~ ZHPDiag v2015.9.7.137 By Nicolas Coolman (2015/09/7)
~ Run by TCC-HAIL (Administrator) (2015/09/11 20:47:39)
~ Web: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: No network file
~ Mode: Scan
~ Report: C:\Users\TCC-HAIL\Desktop\ZHPDiag.txt
~ Report: C:\Users\TCC-HAIL\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ System startup: Normal (Normal boot)
Windows 8 Single Language, 64-bit (Build 9200)

---\\ Internet Browsers (4) - 0s
GCIE: Google Chrome v44.0.2403.125
MFIE: Mozilla Firefox 25.0 (x86 en-US) v25.0
OPIE: Opera 11.11.2109 v11.11.2109
MSIE: Internet Explorer v10.0.9200.16384

---\\ Windows Product Information (3) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ System protection software (2) - 4s
Malwarebytes Anti-Malware version 2.1.8.1057
Windows Defender W8 (Deactivate)

---\\ System protection software (Superfluous) (1) - 5s
SUPERAntiSpyware v6.0.1170

---\\ System optimization software (2) - 5s
CCleaner v3.24
RegCure Pro v3.1.7.0

---\\ Surveillance software (2) - 5s
Adobe Flash Player 11 Plugin
Adobe Reader X

---\\ Sharing software PeerToPeer (1) - 6s
µTorrent v1.8.5

---\\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4047.092 MB (43% free)
~ System Restore: Activé (Enable)
~ System drive C: has 8 GB free of 76 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: TCC
~ User Name: TCC-HAIL
~ Logged in as Administrator

---\\ Enumeration of the disk units (2) - 0s
~ Drive C: has 8 GB free of 76 GB (System)
~ Drive D: has 118 GB free of 382 GB

---\\ State of the Windows Security Center (10) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Search Generic System Files (24) - 2s
[MD5.928791755FDDEA721B053535EF84FA17] - (.Microsoft Corporation - Windows Explorer.) () -- C:\windows\Explorer.exe [2380440] ©
[MD5.3A6209AC494296C24C2065CB4392B5F4] - (.Microsoft Corporation - Windows host process (Rundll32).) () -- C:\windows\System32\rundll32.exe [51712] ©
[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Windows Start-Up Application.) () -- C:\windows\System32\Wininit.exe [132608] ©
[MD5.3DA7E6053DB9BE3EADC70CE20B1FB92B] - (.Microsoft Corporation - Internet Extensions for Win32.) () -- C:\windows\System32\wininet.dll [2246656] ©
[MD5.93AB226C07A9789B2EC7B41F73602F76] - (.Microsoft Corporation - Windows Logon Application.) () -- C:\windows\System32\Winlogon.exe [516608] ©
[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Software Licensing Library.) () -- C:\windows\System32\sppcomapi.dll [273408] ©
[MD5.4D10F9BB8243BCBF39774BF4D6B0D108] - (.Microsoft Corporation - DNS Client API DLL.) () -- C:\windows\System32\dnsapi.dll [604672] ©
[MD5.6356C0630362CC80E4318A672FF66804] - (.Microsoft Corporation - DNS Client API DLL.) () -- C:\windows\Syswow64\dnsapi.dll [461312] ©
[MD5.9E975BDC89C83900B2C534C4E1B018F8] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\windows\System32\drivers\AFD.sys [561152] ©
[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\windows\System32\drivers\atapi.sys [25840] ©
[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\windows\System32\drivers\Cdfs.sys [108544] ©
[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\windows\System32\drivers\Cdrom.sys [174080] ©
[MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\windows\System32\drivers\DfsC.sys [118784] ©
[MD5.8D6810577E9C4F56DCB8E9BACAC7287B] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\windows\System32\drivers\HDAudBus.sys [71168] ©
[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - i8042 Port Driver.) () -- C:\windows\System32\drivers\i8042prt.sys [112640] ©
[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\windows\System32\drivers\IpNat.sys [145920] ©
[MD5.1EEAA5A62E8C49DDF58798F06F78BFFA] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\windows\System32\drivers\MRxSmb.sys [368128] ©
[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\windows\System32\drivers\netBT.sys [331776] ©
[MD5.4A7EEA9C4AD5CBFDA3C0E5B821C99CAD] - (.Microsoft Corporation - NT File System Driver.) () -- C:\windows\System32\drivers\ntfs.sys [1934064] ©
[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Parallel Port Driver.) () -- C:\windows\System32\drivers\Parport.sys [105984] ©
[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\windows\System32\drivers\Rasl2tp.sys [124928] ©
[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\windows\System32\drivers\rdpdr.sys [179712] ©
[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\windows\System32\drivers\tdx.sys [117248] ©
[MD5.2FB3CDFD5EAF4CD9D4AFAF96877D13AE] - (.Microsoft Corporation - Volume Shadow Copy Driver.) () -- C:\windows\System32\drivers\volsnap.sys [332016] ©

---\\ Process running (42) - 2s
[MD5.EDEF3B2D77698F9FF8BD9A56D297638B] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 305.4.) -- C:\windows\system32\nvvsvc.exe [891240] [PID.1004] ©
[MD5.350F8DFC8A098F5F2818E45DADB7025B] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1125224] [PID.1200] ©
[MD5.970C70F6B2953ED43822D3797855D84C] - (.SUPERAntiSpyware.com - Core Service.) -- D:\Program Files (x86)\SASCORE64.EXE [172344] [PID.1848]
[MD5.62B7936F9036DD6ED36E6A7EFA805DC0] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [63928] [PID.1868] ©
[MD5.0CE79F00BC069F94BBE8139CAE38A9C2] - (...) -- D:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe [318312] [PID.1960]
[MD5.D39434B5E11CE057E4C289A3D08EBDAC] - (.Broadcom Corporation. - Bluetooth Radio Management Support.) -- C:\windows\system32\BtwRSupportService.exe [2252088] [PID.1980] ©
[MD5.E7E83F8C4D988AA152F23B26FF26FC49] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [957304] [PID.1292] ©
[MD5.426D951F2DE2D4DFCBE0D1A42BBBA72F] - (.DTS, Inc - DTS Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328] [PID.2216] ©
[MD5.52F63774A1866258BF64488A75CA1757] - (.ESET - ESET Service.) -- D:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1288104] [PID.2272] ©
[MD5.E67E289FA8AA393223AD7F9AFB738FD6] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe [627504] [PID.2292] ©
[MD5.C99F8E90DE4B8F0C7FE15BB1CBCD29DC] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe [635104] [PID.2360] ©
[MD5.3C4002D339491AF73D663FFC7F6E5ECB] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760] [PID.2396] ©
[MD5.5879C87FD883B0B092A588E595D6DE62] - (.FUJITSU LIMITED - PSUService.) -- C:\Program Files\Fujitsu\PSUtility\PSUService.exe [51608] [PID.2780]
[MD5.D4F8266D63800FF9ACFAC838005A974C] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [149296] [PID.2816] ©
[MD5.97D3DCBBF3915782644DB56F5C191B9F] - (.Intel® Corporation - Intel® PROSet/Wireless Zero Configure Servi.) -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568] [PID.2104] ©
[MD5.ABEFA4BD23329FD9BD47496BF2E58774] - (.Realsil Microelectronics Inc. - Realtek Card Reader Patch Tool..) -- C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456] [PID.4828] ©
[MD5.4269D44BB47A6DA5D80B11F4C8536458] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [276864] [PID.4972] ©
[MD5.DBE2E6388379D5CC78099650541E9566] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [364416] [PID.2544] ©
[MD5.BF5DE14131C7E137D728830FDB58DAD3] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe [651672] [PID.2844] ©
[MD5.B0666DF6D554879AE8A7C91E26A5972F] - (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872] [PID.3348] ©
[MD5.5E53A66C680A06E26B1234CB0C3CD99B] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608] [PID.2076] ©
[MD5.BC0A3C03E1DF23746F999F0576690B75] - (.Alps Electric Co., Ltd. - ApMsgFwd.) -- C:\Program Files\Apoint2K\ApMsgFwd.exe [69968] [PID.924] ©
[MD5.1B0E5412AB8F30B8ED2AEAC2C530EB90] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Hidfind.exe [98672] [PID.4996] ©
[MD5.6F9BB9BF205C2E61982B1C9A7AB5D337] - (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- D:\Program Files (x86)\Athan\Athan.exe [1204224] [PID.3196]
[MD5.C8B2CE01333ED2D08C7A56CF49922077] - (.ESET - ESET Main GUI.) -- D:\Program Files\ESET\ESET Smart Security\egui.exe [5634800] [PID.5544] ©
[MD5.5A42370A885E2629A7C46BF743CE9CC9] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\opera.exe [941936] [PID.4880] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.5928] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.1020] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.5816] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.1936] ©
[MD5.5337B7D4DA78302798CFC9969BF08D0A] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2448744] [PID.40] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.4000] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.2212] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.444] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.4116] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.4540] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.3088] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.5132] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.5660] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.3108] ©
[MD5.8148E859A8C771ACFC8C13881A657C75] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896] [PID.292] ©
[MD5.277789334263C78BD58231766AD7C015] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\TCC-HAIL\AppData\Roaming\ZHP\ZHPDiag3.exe [1923072] [PID.1364] ©

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (3) - 1s
P2 - EXT: (.Internet Download Manager, Tonec Inc. - IDM CC.) -- C:\Users\TCC-HAIL\AppData\Roaming\Mozilla\Firefox\Profiles\h9yxo8jj.default\extensions\mozilla_cc@internetdownloadmanager.com
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ©
P2 - FPN: [HKLM] [@real.com/nprpplugin;version=15.0.6.14] - (.RealPlayer.) -- C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll

---\\ Internet Explorer Extensions, Start, Search (16) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.eg/?gfe_rd=cr&ei=Wsm7Va6ICYKJ8Qe8o7PICQ&gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Proxy Management (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (2) - 0s
127
~ Le fichier hôte est sain (The hosts file is clean) (26)

---\\ Browser Helper Object (BHO) (4) - 0s
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll ©
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll ©
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll ©
O2 - BHO: CutThePrice [64Bits] - {F79B460B-F4FB-49B3-92DA-ABCB80DB9D1B} . (...) -- C:\Program Files (x86)\CutThePrice\E7xTvFvDHUDoGm.x64.dll (.not file.) =>PUP.Optional.Multiplug

---\\ Auto loading programs from Registry and folders (33) - 2s
O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe ©
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe ©
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe ©
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe ©
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe ©
O4 - HKLM\..\Run: [RtHDVBg_DTS] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe ©
O4 - HKLM\..\Run: [egui] . (.ESET - ESET Main GUI.) -- D:\Program Files\ESET\ESET Smart Security\egui.exe ©
O4 - HKLM\..\Run: [Connectify Hotspot] . (.Connectify - Connectify Hotspot.) -- C:\Program Files (x86)\Connectify\Connectify.exe
O4 - HKLM\..\Run: [Connectify Dispatch] . (.Connectify - Connectify Dispatch.) -- C:\Program Files (x86)\Connectify\DispatchUI.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe ©
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Program Files\Internet Download Manager\IDMan.exe ©
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\TCC-HAIL\AppData\Roaming\uTorrent\uTorrent.exe
O4 - HKCU\..\Run: [CloudSystemBooster] . (.Anvisoft - Cloud System Booster Application.) -- D:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe ©
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe ©
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe ©
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- D:\Program Files (x86)\SUPERAntiSpyware.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe ©
O4 - HKLM\..\Wow6432Node\Run: [YouCam Service] . (.CyberLink Corp. - CyberLink YouCam Service.) -- C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe ©
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe ©
O4 - HKLM\..\Wow6432Node\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe ©
O4 - HKLM\..\Wow6432Node\Run: [Athan] . (.www.IslamicFinder.org - Automatic Athan (Azan) five times a day f.) -- D:\Program Files (x86)\Athan\Athan.exe
O4 - HKLM\..\Wow6432Node\Run: [PWRISOVM.EXE] . (.PowerISO Computing, Inc. - PowerISO Virtual Drive Manager.) -- D:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ©
O4 - HKLM\..\Wow6432Node\Run: [Alfa Autorun Killer 3] . (.Alfa Programs ® - Get red of all known and unknown autorun vi.) -- D:\Program Files (x86)\Alfa Programs\Alfa Autorun Killer 3.0\Alfa Autorun Killer 3.exe
O4 - HKLM\..\Wow6432Node\Run: [BlueStacks Agent] . (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe ©
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Computer, Inc. - .) -- C:\Program Files (x86)\QuickTime\qttask.exe ©
O4 - HKUS\S-1-5-21-879740390-4067418799-3724441332-1002\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe ©
O4 - HKUS\S-1-5-21-879740390-4067418799-3724441332-1002\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- D:\Program Files\Internet Download Manager\IDMan.exe ©
O4 - HKUS\S-1-5-21-879740390-4067418799-3724441332-1002\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\TCC-HAIL\AppData\Roaming\uTorrent\uTorrent.exe
O4 - HKUS\S-1-5-21-879740390-4067418799-3724441332-1002\..\Run: [CloudSystemBooster] . (.Anvisoft - Cloud System Booster Application.) -- D:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe ©
O4 - HKUS\S-1-5-21-879740390-4067418799-3724441332-1002\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe ©
O4 - HKUS\S-1-5-21-879740390-4067418799-3724441332-1002\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe ©
O4 - HKUS\S-1-5-21-879740390-4067418799-3724441332-1002\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- D:\Program Files (x86)\SUPERAntiSpyware.exe

---\\ Lop.com/Domain Hijackers (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 37.220.8.190 5.152.219.52
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 37.220.8.190 5.152.219.52

---\\ Extra protocols (22) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: skypec2c [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL ©

---\\ AppInit_DLLs Registry value Autorun (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL (.not file.)

---\\ Non Microsoft non disabled Windows Services (32) - 4s
O23 - Service: SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com - Core Service.) - D:\Program Files (x86)\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
O23 - Service: Anvi Cloud System Booster Speed Service (AnviCsbSvc) . (...) - D:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe
O23 - Service: @oem17.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Radio Control (BcmBtRSupport) . (.Broadcom Corporation. - Bluetooth Radio Management Support.) - C:\windows\system32\BtwRSupportService.exe ©
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) . (.BlueStack Systems, Inc. - BlueStacks Service.) - C:\Program Files (x86)\BlueStacks\HD-Service.exe ©
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc. - BlueStacks Log Rotator Service.) - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe ©
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) . (.BlueStack Systems, Inc. - BlueStacks Updater Service.) - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe ©
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe ©
O23 - Service: Change Modem Device Service (Change Modem Device Service) . (...) - C:\Windows\SysWOW64\ChgService.exe
O23 - Service: Connectify (Connectify) . (.Connectify - Connectify Service Stub.) - C:\Program Files (x86)\Connectify\ConnectifyService.exe
O23 - Service: DTSAudioSvc (DTSAudioSvc) . (.DTS, Inc - DTS Audio Service.) - C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe ©
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - D:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe ©
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe ©
O23 - Service: FUJ02E3Service (FUJ02E3Service) . (.FUJITSU LIMITED - Fujitsu System Extension Utility / FUJ02E3.) - C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
O23 - Service: خدمة Google Update (gupdate) (gupdate) . (...) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.)
O23 - Service: HitmanPro Scheduler (HitmanProScheduler) . (.SurfRight B.V. - HitmanPro Scheduler.) - C:\Program Files\HitmanPro\hmpsched.exe ©
O23 - Service: IconMan_R (IconMan_R) . (.Realsil Microelectronics Inc. - Realtek Card Reader Patch Tool..) - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe ©
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe ©
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe ©
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe ©
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe ©
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 305.4.) - C:\windows\system32\nvvsvc.exe ©
O23 - Service: PFNService (PFNService) . (.FUJITSU LIMITED - Plugfree NETWORK.) - C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
O23 - Service: PowerSavingUtilityService (PowerSavingUtilityService) . (.FUJITSU LIMITED - PSUService.) - C:\Program Files\Fujitsu\PSUtility\PSUService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe ©
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe ©
O23 - Service: TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH - TeamViewer 8.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe ©
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ©
O23 - Service: @C:\Program Files (x86)\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (.not file.)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) . (.Intel® Corporation - Intel® PROSet/Wireless Zero Configure Servi.) - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe ©

---\\ Task Planned Automatically (30) - 10s
[MD5.A5062EA164067050F2DFA9DCA98CA63A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3157856] ©
[MD5.E6019253451DBB67740F7027AD9E1CB5] [APT] [RealUpgradeLogonTaskS-1-5-21-879740390-4067418799-3724441332-1002] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178840] ©
[MD5.E6019253451DBB67740F7027AD9E1CB5] [APT] [RealUpgradeScheduledTaskS-1-5-21-879740390-4067418799-3724441332-1002] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178840] ©
[MD5.AF02603D6637C69DAD2E69B80D14CAEA] [APT] [WpsNotifyTask_TCC-HAIL] (.Zhuhai Kingsoft Office Software Co.,Ltd.) -- D:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsnotify.exe [364392]
[MD5.182E368D346439E8650E0CD798B84CB7] [APT] [WpsUpdateTask_TCC-HAIL] (.Zhuhai Kingsoft Office Software Co.,Ltd.) -- D:\Program Files (x86)\Kingsoft\Kingsoft Office\wtoolex\wpsupdate.exe [424808]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndCheckOnWakeup] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndCheckOnWakeupBySwitch] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndOnABN1S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndOnABN2S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndOnABN3S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndOnABN4S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndOnABN5S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndOnABN6S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndSetWakeupSetting] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartBtnHndHKB] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN1S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN2S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN3S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN4S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN5S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN6S0] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnWakeupNow] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Fujitsu\ApplicationPanel\DisableBtnHndStartQuickTouchOnWakeupAtLogon] (...) -- C:\Program Files (x86)\Fujitsu\Application Panel\BtnHnd.exe (.not file.) [0]
O39 - APT: WpsNotifyTask_TCC-HAIL - (.Zhuhai Kingsoft Office Software Co.,Ltd.) -- C:\windows\Tasks\WpsNotifyTask_TCC-HAIL.job [388]
O39 - APT: WpsUpdateTask_TCC-HAIL - (.Zhuhai Kingsoft Office Software Co.,Ltd.) -- C:\windows\Tasks\WpsUpdateTask_TCC-HAIL.job [388]
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\windows\System32\Tasks\CCleanerSkipUAC [2778] ©
O39 - APT: RealUpgradeLogonTaskS-1-5-21-879740390-4067418799-3724441332-1002 - (.RealNetworks, Inc..) -- C:\windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-879740390-4067418799-3724441332-1002 [3208] ©
O39 - APT: RealUpgradeScheduledTaskS-1-5-21-879740390-4067418799-3724441332-1002 - (.RealNetworks, Inc..) -- C:\windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-879740390-4067418799-3724441332-1002 [3336] ©
O39 - APT: WpsNotifyTask_TCC-HAIL - (.Zhuhai Kingsoft Office Software Co.,Ltd.) -- C:\windows\System32\Tasks\WpsNotifyTask_TCC-HAIL [3342]
O39 - APT: WpsUpdateTask_TCC-HAIL - (.Zhuhai Kingsoft Office Software Co.,Ltd.) -- C:\windows\System32\Tasks\WpsUpdateTask_TCC-HAIL [3342]

---\\ Software installed (100) - 26s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner ©
O42 - Logiciel: Connectify - (.Connectify.) [HKLM][64Bits] -- Connectify
O42 - Logiciel: HitmanPro 3.7 - (.SurfRight B.V..) [HKLM][64Bits] -- HitmanPro37 ©
O42 - Logiciel: Java(TM) 7 Update 5 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417005FF} ©
O42 - Logiciel: Plugfree NETWORK - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {55AEBE91-AFDB-4300-82D8-0834BFE8D65E}
O42 - Logiciel: LIFEBOOK Application Panel - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {6226477E-444F-4DFE-BA19-9F4F7D4565BC}
O42 - Logiciel: Fujitsu BIOS Driver - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {7292FFCF-FA9A-4585-AB80-A71961F931AF}
O42 - Logiciel: Plugfree NETWORK - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {7BA64D21-EE46-4a9a-8145-52B0175C3F86}
O42 - Logiciel: HHD Software Free Hex Editor Neo 5.14 - (.HHD Software, Ltd..) [HKLM][64Bits] -- {8EB85C0E-DE7D-4A53-BD66-708B8F2C80B0}
O42 - Logiciel: Intel® PROSet/Wireless WiFi Software - (.Intel Corporation.) [HKLM][64Bits] -- {99FDAE3B-6905-45A6-8F73-595363AAD3D1} ©
O42 - Logiciel: ALPS Touch Pad Driver - (.ALPS ELECTRIC CO., LTD..) [HKLM][64Bits] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD} ©
O42 - Logiciel: NVIDIA 3D Vision Driver 305.46 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision ©
O42 - Logiciel: NVIDIA Graphics Driver 305.46 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver ©
O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM][64Bits] -- {C6D9ED03-6FCF-4410-9CB7-45CA285F9E11} ©
O42 - Logiciel: SUPERAntiSpyware - (.SUPERAntiSpyware.com.) [HKLM][64Bits] -- {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
O42 - Logiciel: Bluetooth Stack for Windows by Toshiba - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {CEBB6BFB-D708-4F99-A633-BC2600E01EF6} ©
O42 - Logiciel: Oracle VM VirtualBox 4.3.6 - (.Oracle Corporation.) [HKLM][64Bits] -- {DC65DFD8-E175-4A85-948A-42965853B2E8} ©
O42 - Logiciel: Pointing Device Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {DDC49774-40B9-47AE-9C63-5569C08C4082}
O42 - Logiciel: Power Saving Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {E50AF275-8A41-4FCF-847B-D6E60018F388}
O42 - Logiciel: Fujitsu System Extension Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}
O42 - Logiciel: Fujitsu MobilityCenter Extension Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- {EC314CDF-3521-482B-A21C-65AC95664814}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B} ©
O42 - Logiciel: 7-Zip 4.57 - (...) [HKLM][64Bits] -- 7-Zip
O42 - Logiciel: Cars - (...) [HKLM][64Bits] -- 76322c23820ae7473cdebbff3eceb262
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR ©
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin ©
O42 - Logiciel: Athan Basic 4.2 - (...) [HKLM][64Bits] -- Athan
O42 - Logiciel: Cloud System Booster - (.Anvisoft.) [HKLM][64Bits] -- Cloud System Booster ©
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite ©
O42 - Logiciel: DeskUpdate 4.13 - (.Fujitsu Technology Solutions.) [HKLM][64Bits] -- DeskUpdate_is1
O42 - Logiciel: F1 2012 - (...) [HKLM][64Bits] -- F1 2012_is1
O42 - Logiciel: Foxit Reader 5.0 - (.Foxit Corporation.) [HKLM][64Bits] -- Foxit Reader_is1 ©
O42 - Logiciel: Go West - (.ATARI Europe.) [HKLM][64Bits] -- Go West
O42 - Logiciel: GOM Player - (.Gretech Corporation.) [HKLM][64Bits] -- GOM Player
O42 - Logiciel: Google Chrome - (.Google Inc‎.‎.) [HKLM][64Bits] -- Google Chrome ©
O42 - Logiciel: CyberLink YouCam 5 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: LIFEBOOK Application Panel - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}
O42 - Logiciel: Fujitsu BIOS Driver - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{7292FFCF-FA9A-4585-AB80-A71961F931AF}
O42 - Logiciel: Pointing Device Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{DDC49774-40B9-47AE-9C63-5569C08C4082}
O42 - Logiciel: Power Saving Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{E50AF275-8A41-4FCF-847B-D6E60018F388}
O42 - Logiciel: Fujitsu System Extension Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}
O42 - Logiciel: Fujitsu MobilityCenter Extension Utility - (.FUJITSU LIMITED.) [HKLM][64Bits] -- InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}
O42 - Logiciel: Internet Download Manager - (...) [HKLM][64Bits] -- Internet Download Manager
O42 - Logiciel: Internet-based TOEFL - (.Kaplan.) [HKLM][64Bits] -- Internet-based TOEFL_is1
O42 - Logiciel: Kingsoft Office 2013 (9.1.0.4550) - (.Kingsoft Corp..) [HKLM][64Bits] -- Kingsoft Office
O42 - Logiciel: Kiwix 0.9 rc2 - (.Kiwix.) [HKLM][64Bits] -- Kiwix
O42 - Logiciel: Longman iBT - (...) [HKLM][64Bits] -- Longman iBT
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Mozilla Firefox 25.0 (x86 en-US) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 25.0 (x86 en-US) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService ©
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo ©
O42 - Logiciel: Opera 11.11 - (.Opera Software ASA.) [HKLM][64Bits] -- Opera 11.11.2109 ©
O42 - Logiciel: PowerISO - (.PowerISO Computing, Inc..) [HKLM][64Bits] -- PowerISO
O42 - Logiciel: QUICKnet - (...) [HKLM][64Bits] -- QUICKnet 5.577
O42 - Logiciel: QuickTime - (...) [HKLM][64Bits] -- QuickTime
O42 - Logiciel: Quran - (...) [HKLM][64Bits] -- Quran
O42 - Logiciel: RadiAnt DICOM Viewer (64-bit) - (.Medixant.) [HKLM][64Bits] -- RadiAnt64
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM][64Bits] -- RealPlayer 15.0 ©
O42 - Logiciel: ResearchSoft Direct Export Helper - (...) [HKLM][64Bits] -- ResearchSoft Direct Export Helper
O42 - Logiciel: Ayat - (.UNKNOWN.) [HKLM][64Bits] -- sa.edu.ksa.ayat
O42 - Logiciel: Satellite Antenna Alignment v2.35 - (.AL Softwate Team.) [HKLM][64Bits] -- Satellite Antenna Alignment_is1
O42 - Logiciel: STDU Viewer version 1.6.251.0 - (.STDUtility.) [HKLM][64Bits] -- STDU Viewer_is1 ©
O42 - Logiciel: TeamViewer 8 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 8 ©
O42 - Logiciel: µTorrent - (...) [HKLM][64Bits] -- uTorrent
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver ©
O42 - Logiciel: Yahoo! Messenger - (.Yahoo! Inc..) [HKLM][64Bits] -- Yahoo! Messenger ©
O42 - Logiciel: Your Free net - (.Your Free net.) [HKLM][64Bits] -- Your Free net1.7
O42 - Logiciel: Youtube Video Downloader PRO 3.9.0.2 - (...) [HKLM][64Bits] -- Youtube Video Downloader PRO 3.9.0.2
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {00C5F4F4-62F9-40D7-8000-AD8A9CD0C669} ©
O42 - Logiciel: CyberLink YouCam 5 - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} ©
O42 - Logiciel: Game Graphic Studio - (.Obocaman.) [HKLM][64Bits] -- {0A36AAD3-461C-4F21-B695-0754AEEC0B1B} ©
O42 - Logiciel: Skype™ 7.5 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} ©
O42 - Logiciel: Java 7 Update 45 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217045FF} ©
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} ©
O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM][64Bits] -- {2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {34927EBC-98D4-4D53-98BE-510DF5999F50} ©
O42 - Logiciel: FJ Camera - (.Sonix.) [HKLM][64Bits] -- {399C37FB-08AF-493B-BFED-20FBD85EDF7F} ©
O42 - Logiciel: Ayat - (.UNKNOWN.) [HKLM][64Bits] -- {41E2E6F7-F831-A443-D7D8-3B164D6B936F}
O42 - Logiciel: BlueStacks App Player - (.BlueStack Systems, Inc..) [HKLM][64Bits] -- {5C1A66E7-6794-4931-835A-5C7F7F003B30} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} ©
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} ©
O42 - Logiciel: EndNote X6 - (.Thomson Reuters.) [HKLM][64Bits] -- {86B3F2D6-AC2B-0016-8AE1-F2F77F781B0C}
O42 - Logiciel: DLL Suite 2013 - (...) [HKLM][64Bits] -- {885843E7-6CAC-4791-B7BF-1CD516017954}_is1
O42 - Logiciel: Etisalat USB modem - (.Etisalat.) [HKLM][64Bits] -- {93D34EE3-99B3-4DB1-8B0A-0A657466F90D}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} ©
O42 - Logiciel: Adobe Reader X (10.1.3) MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-AA0000000001} ©
O42 - Logiciel: Disney-Pixar WALL-E - (.THQ.) [HKLM][64Bits] -- {B94C6815-7BCC-4124-AC39-9208A06FFFA7} ©
O42 - Logiciel: RegCure Pro - (.ParetoLogic, Inc..) [HKLM][64Bits] -- {C547F361-5750-4CD1-9FB6-BC93827CB6C1} =>PUP.Optional.Paretologic
O42 - Logiciel: Rapture3D 2.4.4 Game - (.Blue Ripple Sound.) [HKLM][64Bits] -- {D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1
O42 - Logiciel: COWON Media Center - jetAudio Basic VX - (.COWON.) [HKLM][64Bits] -- {DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A} ©
O42 - Logiciel: Pro Evolution Soccer 2012 - (.KONAMI.) [HKLM][64Bits] -- {E737A098-F161-4B6F-AF22-86AAE34F6FBD} ©
O42 - Logiciel: Alfa Autorun Killer 3 version 3.0.6 - (.Alfa Programs(R)2005 - 2010.) [HKLM][64Bits] -- {EB8D4BC8-AAF7-4014-8A8C-95C4520316D5}_is1
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} ©
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} ©
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573} ©
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox ©
O42 - Logiciel: Mozilla Firefox 25.0.1 (x86 en-US) - (.Mozilla.) [HKCU][64Bits] -- Mozilla Firefox 25.0.1 (x86 en-US) ©
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent
O42 - Logiciel: XBMC - (.Team XBMC.) [HKCU][64Bits] -- XBMC

---\\ HKCU & HKLM Software Keys (149) - 26s
HKLM\SOFTWARE\Wow6432Node\2K Sports
HKLM\SOFTWARE\Wow6432Node\7-Zip
HKLM\SOFTWARE\Wow6432Node\ACE Compression Software
HKLM\SOFTWARE\Wow6432Node\Activision
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\Alfa Programs
HKLM\SOFTWARE\Wow6432Node\Anvisoft
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\BlueRippleSound
HKLM\SOFTWARE\Wow6432Node\BlueStacks
HKLM\SOFTWARE\Wow6432Node\CDDB
HKLM\SOFTWARE\Wow6432Node\Connectify
HKLM\SOFTWARE\Wow6432Node\COWON
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Disc Soft
HKLM\SOFTWARE\Wow6432Node\ESET
HKLM\SOFTWARE\Wow6432Node\Etisalat
HKLM\SOFTWARE\Wow6432Node\FarStone
HKLM\SOFTWARE\Wow6432Node\Foxit Software
HKLM\SOFTWARE\Wow6432Node\Free YouTube Downloader
HKLM\SOFTWARE\Wow6432Node\Free Zip Viewer
HKLM\SOFTWARE\Wow6432Node\Fujitsu
HKLM\SOFTWARE\Wow6432Node\Go West
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\GRETECH
HKLM\SOFTWARE\Wow6432Node\HaaliMkx
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\Internet Download Manager
HKLM\SOFTWARE\Wow6432Node\ISI ResearchSoft
HKLM\SOFTWARE\Wow6432Node\Islamic Encyclopedia
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Kaplan
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Kingsoft
HKLM\SOFTWARE\Wow6432Node\KONAMI
HKLM\SOFTWARE\Wow6432Node\KONAMIPES6
HKLM\SOFTWARE\Wow6432Node\Longman
HKLM\SOFTWARE\Wow6432Node\LphcmModem
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Netscape
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\PowerISO
HKLM\SOFTWARE\Wow6432Node\RealNetworks
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Sierra
HKLM\SOFTWARE\Wow6432Node\Sierra Entertainment, Inc.
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Sonix
HKLM\SOFTWARE\Wow6432Node\Swearware
HKLM\SOFTWARE\Wow6432Node\TeamViewer
HKLM\SOFTWARE\Wow6432Node\THQ
HKLM\SOFTWARE\Wow6432Node\Toshiba
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WALL-E
HKLM\SOFTWARE\Wow6432Node\WinRAR
HKLM\SOFTWARE\Wow6432Node\Wise Solutions
HKLM\SOFTWARE\Wow6432Node\x264 Video Codec
HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp.
HKLM\SOFTWARE\Wow6432Node\yahoo
HKLM\SOFTWARE\Wow6432Node\ZTEUSBDriverFlag
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\2K Sports
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\Activision
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Alps
HKCU\SOFTWARE\Antirun
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Asobo Studio
HKCU\SOFTWARE\Audacity
HKCU\SOFTWARE\Baidu
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\COWON
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\Disc Soft
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\Dropbox
HKCU\SOFTWARE\EA Sports
HKCU\SOFTWARE\eFilm Medical
HKCU\SOFTWARE\ESET
HKCU\SOFTWARE\FLT
HKCU\SOFTWARE\Foxit Software
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\GreenTree Applications
HKCU\SOFTWARE\GRETECH
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HHD Software
HKCU\SOFTWARE\HOW Inc.
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Info_DMT_Patches
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\ISI ResearchSoft
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\JEDI-VCL
HKCU\SOFTWARE\Kingsoft
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Oracle
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\PowerISO
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RadiAnt Viewer
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\REDitor II
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Satlist
HKCU\SOFTWARE\SecuROM
HKCU\SOFTWARE\SimpleTV by SergeyVS#3
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SUPERAntiSpyware.com
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\The Silicon Realms Toolworks
HKCU\SOFTWARE\THQ
HKCU\SOFTWARE\Toshiba
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Ubisoft
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WALL-E
HKCU\SOFTWARE\WebApp
HKCU\SOFTWARE\Widcomm
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\XBMC
HKCU\SOFTWARE\yahoo
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\RealNetworks
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contents of the Common Files folders (280) - 28s
O43 - CFD: 2015/07/17 06:46:38 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2013/12/02 06:01:20 - [] D -- C:\Program Files (x86)\Alfa Programs
O43 - CFD: 2013/07/20 18:49:07 - [] D -- C:\Program Files (x86)\Athan
O43 - CFD: 2015/07/17 06:46:55 - [] D -- C:\Program Files (x86)\Ayat
O43 - CFD: 2014/08/01 11:05:23 - [] D -- C:\Program Files (x86)\BlueStacks
O43 - CFD: 2013/07/21 17:55:11 - [] D -- C:\Program Files (x86)\BRS
O43 - CFD: 2013/03/05 08:06:28 - [] D -- C:\Program Files (x86)\Cisco
O43 - CFD: 2015/07/17 06:46:37 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2015/02/05 12:27:59 - [] D -- C:\Program Files (x86)\Connectify
O43 - CFD: 2013/03/05 08:04:43 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 2013/11/27 12:50:28 - [] D -- C:\Program Files (x86)\DriverUninstall
O43 - CFD: 2013/10/04 04:16:24 - [] D -- C:\Program Files (x86)\Free Zip Viewer
O43 - CFD: 2012/11/21 21:42:21 - [] D -- C:\Program Files (x86)\Fujitsu
O43 - CFD: 2015/07/31 17:08:52 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2013/07/17 23:09:43 - [] D -- C:\Program Files (x86)\GRETECH
O43 - CFD: 2015/07/17 06:47:03 - [] HD -- C:\Program Files (x86)\InstallJammer Registry
O43 - CFD: 2014/01/08 23:59:26 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2013/03/05 08:06:28 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2013/07/20 18:18:41 - [0] D -- C:\Program Files (x86)\Internet Download Manager
O43 - CFD: 2013/10/09 08:08:12 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2013/11/20 13:10:06 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2013/07/17 23:09:36 - [] D -- C:\Program Files (x86)\JetAudio
O43 - CFD: 2013/07/21 18:42:19 - [] D -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
O43 - CFD: 2013/07/17 23:18:54 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2013/07/17 23:18:46 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 2013/07/17 23:15:36 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 2013/07/17 23:19:11 - [] D -- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 2013/07/17 23:18:13 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2013/11/09 02:23:04 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2013/07/17 23:19:02 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2013/10/06 21:34:18 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 2013/07/21 17:55:01 - [] D -- C:\Program Files (x86)\OpenAL
O43 - CFD: 2013/12/06 16:21:12 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2013/07/18 00:06:22 - [] D -- C:\Program Files (x86)\QUICKnet
O43 - CFD: 2015/02/28 06:24:39 - [] D -- C:\Program Files (x86)\QuickTime
O43 - CFD: 2013/07/17 23:07:54 - [] D -- C:\Program Files (x86)\Real
O43 - CFD: 2012/11/21 21:52:49 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2012/11/17 00:52:29 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/05/30 22:36:29 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2014/03/07 14:09:43 - [] D -- C:\Program Files (x86)\TeamViewer
O43 - CFD: 2012/11/21 21:52:50 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2013/11/12 19:17:49 - [] D -- C:\Program Files (x86)\THQ
O43 - CFD: 2014/08/01 10:58:47 - [] D -- C:\Program Files (x86)\Toshiba
O43 - CFD: 2014/12/12 18:25:57 - [] D -- C:\Program Files (x86)\uTorrent
O43 - CFD: 2013/07/18 16:06:22 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2013/07/18 16:06:28 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2013/07/18 16:06:27 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2012/07/26 10:13:01 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2012/07/26 10:12:59 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2013/07/18 16:06:26 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2012/07/26 10:13:01 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2012/07/26 10:12:59 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2013/07/17 23:04:37 - [] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 2013/07/17 23:12:47 - [] D -- C:\Program Files (x86)\Yahoo!
O43 - CFD: 2014/03/06 09:55:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2K Sports
O43 - CFD: 2013/07/20 18:53:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 2012/07/26 10:13:01 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2012/07/26 09:52:57 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2013/10/09 08:08:41 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/10/17 20:49:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AL-Software
O43 - CFD: 2013/12/02 06:01:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alfa Programs
O43 - CFD: 2013/10/02 08:46:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amirsys
O43 - CFD: 2013/07/20 18:49:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Athan
O43 - CFD: 2013/07/21 17:55:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
O43 - CFD: 2014/06/11 00:25:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
O43 - CFD: 2013/12/02 01:37:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/02/05 12:10:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify
O43 - CFD: 2013/07/17 23:09:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COWON Media Center - jetAudio
O43 - CFD: 2013/12/16 11:32:51 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CureROM
O43 - CFD: 2013/03/05 08:05:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 5
O43 - CFD: 2014/04/06 17:14:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
O43 - CFD: 2013/10/06 05:51:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EndNote
O43 - CFD: 2013/12/02 01:26:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
O43 - CFD: 2013/12/08 19:36:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Etisalat USB modem
O43 - CFD: 2013/07/30 07:53:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F1 2012
O43 - CFD: 2013/07/20 18:48:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 5.0
O43 - CFD: 2013/12/16 11:32:51 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Zip Viewer
O43 - CFD: 2013/03/05 07:59:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu
O43 - CFD: 2012/11/21 21:41:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - LIFEBOOK Application Panel
O43 - CFD: 2012/11/21 21:40:39 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - Power Saving Utility
O43 - CFD: 2013/10/15 21:11:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Graphic Studio
O43 - CFD: 2013/07/23 23:41:31 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2013/07/17 23:09:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
O43 - CFD: 2015/08/04 01:31:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2013/10/15 23:42:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HHD Hex Editor Neo
O43 - CFD: 2015/07/30 05:44:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
O43 - CFD: 2013/03/05 08:06:37 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
O43 - CFD: 2013/07/20 18:19:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 2014/07/28 11:42:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Islamic Encyclopedia
O43 - CFD: 2013/11/20 13:10:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2015/02/27 17:08:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaplan
O43 - CFD: 2015/05/23 14:34:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft Office
O43 - CFD: 2014/01/09 08:44:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kiwix
O43 - CFD: 2015/02/28 06:24:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Longman iBT
O43 - CFD: 2012/07/26 10:13:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/30 05:33:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2013/07/21 18:42:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows - LIVE
O43 - CFD: 2013/07/17 23:21:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2013/10/06 22:27:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 2014/03/21 23:42:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
O43 - CFD: 2014/07/23 03:46:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2012 Patch
O43 - CFD: 2012/11/21 21:41:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plugfree NETWORK
O43 - CFD: 2012/11/21 21:41:23 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pointing Device Utility
O43 - CFD: 2013/07/20 18:52:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
O43 - CFD: 2013/07/18 00:06:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QUICKnet
O43 - CFD: 2015/02/28 06:24:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2013/11/03 14:07:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RadiAnt DICOM Viewer
O43 - CFD: 2013/07/17 23:08:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
O43 - CFD: 2014/09/26 22:01:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2014/10/05 15:51:50 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2013/08/07 21:21:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STDUtility
O43 - CFD: 2015/03/07 06:47:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
O43 - CFD: 2012/07/26 10:13:01 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2012/07/26 09:52:57 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2014/08/01 10:58:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
O43 - CFD: 2014/12/10 06:42:53 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2013/07/17 23:04:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2013/07/17 23:12:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger
O43 - CFD: 2013/12/13 00:11:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Free net
O43 - CFD: 2015/07/31 20:41:51 - [] D -- C:\ProgramData\29540409256740362
O43 - CFD: 2013/12/03 03:00:58 - [] D -- C:\ProgramData\Activision
O43 - CFD: 2015/07/17 06:46:41 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2012/07/26 09:22:08 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2013/11/30 06:14:05 - [] D -- C:\ProgramData\Avira
O43 - CFD: 2014/06/11 00:31:13 - [] D -- C:\ProgramData\BlueStacks
O43 - CFD: 2014/12/10 06:43:33 - [] D -- C:\ProgramData\BlueStacksSetup
O43 - CFD: 2013/07/30 08:48:58 - [] D -- C:\ProgramData\Codemasters
O43 - CFD: 2015/02/05 12:20:12 - [] D -- C:\ProgramData\Connectify
O43 - CFD: 2013/03/05 08:05:24 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2013/07/21 04:17:43 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 2012/07/26 09:22:08 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2012/07/26 09:22:08 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2013/12/02 01:25:59 - [] D -- C:\ProgramData\ESET
O43 - CFD: 2012/11/21 21:42:30 - [] D -- C:\ProgramData\Fujitsu
O43 - CFD: 2014/01/02 00:26:05 - [] D -- C:\ProgramData\Go West
O43 - CFD: 2013/07/21 02:23:36 - [] D -- C:\ProgramData\Hi
O43 - CFD: 2015/07/30 13:58:00 - [] D -- C:\ProgramData\HitmanPro
O43 - CFD: 2013/12/16 11:33:01 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 2013/03/05 08:06:28 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2013/03/05 08:06:24 - [] D -- C:\ProgramData\Intel.sav
O43 - CFD: 2015/05/23 14:33:46 - [] D -- C:\ProgramData\Kingsoft
O43 - CFD: 2013/10/06 20:53:46 - [] D -- C:\ProgramData\KONAMI
O43 - CFD: 2013/12/16 11:33:01 - [0] D -- C:\ProgramData\Logs
O43 - CFD: 2015/07/30 05:33:07 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2014/03/02 10:39:51 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2013/07/17 23:21:40 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2013/11/09 02:23:04 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2013/10/08 21:15:49 - [] D -- C:\ProgramData\Norton
O43 - CFD: 2013/10/06 17:32:38 - [0] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 2015/09/11 06:24:23 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 2013/03/05 08:00:54 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2012/11/17 03:04:35 - [] D -- C:\ProgramData\PRICache
O43 - CFD: 2015/02/28 06:24:40 - [] D -- C:\ProgramData\QuickTime
O43 - CFD: 2013/11/03 14:07:28 - [] D -- C:\ProgramData\RadiAntViewer
O43 - CFD: 2013/07/18 00:12:38 - [] D -- C:\ProgramData\Real
O43 - CFD: 2012/07/26 09:52:57 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2013/03/05 08:07:21 - [] D -- C:\ProgramData\Roaming
O43 - CFD: 2015/05/08 16:24:59 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2012/07/26 09:22:08 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2013/11/20 13:10:57 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2015/02/21 06:46:53 - [] D -- C:\ProgramData\SUPERAntiSpyware.com
O43 - CFD: 2013/07/21 18:13:14 - [] D -- C:\ProgramData\Temp
O43 - CFD: 2012/07/26 09:22:08 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2013/10/06 05:51:12 - [] D -- C:\ProgramData\Thomson.ResearchSoft.Installers
O43 - CFD: 2013/07/17 23:12:57 - [] D -- C:\ProgramData\Yahoo!
O43 - CFD: 2012/11/21 21:41:34 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2015/07/17 06:46:37 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2013/07/17 23:09:35 - [] D -- C:\Program Files (x86)\Common Files\COWON
O43 - CFD: 2013/07/17 23:18:46 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2013/10/16 10:22:04 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2012/11/21 21:31:27 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2013/11/20 13:10:55 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2013/07/17 23:19:07 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2012/11/21 21:29:33 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2013/10/06 05:51:11 - [] D -- C:\Program Files (x86)\Common Files\ResearchSoft
O43 - CFD: 2013/10/06 05:51:13 - [] D -- C:\Program Files (x86)\Common Files\Risxtd
O43 - CFD: 2012/07/26 10:13:01 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2014/09/26 22:01:16 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2013/03/05 07:57:04 - [] D -- C:\Program Files (x86)\Common Files\SNP2UVC
O43 - CFD: 2013/08/07 21:21:44 - [] D -- C:\Program Files (x86)\Common Files\STDUtility
O43 - CFD: 2013/10/04 03:02:39 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 2013/07/18 16:06:23 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2013/10/06 05:48:25 - [] D -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 2013/07/17 23:07:52 - [] D -- C:\Program Files (x86)\Common Files\xing shared
O43 - CFD: 2014/03/06 10:05:32 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\2K Sports
O43 - CFD: 2013/11/12 19:19:48 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Ace
O43 - CFD: 2013/12/03 03:00:58 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Activision
O43 - CFD: 2015/07/17 06:46:41 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Adobe
O43 - CFD: 2013/07/19 04:25:59 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\COWON
O43 - CFD: 2014/12/10 07:44:44 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Crash Reports
O43 - CFD: 2014/08/17 19:25:31 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 2015/09/11 00:32:41 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\DMCache
O43 - CFD: 2015/09/11 06:30:39 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Dropbox
O43 - CFD: 2014/12/10 06:43:34 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\EndNote
O43 - CFD: 2013/12/02 01:28:15 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\ESET
O43 - CFD: 2013/10/08 08:12:31 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Foxit Software
O43 - CFD: 2013/07/17 22:57:04 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Fujitsu
O43 - CFD: 2013/07/19 04:25:36 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\GRETECH
O43 - CFD: 2013/07/26 11:09:14 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Ice Age 2
O43 - CFD: 2013/07/20 16:06:39 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Identities
O43 - CFD: 2015/08/10 16:09:24 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\IDM
O43 - CFD: 2013/11/12 19:17:28 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\InstallShield
O43 - CFD: 2013/07/17 22:54:55 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Intel
O43 - CFD: 2015/05/23 14:31:35 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Kingsoft
O43 - CFD: 2013/07/17 23:13:09 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Macromedia
O43 - CFD: 2014/11/29 15:17:28 - [] SD -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft
O43 - CFD: 2013/07/20 19:37:43 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Mozilla
O43 - CFD: 2013/07/21 10:45:26 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\NVIDIA
O43 - CFD: 2015/01/03 23:42:59 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Opera
O43 - CFD: 2013/12/02 10:32:00 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Opera Software
O43 - CFD: 2014/12/10 07:44:44 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Profiles
O43 - CFD: 2013/07/28 19:35:56 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Real
O43 - CFD: 2014/04/02 01:29:20 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\REDitor II
O43 - CFD: 2015/07/17 06:47:06 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\sa.edu.ksa.ayat
O43 - CFD: 2013/07/28 04:41:07 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\shamela
O43 - CFD: 2015/09/11 06:30:54 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Skype
O43 - CFD: 2013/08/30 01:32:27 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Super-Cow
O43 - CFD: 2015/02/21 06:47:05 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\SUPERAntiSpyware.com
O43 - CFD: 2014/12/10 06:43:33 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\TeamViewer
O43 - CFD: 2015/05/08 09:57:53 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Thinstall
O43 - CFD: 2015/07/31 17:44:42 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\uTorrent
O43 - CFD: 2014/06/06 10:41:06 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\vlc
O43 - CFD: 2013/07/17 23:04:51 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\WinRAR
O43 - CFD: 2014/01/09 08:44:07 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\www.kiwix.org
O43 - CFD: 2014/12/10 06:43:33 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\XBMC
O43 - CFD: 2015/09/11 20:47:51 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\ZHP
O43 - CFD: 2014/01/09 00:02:18 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Activision
O43 - CFD: 2015/07/17 06:46:17 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Adobe
O43 - CFD: 2013/07/17 22:54:52 - [0] SHD -- C:\Users\TCC-HAIL\AppData\Local\Application Data
O43 - CFD: 2013/10/14 10:29:36 - [] D -- C:\Users\TCC-HAIL\AppData\Local\ApplicationHistory
O43 - CFD: 2014/04/02 01:48:30 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Apps
O43 - CFD: 2013/07/30 14:59:14 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Asobo Studio
O43 - CFD: 2013/07/17 22:57:05 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Broadcom
O43 - CFD: 2015/09/11 15:33:43 - [] D -- C:\Users\TCC-HAIL\AppData\Local\CrashDumps
O43 - CFD: 2013/07/17 22:58:28 - [] D -- C:\Users\TCC-HAIL\AppData\Local\CyberLink
O43 - CFD: 2015/07/31 16:41:08 - [0] D -- C:\Users\TCC-HAIL\AppData\Local\Deployment
O43 - CFD: 2015/07/23 03:01:20 - [0] D -- C:\Users\TCC-HAIL\AppData\Local\Diagnostics
O43 - CFD: 2014/04/06 17:15:17 - [] D -- C:\Users\TCC-HAIL\AppData\Local\DOSBox
O43 - CFD: 2015/09/03 04:31:14 - [0] D -- C:\Users\TCC-HAIL\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2013/12/02 01:28:15 - [] D -- C:\Users\TCC-HAIL\AppData\Local\ESET
O43 - CFD: 2013/07/30 08:48:58 - [] D -- C:\Users\TCC-HAIL\AppData\Local\FLT
O43 - CFD: 2013/07/21 09:39:25 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Free Zip Viewer
O43 - CFD: 2015/07/31 16:36:49 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Google
O43 - CFD: 2013/10/15 23:42:01 - [] D -- C:\Users\TCC-HAIL\AppData\Local\HHD Software
O43 - CFD: 2013/07/17 22:54:52 - [0] SHD -- C:\Users\TCC-HAIL\AppData\Local\History
O43 - CFD: 2014/04/02 01:39:46 - [] D -- C:\Users\TCC-HAIL\AppData\Local\JerseyEditor
O43 - CFD: 2015/05/23 15:03:14 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Kingsoft
O43 - CFD: 2014/11/29 15:17:28 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Microsoft
O43 - CFD: 2015/05/30 23:22:29 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Microsoft Help
O43 - CFD: 2013/07/20 19:37:31 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Mozilla
O43 - CFD: 2013/10/12 08:37:09 - [] D -- C:\Users\TCC-HAIL\AppData\Local\NPE
O43 - CFD: 2015/01/03 23:42:59 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Opera
O43 - CFD: 2013/12/02 10:32:01 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Opera Software
O43 - CFD: 2013/10/08 16:24:42 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Packages
O43 - CFD: 2014/12/10 07:44:44 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Profiles
O43 - CFD: 2014/10/05 06:58:01 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Programs
O43 - CFD: 2014/09/19 14:23:52 - [] D -- C:\Users\TCC-HAIL\AppData\Local\RadiantViewer
O43 - CFD: 2014/03/07 20:20:29 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Skype
O43 - CFD: 2013/08/09 10:39:43 - [] D -- C:\Users\TCC-HAIL\AppData\Local\STDUViewer
O43 - CFD: 2013/09/20 11:29:36 - [] D -- C:\Users\TCC-HAIL\AppData\Local\storage
O43 - CFD: 2015/09/11 20:48:48 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Temp
O43 - CFD: 2013/07/17 22:54:52 - [0] SHD -- C:\Users\TCC-HAIL\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/05/08 09:57:53 - [] D -- C:\Users\TCC-HAIL\AppData\Local\Thinstall
O43 - CFD: 2014/06/24 16:51:37 - [] D -- C:\Users\TCC-HAIL\AppData\Local\VirtualStore
O43 - CFD: 2014/01/09 08:44:07 - [] D -- C:\Users\TCC-HAIL\AppData\Local\www.kiwix.org
O43 - CFD: 2012/07/26 10:13:00 - [] RD -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2012/07/26 10:13:00 - [] RD -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2013/07/17 22:56:15 - [] RD -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/11/10 23:21:32 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anvisoft
O43 - CFD: 2015/05/07 17:47:59 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
O43 - CFD: 2015/07/20 12:12:54 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dll Suite 2014
O43 - CFD: 2015/04/19 00:02:51 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 2013/07/20 18:19:33 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 2012/07/26 10:13:00 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/04/19 00:03:09 - [] RD -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2012/07/26 10:13:00 - [] RD -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2013/07/20 19:50:25 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\THQ
O43 - CFD: 2013/07/17 23:04:38 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2013/12/02 01:54:22 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\x264 Video Codec
O43 - CFD: 2014/03/22 14:14:38 - [] D -- C:\Users\TCC-HAIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC

---\\ System Drivers List (79) - 8s
O58 - SDL:2012/07/26 07:00:49 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\windows\System32\drivers\3ware.sys [106736] ©
O58 - SDL:2012/07/26 07:00:49 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\windows\System32\drivers\adp94xx.sys [492272] ©
O58 - SDL:2012/07/26 07:00:48 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\windows\System32\drivers\adpahci.sys [340720] ©
O58 - SDL:2012/07/26 07:00:49 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\windows\System32\drivers\adpu320.sys [184048] ©
O58 - SDL:2012/07/26 07:00:49 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\windows\System32\drivers\amdsata.sys [76016] ©
O58 - SDL:2012/07/26 07:00:49 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\windows\System32\drivers\amdsbs.sys [258288] ©
O58 - SDL:2012/07/26 07:00:48 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\windows\System32\drivers\amdxata.sys [26352] ©
O58 - SDL:2012/07/24 10:35:56 A . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\windows\System32\drivers\Apfiltr.sys [445816] ©
O58 - SDL:2012/07/26 07:00:49 A . (.PMC-Sierra, Inc. - Adaptec RAID Storport Driver.) -- C:\windows\System32\drivers\arc.sys [104688] ©
O58 - SDL:2012/07/26 07:00:48 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\windows\System32\drivers\arcsas.sys [108272] ©
O58 - SDL:2014/01/02 00:17:52 A . (...) -- C:\windows\System32\drivers\atksgt.sys [88480]
O58 - SDL:2012/08/25 04:32:54 A . (.Broadcom Corporation. - Broadcom Bluetooth Firmware Download Filter.) -- C:\windows\System32\drivers\bcbtums.sys [165688] ©
O58 - SDL:2012/09/05 00:59:54 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter for Windo.) -- C:\windows\System32\drivers\btwampfl.sys [157560] ©
O58 - SDL:2012/08/30 07:53:58 A . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\windows\System32\drivers\btwaudio.sys [186648] ©
O58 - SDL:2012/08/30 07:53:56 A . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\windows\System32\drivers\btwavdt.sys [212792] ©
O58 - SDL:2012/07/27 05:18:26 A . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\windows\System32\drivers\btwl2cap.sys [40248] ©
O58 - SDL:2012/08/30 07:53:54 A . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\windows\System32\drivers\btwrchid.sys [22328] ©
O58 - SDL:2012/07/26 07:00:49 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\windows\System32\drivers\bxvbda.sys [539376] ©
O58 - SDL:2012/12/21 09:40:38 A . (.QUALCOMM Incorporated - USB Modem/Serial Device Driver.) -- C:\windows\System32\drivers\cmnsusbser.sys [126080] ©
O58 - SDL:2015/02/05 12:07:36 A . (.Connectify - NDISRD helper driver.) -- C:\windows\System32\drivers\cnnctfy3.sys [35352]
O58 - SDL:2014/01/01 23:32:19 A . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\windows\System32\drivers\dtsoftbus01.sys [283200] ©
O58 - SDL:2012/06/02 16:31:38 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\windows\System32\drivers\e1i63x64.sys [333824] ©
O58 - SDL:2012/06/14 16:33:30 A . (.ESET - Amon monitor.) -- C:\windows\System32\drivers\eamonm.sys [211344] ©
O58 - SDL:2012/06/14 16:33:54 A . (.ESET - ESET Helper driver.) -- C:\windows\System32\drivers\ehdrv.sys [149592] ©
O58 - SDL:2012/06/14 16:34:14 A . (.ESET - ESET Personal Firewall driver.) -- C:\windows\System32\drivers\epfw.sys [188696] ©
O58 - SDL:2012/06/14 16:34:14 A . (.ESET - Epfw NDIS LightWeight Filter.) -- C:\windows\System32\drivers\EpfwLWF.sys [38328] ©
O58 - SDL:2012/06/14 16:34:18 A . (.ESET - ESET Personal Firewall driver.) -- C:\windows\System32\drivers\epfwwfp.sys [62536] ©
O58 - SDL:2012/07/26 07:00:52 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\windows\System32\drivers\evbda.sys [3295984] ©
O58 - SDL:2012/08/01 15:35:34 A . (.FUJITSU LIMITED - Fujitsu BIOS Driver.) -- C:\windows\System32\drivers\FBIOSDRV.sys [20848]
O58 - SDL:2012/08/01 15:34:02 A . (.FUJITSU LIMITED - WDM driver for FUJ02B1 PnP device.) -- C:\windows\System32\drivers\fuj02b1.sys [16368]
O58 - SDL:2012/08/01 15:32:34 A . (.FUJITSU LIMITED - WDM driver for FUJ02E3 PnP device.) -- C:\windows\System32\drivers\fuj02e3.sys [17264]
O58 - SDL:2012/07/02 08:16:02 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\windows\System32\drivers\HECIx64.sys [62784] ©
O58 - SDL:2015/09/11 06:29:54 A . (.© 2014 SurfRight B.V. - HitmanPro 3.7 Support Driver.) -- C:\windows\System32\drivers\hitmanpro37.sys [43664] ©
O58 - SDL:2012/07/26 07:00:52 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\windows\System32\drivers\HpSAMD.sys [64752] ©
O58 - SDL:2012/07/31 20:21:58 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\windows\System32\drivers\iaStorA.sys [645952] ©
O58 - SDL:2012/07/26 07:00:52 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\windows\System32\drivers\iaStorV.sys [411888] ©
O58 - SDL:2012/08/07 09:14:12 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\windows\System32\drivers\igdkmd64.sys [8982208] ©
O58 - SDL:2012/07/26 07:00:52 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\windows\System32\drivers\iirsp.sys [45296] ©
O58 - SDL:2012/06/19 00:40:50 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\windows\System32\drivers\IntcDAud.sys [342528] ©
O58 - SDL:2014/01/02 00:17:52 A . (...) -- C:\windows\System32\drivers\lirsgt.sys [46400]
O58 - SDL:2012/07/26 07:00:52 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\windows\System32\drivers\lsi_sas.sys [108784] ©
O58 - SDL:2012/07/26 07:00:52 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\windows\System32\drivers\lsi_sas2.sys [92400] ©
O58 - SDL:2012/07/26 07:00:52 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\windows\System32\drivers\lsi_scsi.sys [116976] ©
O58 - SDL:2012/07/26 07:00:52 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\windows\System32\drivers\lsi_sss.sys [81136] ©
O58 - SDL:2011/03/26 10:37:12 A . (.MBB Incorporated - CDROM Filter.) -- C:\windows\System32\drivers\massfilter.sys [11776]
O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\windows\System32\drivers\mbam.sys [25816] ©
O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\windows\System32\drivers\mbamchameleon.sys [109272] ©
O58 - SDL:2015/09/11 06:29:24 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\windows\System32\drivers\MBAMSwissArmy.sys [113880] ©
O58 - SDL:2012/07/26 07:00:52 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\windows\System32\drivers\megasas.sys [51952] ©
O58 - SDL:2012/07/26 07:00:52 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\windows\System32\drivers\MegaSR.sys [353008] ©
O58 - SDL:2012/07/26 07:00:55 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\windows\System32\drivers\mvumis.sys [64240] ©
O58 - SDL:2015/06/18 08:42:02 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\windows\System32\drivers\mwac.sys [64216] ©
O58 - SDL:2012/08/08 01:51:58 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\windows\System32\drivers\NETwew00.sys [4273192] ©
O58 - SDL:2012/06/02 16:31:47 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\windows\System32\drivers\NETwNe64.sys [11400192] ©
O58 - SDL:2012/07/26 07:00:55 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\windows\System32\drivers\nfrd960.sys [52464] ©
O58 - SDL:2012/07/31 17:02:00 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\windows\System32\drivers\nvlddmkm.sys [13406056] ©
O58 - SDL:2012/07/31 17:02:00 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\windows\System32\drivers\nvpciflt.sys [30056] ©
O58 - SDL:2012/07/26 07:00:55 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\windows\System32\drivers\nvraid.sys [150256] ©
O58 - SDL:2012/07/26 07:00:55 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\windows\System32\drivers\nvstor.sys [168176] ©
O58 - SDL:2012/06/12 14:41:22 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\windows\System32\drivers\Rt630x64.sys [683664] ©
O58 - SDL:2012/07/31 11:10:34 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\windows\System32\drivers\RTKVHD64.sys [4102928] ©
O58 - SDL:2012/07/05 04:18:06 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\windows\System32\drivers\RtsUStor.sys [252048] ©
O58 - SDL:2010/04/12 10:55:00 A . (.PowerISO Computing, Inc. - PowerISO Virtual Drive.) -- C:\windows\System32\drivers\scdemu.sys [91568]
O58 - SDL:2012/07/26 10:11:43 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\windows\System32\drivers\secdrv.sys [23040] ©
O58 - SDL:2012/07/26 07:00:55 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\windows\System32\drivers\sisraid2.sys [44784] ©
O58 - SDL:2012/07/26 07:00:56 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\windows\System32\drivers\sisraid4.sys [81648] ©
O58 - SDL:2012/09/06 03:44:08 A . (.Sonix Co. Ltd. - Sonix SN9C290 driver.) -- C:\windows\System32\drivers\snp2uvc.sys [1849608]
O58 - SDL:2013/07/21 04:48:12 A . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\windows\System32\drivers\sptd.sys [564824] ©
O58 - SDL:2012/07/26 07:00:55 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\windows\System32\drivers\stexstor.sys [30960] ©
O58 - SDL:2013/12/18 17:19:54 A . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\windows\System32\drivers\VBoxDrv.sys [252688] ©
O58 - SDL:2013/12/18 17:16:44 A . (.Oracle Corporation - VirtualBox Host-Only Network Adapter Driver.) -- C:\windows\System32\drivers\VBoxNetAdp.sys [140560] ©
O58 - SDL:2013/12/18 17:16:44 A . (.Oracle Corporation - VirtualBox Bridged Networking Driver.) -- C:\windows\System32\drivers\VBoxNetFlt.sys [154896] ©
O58 - SDL:2013/12/18 17:16:44 A . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\windows\System32\drivers\VBoxUSBMon.sys [126736] ©
O58 - SDL:2012/07/26 07:00:58 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\windows\System32\drivers\viaide.sys [19184] ©
O58 - SDL:2012/07/26 07:00:58 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\windows\System32\drivers\vsmraid.sys [164080] ©
O58 - SDL:2012/07/26 07:00:58 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\windows\System32\drivers\VSTXRAID.SYS [322800] ©
O58 - SDL:2011/03/26 10:37:12 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\windows\System32\drivers\ZTEusbmdm6k.sys [123520]
O58 - SDL:2011/03/26 10:37:12 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\windows\System32\drivers\ZTEusbnmea.sys [123520]
O58 - SDL:2011/03/26 10:37:12 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\windows\System32\drivers\ZTEusbser6k.sys [123520]

---\\ Last modified or created user files (4) - 9s
O61 - LFC: 2015/09/11 06:30:48 A . (..) -- C:\Users\TCC-HAIL\Dropbox\.dropbox.cache\dropbox-upgrade-3.8.8.exe [0]
O61 - LFC: 2015/09/11 00:33:23 A . (.Bleeping Computer, LLC.) -- C:\Users\TCC-HAIL\Documents\Downloads\Programs\rkill.exe [2019656]
O61 - LFC: 2015/09/11 00:33:23 A . (.Bleeping Computer, LLC.) -- C:\Users\TCC-HAIL\Desktop\app.exe [2019656]
O61 - LFC: 2015/09/11 16:15:11 A . (..) -- C:\Users\TCC-HAIL\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [674082]

---\\ File Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\opera.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Start Menu Internet (16) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Opera.exe http://www.mystartsearch.com/ ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- D:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\opera.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- D:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\opera.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- D:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\opera.exe ©

---\\ Search Browser Infection (8) - 11s
O69 - SBI: prefs.js [TCC-HAIL - h9yxo8jj.default] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [TCC-HAIL - h9yxo8jj.default] user_pref("browser.search.searchengine.ptid", "wpc"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [TCC-HAIL - h9yxo8jj.default] user_pref("browser.search.searchengine.uid", "TOSHIBAXMQ01ABD050_2369P1RYTXX2369P1RYT"); =>PUP.Optional.SearchEngine
O69 - SBI: prefs.js [TCC-HAIL - h9yxo8jj.default] user_pref("extensions.SecretSauce.aul", "1386456399865"); =>PUP.Optional.SecretSauce
O69 - SBI: prefs.js [TCC-HAIL - h9yxo8jj.default] user_pref("extensions.SecretSauce.irl", true); =>PUP.Optional.SecretSauce
O69 - SBI: prefs.js [TCC-HAIL - h9yxo8jj.default] user_pref("extensions.SecretSauce.is", "fmxqteg"); =>PUP.Optional.SecretSauce
O69 - SBI: prefs.js [TCC-HAIL - h9yxo8jj.default] user_pref("extensions.SecretSauce.ug", "1B47C7B0-B1D6-4860-AF5A-35CF135D3B62"); =>PUP.Optional.SecretSauce
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Search Svchost Services (34) - 2s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Application Experience Service.) -- C:\windows\System32\aelupsvc.dll [190976] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\windows\System32\certprop.dll [149504] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\windows\System32\certprop.dll [149504] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\windows\System32\srvsvc.dll [309248] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\windows\System32\gpsvc.dll [1366016] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\windows\System32\ikeext.dll [1071104] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\windows\System32\rasauto.dll [99840] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\windows\System32\rasmans.dll [358400] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [107520] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\windows\System32\sens.dll [62976] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\windows\System32\ipnathlp.dll [438784] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [305664] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\windows\system32\wuaueng.dll [3318784] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\windows\System32\qmgr.dll [826368] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [565760] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\windows\System32\iphlpsvc.dll [894464] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\windows\system32\seclogon.dll [30720] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\windows\System32\appinfo.dll [69632] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\windows\system32\iscsiexe.dll [151552] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\windows\System32\eapsvc.dll [105472] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\windows\system32\schedsvc.dll [1282560] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\windows\system32\wbem\WMIsvc.dll [219648] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Multimedia Class Scheduler Service.) -- C:\windows\system32\mmcss.dll [80384] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\windows\System32\browser.dll [134144] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\windows\system32\profsvc.dll [209920] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [291328] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\windows\System32\wercplsupport.dll [84992] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\windows\system32\kmsvc.dll [97792] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\windows\System32\bdesvc.dll [190464] ©
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\windows\system32\wlidsvc.dll [1968128] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\windows\system32\themeservice.dll [47104] ©
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\windows\System32\DeviceSetupManager.dll [207872] ©
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\windows\System32\ncasvc.dll [161792] ©
O83 - Search Svchost Services: SystemEventsBroker (SystemEventsBroker) . (.Microsoft Corporation - System Events Broker.) -- C:\windows\System32\SystemEventsBrokerServer.dll [178176] ©

---\\ Firewall Active Exception List (2) - 2s
O87 - FAEL: "{2F140AFD-1F4C-4DEA-828A-26C2A53BC10F}" [In-None-P6-TRUE] .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
O87 - FAEL: "{04D5B8C5-0EE3-40F8-AC95-2345766AB71F}" [In-None-P17-TRUE] .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe

---\\ Services not Microsoft (SR=Run, SS=Stop) (35) - 107s
SR - Auto [2014/07/23 01:31:23] [ 172344] SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com.) - D:\Program Files (x86)\SASCORE64.EXE

SR - Auto [2012/04/04 08:53:50] [ 63928] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe ©
SR - Auto [2012/12/14 10:33:08] [ 318312] Anvi Cloud System Booster Speed Service (AnviCsbSvc) . (...) - D:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe
SR - Auto [2012/08/25 03:33:01] [ 2252088] @oem17.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Radio Control (BcmBtRSupport) . (.Broadcom Corporation..) - C:\windows\system32\BtwRSupportService.exe ©
SS - Auto [2014/05/21 21:01:54] [ 402192] BlueStacks Android Service (BstHdAndroidSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-Service.exe ©
SS - Auto [2014/05/21 21:02:22] [ 385808] BlueStacks Log Rotator Service (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe ©
SS - Auto [2014/05/21 21:04:14] [ 774928] BlueStacks Updater Service (BstHdUpdaterSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe ©
SR - Auto [2012/09/04 13:31:06] [ 957304] Bluetooth Service (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe ©
SS - Auto [2012/12/21 12:10:18] [ 114688] Change Modem Device Service (Change Modem Device Service) . (...) - C:\Windows\SysWOW64\ChgService.exe
SS - Auto [2014/03/24 19:25:34] [ 487936] Connectify (Connectify) . (.Connectify.) - C:\Program Files (x86)\Connectify\ConnectifyService.exe
SS - Demand [2012/08/07 13:01:22] [ 276288] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe ©
SR - Auto [2012/01/23 15:30:22] [ 233328] DTSAudioSvc (DTSAudioSvc) . (.DTS, Inc.) - C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe ©
SR - Auto [2012/06/14 16:33:54] [ 1288104] ESET Service (ekrn) . (.ESET.) - D:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe ©
SR - Auto [2012/07/18 22:14:04] [ 627504] Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe ©
SS - Auto [2012/07/19 05:56:16] [ 80752] FUJ02E3Service (FUJ02E3Service) . (.FUJITSU LIMITED.) - C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
SS - Auto [2015/09/05 12:28:39] [ 127752] HitmanPro Scheduler (HitmanProScheduler) . (.SurfRight B.V..) - C:\Program Files\HitmanPro\hmpsched.exe ©
SR - Auto [2012/07/13 10:02:16] [ 2451456] IconMan_R (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe ©
SR - Auto [2012/04/21 00:16:12] [ 635104] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe ©
SR - Auto [2012/07/17 10:10:16] [ 165760] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe ©
SR - Auto [2012/07/17 10:10:30] [ 276864] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe ©
SS - Auto [2015/06/18 08:39:46] [ 1871160] (MBAMScheduler) . (.Malwarebytes Corporation.) - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe ©
SS - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe ©
SS - Demand [2013/10/26 03:53:33] [ 119408] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe ©
SS - Demand [2012/07/18 22:14:16] [ 272176] Wireless PAN DHCP Server (MyWiFiDHCPDNS) . (.Copyright (C) 2005-2010 by Achal Dhir.) - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ©
SR - Auto [2012/07/31 18:25:26] [ 891240] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\windows\system32\nvvsvc.exe ©
SS - Auto [2012/07/12 00:48:00] [ 2219520] PFNService (PFNService) . (.FUJITSU LIMITED.) - C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
SR - Auto [2012/08/07 03:26:57] [ 51608] PowerSavingUtilityService (PowerSavingUtilityService) . (.FUJITSU LIMITED.) - C:\Program Files\Fujitsu\PSUtility\PSUService.exe
SR - Auto [2012/07/18 22:13:40] [ 149296] Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe ©
SS - Auto [2015/02/18 20:11:32] [ 315488] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
SS - Auto [2012/07/31 09:54:52] [ 382312] NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe ©
SS - Auto [2014/03/05 23:31:41] [ 3560288] TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe ©
SS - Demand [2011/04/01 17:42:56] [ 198064] TOSHIBA Bluetooth Service (TOSHIBA Bluetooth Service) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe ©
SR - Auto [2012/07/17 10:10:32] [ 364416] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ©
SR - Auto [2012/07/18 22:14:38] [ 2699568] Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) . (.Intel® Corporation.) - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe ©

---\\ Additional Scan (O88) (2) - 0s
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F79B460B-F4FB-49B3-92DA-ABCB80DB9D1B} =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C547F361-5750-4CD1-9FB6-BC93827CB6C1} =>PUP.Optional.Paretologic

---\\ Summary of the elements found (4) - 0s
http://www.nicolascoolman.fr/pup-mutiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/blog =>PUP.Optional.Paretologic
http://www.nicolascoolman.fr/blog =>PUP.Optional.SearchEngine
http://www.nicolascoolman.fr/adware-secretsauce / =>PUP.Optional.SecretSauce

~ End of the scan, 20378 items in 300 seconds (1016)(0)()