cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:02-08-2015 01
Ran by Roland (administrator) on DELL (04-08-2015 10:36:56)
Running from C:\Users\Roland\Downloads\Stardock
Loaded Profiles: Roland (Available Profiles: Roland)
Platform: Windows 8.1 (X64) Language: Français (France)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(XCloud Systems) C:\Program Files (x86)\XCloudSystems\DataProtecto\DPProtectService.exe
(DAYU Technology Co., Ltd.) C:\Program Files\Dayu\Disk Master\Agent.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
() C:\Program Files (x86)\Common Files\AppKeys\yytool64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\CyberSafe Top Secret 2\CryptoDiskService.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
(Data Perceptions / PowerProgrammer) C:\Windows\SysWOW64\WebUpdateSvc4.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\OTBSurvey.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
() C:\Users\Roland\Downloads\moustique\moustique.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\ioloGovernor64.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(ACD Systems) C:\Program Files\ACD Systems\ACDSee Pro\7.0\acdIDInTouch2.exe
() C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Adobe Systems, Inc.) C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe
(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SoftMaker Software GmbH) C:\Program Files (x86)\Ashampoo\Ashampoo Office 2010\Smash.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Cloud Backup Robot) C:\Program Files (x86)\Cloud Backup Robot\CloudBackupRobot.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Mail\WinMail.exe
(Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LogiAppBroker.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssist\uaclauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-08] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-14] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-05] (IvoSoft)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-25] (CANON INC.)
HKLM\...\Run: [ACPW07FR] => C:\Program Files\ACD Systems\ACDSee Pro\7.0\acdIDInTouch2.exe [1813832 2014-03-18] (ACD Systems)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7842712 2014-02-04] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1104320 2013-10-10] (Acronis International GmbH)
HKLM-x32\...\Run: [Reader Application Helper] => C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2014-10-24] (Sony Corporation)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2015-05-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5237256 2012-12-20] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ATNSOFT Text Paster] => C:\Program Files (x86)\ATNSOFT Text Paster\textpaster.exe [2223352 2015-06-24] (ATNSOFT)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [132736 2013-09-05] (Qualcomm®Atheros®)
HKU\S-1-5-21-310849921-343691772-3629321429-1001\...\Run: [AdobeBridge] => C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe [13145448 2008-08-28] (Adobe Systems, Inc.)
HKU\S-1-5-21-310849921-343691772-3629321429-1001\...\Run: [xcpcontroller] => C:\Program Files (x86)\XCloudSystems\DataProtecto\DPController.exe [1120152 2014-05-19] (XCloud Systems)
HKU\S-1-5-21-310849921-343691772-3629321429-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31346784 2015-02-26] (Skype Technologies S.A.)
HKU\S-1-5-21-310849921-343691772-3629321429-1001\...\Run: [SMASH] => C:\Program Files (x86)\Ashampoo\Ashampoo Office 2010\smash.exe [229411 2010-05-21] (SoftMaker Software GmbH)
HKU\S-1-5-21-310849921-343691772-3629321429-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833240 2014-12-23] (ZONER software)
HKU\S-1-5-21-310849921-343691772-3629321429-1001\...\Run: [CloudBackupRobot] => C:\Program Files (x86)\Cloud Backup Robot\CloudBackupRobot.exe [5076704 2015-02-03] (Cloud Backup Robot)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2014-08-25]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
Startup: C:\Users\Roland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Belgacom Cloud.lnk [2014-05-16]
ShortcutTarget: Belgacom Cloud.lnk -> C:\Users\Roland\AppData\Local\F-Secure\Belgacom Cloud\Application\Belgacom Cloud.exe (F-Secure Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] ()
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-10-01] ()
ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-05] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-05] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-310849921-343691772-3629321429-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
HKU\S-1-5-21-310849921-343691772-3629321429-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-310849921-343691772-3629321429-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-05] (IvoSoft)
BHO: No Name -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-05] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-05] (IvoSoft)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-18] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-05] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-05] (IvoSoft)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-05] (IvoSoft)
Toolbar: HKLM-x32 - CaptureSaver - {5148AB7D-8868-4490-B6DA-F98368488582} - C:\Program Files (x86)\CaptureSaver\CaptureSaverIE.dll [2011-06-20] (www.capturesaver.com)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2014-08-25] (LastPass)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-18] (Google Inc.)
Toolbar: HKU\S-1-5-21-310849921-343691772-3629321429-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{50F39860-6785-4BD1-9CF3-B90FADDFD6EA}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Roland\AppData\Roaming\Mozilla\Firefox\Profiles\b9lwh7x2.default
FF NetworkProxy: "type", 0
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2014-08-25] (LastPass)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-07-22] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-15] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-01-11] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll [2014-08-25] (LastPass)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @sony.com/ReaderDesktop -> C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll [2014-10-24] (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-07-22] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com [2014-05-28]
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com
FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com [2014-05-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-07-14]
FF HKU\S-1-5-21-310849921-343691772-3629321429-1001\...\Firefox\Extensions: [CaptureSaver@goldgingko.com] - C:\Program Files (x86)\CaptureSaver\Firefox
FF Extension: No Name - C:\Program Files (x86)\CaptureSaver\Firefox [2014-07-02]

Chrome:
=======
CHR Profile: C:\Users\Roland\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browser Safety) - C:\Users\Roland\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-05-28]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Roland\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-28]
CHR Extension: (Skype Click to Call) - C:\Users\Roland\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-05-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Roland\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-28]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [312448 2013-09-05] (Windows (R) Win 7 DDK provider) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [321024 2013-08-22] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\OTBSurvey.exe [145288 2015-04-09] (Dell Inc.)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-06-09] (Dell Inc.)
R2 DPProtectService; C:\Program Files (x86)\XCloudSystems\DataProtecto\DPProtectService.exe [726424 2014-05-19] (XCloud Systems)
R2 FrAgent; C:\Program Files\Dayu\Disk Master\Agent.exe [65768 2015-04-02] (DAYU Technology Co., Ltd.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-05-22] (Freemake) [File not signed]
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-05-22] (Ellora Assets Corp.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-08] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation)
R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [4027728 2014-02-04] (iolo technologies, LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 Leawo_service; C:\Program Files (x86)\Common Files\AppKeys\yytool64.exe [1114608 2013-12-12] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 OS Selector; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2159352 2011-11-15] ()
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-07-30] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor)
R2 ServiceCryptoDisk; C:\Program Files (x86)\CyberSafe Top Secret 2\CryptoDiskService.exe [2493056 2014-07-07] () [File not signed]
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1915408 2013-10-18] (SoftThinks SAS)
S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2014-04-25] (Sony Corporation) [File not signed]
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2253112 2015-06-25] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2015-06-25] (AVG)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [35640 2015-06-25] (AVG)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1155088 2012-12-20] (Western Digital )
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248840 2012-12-20] (Western Digital)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1178128 2012-12-20] (Western Digital )
R2 WebUpdate4; C:\Windows\SysWOW64\WebUpdateSvc4.exe [412776 2013-11-25] (Data Perceptions / PowerProgrammer)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2014-07-07] (WiseCleaner.com) [File not signed]
R2 VssProvider; C:\Windows\system32\dllhost.exe /Processid:{58C9C35A-3456-4E21-8818-E79FBD5F764A}

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [151648 2014-06-10] (Alfa System Programming)
S3 ampa; C:\Windows\system32\ampa.sys [17008 2013-11-29] ()
S3 ampa; C:\Windows\SysWOW64\ampa.sys [17008 2013-11-29] ()
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-16] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-05] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-01-31] (Dell Computer Corporation)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)
R0 diskbckp; C:\Windows\System32\drivers\diskbckp.sys [42216 2015-04-02] (DAYU Technology Co., Ltd.)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2014-02-04] (EldoS Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14920 2013-03-07] () [File not signed]
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-08-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [21208 2013-02-25] ()
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80160 2015-04-08] (McAfee, Inc.)
R1 mse; C:\Windows\System32\drivers\mse.sys [54456 2015-01-10] (Windows (R) Win 7 DDK provider)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-04-21] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [198432 2014-04-21] (Acronis International GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [31144 2015-06-04] (TuneUp Software)
R1 UimBus; C:\Windows\System32\drivers\uimx64.sys [90960 2013-10-07] (Windows (R) 2000 DDK provider)
R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25992 2014-03-17] ()
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-10-07] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-10-07] (Paragon)
R3 vDisk; C:\Windows\System32\drivers\vDisk.sys [241896 2015-04-02] (DAYU Technology Co., Ltd.)
R1 Vdsk; C:\Windows\System32\Drivers\vdsk.sys [55552 2013-09-17] (NT KERNEL RESOURCES LAB.)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 WLRAWMp50x64; C:\Windows\System32\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)
S3 WLRAWMp50x64; C:\Windows\SysWOW64\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)
S3 WLRAWSp50x64; C:\Windows\System32\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)
S3 WLRAWSp50x64; C:\Windows\SysWOW64\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)
R1 xcpl; C:\Windows\SysWow64\xcpl.sys [30848 2014-05-19] (XCloudSystems)
R2 xvdesafedp; C:\Windows\SysWow64\xvdesafedp.sys [232064 2014-05-19] (XCloudSystems)
U3 catchme; \??\C:\Users\Roland\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-04 10:36 - 2015-08-04 10:37 - 00000000 ____D C:\FRST
2015-08-04 09:49 - 2015-08-04 09:49 - 00142045 _____ C:\Users\Roland\Desktop\ZHPDiag.txt-4aout2015.txt
2015-08-04 08:46 - 2015-08-04 08:46 - 00000000 ___RD C:\Users\Roland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-08-03 16:10 - 2015-08-03 16:10 - 00001935 _____ C:\Users\Roland\Desktop\ZHPFixReport.txt
2015-08-03 16:04 - 2015-08-03 16:05 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2015-08-03 16:04 - 2015-08-03 16:04 - 00001863 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2015-08-03 16:04 - 2015-08-03 16:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-08-03 15:58 - 2015-08-03 15:58 - 00000726 _____ C:\Users\Roland\Desktop\ScriptZHPFix (1).txt
2015-08-03 15:31 - 2015-08-03 15:31 - 01187032 _____ (Adobe Systems Incorporated) C:\Users\Roland\Downloads\flashplayer18_ha_install(1).exe
2015-08-03 15:26 - 2015-08-03 15:26 - 01187032 _____ (Adobe Systems Incorporated) C:\Users\Roland\Downloads\flashplayer18_ha_install.exe
2015-08-03 15:19 - 2015-08-03 15:19 - 00000000 ____D C:\Users\Roland\AppData\Local\Mozilla
2015-08-03 15:18 - 2015-08-03 15:18 - 00001160 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-03 15:18 - 2015-08-03 15:18 - 00001148 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-08-03 12:39 - 2015-08-03 12:39 - 00001278 _____ C:\Users\Roland\Desktop\MBAM 3aout2015.txt
2015-08-03 12:07 - 2015-08-03 12:07 - 00144475 _____ C:\Users\Roland\Desktop\ZHPDiag.txt 2 aout2015.txt
2015-08-03 11:54 - 2015-08-04 09:40 - 01856512 _____ C:\Users\Roland\ZHPDiag3.exe
2015-08-02 17:15 - 2015-08-02 17:15 - 00000026 _____ C:\Users\Roland\Desktop\ScriptZoek (1).txt
2015-08-02 17:00 - 2015-08-02 21:09 - 00035042 _____ C:\Users\Roland\Desktop\zoek-results.txt
2015-08-02 16:58 - 2015-08-02 16:58 - 00000000 ____D C:\ProgramData\ioloGovernor
2015-08-02 16:54 - 2015-08-02 16:54 - 00001523 _____ C:\Users\Roland\Desktop\Adwclean.txt
2015-08-02 16:29 - 2015-08-02 16:58 - 00035031 _____ C:\zoek-results.log
2015-08-02 16:27 - 2015-08-02 16:57 - 00000000 ____D C:\zoek_backup
2015-08-02 16:20 - 2015-08-02 16:20 - 00000026 _____ C:\Users\Roland\Desktop\ScriptZoek.txt
2015-08-02 16:01 - 2015-08-02 16:01 - 00001520 _____ C:\Users\Roland\Desktop\MBAM.text
2015-08-02 15:58 - 2015-08-02 15:58 - 00001978 _____ C:\MBAM.text
2015-08-02 11:39 - 2015-08-02 11:39 - 00001051 _____ C:\Users\Roland\Desktop\AdwCleaner[R2].txt
2015-08-02 11:32 - 2015-08-02 11:32 - 00000727 _____ C:\Users\Roland\Desktop\AdwCleaner - Raccourci.lnk
2015-08-02 10:26 - 2015-08-02 10:30 - 00023368 _____ C:\Users\Roland\Desktop\ZHPCleaner.txt
2015-08-02 10:21 - 2015-08-02 10:21 - 00000877 _____ C:\Users\Roland\Desktop\ZHPCleaner.lnk
2015-08-01 10:06 - 2015-08-01 10:06 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3CF70A69.sys
2015-07-31 09:54 - 2015-07-31 09:54 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\3BF9330A.sys
2015-07-30 09:57 - 2015-07-30 09:57 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\5C79670A.sys
2015-07-29 17:15 - 2012-04-05 14:23 - 00000000 ____D C:\Adobe CS6
2015-07-29 17:12 - 2015-07-29 17:12 - 00000000 ____D C:\Windows\System32\Tasks\WiseCleaner
2015-07-29 09:52 - 2015-07-29 09:53 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\511C1576.sys
2015-07-28 11:04 - 2015-08-04 09:48 - 00142042 _____ C:\Users\Roland\Desktop\ZHPDiag.txt
2015-07-28 10:49 - 2015-08-04 09:43 - 00000867 _____ C:\Users\Roland\Desktop\ZHPDiag.lnk
2015-07-28 10:49 - 2015-08-04 09:43 - 00000000 ____D C:\Users\Roland\AppData\Roaming\ZHP
2015-07-27 10:56 - 2015-07-30 16:13 - 00002122 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-27 10:56 - 2015-07-27 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-26 01:45 - 2015-07-26 01:45 - 00000000 ____D C:\Program Files\Common Files\AV
2015-07-24 15:38 - 2015-07-05 12:08 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-23 13:17 - 2015-07-23 13:17 - 00440352 _____ C:\Windows\Minidump\072315-28984-01.dmp
2015-07-23 12:10 - 2015-08-03 15:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-22 17:12 - 2015-08-02 16:57 - 00033982 _____ C:\Windows\PFRO.log
2015-07-22 17:12 - 2015-08-02 16:57 - 00001276 _____ C:\Windows\setupact.log
2015-07-22 17:12 - 2015-07-23 13:17 - 809836365 _____ C:\Windows\MEMORY.DMP
2015-07-22 17:12 - 2015-07-22 17:12 - 00000000 _____ C:\Windows\setuperr.log
2015-07-22 01:45 - 2015-07-22 01:45 - 00000000 ____D C:\ProgramData\VIPRE
2015-07-19 10:04 - 2015-08-04 08:58 - 02061228 _____ C:\Windows\WindowsUpdate.log
2015-07-19 10:03 - 2015-07-19 10:03 - 05189728 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-15 14:23 - 2015-07-15 14:23 - 00001108 _____ C:\Users\Public\Desktop\Text Paster.lnk
2015-07-15 14:23 - 2015-07-15 14:23 - 00000000 ____D C:\Users\Roland\AppData\Roaming\ATNSOFT
2015-07-15 14:23 - 2015-07-15 14:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ATNSOFT Text Paster
2015-07-15 14:23 - 2015-07-15 14:23 - 00000000 ____D C:\Program Files (x86)\ATNSOFT Text Paster
2015-07-14 11:25 - 2015-07-14 11:25 - 00000000 _____ C:\Recovery.txt
2015-07-10 14:20 - 2015-07-10 16:41 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-10 12:08 - 2015-07-10 12:08 - 01241233 _____ C:\Users\Roland\Downloads\drosteeffect.zip
2015-07-09 15:53 - 2015-07-09 15:53 - 00000000 ____D C:\Program Files (x86)\Dell Update
2015-07-07 12:16 - 2015-07-07 12:16 - 00000164 _____ C:\siw_debug.txt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-04 10:36 - 2014-05-28 16:03 - 00000000 ____D C:\Users\Roland\Downloads\Stardock
2015-08-04 10:28 - 2014-04-09 05:48 - 00000000 ____D C:\Users\Roland\AppData\Roaming\ClassicShell
2015-08-04 10:13 - 2014-04-15 15:18 - 00000000 ____D C:\Users\Roland\AppData\Roaming\Skype
2015-08-04 10:12 - 2014-04-08 06:15 - 00001086 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-04 10:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-08-04 09:40 - 2014-04-08 06:11 - 00000000 ____D C:\Users\Roland
2015-08-04 08:58 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-08-04 08:55 - 2014-04-08 06:18 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-310849921-343691772-3629321429-1001
2015-08-04 08:50 - 2014-04-08 07:28 - 00000000 ____D C:\Users\Roland\AppData\Local\Adobe
2015-08-04 08:49 - 2014-04-08 06:17 - 00003780 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{66C4A56C-D61C-4F99-86F3-EC8D6E84430E}
2015-08-04 08:47 - 2014-04-27 17:35 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-04 08:46 - 2014-08-03 12:32 - 00002072 _____ C:\Users\Public\Desktop\Wise Care 365.lnk
2015-08-04 08:46 - 2014-04-08 06:15 - 00001082 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-04 08:45 - 2014-08-03 12:33 - 00000434 _____ C:\Windows\Tasks\Wise Care 365.job
2015-08-04 08:45 - 2014-04-19 13:41 - 00000000 __RDO C:\Users\Roland\SkyDrive
2015-08-03 17:57 - 2014-04-18 14:23 - 00011448 _____ C:\Users\Roland\AppData\Roaming\wklnhst.dat
2015-08-03 16:07 - 2014-08-25 16:24 - 00000000 ____D C:\Program Files (x86)\LastPass
2015-08-03 12:00 - 2014-08-03 12:33 - 00000414 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2015-08-02 17:20 - 2014-01-23 08:24 - 00000000 ____D C:\Program Files (x86)\Dell Backup and Recovery
2015-08-02 16:59 - 2014-08-03 12:32 - 00000000 ____D C:\Users\Roland\AppData\Roaming\Wise Care 365
2015-08-02 16:58 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\registration
2015-08-02 16:57 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-02 11:38 - 2014-08-02 15:38 - 00000000 ____D C:\AdwCleaner
2015-08-02 11:32 - 2014-10-13 14:59 - 02204160 ___SH C:\Users\Roland\Desktop\Thumbs.db
2015-08-01 11:27 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-07-31 11:05 - 2014-04-12 03:19 - 00000000 ____D C:\Users\Roland\AppData\Local\CrashDumps
2015-07-29 17:12 - 2014-10-18 12:21 - 00001265 _____ C:\Users\Public\Desktop\Wise Memory Optimizer.lnk
2015-07-29 17:12 - 2014-10-18 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Memory Optimizer
2015-07-27 14:05 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-07-27 12:45 - 2014-01-23 07:58 - 04654578 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-27 12:45 - 2013-09-03 15:49 - 00812146 _____ C:\Windows\system32\perfh00C.dat
2015-07-27 12:45 - 2013-09-03 15:49 - 00159742 _____ C:\Windows\system32\perfc00C.dat
2015-07-27 12:45 - 2013-09-03 15:39 - 00755088 _____ C:\Windows\system32\perfh007.dat
2015-07-27 12:45 - 2013-09-03 15:39 - 00159238 _____ C:\Windows\system32\perfc007.dat
2015-07-27 12:45 - 2013-09-03 15:29 - 00794000 _____ C:\Windows\system32\perfh010.dat
2015-07-27 12:45 - 2013-09-03 15:29 - 00156420 _____ C:\Windows\system32\perfc010.dat
2015-07-27 12:45 - 2013-09-03 15:19 - 00798252 _____ C:\Windows\system32\perfh013.dat
2015-07-27 12:45 - 2013-09-03 15:19 - 00162330 _____ C:\Windows\system32\perfc013.dat
2015-07-27 10:55 - 2014-04-08 06:15 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-26 15:46 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-07-25 08:22 - 2015-03-16 14:39 - 00000000 ___RD C:\Users\Roland\OneDrive
2015-07-25 08:22 - 2015-03-16 14:38 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-310849921-343691772-3629321429-1001
2015-07-24 15:38 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-07-24 14:15 - 2014-01-23 08:23 - 00000000 ____D C:\ProgramData\McAfee
2015-07-24 14:15 - 2014-01-23 08:23 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-07-24 10:48 - 2015-07-01 20:15 - 00000000 ____D C:\Windows\System32\Tasks\McAfee
2015-07-24 10:48 - 2013-08-22 17:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2015-07-23 13:17 - 2014-10-13 11:59 - 00000000 ____D C:\Windows\Minidump
2015-07-19 10:33 - 2015-01-12 13:08 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-07-18 16:04 - 2014-04-08 07:33 - 00000000 ____D C:\Users\Roland\AppData\Local\Windows Live
2015-07-18 11:15 - 2014-04-08 06:15 - 00000000 ____D C:\Users\Roland\AppData\Local\Google
2015-07-16 11:15 - 2014-09-25 15:29 - 00000000 ____D C:\Windows\System32\Tasks\Games
2015-07-15 21:07 - 2014-04-08 06:15 - 00004058 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-15 21:07 - 2014-04-08 06:15 - 00003822 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 15:48 - 2014-08-30 11:06 - 00001024 ____H C:\AMTAG.BIN
2015-07-15 15:48 - 2014-07-17 15:06 - 00000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant Pro Edition 5.5
2015-07-14 16:55 - 2014-07-15 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-07-14 16:54 - 2014-07-02 11:47 - 00000000 ____D C:\ProgramData\LogiShrd
2015-07-14 16:54 - 2014-07-02 11:47 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2015-07-13 18:04 - 2015-03-05 16:42 - 00001089 _____ C:\Users\Roland\Desktop\Macrorit Disk Partition Wiper.lnk
2015-07-13 11:46 - 2014-07-15 16:25 - 00000000 ____D C:\ProgramData\CanonIJPLM
2015-07-13 10:06 - 2015-01-01 14:47 - 00000000 ____D C:\Program Files (x86)\WinUtilities
2015-07-12 13:00 - 2015-01-01 14:47 - 00000187 _____ C:\Windows\SysWOW64\_WKERNEL.SYL
2015-07-12 12:46 - 2015-01-01 14:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinUtilities
2015-07-11 10:49 - 2014-11-15 11:48 - 00000000 __SHD C:\Users\Roland\AppData\Local\EmieBrowserModeList
2015-07-11 10:49 - 2014-04-22 10:05 - 00000000 __SHD C:\Users\Roland\AppData\Local\EmieUserList
2015-07-11 10:49 - 2014-04-22 10:05 - 00000000 __SHD C:\Users\Roland\AppData\Local\EmieSiteList
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ___SD C:\Windows\system32\dsc
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\sppui
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\setup
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Com
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sppui
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\migwiz
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Com
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\MediaViewer
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\IME
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-07-10 16:48 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-07-10 16:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-07-10 16:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-07-10 16:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Sysprep
2015-07-10 16:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\oobe
2015-07-10 16:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Dism
2015-07-10 16:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-07-10 16:48 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\servicing
2015-07-10 16:43 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-07-10 16:43 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\InputMethod
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-10 16:41 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-10 13:54 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-07-10 13:21 - 2014-04-10 02:36 - 00000000 ____D C:\Windows\system32\MRT
2015-07-09 15:53 - 2014-01-23 08:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-07-08 16:47 - 2014-04-10 05:04 - 00000000 ____D C:\Users\Roland\AppData\Roaming\vlc
2015-07-08 16:46 - 2014-04-19 12:21 - 00001084 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-07-07 21:10 - 2015-02-15 13:36 - 00000000 ____D C:\Users\Roland\AppData\Roaming\eufsc
2015-07-07 15:36 - 2014-12-25 13:37 - 00000031 _____ C:\Windows\WebUpdateSvc4.INI
2015-07-07 12:22 - 2015-01-08 14:14 - 00000000 ____D C:\Program Files (x86)\SIW 2015 GOTD

==================== Files in the root of some directories =======

2014-05-07 13:41 - 2014-05-07 12:39 - 0044516 _____ () C:\Program Files (x86)\QuickTextPaste.zip
2014-10-20 14:36 - 2014-10-27 12:57 - 0001053 _____ () C:\Program Files (x86)\Readme.txt
2014-11-17 17:07 - 2014-11-19 15:33 - 94477320 _____ (Ashampoo GmbH & Co. KG ) C:\Program Files (x86)\Setup.exe
2014-10-20 14:18 - 2014-10-27 12:57 - 10333726 _____ () C:\Program Files (x86)\Setup.gcd
2014-08-25 16:25 - 2014-08-25 16:47 - 15000576 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2014-04-13 10:43 - 2014-04-13 10:43 - 0000000 _____ () C:\Users\Roland\AppData\Roaming\Stardockfences_debug_snapshot.dat
2014-04-18 14:23 - 2015-08-03 17:57 - 0011448 _____ () C:\Users\Roland\AppData\Roaming\wklnhst.dat
2014-05-19 13:45 - 2014-05-19 13:45 - 0000512 ___SH () C:\Users\Roland\AppData\Local\antisystemconfig.dat
2014-05-21 10:18 - 2014-07-28 10:40 - 0000852 _____ () C:\Users\Roland\AppData\Local\AXComControllerLog.txt
2014-04-23 10:12 - 2015-03-17 17:05 - 0006656 _____ () C:\Users\Roland\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-23 08:18 - 2014-01-23 08:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-05-19 13:45 - 2014-05-21 12:09 - 0018432 _____ () C:\ProgramData\dplistconfig.db
2014-05-19 13:45 - 2014-05-19 13:45 - 0004096 _____ () C:\ProgramData\dp_pwd_mgr.db

Files to move or delete:
====================
C:\Users\Roland\ZHPDiag3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-06 05:10

==================== End of log ============================

Publicité


Signaler le contenu de ce document

Publicité