~ ZHPDiag v2015.8.17.120 By Nicolas Coolman (2015/08/17)
~ Run by adel (Administrator) (2015/08/20 01:01:15)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: No network file
~ Mode: Scan
~ Report: C:\Users\adel\Desktop\ZHPDiag.txt
~ Report: C:\Users\adel\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
Windows 8.1 Enterprise, 64-bit (Build 9600)

---\\ Internet Browsers (2) - 0s
GCIE: Google Chrome v44.0.2403.155
MSIE: Internet Explorer v11.0.9600.17107

---\\ Windows Product Information (4) - 1s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Auto)
Windows Activation Technologies : OK

---\\ System protection software (2) - 0s
Symantec Endpoint Protection v12.1.4013.4013
Windows Defender W81 (Deactivate)

---\\ System optimization software (1) - 0s
CCleaner v4.13

---\\ Surveillance software (1) - 0s
Adobe Reader X

---\\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 16723.14 MB (92% free)
~ System Restore: Activé (Enable)
~ System drive C: has 75 GB free of 122 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: عادل
~ User Name: adel
~ Logged in as Administrator

---\\ Enumeration of the disk units (3) - 0s
~ Drive C: has 75 GB free of 122 GB (System)
~ Drive D: has 255 GB free of 309 GB
~ Drive E: has 558 GB free of 643 GB

---\\ State of the Windows Security Center (10) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Search Generic System Files (23) - 0s
[MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - مستكشف Windows.) () -- C:\Windows\Explorer.exe [2373784]
[MD5.6E0BDFBEEED65B017F2E4C2C910B0520] - (.Microsoft Corporation - Windows host process (Rundll32).) () -- C:\Windows\System32\rundll32.exe [52736]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - ‎‎تطبيق بدء تشغيل Windows.) () -- C:\Windows\System32\Wininit.exe [144384]
[MD5.65C36A29A131A3A5D64B29FAC4EF6DD6] - (.Microsoft Corporation - ملحقات الإنترنت لـ Win32.) () -- C:\Windows\System32\wininet.dll [2262016]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - تطبيق تسجيل دخول Windows.) () -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - مكتبة تراخيص البرامج.) () -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19456]
[MD5.7C7BE474915166B61B84C025F1F10157] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [134144]
[MD5.498288DD5CA42C2D36D125893E968C53] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [77312]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - i8042 Port Driver.) () -- C:\Windows\System32\drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [142848]
[MD5.0696F66E4D423793951A60562F794D14] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [282624]
[MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - NT File System Driver.) () -- C:\Windows\System32\drivers\ntfs.sys [2013016]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Parallel Port Driver.) () -- C:\Windows\System32\drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [107520]
[MD5.4BB9BC49DEE1A319EC58274A7BBED663] - (.Microsoft Corporation - Volume Shadow Copy Driver.) () -- C:\Windows\System32\drivers\volsnap.sys [310616]

---\\ Process running (35) - 1s
[MD5.1C7CC708AC4A02A3BE8915539780534A] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 335.2.) -- C:\Windows\system32\nvvsvc.exe [922968] [PID.364]
[MD5.CDA9313E34887A111B8309B55BCDCD82] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [411936] [PID.616]
[MD5.23FCC0ED96A71AB04328C02F0785DA89] - (.Acronis - Acronis Scheduler 2.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1263424] [PID.1764]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1788]
[MD5.8588B8F21CE15DBB96A63E5F352178C1] - (.Acronis - File Level CDP Manager Service.) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [3996664] [PID.1812]
[MD5.CB7A9D3C7B5A49B3904B9C415204533F] - (.Scarlet.Crush Productions - ScpService.) -- C:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe [388352] [PID.1932]
[MD5.5031F3E650D242EEECEB92EB9900FB93] - (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216] [PID.1992]
[MD5.DAE6C3099D291EED8922A65C29ABCF52] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520] [PID.2040]
[MD5.CBF7341E55A8348C7AB01A9870C7D948] - (.Intel Corporation - Intel® PROSet Monitoring Service.) -- C:\Windows\system32\IProsetMonitor.exe [195336] [PID.1332]
[MD5.5215D12B13FC2BC7717AA4884846D34F] - (.Copyright© 2011-2013 Intel Corporation - ISCT Agent Application.) -- C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120] [PID.1512]
[MD5.4EBEE69A8FE7DC85FD3C122821C617A0] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504] [PID.1564]
[MD5.D23A07D549243F5B77780BAA4FBF5BC3] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592] [PID.1424]
[MD5.18E1127C5341E2F037439033EE0D0D4B] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe [144368] [PID.2100]
[MD5.54FB3B0B29F76E839C648D2F5983A22C] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe [245576] [PID.2016]
[MD5.92D840650F95EB60659952AEECAFCE85] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe [305992] [PID.2896]
[MD5.512F8C6392948420A6EAA368BE1286EE] - (.Symantec Corporation - Symantec CMC Smc.) -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe [2377984] [PID.3960]
[MD5.20E83F4632E15A5E9E716FF2E8AC7FAE] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720] [PID.5068]
[MD5.52069AEB42D3D0F97CBCA1085EBF55E6] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432] [PID.840]
[MD5.3DE66F47365AA8CEB18B1EE272F4FEBA] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [390616] [PID.2404]
[MD5.D5996EC1A6715849022344D1CB4FA53D] - (.Acronis - TrueImage Sync Agent Service.) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [6847712] [PID.3648]
[MD5.CF74414BF4FE2F69D336AC05738217DC] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1202520] [PID.5116]
[MD5.1C7CC708AC4A02A3BE8915539780534A] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 335.2.) -- C:\Windows\system32\nvvsvc.exe [922968] [PID.992]
[MD5.EE4FB36AC2ADAF84DDF28D9B704D71D9] - (.NVIDIA Corporation - NVIDIA Network Stream Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [7546000] [PID.2168]
[MD5.E16832CBA3A4A64B85D2327C320F8EA0] - (.NVIDIA Corporation - NVIDIA Streamer User Agent.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe [21921936] [PID.3952]
[MD5.18E1127C5341E2F037439033EE0D0D4B] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe [144368] [PID.4484]
[MD5.D837FD1004DEF703D4AD32081915A5F6] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2447192] [PID.3568]
[MD5.8F82FFC6CD0F4C83F4565E1A40332CCD] - (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896] [PID.3708]
[MD5.781BAF1C6935A5D60C7945B34313F2DE] - (.Realtek Semiconductor - إدارة صوت Realtek HD.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136] [PID.4124]
[MD5.119D43DCD831AD90E78E8BF3DF75E53A] - (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [570152] [PID.4928]
[MD5.63DA8D81C46AE1C08DB45AD81E2AD541] - (.Intel Corporation - ISCT SysTray.) -- C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5545448] [PID.3436]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.4496]
[MD5.EF103848F8E303AEDA8BD85CDAC17937] - (.Acronis - Acronis True Image Monitor.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5306776] [PID.2668]
[MD5.4BD76EC239156BD2E458DEC69E20F6A8] - (.Acronis International GmbH - Acronis TIB Mounter Monitor.) -- C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [603904] [PID.4104]
[MD5.3D45AD2B246B90DBD3E6F213E7AEBF64] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592] [PID.4880]
[MD5.8BBBDE2F8710EA78AE249C508F96F498] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\adel\AppData\Roaming\ZHP\ZHPDiag3.exe [1902592] [PID.1004]

---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2) (42) - 0s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ap.teesoft.info/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://lb.analyticstats.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://rep.teesoft.info/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://accounts.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://b.networkanalytics.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients2.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://localhost:26143/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://mail.google.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com.ly/
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com.ly/
G2 - GCE: Preference [User Data\Default] [afbpdhiclgghnffhkinjikglgmolhpee] Torrent Search
G2 - GCE: Preference [User Data\Default] [amcphjlhljchhkpickdokdjfpckdilbd] SPEED TEST ADSL
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aomjjhallfgjeglblehebfpbcfeobpgk] 1Password: Password Manager and Secure Wallet
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [bigefpfhnfcobdlfbedofhhaibnlghod] MEGA
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [dhapiedbmffnpkahkcjdjpikmodjipmd] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ejidjjhkpiempkbhmpbfngldlkglhimk] __MSG_WEBSTORE_PRONGHORN_PRODUCT_NAME__
G2 - GCE: Preference [User Data\Default] [gbchcmhmhahfdphkhkmpfmihenigjmpp] __MSG_PRODUCT_NAME__
G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock
G2 - GCE: Preference [User Data\Default] [gpgjomejfimnbmobcocilppikhncegaj] Drive Notepad
G2 - GCE: Preference [User Data\Default] [hlhbmnfdcklajeaeikfinieljfegamko] __MSG_extension_name__
G2 - GCE: Preference [User Data\Default] [ihdkejbciahopmbagpnjmmkkdpfpaaak] WeatherBug (Legacy App)
G2 - GCE: Preference [User Data\Default] [ioekoebejdcmnlefjiknokhhafglcjdl] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [jghfknlgajlcihkhkhnlcoffhbohnlbg] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [kaebhgioafceeldhgjmendlfhbfjefmo] EagleGet Free Downloader
G2 - GCE: Preference [User Data\Default] [kcijdkkommbhnpohidhdpkhendgcpamf] __MSG_application_title__
G2 - GCE: Preference [User Data\Default] [kdkgihpbaofhkiliohfepioflkkbapao] __MSG_calc_name__
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call
G2 - GCE: Preference [User Data\Default] [llaegbflmcclmiejcomepalhjllojond] Virtual Quran - Arabic
G2 - GCE: Preference [User Data\Default] [lneaknkopdijkpnocmklfnjbeapigfbh] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [mihcahmgecmbnbcchbopgniflfhgnkff] __MSG_gmailcheck_name__
G2 - GCE: Preference [User Data\Default] [mmgagnmbebdebebbcleklifnobamjonh] AutoPager Chrome
G2 - GCE: Preference [User Data\Default] [mmngljdjkkpkpkgkbdgepfbcjomclban] Деревянный хром
G2 - GCE: Preference [User Data\Default] [molpbbfgiohpdmhnpadnonkfgahjfbem] Notes
G2 - GCE: Preference [User Data\Default] [njgpiocdhdmnglomggfjkkonjjfahnom] Norton Identity Safe
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pfpeapihoiogbcmdmnibeplnikfnhoge] Outlook.com
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) (17) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (23)

---\\ Auto loading programs from Registry and folders (O4) (13) - 0s
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
O4 - HKLM\..\Run: [ShadowPlay] . (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\Windows\System32\rundll32.exe
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - إدارة صوت Realtek HD.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] . (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
O4 - HKLM\..\Run: [XboxStat] . (.Microsoft Corporation - XBoxStat.exe.) -- C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
O4 - HKCU\..\Run: [RGSC] . (.Take-Two Interactive Software, Inc. - RGSCLauncher.) -- E:\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
O4 - HKLM\..\Wow6432Node\Run: [LiveUpdate 5] . (...) -- C:\Program Files (x86)\MSI\Live Update 5\BootStartLiveupdate.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [TrueImageMonitor.exe] . (.Acronis - Acronis True Image Monitor.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Wow6432Node\Run: [AcronisTibMounterMonitor] . (.Acronis International GmbH - Acronis TIB Mounter Monitor.) -- C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKUS\S-1-5-21-340261083-3965730930-1715080245-1001\..\Run: [RGSC] . (.Take-Two Interactive Software, Inc. - RGSCLauncher.) -- E:\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe

---\\ Lop.com/Domain Hijackers (O17) (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23) (19) - 1s
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) . (.Acronis - Acronis Scheduler 2.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @oem28.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Man (BcmBtRSupport) . (.Broadcom Corporation. - Bluetooth Radio Management Support.) - C:\Windows\system32\BtwRSupportService.exe
O23 - Service: SCP DS3 Service (Ds3Service) . (.Scarlet.Crush Productions - ScpService.) - C:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: خدمة Google Update (gupdate) (gupdate) . (.Google Inc. - مثبِّت Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) PROSet Monitoring Service (Intel(R) PROSet Monitoring Service) . (.Intel Corporation - Intel® PROSet Monitoring Service.) - C:\Windows\system32\IProsetMonitor.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) . (.Copyright© 2011-2013 Intel Corporation - ISCT Agent Application.) - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 335.2.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: Symantec Endpoint Protection (SepMasterService) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Acronis Sync Agent Service (syncagentsrv) . (.Acronis - TrueImage Sync Agent Service.) - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

---\\ Task Planned Automatically (O39) (8) - 3s
[MD5.03E07421C99D99D2DB8F4E5CCB890B23] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4524312]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [856] =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [860] =>.Google Inc.
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2770] =>.Piriform Ltd
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3596] =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3832] =>.Google Inc.

---\\ Software installed (O42) (83) - 3s
O42 - Logiciel: Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (0 - (.Western Digital Technologies.) [HKLM][64Bits] -- 4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: CPUID HWMonitor Pro 1.20 - (...) [HKLM][64Bits] -- CPUID HWMonitorPro_is1
O42 - Logiciel: HashTab 5.1.0.23 - (.Implbits Software.) [HKLM][64Bits] -- HashTab
O42 - Logiciel: Intel(R) Network Connections 18.5.54.0 - (.Intel.) [HKLM][64Bits] -- PROSetDX
O42 - Logiciel: Unlocker 1.9.2 - (.Cedrick Collomb.) [HKLM][64Bits] -- Unlocker
O42 - Logiciel: WinRAR 5.01 (64-بت) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Intel(R) Smart Connect Technology - (.Intel Corporation.) [HKLM][64Bits] -- {0A9F62B3-40A4-4AC1-9980-A398EC2C5DDC}
O42 - Logiciel: 7-Zip 9.32 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0932-000001000000}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140}
O42 - Logiciel: Intel(R) Network Connections 18.5.54.0 - (.Intel.) [HKLM][64Bits] -- {4B5B6BB3-DA04-4B56-AE17-DDBF3F446888}
O42 - Logiciel: VC_CRT_x64 - (.Intel Corporation.) [HKLM][64Bits] -- {54F2237F-018C-483B-8884-9FC0D88840C3}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Access MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Excel MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft PowerPoint MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Publisher MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Outlook MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Word MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft InfoPath MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft DCF MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft OneNote MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Groove MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-0401-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Lync MUI (Arabic) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-0401-1000-0000000FF1CE}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {93F692D4-0C4D-4EED-9BFE-657C1D5959FE}
O42 - Logiciel: NVIDIA برامج تشغيل ‎3D Vision 335.23 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision
O42 - Logiciel: NVIDIA برنامج تشغيل الرسومات 335.23 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA GeForce Experience 2.5.12.11 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience
O42 - Logiciel: NVIDIA برنامج تشغيل مراقب ‎3D Vision 335.21 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB
O42 - Logiciel: NVIDIA برنامج تشغيل صوت HD 1.3.30.1 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
O42 - Logiciel: Symantec Endpoint Protection - (.Symantec Corporation.) [HKLM][64Bits] -- {B53661DC-CD94-4B14-B15F-D9DDCFF72558}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {B5E06417-A4AC-4225-B36E-7E34C91616E7}
O42 - Logiciel: SES Driver - (.Western Digital.) [HKLM][64Bits] -- {D8CC254C-C671-4664-9A38-FA368D1E2C97}
O42 - Logiciel: Microsoft Xbox 360 Accessories 1.2 - (.Microsoft.) [HKLM][64Bits] -- {D9C50188-12D5-4D3E-8F00-682346C2AA5F}
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77}
O42 - Logiciel: Alan Wake - (...) [HKLM][64Bits] -- Alan Wake *REPACK* *MULTi10*_is1
O42 - Logiciel: Fast and Furious Showdown - (...) [HKLM][64Bits] -- Fast and Furious Showdown_is1
O42 - Logiciel: Fraps - (...) [HKLM][64Bits] -- Fraps
O42 - Logiciel: Google Chrome - (.Google Inc‎.‎.) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: K-Lite Codec Pack 10.4.3 Full - (...) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo
O42 - Logiciel: OpenAL - (...) [HKLM][64Bits] -- OpenAL
O42 - Logiciel: Pro Evolution Soccer 2015 - (...) [HKLM][64Bits] -- UHJvRXZvbHV0aW9uU29jY2VyMjAxNQ==_is1
O42 - Logiciel: UltraISO Premium V9.61 - (...) [HKLM][64Bits] -- UltraISO_is1
O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPFix_is1
O42 - Logiciel: AOMEI Partition Assistant Pro Edition 5.5 - (.AOMEI Technology Co., Ltd..) [HKLM][64Bits] -- {02F850ED-FD0E-4ED1-BE0B-5498165BF300}_is1
O42 - Logiciel: Rockstar Games Social Club - (.Rockstar Games.) [HKLM][64Bits] -- {08B3869E-D282-424C-9AFC-870E04A4BA14}
O42 - Logiciel: 極速快感:亡命天涯 - (.Electronic Arts.) [HKLM][64Bits] -- {0EDC9BA0-016E-406a-86DA-04FC1BE00C21}
O42 - Logiciel: Microsoft XNA Framework Redistributable 3.1 - (.Microsoft Corporation.) [HKLM][64Bits] -- {19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}
O42 - Logiciel: Java 7 Update 55 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217051FF}
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}
O42 - Logiciel: Need for Speed The Run version 1.0 - (.EA.) [HKLM][64Bits] -- {4B7IL77L-LKS1-75B1-NFSRUN-18CD6E6334R1}_is1
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games.) [HKLM][64Bits] -- {579BA58C-F33D-4970-9953-B94B43768AC3}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Asmedia ASM106x SATA Host Controller Driver - (.Asmedia Technology.) [HKLM][64Bits] -- {61942EF5-2CD8-47D4-869C-2E9A8BB085F1}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Toolkit Documentation - (.Microsoft.) [HKLM][64Bits] -- {6C870B12-6FF2-68FC-8C3B-DD177BBF3F92}
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Windows Deployment Customizations - (.Microsoft.) [HKLM][64Bits] -- {6EA3CA0C-A025-FD48-D9C2-6191B9491E43}
O42 - Logiciel: Skype™ 6.14 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {8B922CF8-8A6C-41CE-A858-F1755D7F5D29}
O42 - Logiciel: معرض الصور - (.Microsoft Corporation.) [HKLM][64Bits] -- {8CDC81A6-1453-42CA-AA6F-909EF7363F21}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: Windows Assessment and Deployment Kit for Windows 8.1 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9277b0c4-2ca8-431b-b4e2-98daf4005ec0}
O42 - Logiciel: Acronis True Image 2015 - (.Acronis.) [HKLM][64Bits] -- {9C48ED33-4A66-4299-B274-BD8110AB6EAA}
O42 - Logiciel: Acronis True Image 2015 - (.Acronis.) [HKLM][64Bits] -- {9C48ED33-4A66-4299-B274-BD8110AB6EAA}Visible
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Adobe Reader X (10.1.7) - Arabic - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1025-7B44-AA1000000001}
O42 - Logiciel: Acronis Disk Director 12 - (.Acronis.) [HKLM][64Bits] -- {AE372858-B1BD-49EF-8308-648322846008}
O42 - Logiciel: Kits Configuration Installer - (.Microsoft.) [HKLM][64Bits] -- {B74E65FD-CC47-41C5-4B89-791A3F61942D}
O42 - Logiciel: Battlefield 4 - (.SACC - TDL.) [HKLM][64Bits] -- {D0B75E7B-C384-4AA0-B2FC-335723762E35}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Medal of Honor Warfighter - (.SACC - TDL.) [HKLM][64Bits] -- {E423B731-D6AF-493E-BB9B-63C07A0A2710}
O42 - Logiciel: Live Update 5 - (.MSI.) [HKLM][64Bits] -- {E8BAA541-D161-4C9B-85BF-01F05A56BD7F}}_is1
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {F2508213-9989-4E85-A078-72BE483917EF}
O42 - Logiciel: EagleGet version 1.1.8.3 - (.EagleGet.) [HKLM][64Bits] -- {F6D8142A-B30B-454B-9EE0-08A7B997DFE4}_is1
O42 - Logiciel: Windows System Image Manager on amd64 - (.Microsoft.) [HKLM][64Bits] -- {F79B8F11-E2CE-547F-C0B9-9A0C2EC0D51D}
O42 - Logiciel: Windows Deployment Tools - (.Microsoft.) [HKLM][64Bits] -- {FEA31583-30A7-0951-718C-AF75DCB003B1}
O42 - Logiciel: TUN MAKERS PATCH 0.1 - (...) [HKCU][64Bits] -- TUN MAKERS PATCH 0.1
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent

---\\ HKCU & HKLM Software Keys (79) - 3s
HKLM\SOFTWARE\Wow6432Node\Acronis
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\EA Games
HKLM\SOFTWARE\Wow6432Node\EagleGet
HKLM\SOFTWARE\Wow6432Node\EasyBoot Systems
HKLM\SOFTWARE\Wow6432Node\Fraps
HKLM\SOFTWARE\Wow6432Node\GNU
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\KLCodecPack
HKLM\SOFTWARE\Wow6432Node\LAV
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\MSI
HKLM\SOFTWARE\Wow6432Node\MT Solution
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OpenAL
HKLM\SOFTWARE\Wow6432Node\PowerPivot
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Rockstar Games
HKLM\SOFTWARE\Wow6432Node\SACC - TDL
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Stardock
HKLM\SOFTWARE\Wow6432Node\Symantec
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\Acronis
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\EagleGet
HKCU\SOFTWARE\EasyBoot Systems
HKCU\SOFTWARE\Fraps3
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\Geek Uninstaller
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HashTab
HKCU\SOFTWARE\Icaros
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\InstallBuilders
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\madshi
HKCU\SOFTWARE\MediaChance
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\MiniTool Solution Ltd.
HKCU\SOFTWARE\MOHWSplash
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MPC-HC
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Partition Assistant
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Stardock
HKCU\SOFTWARE\Symantec
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contents of the Common Files folders (O43) (166) - 3s
O43 - CFD: 2015/08/14 10:44:10 - [] D -- C:\Program Files (x86)\Acronis
O43 - CFD: 2014/04/13 13:47:09 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2015/08/15 13:47:04 - [0] D -- C:\Program Files (x86)\AGEIA Technologies
O43 - CFD: 2015/08/13 20:37:05 - [] D -- C:\Program Files (x86)\AOMEI Partition Assistant Pro Edition 5.5
O43 - CFD: 2014/04/13 12:05:38 - [] D -- C:\Program Files (x86)\ASM106xSATA
O43 - CFD: 2015/08/14 08:42:44 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2014/04/26 03:05:32 - [] D -- C:\Program Files (x86)\EagleGet
O43 - CFD: 2015/08/13 21:17:42 - [0] D -- C:\Program Files (x86)\EaseUS
O43 - CFD: 2014/04/13 12:43:15 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/08/18 02:57:28 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2014/04/13 12:03:26 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2014/04/13 09:56:07 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2014/04/17 18:39:08 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2014/04/13 13:45:06 - [] D -- C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 2014/04/13 02:54:13 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 2015/08/15 13:46:56 - [] D -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
O43 - CFD: 2014/04/13 02:54:11 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2014/04/13 12:37:17 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2014/04/13 02:55:29 - [] D -- C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 2014/04/13 13:52:10 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2015/08/15 13:45:19 - [] D -- C:\Program Files (x86)\Microsoft XNA
O43 - CFD: 2014/04/13 02:55:28 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2014/04/13 02:55:15 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2014/04/13 12:26:16 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2014/04/13 12:13:52 - [] D -- C:\Program Files (x86)\MSI
O43 - CFD: 2014/04/13 04:27:31 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 2015/08/15 13:47:00 - [] D -- C:\Program Files (x86)\OpenAL
O43 - CFD: 2014/04/13 11:53:52 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2014/04/13 12:26:16 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2014/05/17 12:12:13 - [] D -- C:\Program Files (x86)\RocketDock
O43 - CFD: 2015/08/17 01:38:54 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2014/04/13 10:01:43 - [] D -- C:\Program Files (x86)\Symantec
O43 - CFD: 2015/08/13 21:16:14 - [0] D -- C:\Program Files (x86)\TeamViewer
O43 - CFD: 2014/04/13 11:54:16 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2014/04/13 02:49:13 - [] D -- C:\Program Files (x86)\UltraISO
O43 - CFD: 2014/05/15 13:07:24 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2014/05/14 20:36:31 - [] D -- C:\Program Files (x86)\Windows Kits
O43 - CFD: 2014/04/13 13:52:09 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2013/09/30 05:51:39 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2014/04/13 09:56:00 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2014/04/13 09:56:00 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2013/09/30 05:51:39 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2014/04/13 09:56:00 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2013/08/22 17:36:30 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2015/08/19 16:17:00 - [] D -- C:\Program Files (x86)\ZHPFix
O43 - CFD: 2014/04/13 13:49:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 2013/08/22 17:36:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2013/09/30 05:56:17 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/14 10:44:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
O43 - CFD: 2014/04/13 09:56:06 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/08/13 20:34:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Pro Edition 5.5
O43 - CFD: 2014/04/13 12:15:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/08/14 22:03:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
O43 - CFD: 2014/04/26 03:05:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EagleGet
O43 - CFD: 2015/08/16 02:11:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
O43 - CFD: 2014/04/13 12:43:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2014/04/13 12:08:11 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 2014/04/17 18:39:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2014/04/13 13:45:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/15 13:46:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
O43 - CFD: 2014/05/15 20:50:44 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2014/04/13 12:37:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2015/08/14 19:58:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
O43 - CFD: 2014/04/13 12:13:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
O43 - CFD: 2015/08/14 22:19:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed The Run
O43 - CFD: 2014/04/13 04:27:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 2014/05/01 09:05:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Object Desktop
O43 - CFD: 2015/08/14 21:00:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
O43 - CFD: 2014/04/14 00:57:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2014/04/13 12:00:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2014/04/13 10:03:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Symantec Endpoint Protection
O43 - CFD: 2014/04/13 09:56:06 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2013/09/30 05:56:15 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2014/04/13 02:49:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
O43 - CFD: 2014/05/14 20:36:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
O43 - CFD: 2014/04/13 03:33:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/08/19 16:16:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
O43 - CFD: 2015/08/14 14:36:07 - [] D -- C:\ProgramData\Acronis
O43 - CFD: 2014/04/14 00:45:21 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2014/04/13 03:44:24 - [] D -- C:\ProgramData\EagleGet
O43 - CFD: 2014/04/13 12:08:10 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2015/08/15 03:29:05 - [] D -- C:\ProgramData\KONAMI
O43 - CFD: 2015/08/15 13:46:48 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2014/05/15 20:50:36 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/08/19 16:45:11 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 2015/08/17 01:00:25 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2014/04/17 18:39:12 - [0] D -- C:\ProgramData\Oracle
O43 - CFD: 2014/05/14 20:36:30 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2014/04/13 02:55:23 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2014/04/13 10:01:48 - [] D -- C:\ProgramData\regid.1992-12.com.symantec
O43 - CFD: 2014/04/14 00:57:15 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2015/08/15 03:29:03 - [] D -- C:\ProgramData\Steam
O43 - CFD: 2014/04/13 12:33:14 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2014/10/19 19:04:56 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/08/14 10:44:37 - [] D -- C:\Program Files (x86)\Common Files\Acronis
O43 - CFD: 2014/04/13 13:47:10 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2014/04/26 03:05:31 - [] D -- C:\Program Files (x86)\Common Files\EagleGet
O43 - CFD: 2014/04/13 02:49:13 - [] D -- C:\Program Files (x86)\Common Files\EZB Systems
O43 - CFD: 2014/04/13 11:53:48 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2014/04/13 12:11:35 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 2014/04/13 12:33:13 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2015/08/15 13:45:19 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2014/04/13 12:03:02 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2014/04/14 00:57:12 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2014/04/13 10:04:17 - [] D -- C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 2013/09/30 05:51:39 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2014/04/13 13:50:05 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2015/08/14 10:48:34 - [] D -- C:\Users\adel\AppData\Roaming\Acronis
O43 - CFD: 2015/08/16 02:28:56 - [] D -- C:\Users\adel\AppData\Roaming\Activision
O43 - CFD: 2014/04/13 13:47:24 - [] D -- C:\Users\adel\AppData\Roaming\Adobe
O43 - CFD: 2014/04/13 03:44:09 - [] D -- C:\Users\adel\AppData\Roaming\EagleGet
O43 - CFD: 2014/05/01 09:05:34 - [] D -- C:\Users\adel\AppData\Roaming\Geek Uninstaller
O43 - CFD: 2014/04/30 07:20:23 - [] D -- C:\Users\adel\AppData\Roaming\Identities
O43 - CFD: 2014/04/13 12:08:22 - [] D -- C:\Users\adel\AppData\Roaming\Intel Corporation
O43 - CFD: 2014/04/13 10:03:03 - [] D -- C:\Users\adel\AppData\Roaming\Macromedia
O43 - CFD: 2015/08/19 16:49:56 - [] SD -- C:\Users\adel\AppData\Roaming\Microsoft
O43 - CFD: 2014/04/13 12:33:41 - [] D -- C:\Users\adel\AppData\Roaming\Oracle
O43 - CFD: 2014/05/14 20:10:08 - [] D -- C:\Users\adel\AppData\Roaming\Phoebetria
O43 - CFD: 2015/08/13 21:18:32 - [] D -- C:\Users\adel\AppData\Roaming\Skype
O43 - CFD: 2015/08/13 22:08:19 - [] D -- C:\Users\adel\AppData\Roaming\uTorrent
O43 - CFD: 2014/04/13 03:34:29 - [] D -- C:\Users\adel\AppData\Roaming\WinRAR
O43 - CFD: 2015/08/20 01:01:19 - [] D -- C:\Users\adel\AppData\Roaming\ZHP
O43 - CFD: 2014/04/13 13:47:24 - [] D -- C:\Users\adel\AppData\Local\Adobe
O43 - CFD: 2014/04/13 12:37:17 - [] D -- C:\Users\adel\AppData\Local\Apps
O43 - CFD: 2015/08/18 20:01:08 - [] D -- C:\Users\adel\AppData\Local\CrashDumps
O43 - CFD: 2014/04/13 12:37:30 - [0] D -- C:\Users\adel\AppData\Local\Deployment
O43 - CFD: 2014/05/18 05:55:00 - [0] D -- C:\Users\adel\AppData\Local\Diagnostics
O43 - CFD: 2014/04/13 10:03:45 - [] SHD -- C:\Users\adel\AppData\Local\EmieSiteList
O43 - CFD: 2014/04/13 10:03:45 - [] SHD -- C:\Users\adel\AppData\Local\EmieUserList
O43 - CFD: 2014/04/13 12:43:21 - [] D -- C:\Users\adel\AppData\Local\Google
O43 - CFD: 2014/04/23 02:38:31 - [] D -- C:\Users\adel\AppData\Local\Intel_Corporation
O43 - CFD: 2014/04/26 03:19:55 - [] D -- C:\Users\adel\AppData\Local\MegaDownloader
O43 - CFD: 2015/08/15 13:46:48 - [] D -- C:\Users\adel\AppData\Local\Microsoft
O43 - CFD: 2014/04/13 02:54:11 - [0] D -- C:\Users\adel\AppData\Local\Microsoft Help
O43 - CFD: 2015/08/14 14:09:46 - [0] DC -- C:\Users\adel\AppData\Local\MigWiz
O43 - CFD: 2014/04/13 02:43:39 - [] D -- C:\Users\adel\AppData\Local\NVIDIA
O43 - CFD: 2014/04/13 03:47:40 - [] D -- C:\Users\adel\AppData\Local\NVIDIA Corporation
O43 - CFD: 2014/04/13 00:42:44 - [] D -- C:\Users\adel\AppData\Local\Packages
O43 - CFD: 2014/04/13 00:42:42 - [0] D -- C:\Users\adel\AppData\Local\PackageStaging
O43 - CFD: 2014/04/13 02:49:05 - [] D -- C:\Users\adel\AppData\Local\Programs
O43 - CFD: 2015/08/14 19:42:09 - [] D -- C:\Users\adel\AppData\Local\PunkBuster
O43 - CFD: 2015/08/14 21:05:25 - [] D -- C:\Users\adel\AppData\Local\Rockstar Games
O43 - CFD: 2015/08/15 13:47:39 - [] D -- C:\Users\adel\AppData\Local\SKIDROW
O43 - CFD: 2014/04/14 00:57:26 - [] D -- C:\Users\adel\AppData\Local\Skype
O43 - CFD: 2014/04/30 07:16:37 - [] D -- C:\Users\adel\AppData\Local\Stardock
O43 - CFD: 2014/04/13 10:03:32 - [] D -- C:\Users\adel\AppData\Local\Symantec
O43 - CFD: 2015/08/20 01:00:45 - [] D -- C:\Users\adel\AppData\Local\Temp
O43 - CFD: 2015/08/14 16:41:57 - [] D -- C:\Users\adel\AppData\Local\VirtualStore
O43 - CFD: 2014/04/13 13:52:48 - [] D -- C:\Users\adel\AppData\Local\Windows Live
O43 - CFD: 2013/08/22 17:36:32 - [] RD -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2013/08/22 17:36:32 - [] RD -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2014/05/15 22:02:47 - [] RD -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/08/15 13:18:07 - [] D -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KAPITALSIN
O43 - CFD: 2013/08/22 17:36:32 - [] D -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/05/15 22:02:47 - [] RD -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2013/08/22 17:36:32 - [] RD -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/05/18 04:59:19 - [] D -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
O43 - CFD: 2014/04/13 03:33:50 - [] D -- C:\Users\adel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ System Drivers List (SDL) (O58) (64) - 1s
O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896]
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176]
O58 - SDL:2013/08/22 14:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200]
O58 - SDL:2013/08/22 14:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424]
O58 - SDL:2013/08/22 14:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952]
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016]
O58 - SDL:2014/01/27 17:30:36 A . (.Asmedia Technology - Asmedia 106x SATA Host Controller Driver.) -- C:\Windows\System32\drivers\asstor64.sys [84816]
O58 - SDL:2013/09/04 18:12:38 A . (.Broadcom Corporation. - Broadcom Bluetooth Firmware Download Filter.) -- C:\Windows\System32\drivers\bcbtums.sys [170712]
O58 - SDL:2013/08/13 01:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624]
O58 - SDL:2013/09/04 18:12:52 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter for Windo.) -- C:\Windows\System32\drivers\btwampfl.sys [166104]
O58 - SDL:2013/08/22 14:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296]
O58 - SDL:2013/06/21 05:59:02 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\Windows\System32\drivers\e1c64x64.sys [469264]
O58 - SDL:2013/06/18 16:45:26 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\Windows\System32\drivers\e1i63x64.sys [460288]
O58 - SDL:2013/08/22 14:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024]
O58 - SDL:2015/08/14 10:44:39 A . (.Acronis International GmbH - File tracker minifilter driver.) -- C:\Windows\System32\drivers\file_tracker.sys [296736]
O58 - SDL:2015/08/14 10:44:29 A . (.Acronis International GmbH - Acronis Storage Filter Management Driver.) -- C:\Windows\System32\drivers\fltsrv.sys [134432]
O58 - SDL:2012/07/17 18:12:08 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [62784]
O58 - SDL:2013/08/22 14:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352]
O58 - SDL:2013/07/30 20:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568]
O58 - SDL:2013/07/25 21:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320]
O58 - SDL:2013/07/11 22:01:42 A . (.Intel Corporation - NDIS 6.30 Advanced Networking Services..) -- C:\Windows\System32\drivers\iANSW60e.sys [153400]
O58 - SDL:2013/08/07 14:23:46 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStorA.sys [644968]
O58 - SDL:2013/08/10 02:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248]
O58 - SDL:2013/08/22 14:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000]
O58 - SDL:2013/08/01 17:01:32 A . (.Copyright (C) 2011 - 2013 Intel Corporation - Intel Keyboard Class Upper Filter Driver.) -- C:\Windows\System32\drivers\ikbevent.sys [21408]
O58 - SDL:2013/08/01 17:01:34 A . (.Copyright (C) 2011 - 2013 Intel Corporation - Intel Mouse Class Upper Filter Driver.) -- C:\Windows\System32\drivers\imsevent.sys [21920]
O58 - SDL:2013/08/01 17:01:32 A . (...) -- C:\Windows\System32\drivers\INETMON.sys [29088]
O58 - SDL:2013/07/03 00:17:02 A . (.Intel Corporation - Intel(R) Network Adapter Diagnostic Driver.) -- C:\Windows\System32\drivers\iqvw64e.sys [33616]
O58 - SDL:2013/08/01 17:01:34 A . (.Copyright (C) 2011-2012 - Intel(R) Smart Connect Technology Device Dr.) -- C:\Windows\System32\drivers\ISCTD64.sys [46568]
O58 - SDL:2009/04/29 16:28:30 A . (.Windows (R) Codename Longhorn DDK provider - KMWDFilter Driver from UASSOFT.COM.) -- C:\Windows\System32\drivers\KMWDFILTER.sys [30208]
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536]
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784]
O58 - SDL:2009/11/18 07:12:00 A . (.Creative Technology Ltd. - Creative Audio Driver.) -- C:\Windows\System32\drivers\MBfilt64.sys [32344]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672]
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840]
O58 - SDL:2013/08/22 14:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840]
O58 - SDL:2013/11/28 15:38:18 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\drivers\nvhda64v.sys [197408]
O58 - SDL:2014/03/04 16:35:23 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [12708128]
O58 - SDL:2013/08/22 14:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368]
O58 - SDL:2013/08/22 14:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288]
O58 - SDL:2015/07/03 06:28:26 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\System32\drivers\nvvad64v.sys [47976]
O58 - SDL:2013/12/10 20:20:44 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [3771352]
O58 - SDL:2013/05/05 17:32:48 A . (.Scarlet.Crush Productions - Scp Virtual Bus Driver.) -- C:\Windows\System32\drivers\ScpVBus.sys [39168]
O58 - SDL:2013/08/22 17:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040]
O58 - SDL:2013/08/22 14:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896]
O58 - SDL:2013/08/22 14:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760]
O58 - SDL:2015/08/14 10:44:30 A . (.Acronis International GmbH - Acronis Snapshot API.) -- C:\Windows\System32\drivers\snapman.sys [304416]
O58 - SDL:2013/08/22 14:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072]
O58 - SDL:2014/04/13 10:03:02 A . (.Symantec Corporation - Symantec Event Library.) -- C:\Windows\System32\drivers\SYMEVENT64x86.SYS [177752]
O58 - SDL:2014/04/13 10:01:59 A . (.Symantec Corporation - Symantec CMC Firewall SysPlant.) -- C:\Windows\System32\drivers\SysPlant.sys [155352]
O58 - SDL:2013/09/17 03:20:12 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverx64.sys [99288]
O58 - SDL:2013/10/21 02:39:37 A . (.Symantec Corporation - Symantec CMC Firewall Teefer3.) -- C:\Windows\System32\drivers\Teefer.sys [92456]
O58 - SDL:2015/08/14 10:44:32 A . (.Acronis International GmbH - Acronis Backup Archive Explorer.) -- C:\Windows\System32\drivers\tib.sys [1328928]
O58 - SDL:2015/08/14 10:44:33 A . (.Acronis International GmbH - Acronis TIB Mounter Driver.) -- C:\Windows\System32\drivers\tib_mounter.sys [234784]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800]
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504]
O58 - SDL:2011/02/16 17:53:00 A . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\Windows\System32\drivers\wdcsam64.sys [14464]
O58 - SDL:2014/04/13 10:02:00 A . (.Symantec Corporation - Symantec Network Access Control Protocol Dr.) -- C:\Windows\System32\drivers\WGX64.SYS [44448]
O58 - SDL:2013/11/29 10:31:28 A . (...) -- C:\Windows\System32\ampa.sys [17008]
O58 - SDL:2012/08/20 16:48:40 N . (...) -- C:\Windows\System32\pwdrvio.sys [19032]
O58 - SDL:2012/08/20 16:48:40 N . (...) -- C:\Windows\System32\pwdspio.sys [12384]

---\\ Last modified or created user files (O61) (15) - 1s
O61 - LFC: 2015/08/16 02:11:11 A . (.Beepa Pty Ltd.) -- C:\Users\adel\Downloads\setup.exe [2326976]
O61 - LFC: 2015/08/15 03:42:01 A . (..) -- C:\Users\adel\Documents\KONAMI\Pro Evolution Soccer 2015\save\SYSTEM.bin [136577]
O61 - LFC: 2015/08/16 02:30:23 A . (..) -- C:\Users\adel\AppData\Roaming\Activision\Fast & Furious™ - Showdown\save.bin [10112]
O61 - LFC: 2015/08/17 13:00:04 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\UMDShim\nvcoproc.bin [5147024]
O61 - LFC: 2015/08/19 04:11:52 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\00007ca9\DAO.19875341.exe [6035912]
O61 - LFC: 2015/08/18 02:28:40 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\00007c7b\CoProc update.19870099.exe [516648]
O61 - LFC: 2015/08/18 04:10:13 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\00007bb8\vops-battlefield_4.19826035.exe [5737560]
O61 - LFC: 2015/08/14 19:41:53 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\00007926\vops-medal_of_honor_warfighter.19704423.exe [6637176]
O61 - LFC: 2015/08/18 02:55:28 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\000074a7\vops-pro_evolution_soccer_2015.19506266.exe [1874848]
O61 - LFC: 2015/08/18 02:57:31 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\00007483\vops-grand_theft_auto_iv.19506266.exe [4063680]
O61 - LFC: 2015/08/18 02:53:20 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\00007222\streaming-assets-grand_theft_auto_iv.19413971.exe [398040]
O61 - LFC: 2015/08/18 04:09:23 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\000071e0\streaming-assets-battlefield_4.19413971.exe [484256]
O61 - LFC: 2015/08/14 19:40:25 A . (..) -- C:\Users\adel\AppData\Local\NVIDIA\NvBackend\Packages\0000716c\streaming-assets-medal_of_honor_warfighter.19410377.exe [498008]
O61 - LFC: 2015/08/14 19:39:07 A . (..) -- C:\Users\adel\AppData\Local\Microsoft\Windows\INetCache\Virtualized\C\ProgramData\NVIDIA Corporation\Drs\nvdrssel.bin [1]
O61 - LFC: 2015/08/20 00:55:20 A . (..) -- C:\Users\adel\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]

---\\ File Associations Shell Spawning (O67) (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Start Menu Internet (SMI) (O68) (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - ‎‎الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - ‎‎الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - ‎‎الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\Windows\System32\ie4uinit.exe

---\\ Search Browser Infection (SBI) (O69) (1) - 0s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Search Svchost Services (SSS) (O83) (36) - 0s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Application Experience Service.) -- C:\Windows\System32\aelupsvc.dll [208896]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - خدمة نشر شهادة البطاقة الذكية لـ Microsoft.) -- C:\Windows\System32\certprop.dll [155136]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - خدمة نشر شهادة البطاقة الذكية لـ Microsoft.) -- C:\Windows\System32\certprop.dll [155136]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\system32\srvsvc.dll [323072]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - عميل نهج المجموعة.) -- C:\Windows\System32\gpsvc.dll [1308160]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\ikeext.dll [1063424]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [903168]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - مكتبة الارتباط الديناميكي الخاصة بخدمة تسجي.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [109568]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\system32\iscsiexe.dll [150528]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [107008]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - خدمة جدولة المهام.) -- C:\Windows\system32\schedsvc.dll [1214976]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [220672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Multimedia Class Scheduler Service.) -- C:\Windows\system32\mmcss.dll [70656]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\Windows\System32\browser.dll [134144]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [220160]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [324096]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - تقارير المشاكل وحلولها.) -- C:\Windows\System32\wercplsupport.dll [81408]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\Windows\system32\kmsvc.dll [97792]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [339456]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Windows Location Framework Service.) -- C:\Windows\System32\GeofenceMonitorService.dll [491520]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\Windows\system32\wlidsvc.dll [1576960]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\system32\themeservice.dll [50688]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\Windows\System32\DeviceSetupManager.dll [201728]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\Windows\System32\ncasvc.dll [164352]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [101376]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [534528]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [223744]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\sens.dll [71680]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [433664]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [306688]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - عامل Windows Update.) -- C:\Windows\system32\wuaueng.dll [3464192]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [1017856]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - مكتبة الارتباط الديناميكي لخدمات Windows Sh.) -- C:\Windows\System32\shsvcs.dll [629760]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - خدمة تثبت البرامج.) -- C:\Windows\System32\appmgmts.dll [183296]
O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [90464]

---\\ Firewall Active Exception List (FirewallRules) (O87) (2) - 1s
O87 - FAEL: "{1C05FA1B-FB8C-4BA3-9E20-02BEC0130109}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\adel\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{C7AC5B96-061C-4337-834C-E62620ADDED4}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\adel\AppData\Roaming\uTorrent\uTorrent.exe

---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped) (23) - 11s
SR - Auto [2014/08/14 11:32:04] [ 1263424] Acronis Scheduler2 Service (AcrSch2Svc) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
SR - Auto [2013/05/28 18:20:22] [ 65640] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - Auto [2013/09/04 18:12:54] [ 2252504] @oem28.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Man (BcmBtRSupport) . (.Broadcom Corporation..) - C:\Windows\system32\BtwRSupportService.exe
SR - Auto [2013/05/05 17:32:58] [ 388352] SCP DS3 Service (Ds3Service) . (.Scarlet.Crush Productions.) - C:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe
SR - Auto [2015/07/24 06:22:13] [ 1155216] NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
SS - Auto [2014/04/13 12:37:30] [ 116648] خدمة Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - Demand [2014/04/13 12:37:30] [ 116648] خدمة Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - Auto [2013/08/07 14:24:00] [ 15720] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - Auto [2013/08/27 14:32:14] [ 747520] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SS - Demand [2013/08/27 14:32:30] [ 828376] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
SR - Auto [2013/07/08 21:30:24] [ 195336] Intel(R) PROSet Monitoring Service (Intel(R) PROSet Monitoring Service) . (.Intel Corporation.) - C:\Windows\system32\IProsetMonitor.exe
SR - Auto [2013/08/01 17:31:10] [ 198120] Intel(R) Smart Connect Technology Agent (ISCTAgent) . (.Copyright© 2011-2013 Intel Corporation.) - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
SR - Auto [2013/09/17 03:20:10] [ 169432] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - Auto [2013/09/17 03:20:16] [ 390616] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - Auto [2015/07/24 06:22:13] [ 1871504] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
SR - Auto [2015/07/24 06:22:11] [ 5544592] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
SR - Auto [2014/03/04 15:05:58] [ 922968] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - Auto [2013/10/21 02:37:54] [ 144368] Symantec Endpoint Protection (SepMasterService) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ccSvcHst.exe
SS - Auto [2013/10/23 08:15:08] [ 172192] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - Demand [2013/10/21 03:18:21] [ 2377984] Symantec Management Client (SmcService) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe
SS - Demand [2013/10/21 03:18:10] [ 334736] Symantec Network Access Control (SNAC) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\snac64.exe
SR - Auto [2014/03/04 13:32:56] [ 411936] NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
SR - Auto [2014/09/13 04:31:12] [ 6847712] Acronis Sync Agent Service (syncagentsrv) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

---\\ Additional Scan (O88) (1) - 0s
~ No malicious or unnecessary items found.

---\\ Summary of the elements found on your workstation (1) - 0s
~ No malicious or unnecessary items found.

~ End of the scan, 27055 items in 30 seconds (720)(0)()