cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.7.24.101 By Nicolas Coolman (2015/07/24)
~ Run by Team 161 (Administrator) (2015/07/27 22:31:44)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: Version KO
~ Mode: Scan
~ Report: C:\Users\Team 161\Desktop\ZHPDiag.txt
~ Report: C:\Users\Team 161\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
~ Windows 8.1, 32-bit (Build 9600)

---\\ Internet Browsers (2) - 0s
MFIE: Mozilla Firefox 39.0 (x86 ar) v39.0
MSIE: Internet Explorer v11.0.9600.17416

---\\ Windows Product Information (4) - 10s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Automatic Updates : OK (Demand)
Windows Activation Technologies : OK

---\\ System protection software (1) - 1s
Malwarebytes Anti-Malware ÇáäÓÎÉ 2.1.8.1057

---\\ Surveillance software (1) - 1s
Adobe Flash Player 18 NPAPI

---\\ Information on the system (6) - 0s
~ Operating System: x86 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2789.736 MB (32% free)
~ System Restore: Activé (Enable)
~ System drive C: has 264 GB free of 311 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: WIN81DOWS
~ User Name: Team 161
~ Logged in as Administrator

---\\ Enumeration of the disk units (3) - 0s
~ Drive C: has 264 GB free of 311 GB (System)
~ Drive D: has 59 GB free of 311 GB
~ Drive E: has 235 GB free of 329 GB

---\\ State of the Windows Security Center (10) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Search Generic System Files (23) - 1s
[MD5.4B37A33F4F5237BF02E537F8D12D1129] - (.Microsoft Corporation - ãÓÊßÔÝ Windows.) () -- C:\Windows\Explorer.exe [2207488]
[MD5.8BFE805555CDAF6387912A34D7978DAA] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [51200]
[MD5.DC02677945BDABD6B0C6A29914AA21EF] - (.Microsoft Corporation - ýýÊØÈíÞ ÈÏÁ ÊÔÛíá Windows.) () -- C:\Windows\System32\Wininit.exe [115712]
[MD5.03D7DF4711B851EF286562F97429211D] - (.Microsoft Corporation - ãáÍÞÇÊ ÇáÅäÊÑäÊ áÜ Win32.) () -- C:\Windows\System32\wininet.dll [1892864]
[MD5.E36FB29A2158B7D5DCA0F4E08DE75442] - (.Microsoft Corporation - ÊØÈíÞ ÊÓÌíá ÏÎæá Windows.) () -- C:\Windows\System32\Winlogon.exe [465408]
[MD5.BFB9E1202225113991F981D29BFB9029] - (.Microsoft Corporation - ãßÊÈÉ ÊÑÇÎíÕ ÇáÈÑÇãÌ.) () -- C:\Windows\System32\sppcomapi.dll [438272]
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19456]
[MD5.D75FB05E8DBF21FA0EF313C7503243F1] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [461312]
[MD5.72FCAE2CE6DFEAB2AB072435017F3417] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [23392]
[MD5.CE232BB0965C0C0B786C3F976CCBFB7D] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [73728]
[MD5.E2FC132D48EA4E8B04432C33EFB77801] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [124928]
[MD5.55758EBBC45E1628161121D7CFEAD4A1] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400]
[MD5.7E0EDA9EE53E344D1604EB2A7E8DED47] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [69632]
[MD5.5043E69532392A43549E5D41E22638AA] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [82944]
[MD5.FA6C94C754A566EA8A61D658932F32DE] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [126976]
[MD5.6FFD467F3BF3E3044E9B212CCD488DE1] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\Windows\System32\drivers\MRxSmb.sys [330752]
[MD5.BC242922B0D08F61CF7C87FD08FAFA8B] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [218624]
[MD5.C52E578E3F8182C2EE6AAF0AC2B61C9B] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1689408]
[MD5.4F30970F15ADCC382544B31D5D7E368E] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [81408]
[MD5.C51AB62AB41A2E8560D12472B204CC00] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [81920]
[MD5.67E91843B0344411820A012063E876B2] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\Windows\System32\drivers\rdpdr.sys [143872]
[MD5.DB0C184142CF9FA1746F598A16EE92B2] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [87040]
[MD5.31A2AA48C1ECD390E2707E5C21B75DCE] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [264512]

---\\ Process running (18) - 2s
[MD5.BA547168D04F034612808D2CDA995B23] - (.The Within Network, LLC - Unsigned themes service executable.) -- C:\Windows\unsignedthemes.exe [10752] [PID.1172]
[MD5.DCE68F6993A524F8DF15383ED30AD9CF] - (.Big Muscle - Aero Glass extension for Desktop Window Man.) -- C:\AeroGlass\aerohost.exe [73216] [PID.1484]
[MD5.084E451AAD600B282AFC7DE5F40AE133] - (.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe [2211968] [PID.624]
[MD5.E3AD7C396002C00BBDD346BA43418FA5] - (.Mediatek Inc. - MediatekRegistryWriter.) -- C:\Program Files\MediatekWiFi\Common\RaRegistry.exe [405136] [PID.1608]
[MD5.EA569D48B2E755AF6D96F03F3335D98A] - (.Realtek - RtlService MFC Application.) -- C:\Program Files\REALTEK\Wireless LAN Utility\RtlService.exe [36864] [PID.2164]
[MD5.A903E5C565A2677F3960E4AAB7B42280] - (.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer_Service.exe [5495056] [PID.2248]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.1760]
[MD5.ADE3D7AD36CA238C6D58E5E93392D2F8] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3903056] [PID.5132]
[MD5.3DAAFBB3147AD990FE030030A84430C7] - (.Realtek Semiconductor Corp. - RtWLan ( For Vista / Win7) Application(Exte.) -- C:\Program Files\REALTEK\Wireless LAN Utility\RtWLan.exe [1196032] [PID.6064]
[MD5.60272DFA3E22B43B2C663E6B08F21B5F] - (.Copyright (C) 2013 - ProgLauncher Application.) -- C:\Program Files\ProgDVB\ProgLauncher.exe [381352] [PID.1468]
[MD5.E9C6EF9437ECB30911488F9313AD821A] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [269848] [PID.6996]
[MD5.45A75431B1956628F7EF12B3E5E07825] - (.Mediatek Inc. - Mediatek Wireless LAN Card Utility.) -- C:\Program Files\MediatekWiFi\Common\RaUI.exe [15624336] [PID.3728]
[MD5.F5824A1B8A5F1D40084D76773D97AB05] - (.TechSmith Corporation - Snagit.) -- C:\Program Files\TechSmith\Snagit 11\Snagit32.exe [9895792] [PID.7564]
[MD5.0A1810F3CF866F67856C8A4E98194493] - (.TechSmith Corporation - TechSmith HTML Help Helper.) -- C:\Program Files\TechSmith\Snagit 11\TscHelp.exe [46080] [PID.7456]
[MD5.6CE6F554DC7C609433CDCC8308B6D95F] - (.TechSmith Corporation - Snagit RPC Helper.) -- C:\Program Files\TechSmith\Snagit 11\SnagPriv.exe [135536] [PID.1788]
[MD5.87725AED8905001E1002A040D556E5AC] - (.TechSmith Corporation - Snagit Editor.) -- C:\Program Files\TechSmith\Snagit 11\snagiteditor.exe [9352048] [PID.888]
[MD5.9DBD42278C003FAADBB0300C0301A1EB] - (.www.dvbdream.org - .) -- C:\dvbdream\dvbdream.exe [3846656] [PID.4976]
[MD5.59499B4B9127191704FAAF58E220F85D] - (.Internet Download Manager, Tonec Inc. - Broker for reading of IDM settings.) -- C:\Program Files\Internet Download Manager\idmBroker.exe [69144] [PID.6020]

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) (18) - 2s
M0 - MFSP: prefs.js [Team 161 - pq2ylcxp.default] http://www.msn.com/ar-eg/?pc=SK2M&ocid=SK2MDHP&osmkt=ar-xl
M0 - MFSP: prefs.js [Team 161 - pq2ylcxp.default] https://www.google.dz/webhp?ie=utf-8&oe=utf-8&gws_rd=cr&ei=Ep20VZGRMM6v7AavqLyICQ
P2 - EXT FILE: (...) -- C:\Users\Team 161\AppData\Roaming\Mozilla\Firefox\Profiles\pq2ylcxp.default\extensions\langpack-ar@firefox.mozilla.org.xpi
P2 - EXT FILE: (...) -- C:\Users\Team 161\AppData\Roaming\Mozilla\Firefox\Profiles\pq2ylcxp.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\amazondotcom.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\eBay.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\findit.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wikipedia-ar.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - EXT: (.Microsoft Corporation - Bing Search.) -- C:\Users\Team 161\AppData\Roaming\Mozilla\Firefox\Profiles\pq2ylcxp.default\extensions\bingsearch.full@microsoft.com
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_18_0_0_209.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.25.2] - (.Oracle Corporation.) -- C:\Windows\System32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.25.2] - (.Oracle Corporation.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.5] - (.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.1] - (.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll

---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) (11) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object (BHO) (O2) (3) - 1s
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll

---\\ Auto loading programs from Registry and folders (O4) (10) - 0s
O4 - HKLM\..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe (.not file.)
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\Team 161\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [ProgLauncher] . (.Copyright (C) 2013 - ProgLauncher Application.) -- C:\Program Files\ProgDVB\ProgLauncher.exe
O4 - HKUS\S-1-5-21-3125164571-896367534-2909453621-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
O4 - HKUS\S-1-5-21-3125164571-896367534-2909453621-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-3125164571-896367534-2909453621-1001\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\Team 161\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKUS\S-1-5-21-3125164571-896367534-2909453621-1001\..\Run: [ProgLauncher] . (.Copyright (C) 2013 - ProgLauncher Application.) -- C:\Program Files\ProgDVB\ProgLauncher.exe

---\\ Global shortcuts Startup (O4G) (6) - 2s
O4 - GS\sendTo [Administrator]: AnySend.lnk . (...) C:\Program Files\AnySend\AnySendUI.exe =>PUP.Optional.ASPackage
O4 - GS\Startup [Administrator]: AutoKMS.lnk . (.CODYQX4 - AutoKMS.) C:\Windows\AutoKMS\AutoKMS.exe =>HackTool.AutoKMS
O4 - GS\sendTo [Guest]: AnySend.lnk . (...) C:\Program Files\AnySend\AnySendUI.exe =>PUP.Optional.ASPackage
O4 - GS\Startup [Guest]: AutoKMS.lnk . (.CODYQX4 - AutoKMS.) C:\Windows\AutoKMS\AutoKMS.exe =>HackTool.AutoKMS
O4 - GS\sendTo [Team 161]: AnySend.lnk . (...) C:\Program Files\AnySend\AnySendUI.exe =>PUP.Optional.ASPackage
O4 - GS\Startup [Team 161]: AutoKMS.lnk . (.CODYQX4 - AutoKMS.) C:\Windows\AutoKMS\AutoKMS.exe =>HackTool.AutoKMS

---\\ Lop.com/Domain Hijackers (O17) (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23) (10) - 1s
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\igfxCUIService.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Ma-Config Agent (MaConfigAgent) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: MediatekRegistryWriter (MediatekRegistryWriter) . (.Mediatek Inc. - MediatekRegistryWriter.) - C:\Program Files\MediatekWiFi\Common\RaRegistry.exe
O23 - Service: Realtek11nSU (Realtek11nSU) . (.Realtek - RtlService MFC Application.) - C:\Program Files\REALTEK\Wireless LAN Utility\RtlService.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 10 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 10.) - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: Unsigned Themes (UnsignedThemes) . (.The Within Network, LLC - Unsigned themes service executable.) - C:\Windows\unsignedthemes.exe

---\\ Task Planned Automatically (O39) (7) - 1s
O39 - APT: - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [830]
O39 - APT: - (...) -- C:\Windows\Tasks\Uninstaller_SkipUac_Team_161.job [292]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3718]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Aero Glass [3092]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\AutoKMS [3758] =>HackTool.AutoKMS
O39 - APT: - (...) -- C:\Windows\System32\Tasks\TechSmith Updater [3788]
O39 - APT: - (...) -- C:\Windows\System32\Tasks\Uninstaller_SkipUac_Team_161 [2398]

---\\ Software installed (O42) (44) - 7s
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Aero Glass for Win8.1 - (.Big Muscle.) [HKLM] -- Aero Glass for Win8.1_is1
O42 - Logiciel: DVB Dream version 2.6a - (...) [HKLM] -- DVB Dream_is1
O42 - Logiciel: HashTab 5.2.0.14 - (.Implbits Software.) [HKLM] -- HashTab
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager
O42 - Logiciel: IObit Uninstaller - (.IObit.) [HKLM] -- IObitUninstall
O42 - Logiciel: Malwarebytes Anti-Malware ÇáäÓÎÉ 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Windows 7 Games for Windows 8 - (...) [HKLM] -- MicrosoftGamesForWin8
O42 - Logiciel: Mozilla Firefox 39.0 (x86 ar) - (.Mozilla.) [HKLM] -- Mozilla Firefox 39.0 (x86 ar)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: ProgDVB - (.Prog.) [HKLM] -- ProgDVB
O42 - Logiciel: StartIsBack+ - (.startisback.com.) [HKLM] -- StartIsBack
O42 - Logiciel: TeamViewer 10 - (.TeamViewer.) [HKLM] -- TeamViewer
O42 - Logiciel: UltraUXThemePatcher - (.Manuel Hoefs (Zottel).) [HKLM] -- UltraUXThemePatcher
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: UxStyle - (.The Within Network, LLC.) [HKLM] -- {05560347-3a9b-4644-a8ed-8b64cc947189}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}
O42 - Logiciel: REALTEK Wireless LAN Driver and Utility - (...) [HKLM] -- {0DF70CB6-553A-4C57-8E6D-876322ECFB78}
O42 - Logiciel: Skype™ 7.6 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
O42 - Logiciel: Mediatek RT2870 Wireless LAN Card - (.MediatekWiFi.) [HKLM] -- {28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Win7codecs - (.Shark007.) [HKLM] -- {8C0CAA7A-3272-4991-A808-2C7559DE3409}
O42 - Logiciel: Microsoft Access MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0015-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Excel MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0016-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft PowerPoint MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0018-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Publisher MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0019-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Outlook MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-001A-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Word MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-001B-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft InfoPath MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0044-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft DCF MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0090-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft OneNote MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-00A1-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Groove MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-00BA-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Access Setup Metadata MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0117-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Lync MUI (English) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-012B-0409-0000-0000000FF1CE}
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {9DAABC60-A5EF-41FF-B2B9-17329590CD5}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {AF312B06-5C5C-468E-89B3-BE6DE2645722}
O42 - Logiciel: UxStyle - (.The Within Network, LLC.) [HKLM] -- {CE8F83AD-3EC7-4DA1-A929-268F1DAC507B}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {CF26C53F-CEAB-43BA-B483-CA90260E0D17}
O42 - Logiciel: Snagit 11 - (.TechSmith Corporation.) [HKLM] -- {E724600B-5568-47C7-ACDF-490D366719E2}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent

---\\ HKCU & HKLM Software Keys (91) - 7s
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\CoreCodec
HKLM\SOFTWARE\cybelsoft
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\Debug
HKLM\SOFTWARE\DVB Support
HKLM\SOFTWARE\DVBDream
HKLM\SOFTWARE\Elecard
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\HaaliMkx
HKLM\SOFTWARE\Icaros
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\Internet Download Manager
HKLM\SOFTWARE\IObit
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\Khronos
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Mediatek
HKLM\SOFTWARE\MediatekWiFi
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\NVIDIA Corporation
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Opera Software
HKLM\SOFTWARE\Oracle
HKLM\SOFTWARE\REALTEK Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RtWLan
HKLM\SOFTWARE\S3R521
HKLM\SOFTWARE\SampleShellExtnesion
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\Stardvb
HKLM\SOFTWARE\StartIsBack
HKLM\SOFTWARE\TeamViewer
HKLM\SOFTWARE\TechSmith
HKLM\SOFTWARE\UltraUXThemePatcher
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\WinRAR
HKCU\SOFTWARE\AC3filter
HKCU\SOFTWARE\AOL
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\BYAIAMUF
HKCU\SOFTWARE\Clubic
HKCU\SOFTWARE\CYBERLINK
HKCU\SOFTWARE\DivX
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\DScaler5
HKCU\SOFTWARE\Elecard
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\Geek Uninstaller
HKCU\SOFTWARE\GNOK
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HashTab
HKCU\SOFTWARE\Icaros
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Lake
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\madFlac
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\StartIsBack
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\TechSmith
HKCU\SOFTWARE\URSoft
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contents of the Common Files folders (O43) (164) - 9s
O43 - CFD: 2015/07/24 23:04:53 - [] D -- C:\Program Files\Checker
O43 - CFD: 2015/06/26 08:42:23 - [] D -- C:\Program Files\Cisco
O43 - CFD: 2015/07/26 06:51:30 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2014/11/22 03:44:09 - [] D -- C:\Program Files\Embedded Lockdown Manager
O43 - CFD: 2015/01/31 09:21:08 - [] D -- C:\Program Files\HashTab Shell Extension
O43 - CFD: 2015/06/29 19:36:18 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2015/06/25 22:15:54 - [] D -- C:\Program Files\Intel
O43 - CFD: 2015/06/26 17:45:58 - [] D -- C:\Program Files\Internet Download Manager
O43 - CFD: 2015/06/25 22:15:23 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2015/07/10 18:28:20 - [] D -- C:\Program Files\IObit
O43 - CFD: 2015/07/26 06:51:32 - [] D -- C:\Program Files\Java
O43 - CFD: 2015/06/26 08:36:08 - [] D -- C:\Program Files\ma-config.com
O43 - CFD: 2015/07/27 06:58:52 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 2015/06/29 19:36:20 - [] D -- C:\Program Files\MediatekWiFi
O43 - CFD: 2015/01/31 09:16:05 - [] D -- C:\Program Files\Microsoft Analysis Services
O43 - CFD: 2015/01/31 12:27:19 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 2015/01/31 09:26:31 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2015/01/31 09:39:29 - [] D -- C:\Program Files\Microsoft SQL Server
O43 - CFD: 2015/01/31 09:39:28 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2015/07/08 19:59:31 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015/07/08 21:04:38 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2015/01/31 09:54:40 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2015/07/26 19:22:11 - [] D -- C:\Program Files\ProgDVB
O43 - CFD: 2015/06/25 21:54:11 - [] D -- C:\Program Files\REALTEK
O43 - CFD: 2015/06/26 08:42:19 - [] D -- C:\Program Files\REALTEK PCIE Wireless LAN Driver
O43 - CFD: 2015/01/31 09:54:40 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2015/06/27 19:21:00 - [] RD -- C:\Program Files\Skype
O43 - CFD: 2015/01/31 10:37:51 - [] D -- C:\Program Files\StartIsBack
O43 - CFD: 2015/06/27 18:53:33 - [] D -- C:\Program Files\TeamViewer
O43 - CFD: 2015/07/06 00:58:12 - [] D -- C:\Program Files\TechSmith
O43 - CFD: 2015/01/31 11:10:30 - [] D -- C:\Program Files\Tools
O43 - CFD: 2015/01/31 12:00:49 - [] D -- C:\Program Files\UltraUXThemePatcher
O43 - CFD: 2015/06/26 01:28:21 - [] D -- C:\Program Files\Unlocker
O43 - CFD: 2015/01/31 10:27:50 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2015/07/11 20:53:57 - [] D -- C:\Program Files\Win7codecs
O43 - CFD: 2015/07/26 06:51:44 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/06/25 22:15:23 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2015/06/25 22:15:23 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2015/06/25 22:15:23 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 2014/11/22 03:43:57 - [] D -- C:\Program Files\Windows Multimedia Platform
O43 - CFD: 2013/08/22 09:17:26 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2015/06/25 22:15:23 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2014/11/22 03:43:57 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 2013/08/22 09:17:26 - [] SHD -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/07/26 23:17:27 - [] HD -- C:\Program Files\WindowsApps
O43 - CFD: 2014/11/22 03:43:56 - [] D -- C:\Program Files\WindowsPowerShell
O43 - CFD: 2015/06/25 22:14:21 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2014/11/22 03:44:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2014/11/22 03:44:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2014/11/22 03:44:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/07/11 19:42:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVB Dream
O43 - CFD: 2015/07/09 07:10:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVB Support
O43 - CFD: 2014/11/22 03:44:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Embedded Lockdown Manager
O43 - CFD: 2015/01/31 12:27:32 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/06/26 17:45:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 2015/07/10 18:28:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
O43 - CFD: 2015/06/26 08:36:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com
O43 - CFD: 2013/08/22 09:17:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/27 06:58:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2015/06/29 19:37:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediatek Wireless
O43 - CFD: 2015/01/31 09:48:42 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2015/07/26 19:16:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProgDVB
O43 - CFD: 2015/06/25 21:54:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK Wireless LAN Utility
O43 - CFD: 2015/07/11 20:54:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs
O43 - CFD: 2015/06/27 19:20:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2015/07/05 18:50:59 - [] HD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardvb
O43 - CFD: 2015/06/29 19:37:16 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2014/11/22 03:44:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/11/22 01:45:46 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/07/06 00:57:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
O43 - CFD: 2015/01/31 10:28:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/06/25 22:14:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2015/07/24 23:04:53 - [] D -- C:\ProgramData\ArcSoft
O43 - CFD: 2015/01/31 12:12:24 - [0] D -- C:\ProgramData\dbg
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/01/31 10:17:48 - [0] D -- C:\ProgramData\IDM
O43 - CFD: 2015/07/10 18:28:26 - [] D -- C:\ProgramData\IObit
O43 - CFD: 2015/06/26 08:36:07 - [] D -- C:\ProgramData\ma-config.com
O43 - CFD: 2015/07/27 06:58:50 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2015/06/29 19:37:25 - [0] D -- C:\ProgramData\Mediatek
O43 - CFD: 2015/06/29 19:36:22 - [] D -- C:\ProgramData\Mediatek Driver
O43 - CFD: 2015/07/03 11:39:48 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/01/31 09:53:47 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/01/31 09:18:31 - [] D -- C:\ProgramData\Microsoft Toolkit
O43 - CFD: 2015/01/31 10:25:06 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/07/26 05:52:02 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/07/06 00:58:16 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2015/07/27 05:57:49 - [] D -- C:\ProgramData\ProductData
O43 - CFD: 2015/01/31 09:34:50 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2015/07/06 00:57:47 - [] D -- C:\ProgramData\regid.1995-08.com.techsmith
O43 - CFD: 2015/07/27 06:41:13 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2015/07/06 00:58:12 - [] D -- C:\ProgramData\TechSmith
O43 - CFD: 2015/07/10 07:40:04 - [0] AD -- C:\ProgramData\TEMP
O43 - CFD: 2013/08/22 08:23:42 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/07/11 20:54:23 - [] D -- C:\ProgramData\Win7codecs
O43 - CFD: 2015/07/26 06:51:30 - [] D -- C:\Program Files\Common Files\ArcSoft
O43 - CFD: 2015/07/24 22:48:49 - [0] D -- C:\Program Files\Common Files\CyberLink
O43 - CFD: 2015/01/31 09:44:06 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2015/06/26 21:08:41 - [] D -- C:\Program Files\Common Files\Elecard
O43 - CFD: 2015/06/26 01:29:57 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2015/06/25 22:14:41 - [] D -- C:\Program Files\Common Files\Intel
O43 - CFD: 2015/07/26 06:51:30 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 2015/01/31 11:09:16 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2013/08/22 09:17:35 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2015/06/27 19:20:56 - [] D -- C:\Program Files\Common Files\Skype
O43 - CFD: 2015/06/25 22:15:23 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2015/07/06 00:58:12 - [] D -- C:\Program Files\Common Files\TechSmith Shared
O43 - CFD: 2015/01/31 08:48:34 - [] D -- C:\Users\Team 161\AppData\Roaming\Adobe
O43 - CFD: 2015/07/27 14:44:57 - [] D -- C:\Users\Team 161\AppData\Roaming\DMCache
O43 - CFD: 2015/01/31 10:01:28 - [] D -- C:\Users\Team 161\AppData\Roaming\Geek Uninstaller
O43 - CFD: 2015/07/08 19:53:37 - [] D -- C:\Users\Team 161\AppData\Roaming\IDM
O43 - CFD: 2015/07/26 07:03:09 - [] D -- C:\Users\Team 161\AppData\Roaming\IObit
O43 - CFD: 2015/01/31 09:28:15 - [] D -- C:\Users\Team 161\AppData\Roaming\Macromedia
O43 - CFD: 2015/06/30 19:51:52 - [] SD -- C:\Users\Team 161\AppData\Roaming\Microsoft
O43 - CFD: 2015/01/31 11:49:01 - [] D -- C:\Users\Team 161\AppData\Roaming\Mozilla
O43 - CFD: 2015/01/31 09:24:09 - [] D -- C:\Users\Team 161\AppData\Roaming\oCam
O43 - CFD: 2015/07/26 06:52:37 - [] D -- C:\Users\Team 161\AppData\Roaming\Opera Software
O43 - CFD: 2015/07/26 07:03:09 - [] D -- C:\Users\Team 161\AppData\Roaming\ProductData
O43 - CFD: 2015/07/24 23:04:48 - [] D -- C:\Users\Team 161\AppData\Roaming\Runscanner.net
O43 - CFD: 2015/07/27 16:54:37 - [] D -- C:\Users\Team 161\AppData\Roaming\Skype
O43 - CFD: 2015/06/27 18:45:27 - [] D -- C:\Users\Team 161\AppData\Roaming\TeamViewer
O43 - CFD: 2015/07/07 17:10:47 - [] D -- C:\Users\Team 161\AppData\Roaming\URSoft
O43 - CFD: 2015/07/26 17:54:23 - [] D -- C:\Users\Team 161\AppData\Roaming\uTorrent
O43 - CFD: 2015/07/22 19:27:53 - [] D -- C:\Users\Team 161\AppData\Roaming\vlc
O43 - CFD: 2015/07/11 20:54:23 - [] D -- C:\Users\Team 161\AppData\Roaming\Win7codecs
O43 - CFD: 2015/06/26 00:46:12 - [] D -- C:\Users\Team 161\AppData\Roaming\WinRAR
O43 - CFD: 2015/07/27 22:32:00 - [] D -- C:\Users\Team 161\AppData\Roaming\ZHP
O43 - CFD: 2015/07/23 15:06:02 - [] D -- C:\Users\Team 161\AppData\Local\%PRODUCTNAME%
O43 - CFD: 2015/01/31 12:00:40 - [0] D -- C:\Users\Team 161\AppData\Local\Adobe
O43 - CFD: 2015/01/31 08:47:57 - [0] SHD -- C:\Users\Team 161\AppData\Local\Application Data
O43 - CFD: 2015/07/23 16:50:50 - [] D -- C:\Users\Team 161\AppData\Local\ArcSoft
O43 - CFD: 2015/06/26 13:38:01 - [] D -- C:\Users\Team 161\AppData\Local\assembly
O43 - CFD: 2015/07/26 18:22:16 - [] D -- C:\Users\Team 161\AppData\Local\CrashDumps
O43 - CFD: 2015/07/10 07:43:56 - [] D -- C:\Users\Team 161\AppData\Local\Diagnostics
O43 - CFD: 2015/01/31 09:24:43 - [] SHD -- C:\Users\Team 161\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/01/31 09:24:43 - [] SHD -- C:\Users\Team 161\AppData\Local\EmieSiteList
O43 - CFD: 2015/01/31 09:24:43 - [] SHD -- C:\Users\Team 161\AppData\Local\EmieUserList
O43 - CFD: 2015/07/14 18:47:51 - [] D -- C:\Users\Team 161\AppData\Local\Forum_233
O43 - CFD: 2015/01/31 08:47:57 - [0] SHD -- C:\Users\Team 161\AppData\Local\History
O43 - CFD: 2015/06/25 21:55:43 - [] D -- C:\Users\Team 161\AppData\Local\Macromedia
O43 - CFD: 2015/07/06 14:38:51 - [] D -- C:\Users\Team 161\AppData\Local\Microsoft
O43 - CFD: 2015/01/31 09:15:32 - [0] D -- C:\Users\Team 161\AppData\Local\Microsoft Help
O43 - CFD: 2015/01/31 11:47:01 - [] D -- C:\Users\Team 161\AppData\Local\Mozilla
O43 - CFD: 2015/07/23 15:04:05 - [] D -- C:\Users\Team 161\AppData\Local\Opera Software
O43 - CFD: 2015/07/10 10:10:26 - [] D -- C:\Users\Team 161\AppData\Local\Packages
O43 - CFD: 2015/01/31 09:23:53 - [] D -- C:\Users\Team 161\AppData\Local\Programs
O43 - CFD: 2015/06/27 19:21:05 - [] D -- C:\Users\Team 161\AppData\Local\Skype
O43 - CFD: 2015/06/26 13:37:59 - [] D -- C:\Users\Team 161\AppData\Local\TechSmith
O43 - CFD: 2015/07/27 22:32:18 - [] D -- C:\Users\Team 161\AppData\Local\Temp
O43 - CFD: 2015/01/31 08:47:57 - [0] SHD -- C:\Users\Team 161\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/06/26 12:49:02 - [] D -- C:\Users\Team 161\AppData\Local\VirtualStore
O43 - CFD: 2014/11/22 03:44:07 - [] RD -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2014/11/22 03:44:07 - [] RD -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/01/31 08:49:02 - [] RD -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/07/09 07:10:26 - [] D -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DVB Support
O43 - CFD: 2015/06/26 17:45:55 - [] D -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 2013/08/22 09:17:27 - [] D -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/26 09:35:38 - [] RD -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2014/11/22 03:44:08 - [] RD -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/01/31 12:00:51 - [] D -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
O43 - CFD: 2015/06/25 22:14:21 - [] D -- C:\Users\Team 161\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Latest files created in Windows Prefetcher (O45) (9) - 11s
O45 - LFCP:[MD5.3930A850D0746C4A0CCC39EDCE477B84] 2015/07/26 18:10:01 A -- C:\Windows\Prefetch\ANYSENDUI.EXE-EE963188.pf =>PUP.Optional.ASPackage
O45 - LFCP:[MD5.1C5518E9CE32A5513BD665E715F2C941] 2015/07/23 16:29:33 A -- C:\Windows\Prefetch\CROSSBROWSE.EXE-F6F882CE.pf =>PUP.Optional.CrossBrowse
O45 - LFCP:[MD5.BC6FEDA0EB31A717E9B3919375F73FCD] 2015/07/23 15:31:02 A -- C:\Windows\Prefetch\GLOBALUPDATE.EXE-E4A69329.pf =>PUP.Optional.GlobalUpdate
O45 - LFCP:[MD5.39264DE5872D11112D38A8572DC2C02F] 2015/07/23 16:09:24 A -- C:\Windows\Prefetch\PRICEFOUNTAINUPDATEVER.EXE-D676B1BD.pf =>PUP.Optional.PriceFoutain
O45 - LFCP:[MD5.66FECB9249ED071584DC165426D08DF5] 2015/07/23 16:34:14 A -- C:\Windows\Prefetch\REIMAGE.EXE-4681D307.pf =>PUP.Optional.ReImageRepair
O45 - LFCP:[MD5.A4889F98C8463C3E6659B82165BD5CE2] 2015/07/23 16:08:17 A -- C:\Windows\Prefetch\SPEEDUPMYPC-STANDALONE-SETUP.-8B9A3276.pf =>PUP.Optional.SpeedUpMyPC
O45 - LFCP:[MD5.08A71D525B9CBABF5B8AA11DE0EC1334] 2015/07/23 16:22:35 A -- C:\Windows\Prefetch\SPEEDUPMYPC.EXE-9A3B87D4.pf =>PUP.Optional.SpeedUpMyPC
O45 - LFCP:[MD5.CBCC2FC7B3AE12823850EA73D94CE3C7] 2015/07/25 06:47:45 A -- C:\Windows\Prefetch\VUUPCLICENSE.EXE-C042D86B.pf =>PUP.Optional.VuuPC
O45 - LFCP:[MD5.4E2A999E72E45651B7ADD9D6CDAF6540] 2015/07/23 15:53:10 A -- C:\Windows\Prefetch\VUUPCSETUP_FULL.EXE-093338B0.pf =>PUP.Optional.VuuPC

---\\ System Drivers List (SDL) (O58) (46) - 8s
O58 - SDL:2013/08/22 06:33:26 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [86368]
O58 - SDL:2015/07/27 14:44:57 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\6A0B06DC.sys [98520]
O58 - SDL:2013/08/22 06:33:25 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [773472]
O58 - SDL:2013/08/22 06:33:25 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [72544]
O58 - SDL:2013/08/22 06:33:26 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [215392]
O58 - SDL:2013/08/22 06:33:24 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22880]
O58 - SDL:2013/08/22 06:33:26 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [101728]
O58 - SDL:2013/08/13 00:25:32 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [16088]
O58 - SDL:2013/08/22 02:42:19 A . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel.) -- C:\Windows\System32\drivers\E1G60I32.sys [119296]
O58 - SDL:2012/07/17 17:12:08 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECI.sys [55104]
O58 - SDL:2013/08/22 06:33:29 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [56672]
O58 - SDL:2013/07/23 22:18:30 AC . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\Windows\System32\drivers\iaiogpio.sys [22016]
O58 - SDL:2013/07/23 22:18:30 AC . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\Windows\System32\drivers\iaioi2c.sys [61936]
O58 - SDL:2013/08/10 01:39:44 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [524784]
O58 - SDL:2013/08/22 06:33:29 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [333664]
O58 - SDL:2015/05/20 13:55:54 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys [123968]
O58 - SDL:2014/10/01 18:53:32 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [3020216]
O58 - SDL:2014/08/01 21:18:33 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [32152]
O58 - SDL:2014/08/01 21:18:33 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [23448]
O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [94048]
O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [79712]
O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [68960]
O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [69472]
O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256]
O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936]
O58 - SDL:2015/07/27 21:24:49 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520]
O58 - SDL:2013/08/22 06:33:30 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [51552]
O58 - SDL:2013/08/22 06:33:29 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [464736]
O58 - SDL:2013/08/22 06:33:32 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [58208]
O58 - SDL:2015/06/18 08:41:58 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928]
O58 - SDL:2015/02/16 14:11:20 A . (.MediaTek Inc. - MediaTek 802.11n Wireless Adapter Driver.) -- C:\Windows\System32\drivers\netr28u.sys [1827472]
O58 - SDL:2013/08/22 06:33:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [120160]
O58 - SDL:2013/08/22 06:33:33 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [141664]
O58 - SDL:2010/01/07 02:20:22 A . (.Realtek Semiconductor Corporation - Realtek RTL8187 NDIS Driver.) -- C:\Windows\System32\drivers\RTL8187.sys [375808]
O58 - SDL:2010/03/31 14:59:24 A . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\System32\drivers\rtl8187B.sys [350720]
O58 - SDL:2014/12/17 16:03:50 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 33003.) -- C:\Windows\System32\drivers\rtwlane.sys [3223256]
O58 - SDL:2013/08/22 09:16:47 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480]
O58 - SDL:2013/08/22 06:32:56 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [41312]
O58 - SDL:2013/08/22 06:32:57 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [79200]
O58 - SDL:2010/05/10 09:09:36 A . (.TechniSat Digital, S.A. - NDIS 5.0 driver.) -- C:\Windows\System32\drivers\SkyNetU2C.sys [248920]
O58 - SDL:2010/05/10 09:09:54 A . (.TechniSat Digital, S.A. - TechniSat DVB-PC TV Star BDA Driver.) -- C:\Windows\System32\drivers\SkyNetU2CBDA.sys [261720]
O58 - SDL:2013/08/22 06:32:57 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [26976]
O58 - SDL:2013/09/23 04:02:36 A . (.The Within Network, LLC - UxStyle Kernel Driver.) -- C:\Windows\System32\drivers\uxstyle.sys [18944]
O58 - SDL:2013/08/22 06:33:00 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [18272]
O58 - SDL:2013/08/22 06:33:01 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\System32\drivers\vsmraid.sys [148832]
O58 - SDL:2013/08/22 06:33:01 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [276832]

---\\ Last modified or created user files (O61) (39) - 28s
O61 - LFC: 2015/07/26 09:35:01 A . (..) -- C:\Users\Team 161\Downloads\Programs\AdwClaner 3 Pro3xplain.com.exe [1325827]
O61 - LFC: 2015/07/23 14:52:41 A . (.1f0.de.) -- C:\Users\Team 161\Downloads\Programs\LAVFilters-0.65-Installer.exe [8858704]
O61 - LFC: 2015/07/26 19:06:13 A . (..) -- C:\Users\Team 161\Downloads\Programs\ProgDVB7.05Pro.exe [21071416]
O61 - LFC: 2015/07/26 18:51:42 A . (..) -- C:\Users\Team 161\Downloads\Programs\ProgDVB7.09.0Std.exe [19695880]
O61 - LFC: 2015/07/27 16:52:38 A . (.Tonec Inc..) -- C:\Users\Team 161\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2.dll [332824]
O61 - LFC: 2015/07/27 16:52:38 A . (.Tonec Inc..) -- C:\Users\Team 161\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2_64.dll [460824]
O61 - LFC: 2015/07/27 16:52:38 A . (.Tonec Inc..) -- C:\Users\Team 161\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc.dll [34216]
O61 - LFC: 2015/07/27 16:52:38 A . (.Tonec Inc..) -- C:\Users\Team 161\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc64.dll [28512]
O61 - LFC: 2015/07/27 16:52:38 A . (.Tonec Inc..) -- C:\Users\Team 161\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc.dll [26648]
O61 - LFC: 2015/07/27 16:52:38 A . (.Tonec Inc..) -- C:\Users\Team 161\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc64.dll [31768]
O61 - LFC: 2015/07/27 16:52:38 A . (.Tonec Inc..) -- C:\Users\Team 161\AppData\Roaming\IDM\idmmzcc5\components\idmmzcc.dll [34216]
O61 - LFC: 2015/07/27 14:44:57 A . (..) -- C:\Users\Team 161\AppData\Local\TechSmith\SnagIt\Tray.bin [440]
O61 - LFC: 2015/07/23 15:31:02 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\PP82D442\JOSrv[1].exe [209920]
O61 - LFC: 2015/07/26 18:22:05 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\PP82D442\Setup[1].exe [588632]
O61 - LFC: 2015/07/23 16:02:04 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\PP82D442\setup_362[1].exe [254464]
O61 - LFC: 2015/07/23 15:30:49 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\PP82D442\SFSetup[1].exe [359945]
O61 - LFC: 2015/07/23 15:02:45 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\PP82D442\Updater[1].exe [1899008]
O61 - LFC: 2015/07/27 22:07:38 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\PP82D442\urlblockindex[1].bin [16]
O61 - LFC: 2015/07/26 10:23:01 A . (.AnySend.com.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\AnySendnsig[1].exe [333506] =>PUP.Optional.ASPackage
O61 - LFC: 2015/07/26 10:24:55 A . (.Copyright 2013.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\ClickMeInGeneric[1].exe [219848]
O61 - LFC: 2015/07/23 16:01:51 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\cmmdWriter[1].exe [43725]
O61 - LFC: 2015/07/23 15:29:22 A . (.7th.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\obw_istartsurf[1].exe [199264] =>PUP.Optional.IsStart
O61 - LFC: 2015/07/23 16:02:43 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\policyname[1].exe [57110]
O61 - LFC: 2015/07/23 15:31:04 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\runasu[1].exe [333824]
O61 - LFC: 2015/07/23 16:01:14 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\Setup[1].exe [597039]
O61 - LFC: 2015/07/23 15:31:33 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\SU_Srv[1].exe [120832]
O61 - LFC: 2015/07/23 15:29:54 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\VOPackage[1].exe [810795] =>PUP.Optional.Downware
O61 - LFC: 2015/07/23 15:30:31 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\CXJLG152\runasu[1].exe [333824]
O61 - LFC: 2015/07/23 16:02:45 A . (.Copyright 2013.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\CXJLG152\Validate[1].exe [61981]
O61 - LFC: 2015/07/23 15:52:59 A . (.VuuPC Limited.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\CXJLG152\VuuPCSetup[1].exe [7724216] =>PUP.Optional.VuuPC
O61 - LFC: 2015/07/23 15:29:43 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\10100013[1].exe [1541098]
O61 - LFC: 2015/07/23 15:40:43 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\FinalInstaller_dotnet4[1].exe [3001344]
O61 - LFC: 2015/07/23 15:51:47 A . (.VuuPC Limited.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\gNnwhjRu[1].exe [260876]
O61 - LFC: 2015/07/23 15:29:23 A . (.© 2015.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\install[1].exe [372321]
O61 - LFC: 2015/07/23 15:29:46 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\mini_installer_1103[1].exe [1805824]
O61 - LFC: 2015/07/23 15:51:11 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\Setup[1].exe [593944]
O61 - LFC: 2015/07/23 16:04:05 A . (.Uniblue Systems Limited.) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\SpeedUpMyPC-standalone-setup[1].exe [3335584] =>PUP.Optional.SpeedUpMyPC
O61 - LFC: 2015/07/23 15:31:30 A . (..) -- C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\Update_Notifier[1].exe [564736]
O61 - LFC: 2015/07/23 15:06:02 A . (..) -- C:\Users\Team 161\AppData\Local\%PRODUCTNAME%\Bin\_setup2.dll [5632]

---\\ File Associations Shell Spawning (O67) (1) - 0s
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe

---\\ Start Menu Internet (SMI) (O68) (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - ýýÇáÃÏÇÉ ÇáãÓÇÚÏÉ ááÊåíÆÉ áßá ãÓÊÎÏã áÜ IE.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - ýýÇáÃÏÇÉ ÇáãÓÇÚÏÉ ááÊåíÆÉ áßá ãÓÊÎÏã áÜ IE.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - ýýÇáÃÏÇÉ ÇáãÓÇÚÏÉ ááÊåíÆÉ áßá ãÓÊÎÏã áÜ IE.) -- C:\Windows\System32\ie4uinit.exe

---\\ Search Browser Infection (SBI) (O69) (4) - 4s
O69 - SBI: prefs.js [Team 161 - pq2ylcxp.default] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Team 161 - pq2ylcxp.default] user_pref("browser.search.searchengine.ptid", "ima"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [Team 161 - pq2ylcxp.default] user_pref("browser.search.searchengine.uid", "ST1000LM024XHN-M101MBB_S2Y9J9AD602884"); =>PUP.Optional.SearchEngine
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Search Svchost Services (SSS) (O83) (36) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [161792]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - ÎÏãÉ äÔÑ ÔåÇÏÉ ÇáÈØÇÞÉ ÇáÐßíÉ áÜ Microsoft.) -- C:\Windows\System32\certprop.dll [126976]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - ÎÏãÉ äÔÑ ÔåÇÏÉ ÇáÈØÇÞÉ ÇáÐßíÉ áÜ Microsoft.) -- C:\Windows\System32\certprop.dll [126976]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [250368]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Úãíá äåÌ ÇáãÌãæÚÉ.) -- C:\Windows\System32\gpsvc.dll [1212928]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [733696]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [822784]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - ãßÊÈÉ ÇáÇÑÊÈÇØ ÇáÏíäÇãíßí ÇáÎÇÕÉ ÈÎÏãÉ ÊÓÌí.) -- C:\Windows\System32\seclogon.dll [24064]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [89600]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [115712]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [93696]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - ÎÏãÉ ÌÏæáÉ ÇáãåÇã.) -- C:\Windows\System32\schedsvc.dll [1015808]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [185856]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [74752]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [108032]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [189952]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [296448]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - ÊÞÇÑíÑ ÇáãÔÇßá æÍáæáåÇ.) -- C:\Windows\System32\wercplsupport.dll [64512]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [75264]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [41984]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1245184]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [367104]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [297984]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [167424]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [142848]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [95232]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [461824]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [183296]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [58368]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [390144]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [254464]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - ÚÇãá Windows Update.) -- C:\Windows\System32\wuaueng.dll [2946560]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [734208]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - ãßÊÈÉ ÇáÇÑÊÈÇØ ÇáÏíäÇãíßí áÎÏãÇÊ Windows Sh.) -- C:\Windows\System32\shsvcs.dll [576512]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - ÎÏãÉ ÊËÈÊ ÇáÈÑÇãÌ.) -- C:\Windows\System32\appmgmts.dll [155648]
O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [76096]

---\\ Firewall Active Exception List (FirewallRules) (O87) (13) - 1s
O87 - FAEL: "{5B08D090-DDA6-4613-B11F-443BC3D54DBF}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Team 161\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{668D7189-94E1-446A-989F-8A943762051C}" [Out-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Team 161\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{5871A271-8F3F-4DD1-AC48-508CB4901746}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Team 161\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{7D224933-56EB-48BC-B6CA-FE175CFB78F8}" [Out-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Team 161\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{802C9B56-0A45-4E1C-BC0E-C82A5181C41D}" [In-None-P6-TRUE] .(.Realtek Semiconductor Corp. - RtWLan ( For Vista / Win7) Application(Exte.) -- C:\Program Files\REALTEK\Wireless LAN Utility\RtWLan.exe
O87 - FAEL: "{438DD544-A02B-4807-BF9E-56D3502CDA32}" [In-None-P17-TRUE] .(.Realtek Semiconductor Corp. - RtWLan ( For Vista / Win7) Application(Exte.) -- C:\Program Files\REALTEK\Wireless LAN Utility\RtWLan.exe
O87 - FAEL: "{CB7E6326-FDB5-480C-BC8D-2063431D3C51}" [In-None-P6-TRUE] .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe
O87 - FAEL: "{86501636-7039-4BBD-AE5A-A03F0BFB9173}" [In-None-P17-TRUE] .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\MaConfigAgent.exe
O87 - FAEL: "{8A528084-682F-42B2-9EE3-D9521D3F21F8}" [In-None-P17-TRUE] .(.Mediatek Inc. - Mediatek Wireless LAN Card Utility.) -- C:\Program Files\MediatekWiFi\Common\RaUI.exe
O87 - FAEL: "{09894F88-6BA2-4FF6-9132-D0D133CC4659}" [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer.exe
O87 - FAEL: "{5588C357-5B1E-4F60-8CD6-8DBA195BFF49}" [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer.exe
O87 - FAEL: "{136512F3-19EA-4541-A0FC-3C5187F5F60A}" [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer_Service.exe
O87 - FAEL: "{288604D2-A66C-43F4-88C7-4B3E8D3BF089}" [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer_Service.exe

---\\ Additional Scan (O88) (15) - 0s
C:\Windows\System32\Tasks\AutoKMS =>HackTool.AutoKMS
C:\Windows\Prefetch\ANYSENDUI.EXE-EE963188.pf =>PUP.Optional.ASPackage
C:\Windows\Prefetch\CROSSBROWSE.EXE-F6F882CE.pf =>PUP.Optional.CrossBrowse
C:\Windows\Prefetch\GLOBALUPDATE.EXE-E4A69329.pf =>PUP.Optional.GlobalUpdate
C:\Windows\Prefetch\PRICEFOUNTAINUPDATEVER.EXE-D676B1BD.pf =>PUP.Optional.PriceFoutain
C:\Windows\Prefetch\REIMAGE.EXE-4681D307.pf =>PUP.Optional.ReImageRepair
C:\Windows\Prefetch\SPEEDUPMYPC-STANDALONE-SETUP.-8B9A3276.pf =>PUP.Optional.SpeedUpMyPC
C:\Windows\Prefetch\SPEEDUPMYPC.EXE-9A3B87D4.pf =>PUP.Optional.SpeedUpMyPC
C:\Windows\Prefetch\VUUPCLICENSE.EXE-C042D86B.pf =>PUP.Optional.VuuPC
C:\Windows\Prefetch\VUUPCSETUP_FULL.EXE-093338B0.pf =>PUP.Optional.VuuPC
C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\AnySendnsig[1].exe =>PUP.Optional.ASPackage
C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\obw_istartsurf[1].exe =>PUP.Optional.IsStart
C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\MRLPEZEP\VOPackage[1].exe =>PUP.Optional.Downware
C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\CXJLG152\VuuPCSetup[1].exe =>PUP.Optional.VuuPC
C:\Users\Team 161\AppData\Local\Microsoft\Windows\INetCache\IE\BQC0AR2K\SpeedUpMyPC-standalone-setup[1].exe =>PUP.Optional.SpeedUpMyPC

---\\ Summary of the elements found on your workstation (11) - 0s
http://www.nicolascoolman.fr/blog =>PUP.Optional.ASPackage
http://www.nicolascoolman.fr/trojan-autokms/ =>HackTool.AutoKMS
http://www.nicolascoolman.fr/blog =>PUP.Optional.CrossBrowse
http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/blog =>PUP.Optional.PriceFoutain
http://www.nicolascoolman.fr/rogue-reimagerepair/ =>PUP.Optional.ReImageRepair
http://www.nicolascoolman.fr/blog =>PUP.Optional.SpeedUpMyPC
http://www.nicolascoolman.fr/pup-vuupc/ =>PUP.Optional.VuuPC
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart
http://www.nicolascoolman.fr/adware-downware/ =>PUP.Optional.Downware
http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine

~ End of the scan, 14796 items in 124 seconds (660)(0)()

Publicité


Signaler le contenu de ce document

Publicité