Toolbar: HKLM-x32 - No Name - {a52ac60e-22bf-42ec-b60f-eb7f41164c87} - No File
Toolbar: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File
Toolbar: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> No Name - {249D74A3-BD19-4657-B6CE-E62F480A20DE} - No File
Toolbar: HKU\S-1-5-21-2531059883-2664103884-2697017122-1000 -> No Name - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - No File
Tcpip\Parameters: [DhcpNameServer] 212.27.40.240 212.27.40.241
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default
FF DefaultSearchEngine: Web Search
FF SearchEngineOrder.1: Web Search
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2011-07-25] (RocketLife, LLP)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-07-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-07-04] (Google Inc.)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2531059883-2664103884-2697017122-1000: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF user.js: detected! => C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\user.js [2014-08-09]
FF SearchPlugin: C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\searchplugins\trovi-search.xml [2014-07-05]
FF SearchPlugin: C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\searchplugins\Web Search.xml [2014-08-09]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml [2014-08-09]
FF Extension: Clip-High_D_06 - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\000d835e-30d0-4af5-ac84-8ab485bca944@047bdceb-7d19-4bfd-85ef-8fe94d6477fe.com [2014-07-05]
FF Extension: HQPureV1.8 - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [2014-09-11]
FF Extension: iWebar - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com [2014-07-06]
FF Extension: Object Browser - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [2014-07-06]
FF Extension: Browser App - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\b8c5ecce-0eab-4412-bbe6-6dac31ebfaec@d0bda10d-78c8-4ed2-a9ff-fe1bb21c38dd.com [2014-07-04]
FF Extension: videos+ MediaPlayer+ - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\BHOKP84458125@VTA31058834.com [2014-09-11]
FF Extension: HDPureV9.5 - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\e46480cf-7cf6-495e-af69-573053f52c72@b33ab36d-5952-49aa-adb2-a41b3dbe51a5.com [2014-07-09]
FF Extension: CostMin - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\kb9oaey@ieeibb-kj.net [2014-07-04]
FF Extension: Free Video Grabber 6.6 - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\XVPMXQ108147333@AIQPTZK5642259.com [2014-08-09]
FF Extension: HomeTab - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\{029afe2e-aa6f-406d-8003-304d06593385} [2014-08-09]
FF Extension: No Name - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23} [2014-07-04]
FF Extension: Shopper-Pro - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} [2014-07-06]
FF Extension: iRobinHood Partners Addon - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\Extensions\irobinhood@irobinhood.org.xpi [2014-07-09]
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox
FF HKLM-x32\...\Firefox\Extensions: [jid1-tofUlNEIFlkUIA@jetpack] - C:\Program Files (x86)\Flowsurf\jid1-tofUlNEIFlkUIA@jetpack
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-19]
FF HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\...\Firefox\Extensions: [{157B9130-1152-8AF8-8CAB-E997B53F0984}] - C:\Program Files (x86)\v04BlockAndSurf\175.xpi
FF Extension: BlockAndSurf - C:\Program Files (x86)\v04BlockAndSurf\175.xpi [2014-07-17]
FF Extension: SaveSense - C:\Users\Agnès\AppData\Roaming\Mozilla\Firefox\Profiles\jtgxmt10.default\extensions\staged\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23} [2014-07-04]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR Profile: C:\Users\Agnès\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (videos+ MediaPlayer+) - C:\Users\Agnès\AppData\Local\Google\Chrome\User Data\Default\Extensions\bonfagbdfepfbhjgolfalmgldfbgjodi [2014-11-25]
CHR Extension: (Avast Online Security) - C:\Users\Agnès\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-11]
CHR Extension: (HQPureV1.8) - C:\Users\Agnès\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb [2014-11-11]
CHR Extension: (Google Wallet) - C:\Users\Agnès\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-19]
CHR HKLM\...\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2531059883-2664103884-2697017122-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-27]
CHR HKLM-x32\...\Chrome\Extension: [iidmoehhpbghchkaogkhmcckhlhebekn] - C:\Program Files (x86)\iRobinHood\iRobinHood Addon\iRobinHoodPartnersExtension12_86.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [joefdjpocengkmjmcnheijdogjafdbha] - C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-27] (Avast Software s.r.o.)
R2 HPSLPSVC; C:\Users\AGNS~1\AppData\Local\Temp\7zS2518\hpslpsvc64.dll [1039360 2013-02-06] (Hewlett-Packard Co.) [File not signed]
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-07] (Egis Technology Inc.)
R2 qpEuTSDr; C:\ProgramData\BssBJaHEjER\qpEuTSDr.exe [2319728 2014-09-11] (Small Island Development)
S2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346880 2014-12-21] (ShopperPro)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5491984 2015-05-13] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 Update App Bud; "C:\Program Files (x86)\App Bud\updateAppBud.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-27] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-27] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-27] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-27] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-27] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-27] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-27] ()
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-04-14] (Glarysoft Ltd)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-05-26] (Glarysoft Ltd)
R1 ttnfd; C:\Windows\System32\drivers\ttnfd.sys [58232 2014-09-04] (Term Tutor)
R1 {6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw64; C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw64.sys [61112 2014-07-04] (StdLib)
R1 {6fcd6092-9615-4f7f-8898-8df53980e5d2}w64; C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}w64.sys [61112 2014-07-13] (StdLib)
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]
S1 ccnfd_1_10_0_2; system32\drivers\ccnfd_1_10_0_2.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S2 SPDRIVER_1.38.0.1449; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1449\jsdrv.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

========================== Drivers MD5 =======================

C:\Windows\system32\DRIVERS\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ACPI.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys DB9D6C6B2CD95A9CA414D045B627422E
C:\Windows\System32\DRIVERS\agrsm64.sys AF4748EF93416159459769A24A0053AF
C:\Windows\system32\DRIVERS\agp440.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\aliide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys ==> MD5 is legit
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\system32\drivers\aswHwid.sys B5B4C90E9F52DA8586F1E5461AD90A5D
C:\Windows\system32\drivers\aswMonFlt.sys 300CB8E510855189CAD0B72FFB5590CB
C:\Windows\system32\drivers\aswRdr2.sys 6D37D8DB30D086739507C5F6E542656A
C:\Windows\System32\Drivers\aswRvrt.sys 07E32DFCA422A2920482D762D01957EC
C:\Windows\system32\drivers\aswSnx.sys 3B4AC2DBFC86F7247C1FF1FAF2860530
C:\Windows\system32\drivers\aswSP.sys B1368BE5F6BA529E0886F4DA2361BD2D
C:\Windows\system32\drivers\aswStm.sys 6E53278ECCFFBC2ACC2A5006745ED4BB
C:\Windows\System32\Drivers\aswVmm.sys 91782404718C6352C26B3242BAC3F0F1
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\athrx.sys 0ACC06FCF46F64ED4F11E57EE461C1F4
C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bcmwl664.sys 9E84A931DBEE0292E38ED672F6293A99
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\drivers\BootDefragDriver.sys 369D7E0E01117A1A4A23C9C6A04EED06
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys CA7720B73446FDDEC5C69519C1174C98
C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit
C:\Windows\SysWow64\Drivers\DKbFltr.sys D5BCB77BE83CF99F508943945D46343D
C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fssfltr.sys 07DA62C960DDCCC2D35836AEAB4FC578
C:\Windows\System32\Drivers\Fs_Rec.sys D3E3F93D67821A2DB2B3D9FAC2DC2064
C:\Windows\System32\DRIVERS\fvevol.sys 1F44F8559E61A8306ECC67BB1E168B7C
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\drivers\GUBootStartup.sys C06C3D6C5A0805B314E3E940632C97CB
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\iaStor.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\igdkmd64.sys 2D18C9E1F23970DE32D78D3B1CDDA0A7
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\RTKVHD64.sys 9AA6A93852E36FE76C3F7FC2904F3B01
C:\Windows\System32\drivers\IntcHdmi.sys D485D3BD3E2179AA86853A182F70699F
C:\Windows\system32\DRIVERS\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\isapnp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\msiscsi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\k57nd60a.sys 249EE2D26CB1530F3BEDE0AC8B9E3099
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 4F4B5FDE429416877DE7143044582EB5
C:\Windows\System32\Drivers\ksecpkg.sys 6F40465A44ECDC1731BEFAFEC5BDD03C
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\L1E62x64.sys 2AC603C3188C704CFCE353659AA7AD71
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mrxsmb.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mrxsmb10.sys F0067552F8F9B33D7C59403AB808A3CB
C:\Windows\System32\DRIVERS\mrxsmb20.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\msahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mwlPSDFilter.sys 6FFECC25B39DC7652A0CEC0ADA9DB589
C:\Windows\System32\DRIVERS\mwlPSDNServ.sys 0BEFE32CA56D6EE89D58175725596A85
C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys D43BC633B8660463E446E28E14A51262
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys 9A6089B056EA1B83B36424FC9D0A300E
C:\Windows\system32\drivers\NTIDrvr.sys 64DDD0DEE976302F4BD93E5EFCC2F013
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvraid.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvstor.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys 90061B1ACFE8CCAA5345750FFE08D8B8
C:\Windows\System32\DRIVERS\pci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\RDPWD.sys 447DE7E3DEA39D422C1504F245B668B1
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\Drivers\RtsUStor.sys 2DB8116D52B19216812C4E6D5D837810
C:\Windows\system32\DRIVERS\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv2.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srvnet.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serscan.sys DECACB6921DED1A38642642685D77DAC
C:\Windows\system32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys 5CFB7AB8F9524D1A1E14369DE63B83CC
C:\Windows\System32\DRIVERS\tcpip.sys 5CFB7AB8F9524D1A1E14369DE63B83CC
C:\Windows\System32\drivers\tcpipreg.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 7518F7BCFD4B308ABC9192BACAF6C970
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ttnfd.sys 4501E093B242532C5B677DC52614D6EB
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\system32\drivers\UBHelper.sys 2E22C1FD397A5A9FFEF55E9D1FC96C00
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\usbcir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbehci.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbhub.sys ==> MD5 is legit
C:\Windows\system32\drivers\usbohci.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbscan.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbuhci.sys ==> MD5 is legit
C:\Windows\System32\Drivers\usbvideo.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\viaide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys 9E425AC5C9A5A973273D169F43B4F5E1
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifimp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 442783E2CB0DA19873B7A63833FF4CB4
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUSB.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw64.sys 16D2716A78331B68625C848D3DA60CD3
C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}w64.sys 313BA7805C316207835BABD19B2BE7A9

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Three Months Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-27 13:48 - 2015-05-27 13:49 - 00048202 _____ () C:\Users\Agnès\Downloads\FRST.txt
2015-05-27 13:47 - 2015-05-27 13:48 - 00000000 ____D () C:\FRST
2015-05-27 13:09 - 2015-05-27 13:09 - 02108928 _____ (Farbar) C:\Users\Agnès\Downloads\FRST64 (1).exe
2015-05-27 13:07 - 2015-05-27 13:07 - 02108928 _____ (Farbar) C:\Users\Agnès\Downloads\FRST64.exe
2015-05-27 13:00 - 2015-05-27 13:00 - 00200891 _____ () C:\Users\Agnès\Desktop\ZHPDiag.txt
2015-05-27 12:59 - 2015-05-27 12:59 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2015-05-27 12:54 - 2015-05-27 13:00 - 00000000 ____D () C:\Users\Agnès\AppData\Roaming\ZHP
2015-05-27 12:54 - 2015-05-27 12:54 - 00001995 _____ () C:\Users\Agnès\Desktop\ZHPFix.lnk
2015-05-27 12:54 - 2015-05-27 12:54 - 00001868 _____ () C:\Users\Agnès\Desktop\ZHPDiag.lnk
2015-05-27 12:54 - 2015-05-27 12:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-05-27 12:54 - 2015-05-27 12:54 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2015-05-27 12:52 - 2015-05-27 12:52 - 06882129 _____ (Nicolas Coolman ) C:\Users\Agnès\Downloads\ZHPDiag2.exe
2015-05-27 11:10 - 2015-05-27 11:16 - 06880968 _____ (Nicolas Coolman ) C:\Users\Agnès\Downloads\ZHPDiag2(1a).exe
2015-05-27 09:18 - 2015-05-27 09:18 - 00001326 _____ () C:\Windows\PFRO.log
2015-05-27 09:15 - 2015-05-27 09:15 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-05-27 09:15 - 2015-05-27 09:15 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-05-27 09:11 - 2015-05-27 09:11 - 05481336 _____ (Avast Software s.r.o.) C:\Users\Agnès\Downloads\avast_free_antivirus_setup_online_01net.exe
2015-05-26 21:01 - 2015-05-26 21:01 - 00000000 ____D () C:\Windows\system32\SPReview
2015-05-26 19:33 - 2015-05-26 19:33 - 00000193 _____ () C:\Windows\WORDPAD.INI
2015-05-26 19:23 - 2015-05-27 09:18 - 00000168 _____ () C:\Windows\setupact.log
2015-05-26 19:23 - 2015-05-26 19:23 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-26 16:23 - 2015-05-26 16:23 - 00001051 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-05-26 16:23 - 2015-05-26 16:23 - 00001039 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-05-26 15:27 - 2015-05-26 15:27 - 00000826 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-05-26 15:21 - 2015-05-26 15:24 - 06549184 _____ (Piriform Ltd) C:\Users\Agnès\Downloads\ccsetup506.exe
2015-05-26 15:17 - 2015-05-26 15:17 - 00002742 _____ () C:\Users\Agnès\Documents\CheckDiskReportglaerrror250526disk.txt
2015-05-26 15:04 - 2015-05-26 15:04 - 00013021 _____ () C:\Users\Agnès\Documents\Gilbert Agnèsbdp.dotx
2015-05-26 14:35 - 2015-05-26 14:36 - 15121952 _____ () C:\Users\Agnès\Downloads\gu5setup (1).exe
2015-05-26 14:34 - 2015-05-26 14:34 - 17996755 _____ () C:\Users\Agnès\Downloads\guportable (1).zip
2015-05-26 14:33 - 2015-05-26 14:34 - 17996755 _____ () C:\Users\Agnès\Downloads\guportable.zip
2015-05-26 14:21 - 2015-05-26 14:21 - 00006696 ____N () C:\bootsqm.dat
2015-05-26 13:28 - 2015-05-26 13:30 - 152923328 _____ (Avast Software s.r.o.) C:\Users\Agnès\Downloads\avast_free_antivirus_setup.exe
2015-05-26 13:26 - 2015-05-26 13:27 - 09324928 _____ (TeamViewer GmbH) C:\Users\Agnès\Downloads\TeamViewer_v10.0.42650.exe
2015-05-26 12:55 - 2015-05-26 12:56 - 15121952 _____ () C:\Users\Agnès\Downloads\gu5setup.exe
2015-05-26 12:49 - 2015-05-26 12:50 - 00768512 _____ (Reimage®) C:\Users\Agnès\Downloads\ReimageRepair.exe
2015-05-26 12:47 - 2015-05-26 12:47 - 00003278 _____ () C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-2531059883-2664103884-2697017122-1000
2015-05-19 19:36 - 2015-05-19 19:36 - 00000820 _____ () C:\Windows\Tasks\tmptsk10524.job
2015-05-17 19:14 - 2015-03-19 05:07 - 05503416 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-17 19:14 - 2015-03-19 04:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-17 19:13 - 2015-03-19 04:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-03 21:18 - 2015-05-03 21:18 - 00000000 ____D () C:\772b41d88ce61d2c3e680cee8ac03412
2015-05-01 21:16 - 2015-05-01 21:16 - 00000000 ____D () C:\4eee9638acc1ce4d3e7003ceb9760a
2015-04-25 11:49 - 2015-04-25 11:49 - 00003100 _____ () C:\Windows\System32\Tasks\{3BDD10FF-173A-4ED4-8A70-9A3EF2A06CA0}
2015-04-25 11:48 - 2015-04-25 11:48 - 00003096 _____ () C:\Windows\System32\Tasks\{116ADD96-5DA8-4F0A-9846-C0E8DDE2A8DA}
2015-04-23 19:10 - 2015-04-23 19:10 - 00000000 ____D () C:\Users\Agnès\AppData\Local\{F1BB6B4A-FCA2-4DF5-B82E-D279443427B9}
2015-04-23 12:15 - 2015-04-23 12:18 - 00000000 ____D () C:\e291421b6789663c442c9e
2015-04-16 12:01 - 2015-05-03 10:46 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-16 12:01 - 2015-04-16 12:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-04-15 20:00 - 2015-04-16 12:00 - 00000000 ____D () C:\9aca9c297b48370dbc4343
2015-04-14 23:46 - 2015-03-23 03:51 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 23:46 - 2015-03-23 03:51 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 23:46 - 2015-03-23 03:51 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 23:46 - 2015-03-23 03:51 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 23:46 - 2015-03-23 03:51 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 23:46 - 2015-03-23 03:51 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 23:46 - 2015-03-23 03:47 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-20 23:37 - 2015-03-20 23:37 - 00000000 ____D () C:\cf094c706cf4ef3d21182ebbc9a01291
2015-03-08 12:39 - 2015-03-08 12:40 - 00000000 ____D () C:\bf95e9ad75d0c58bce0a8f4f3799ef1a

==================== Three Months Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-27 13:47 - 2013-08-09 12:24 - 00000000 ____D () C:\Users\Agnès\Documents\informatique
2015-05-27 13:45 - 2010-04-10 18:40 - 00000000 ____D () C:\Users\Agnès\AppData\Roaming\Skype
2015-05-27 13:44 - 2014-09-11 19:39 - 00003792 _____ () C:\Windows\Tasks\95b1002a-ce14-49a9-aff9-33ccfb34c56d-3.job
2015-05-27 13:40 - 2014-09-11 19:40 - 00002742 _____ () C:\Windows\Tasks\95b1002a-ce14-49a9-aff9-33ccfb34c56d-1.job
2015-05-27 13:40 - 2014-09-11 19:40 - 00002424 _____ () C:\Windows\Tasks\95b1002a-ce14-49a9-aff9-33ccfb34c56d-5.job
2015-05-27 13:40 - 2014-09-11 19:40 - 00001422 _____ () C:\Windows\Tasks\0c62bfd3-ab99-4923-aad8-ca023bc0d7eb.job
2015-05-27 13:39 - 2014-09-11 19:39 - 00004474 _____ () C:\Windows\Tasks\95b1002a-ce14-49a9-aff9-33ccfb34c56d-11.job
2015-05-27 13:39 - 2014-09-11 19:39 - 00003792 _____ () C:\Windows\Tasks\95b1002a-ce14-49a9-aff9-33ccfb34c56d-4.job
2015-05-27 13:39 - 2014-09-11 19:39 - 00003448 _____ () C:\Windows\Tasks\95b1002a-ce14-49a9-aff9-33ccfb34c56d-6.job
2015-05-27 13:39 - 2014-09-11 19:39 - 00003112 _____ () C:\Windows\Tasks\95b1002a-ce14-49a9-aff9-33ccfb34c56d-7.job
2015-05-27 13:38 - 2010-02-15 19:14 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-27 13:36 - 2014-07-04 19:36 - 00003794 _____ () C:\Windows\Tasks\19e31bbd-72fe-4d82-8c02-e5cd9f6b78c7-11.job
2015-05-27 13:36 - 2014-07-04 19:36 - 00002180 _____ () C:\Windows\Tasks\19e31bbd-72fe-4d82-8c02-e5cd9f6b78c7-4.job
2015-05-27 13:36 - 2014-07-04 19:36 - 00001542 _____ () C:\Windows\Tasks\19e31bbd-72fe-4d82-8c02-e5cd9f6b78c7-1.job
2015-05-27 13:36 - 2014-07-04 19:36 - 00001426 _____ () C:\Windows\Tasks\19e31bbd-72fe-4d82-8c02-e5cd9f6b78c7-5.job
2015-05-27 13:36 - 2014-07-04 19:36 - 00001346 _____ () C:\Windows\Tasks\19e31bbd-72fe-4d82-8c02-e5cd9f6b78c7-2.job
2015-05-27 13:36 - 2014-07-04 19:35 - 00002424 _____ () C:\Windows\Tasks\19e31bbd-72fe-4d82-8c02-e5cd9f6b78c7-3.job
2015-05-27 13:34 - 2014-07-09 19:34 - 00001424 _____ () C:\Windows\Tasks\98823285-f07a-490b-85c3-80aba5768cda-5.job
2015-05-27 13:34 - 2014-07-09 19:34 - 00001328 _____ () C:\Windows\Tasks\98823285-f07a-490b-85c3-80aba5768cda-2.job
2015-05-27 13:33 - 2014-07-09 19:33 - 00003796 _____ () C:\Windows\Tasks\98823285-f07a-490b-85c3-80aba5768cda-11.job
2015-05-27 13:33 - 2014-07-09 19:33 - 00003114 _____ () C:\Windows\Tasks\98823285-f07a-490b-85c3-80aba5768cda-3.job
2015-05-27 13:33 - 2014-07-09 19:33 - 00002206 _____ () C:\Windows\Tasks\98823285-f07a-490b-85c3-80aba5768cda-4.job
2015-05-27 13:33 - 2014-07-09 19:33 - 00001534 _____ () C:\Windows\Tasks\98823285-f07a-490b-85c3-80aba5768cda-1.job
2015-05-27 13:30 - 2014-07-05 19:30 - 00003798 _____ () C:\Windows\Tasks\7431ffb1-9f8c-49ab-87d6-5788f1aab5cf-11.job
2015-05-27 13:30 - 2014-07-05 19:30 - 00002224 _____ () C:\Windows\Tasks\7431ffb1-9f8c-49ab-87d6-5788f1aab5cf-4.job
2015-05-27 13:30 - 2014-07-05 19:30 - 00001530 _____ () C:\Windows\Tasks\7431ffb1-9f8c-49ab-87d6-5788f1aab5cf-1.job
2015-05-27 13:30 - 2014-07-05 19:30 - 00001404 _____ () C:\Windows\Tasks\7431ffb1-9f8c-49ab-87d6-5788f1aab5cf-5.job
2015-05-27 13:30 - 2014-07-05 19:30 - 00001310 _____ () C:\Windows\Tasks\7431ffb1-9f8c-49ab-87d6-5788f1aab5cf-2.job
2015-05-27 13:30 - 2014-07-05 19:30 - 00001262 _____ () C:\Windows\Tasks\7431ffb1-9f8c-49ab-87d6-5788f1aab5cf-10.job
2015-05-27 13:04 - 2013-08-10 11:58 - 00000338 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2015-05-27 13:01 - 2009-07-14 06:45 - 00022896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-27 13:01 - 2009-07-14 06:45 - 00022896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-27 12:59 - 2014-08-30 11:18 - 01853321 _____ () C:\Windows\WindowsUpdate.log
2015-05-27 12:51 - 2014-11-29 14:51 - 00000294 _____ () C:\Windows\Tasks\WSE_Vosteran.job
2015-05-27 11:28 - 2014-09-11 19:39 - 00002860 _____ () C:\Windows\Tasks\f2b68ce7-eaeb-4e75-ac89-b2b7145353fa-6.job
2015-05-27 11:01 - 2014-07-06 23:01 - 00001660 _____ () C:\Windows\Tasks\b1ded715-05cc-4c91-8840-df972518572e-5.job
2015-05-27 11:01 - 2014-07-06 23:00 - 00001680 _____ () C:\Windows\Tasks\d61a7004-4210-454c-b9f6-8100dce9f4bf-5.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00004130 _____ () C:\Windows\Tasks\d61a7004-4210-454c-b9f6-8100dce9f4bf-11.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00004128 _____ () C:\Windows\Tasks\b1ded715-05cc-4c91-8840-df972518572e-11.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00003802 _____ () C:\Windows\Tasks\4dd58b88-2ac6-4715-814d-33f6d3433c93-11.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00002382 _____ () C:\Windows\Tasks\d61a7004-4210-454c-b9f6-8100dce9f4bf-4.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00002366 _____ () C:\Windows\Tasks\b1ded715-05cc-4c91-8840-df972518572e-4.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00002174 _____ () C:\Windows\Tasks\4dd58b88-2ac6-4715-814d-33f6d3433c93-4.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00001786 _____ () C:\Windows\Tasks\d61a7004-4210-454c-b9f6-8100dce9f4bf-1.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00001760 _____ () C:\Windows\Tasks\b1ded715-05cc-4c91-8840-df972518572e-1.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00001586 _____ () C:\Windows\Tasks\d61a7004-4210-454c-b9f6-8100dce9f4bf-2.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00001538 _____ () C:\Windows\Tasks\4dd58b88-2ac6-4715-814d-33f6d3433c93-1.job
2015-05-27 11:00 - 2014-07-06 23:00 - 00001402 _____ () C:\Windows\Tasks\4dd58b88-2ac6-4715-814d-33f6d3433c93-5.job
2015-05-27 10:53 - 2014-08-09 16:53 - 00002114 _____ () C:\Windows\Tasks\f0364494-e739-4ce6-b767-7884892cc8c7-5.job
2015-05-27 10:53 - 2014-08-09 16:53 - 00001666 _____ () C:\Windows\Tasks\f0364494-e739-4ce6-b767-7884892cc8c7-1.job
2015-05-27 10:53 - 2014-08-09 16:53 - 00001322 _____ () C:\Windows\Tasks\07bade38-c79b-4f34-9c14-ae1ac538d21e.job
2015-05-27 10:52 - 2014-08-09 16:52 - 00003822 _____ () C:\Windows\Tasks\f0364494-e739-4ce6-b767-7884892cc8c7-11.job
2015-05-27 10:52 - 2014-08-09 16:52 - 00002386 _____ () C:\Windows\Tasks\0d5e438e-eb9f-4ae3-b34b-343a750e00ef-4.job
2015-05-27 10:52 - 2014-08-09 16:52 - 00002370 _____ () C:\Windows\Tasks\f0364494-e739-4ce6-b767-7884892cc8c7-4.job
2015-05-27 10:52 - 2014-08-09 16:52 - 00001566 _____ () C:\Windows\Tasks\0d5e438e-eb9f-4ae3-b34b-343a750e00ef-1.job
2015-05-27 10:52 - 2014-08-09 16:52 - 00001442 _____ () C:\Windows\Tasks\0d5e438e-eb9f-4ae3-b34b-343a750e00ef-5.job
2015-05-27 10:51 - 2014-08-09 16:51 - 00003798 _____ () C:\Windows\Tasks\0d5e438e-eb9f-4ae3-b34b-343a750e00ef-11.job
2015-05-27 10:51 - 2014-08-09 16:51 - 00003116 _____ () C:\Windows\Tasks\0d5e438e-eb9f-4ae3-b34b-343a750e00ef-3.job
2015-05-27 10:23 - 2009-09-16 02:45 - 00704714 _____ () C:\Windows\system32\perfh00C.dat
2015-05-27 10:23 - 2009-09-16 02:45 - 00130988 _____ () C:\Windows\system32\perfc00C.dat
2015-05-27 10:23 - 2009-07-14 07:13 - 01549936 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-27 10:20 - 2010-04-10 18:38 - 00000000 ____D () C:\ProgramData\Skype
2015-05-27 10:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2015-05-27 09:22 - 2014-11-11 16:11 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2015-05-27 09:20 - 2014-09-01 15:55 - 00000328 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2015-05-27 09:19 - 2014-07-04 20:29 - 00000290 __RSH () C:\ProgramData\ntuser.pol
2015-05-27 09:19 - 2011-02-22 18:10 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-05-27 09:19 - 2010-02-15 19:14 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-27 09:18 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-27 09:16 - 2014-08-19 18:03 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-27 09:15 - 2014-08-19 18:02 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-05-27 09:15 - 2014-08-19 18:02 - 00272248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-05-27 09:15 - 2014-08-19 18:02 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-05-27 09:15 - 2014-08-19 18:02 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-05-27 09:15 - 2014-08-19 18:02 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-05-27 09:15 - 2014-08-19 18:02 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-05-27 09:15 - 2014-08-19 18:02 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-05-27 09:14 - 2014-08-19 18:02 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-05-26 19:37 - 2010-01-10 19:14 - 00080000 _____ () C:\Users\Agnès\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-26 19:23 - 2009-07-14 06:45 - 00335552 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-26 16:34 - 2014-07-04 16:28 - 00000000 ____D () C:\Users\Agnès\AppData\Roaming\Systweak
2015-05-26 16:25 - 2014-09-11 20:04 - 00000000 ____D () C:\ProgramData\Systweak
2015-05-26 16:24 - 2014-08-30 11:33 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-05-26 15:37 - 2014-08-30 13:14 - 00000000 ____D () C:\Users\Agnès\AppData\Roaming\TeamViewer
2015-05-26 15:32 - 2009-09-15 17:10 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-05-26 15:27 - 2013-08-07 15:47 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-26 14:52 - 2014-11-11 16:34 - 00000000 ___HD () C:\Users\Agnès\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2015-05-26 14:41 - 2014-11-11 16:12 - 00003312 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2015-05-26 14:41 - 2014-11-11 16:12 - 00002972 _____ () C:\Windows\System32\Tasks\GU5SkipUAC
2015-05-26 14:41 - 2014-11-11 16:12 - 00001100 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2015-05-26 14:41 - 2014-11-11 16:12 - 00001088 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk
2015-05-26 14:37 - 2014-09-01 15:55 - 00002624 _____ () C:\Windows\System32\Tasks\GlaryInitialize 4
2015-05-26 14:23 - 2014-09-01 15:55 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 4
2015-05-26 13:30 - 2014-11-29 14:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
2015-05-26 13:30 - 2014-09-11 20:08 - 00000000 ____D () C:\Users\Agnès\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2015-05-26 13:30 - 2014-09-11 19:38 - 00000000 ____D () C:\Users\Agnès\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2015-05-26 13:30 - 2014-08-09 17:26 - 00000000 ____D () C:\Users\Agnès\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
2015-05-26 13:16 - 2010-08-10 20:39 - 00000000 ____D () C:\Users\Agnès\Downloads\Nouveau dossier
2015-05-26 13:03 - 2014-11-11 16:12 - 00020160 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys
2015-05-26 13:03 - 2014-11-11 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2015-05-19 21:07 - 2010-01-10 19:14 - 00000000 ____D () C:\Users\Agnès
2015-05-19 21:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-05-19 20:25 - 2009-08-22 10:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-18 19:50 - 2013-03-16 16:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-18 19:50 - 2009-08-22 07:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-18 19:48 - 2013-08-13 14:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-17 20:21 - 2010-08-13 17:16 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-17 20:04 - 2014-11-11 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-17 19:12 - 2014-08-30 11:59 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-04-30 20:17 - 2014-09-11 19:39 - 00000000 ____D () C:\Program Files (x86)\videos+ MediaPlayer+
2015-04-30 19:52 - 2014-07-04 19:47 - 00000163 _____ () C:\Users\Agnès\AppData\Roaming\WB.CFG

==================== Files in the root of some directories =======

2014-07-04 17:17 - 2014-07-04 17:17 - 0005558 _____ () C:\Program Files (x86)\Right Backupignorerules.xml1lfbg3sa.dya.xml_
2014-07-04 17:17 - 2014-07-04 17:17 - 0001880 _____ () C:\Program Files (x86)\Right Backupsmartbackuprules.xmlmylgyerf.4p2.xml_
2009-08-22 10:43 - 2009-02-10 21:23 - 0192484 _____ () C:\Program Files (x86)\Common Files\Acer GameZone online.ico
2014-09-11 20:08 - 2014-09-11 20:08 - 0001192 _____ () C:\Users\Agnès\AppData\Roaming\aps.scan.quick.results
2014-09-11 20:08 - 2014-09-11 20:08 - 0002946 _____ () C:\Users\Agnès\AppData\Roaming\aps.scan.results
2014-07-04 19:38 - 2014-09-11 20:08 - 0000320 _____ () C:\Users\Agnès\AppData\Roaming\aps.uninstall.scan.results
2014-07-05 19:27 - 2014-07-05 19:29 - 0001286 _____ () C:\Users\Agnès\AppData\Roaming\Bubble Dock.boostrap.log
2014-07-05 19:28 - 2014-07-05 19:29 - 0009572 _____ () C:\Users\Agnès\AppData\Roaming\Bubble Dock.installation.log
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\Agnès\AppData\Roaming\DZOQTF
2014-09-11 19:40 - 2014-09-11 19:40 - 1488800 _____ (enter) C:\Users\Agnès\AppData\Roaming\DZOQTF.exe
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\Agnès\AppData\Roaming\HDBRAR
2014-09-11 19:39 - 2014-09-11 19:39 - 1935264 _____ (enter) C:\Users\Agnès\AppData\Roaming\HDBRAR.exe
2014-07-04 19:47 - 2015-04-30 19:52 - 0000163 _____ () C:\Users\Agnès\AppData\Roaming\WB.CFG
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\Agnès\AppData\Roaming\XKDM
2014-09-11 19:40 - 2014-09-11 19:40 - 1479576 _____ (HQPure) C:\Users\Agnès\AppData\Roaming\XKDM.exe
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\Agnès\AppData\Roaming\ZFHILV
2014-09-11 19:39 - 2014-09-11 19:39 - 1920408 _____ (HQPure) C:\Users\Agnès\AppData\Roaming\ZFHILV.exe
2014-07-04 19:47 - 2014-07-04 13:23 - 0575887 _____ (ClickMeIn Limited) C:\Users\Agnès\AppData\Local\AnyProtectScannerSetup.exe
2013-03-23 14:21 - 2013-05-25 13:40 - 0003584 _____ () C:\Users\Agnès\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-31 14:51 - 2015-01-31 14:51 - 0234679 _____ () C:\Users\Agnès\AppData\Local\dsi1.dat
2015-01-31 14:51 - 2015-01-31 14:51 - 0161916 _____ () C:\Users\Agnès\AppData\Local\dsi2.dat
2014-09-12 15:19 - 2014-09-12 15:18 - 0617369 _____ (ClickMeIn Limited) C:\Users\Agnès\AppData\Local\nsg434B.tmp
2014-09-11 20:06 - 2014-09-11 20:06 - 0617369 _____ (ClickMeIn Limited) C:\Users\Agnès\AppData\Local\nsi3647.tmp
2014-07-04 19:36 - 2014-07-04 19:36 - 0591320 _____ (ClickMeIn Limited) C:\Users\Agnès\AppData\Local\nsiE6A8.tmp
2013-08-12 11:24 - 2013-08-12 11:33 - 0007605 _____ () C:\Users\Agnès\AppData\Local\resmon.resmoncfg
2013-08-09 12:02 - 2013-08-09 12:02 - 0000057 _____ () C:\ProgramData\Ament.ini
2009-09-15 16:55 - 2010-02-23 22:02 - 0000328 _____ () C:\ProgramData\ArcadeDeluxe3.log
2010-05-16 20:35 - 2010-05-16 20:35 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2009-08-22 10:44 - 2009-07-18 03:57 - 0036136 _____ (Oberon Media) C:\ProgramData\FullRemove.exe
2014-09-15 21:01 - 2014-09-15 21:01 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some files in TEMP:
====================
C:\Users\Agnès\AppData\Local\Temp\soiygu3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-24 13:04

==================== End of log ============================