cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 6/12/2016 11:28:12 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\arslan\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 00000409 | Country: France | Language: FRA | Date Format: dd/MM/yyyy

4.00 Gb Total Physical Memory | 2.49 Gb Available Physical Memory | 62.36% Memory free
5.19 Gb Paging File | 3.06 Gb Available in Paging File | 58.91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 284.94 Gb Total Space | 28.19 Gb Free Space | 9.89% Space Free | Partition Type: NTFS
Drive D: | 12.61 Gb Total Space | 1.49 Gb Free Space | 11.80% Space Free | Partition Type: NTFS

Computer Name: ARSLAN-HP | User Name: arslan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found
PRC - C:\Users\arslan\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation)
PRC - C:\Users\arslan\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes)
PRC - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes)
PRC - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes)
PRC - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
PRC - C:\Users\arslan\AppData\Local\Installer\Installdelay_21290\DCytaiesmt.exe ()
PRC - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe ()
PRC - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - C:\Users\arslan\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll ()
MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\Program Files\AVAST Software\Avast\log.dll ()
MOD - C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll ()
MOD - C:\Users\arslan\AppData\Local\Installer\Installdelay_21290\DCytaiesmt.exe ()
MOD - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll ()
MOD - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libGLESv2.dll ()
MOD - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libEGL.dll ()
MOD - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe ()


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - (UsoSvc) -- C:\WINDOWS\SysNative\usocore.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WSService) -- C:\WINDOWS\SysNative\WSService.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (ClipSVC) -- C:\WINDOWS\SysNative\ClipSVC.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (RetailDemo) -- C:\WINDOWS\SysNative\RDXService.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (AppXSvc) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (VaultSvc) -- C:\WINDOWS\SysNative\vaultsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (UserDataSvc) -- C:\WINDOWS\SysNative\UserDataService.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (PimIndexMaintenanceSvc) -- C:\WINDOWS\SysNative\PimIndexMaintenance.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (UnistoreSvc) -- C:\WINDOWS\SysNative\Unistore.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DsSvc) -- C:\WINDOWS\SysNative\dssvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DiagTrack) -- C:\WINDOWS\SysNative\diagtrack.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NetSetupSvc) -- C:\WINDOWS\SysNative\NetSetupSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (UserManager) -- C:\WINDOWS\SysNative\usermgr.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (StateRepository) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (workfolderssvc) -- C:\WINDOWS\SysNative\workfolderssvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (Wcmsvc) -- C:\WINDOWS\SysNative\wcmsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (BrokerInfrastructure) -- C:\WINDOWS\SysNative\bisrv.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NgcSvc) -- C:\WINDOWS\SysNative\ngcsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (tiledatamodelsvc) -- C:\WINDOWS\SysNative\tileobjserver.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (SystemEventsBroker) -- C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DmEnrollmentSvc) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (icssvc) -- C:\WINDOWS\SysNative\tetheringservice.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (wlidsvc) -- C:\WINDOWS\SysNative\wlidsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (CoreMessagingRegistrar) -- C:\WINDOWS\SysNative\CoreMessaging.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (w3logsvc) -- C:\WINDOWS\SysNative\inetsrv\w3logsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (MSMQ) -- C:\WINDOWS\SysNative\mqsvc.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (AudioEndpointBuilder) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DoSvc) -- C:\WINDOWS\SysNative\dosvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (SensorDataService) -- C:\WINDOWS\SysNative\SensorDataService.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (SensorService) -- C:\WINDOWS\SysNative\SensorService.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (PrintNotify) -- C:\WINDOWS\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WdNisSvc) -- C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (UserDataSvc_Session1) -- C:\WINDOWS\SysNative\svchost.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (UnistoreSvc_Session1) -- C:\WINDOWS\SysNative\svchost.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (PimIndexMaintenanceSvc_Session1) -- C:\WINDOWS\SysNative\svchost.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (OneSyncSvc_Session1) -- C:\WINDOWS\SysNative\svchost.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (LSM) -- C:\WINDOWS\SysNative\lsm.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (XblGameSave) -- C:\WINDOWS\SysNative\XblGameSave.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (LicenseManager) -- C:\WINDOWS\SysNative\LicenseManagerSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (XboxNetApiSvc) -- C:\WINDOWS\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (diagnosticshub.standardcollector.service) -- C:\WINDOWS\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WalletService) -- C:\WINDOWS\SysNative\WalletService.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (embeddedmode) -- C:\WINDOWS\SysNative\embeddedmodesvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (XblAuthManager) -- C:\WINDOWS\SysNative\XblAuthManager.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (EntAppSvc) -- C:\WINDOWS\SysNative\EnterpriseAppMgmtSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (CDPSvc) -- C:\WINDOWS\SysNative\cdpsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (OneSyncSvc) -- C:\WINDOWS\SysNative\APHostService.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WpnService) -- C:\WINDOWS\SysNative\wpnservice.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (SmsRouter) -- C:\WINDOWS\SysNative\SmsRouterSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (netprofm) -- C:\WINDOWS\SysNative\netprofmsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NcbService) -- C:\WINDOWS\SysNative\ncbservice.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NcaSvc) -- C:\WINDOWS\SysNative\NcaSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (BthHFSrv) -- C:\WINDOWS\SysNative\BthHFSrv.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (lfsvc) -- C:\WINDOWS\SysNative\lfsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (AppReadiness) -- C:\WINDOWS\SysNative\AppReadiness.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (IEEtwCollectorService) -- C:\WINDOWS\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NcdAutoSetup) -- C:\WINDOWS\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (Netlogon) -- C:\WINDOWS\SysNative\netlogon.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WEPHOSTSVC) -- C:\WINDOWS\SysNative\wephostsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (ScDeviceEnum) -- C:\WINDOWS\SysNative\ScDeviceEnum.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NgcCtnrSvc) -- C:\WINDOWS\SysNative\NgcCtnrSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (KeyIso) -- C:\WINDOWS\SysNative\keyiso.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (AJRouter) -- C:\WINDOWS\SysNative\AJRouter.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (EFS) -- C:\WINDOWS\SysNative\efssvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WiaRpc) -- C:\WINDOWS\SysNative\wiarpc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (dmwappushservice) -- C:\WINDOWS\SysNative\dmwappushsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (MapsBroker) -- C:\WINDOWS\SysNative\moshost.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (fhsvc) -- C:\WINDOWS\SysNative\fhsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DsmSvc) -- C:\WINDOWS\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (smphost) -- C:\WINDOWS\SysNative\smphost.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (svsvc) -- C:\WINDOWS\SysNative\svsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DeviceAssociationService) -- C:\WINDOWS\SysNative\das.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (TimeBroker) -- C:\WINDOWS\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DevQueryBroker) -- C:\WINDOWS\SysNative\DevQueryBroker.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DcpSvc) -- C:\WINDOWS\SysNative\dcpsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicvss) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicvmsession) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmictimesync) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicshutdown) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicrdv) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmickvpexchange) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicheartbeat) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (vmicguestinterface) -- C:\WINDOWS\SysNative\icsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
SRV:[b]64bit:[/b] - (nSvcIp) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe ()
SRV:[b]64bit:[/b] - (ForceWare Intelligent Application Manager (IAM) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe ()
SRV - (c2cpnrsvc) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation)
SRV - (c2cautoupdatesvc) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation)
SRV - (UnistoreSvc) -- C:\WINDOWS\SysWOW64\Unistore.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes)
SRV - (StateRepository) -- C:\WINDOWS\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (DmEnrollmentSvc) -- C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll (Microsoft Corporation)
SRV - (CoreMessagingRegistrar) -- C:\WINDOWS\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SRV - (WAS) -- C:\WINDOWS\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) -- C:\WINDOWS\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (w3logsvc) -- C:\WINDOWS\SysWOW64\inetsrv\w3logsvc.dll (Microsoft Corporation)
SRV - (AppHostSvc) -- C:\WINDOWS\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (PrintNotify) -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV - (lfsvc) -- C:\WINDOWS\SysWOW64\lfsvc.dll (Microsoft Corporation)
SRV - (smphost) -- C:\WINDOWS\SysWOW64\smphost.dll (Microsoft Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (sftvsa) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (Sony PC Companion) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe (Avanquest Software)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (GamesAppService) -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe (WildTangent, Inc.)
SRV - (ABBYY.Licensing.FineReader.Sprint.9.0) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - (MBAMSwissArmy) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys (Malwarebytes)
DRV:[b]64bit:[/b] - (MBAMWebAccessControl) -- C:\WINDOWS\SysNative\drivers\mwac.sys (Malwarebytes Corporation)
DRV:[b]64bit:[/b] - (MBAMProtector) -- C:\WINDOWS\SysNative\drivers\mbam.sys (Malwarebytes)
DRV:[b]64bit:[/b] - (ssudmdm) -- C:\WINDOWS\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:[b]64bit:[/b] - (ssudserd) -- C:\WINDOWS\SysNative\drivers\ssudserd.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:[b]64bit:[/b] - (dg_ssudbus) -- C:\WINDOWS\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:[b]64bit:[/b] - (usbser) -- C:\WINDOWS\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (NVHDA) -- C:\WINDOWS\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:[b]64bit:[/b] - (GpuEnergyDrv) -- C:\WINDOWS\SysNative\drivers\gpuenergydrv.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (USBHUB3) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation)
DRV:[b]64bit:[/b] - (pdc) -- C:\WINDOWS\SysNative\drivers\pdc.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (sdbus) -- C:\WINDOWS\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (buttonconverter) -- C:\WINDOWS\SysNative\drivers\buttonconverter.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (MQAC) -- C:\WINDOWS\SysNative\drivers\mqac.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (terminpt) -- C:\WINDOWS\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (RdpVideoMiniport) -- C:\WINDOWS\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (wpcfltr) -- C:\WINDOWS\SysNative\drivers\wpcfltr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (ReFSv1) -- C:\WINDOWS\SysNative\drivers\refsv1.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (wdiwifi) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (dam) -- C:\WINDOWS\SysNative\drivers\dam.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Wof) -- C:\WINDOWS\SysNative\drivers\wof.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (USBXHCI) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation)
DRV:[b]64bit:[/b] - (stornvme) -- C:\WINDOWS\SysNative\drivers\stornvme.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BthHFEnum) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (msgpiowin32) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UcmUcsi) -- C:\WINDOWS\SysNative\drivers\UcmUcsi.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WdNisDrv) -- C:\WINDOWS\SysNative\drivers\WdNisDrv.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WpdUpFltr) -- C:\WINDOWS\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (cnghwassist) -- C:\WINDOWS\SysNative\drivers\cnghwassist.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (SerCx) -- C:\WINDOWS\SysNative\drivers\SerCx.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (3ware) -- C:\WINDOWS\SysNative\drivers\3ware.sys (LSI)
DRV:[b]64bit:[/b] - (LSI_SAS2i) -- C:\WINDOWS\SysNative\drivers\lsi_sas2i.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (LSI_SAS3i) -- C:\WINDOWS\SysNative\drivers\lsi_sas3i.sys (Avago Technologies)
DRV:[b]64bit:[/b] - (LSI_SSS) -- C:\WINDOWS\SysNative\drivers\lsi_sss.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (percsas3i) -- C:\WINDOWS\SysNative\drivers\percsas3i.sys (Avago Technologies)
DRV:[b]64bit:[/b] - (percsas2i) -- C:\WINDOWS\SysNative\drivers\percsas2i.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (WdFilter) -- C:\WINDOWS\SysNative\drivers\WdFilter.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UEFI) -- C:\WINDOWS\SysNative\drivers\uefi.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (swenum) -- C:\WINDOWS\SysNative\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (acpiex) -- C:\WINDOWS\SysNative\drivers\acpiex.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (GPIOClx0101) -- C:\WINDOWS\SysNative\drivers\msgpioclx.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (VSTXRAID) -- C:\WINDOWS\SysNative\drivers\VSTXRAID.SYS (VIA Corporation)
DRV:[b]64bit:[/b] - (HpSAMD) -- C:\WINDOWS\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:[b]64bit:[/b] - (storufs) -- C:\WINDOWS\SysNative\drivers\storufs.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TPM) -- C:\WINDOWS\SysNative\drivers\tpm.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Ucx01000) -- C:\WINDOWS\SysNative\drivers\Ucx01000.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Fs_Rec) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (iaStorAV) -- C:\WINDOWS\SysNative\drivers\iaStorAV.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (storahci) -- C:\WINDOWS\SysNative\drivers\storahci.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (EhStorTcgDrv) -- C:\WINDOWS\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (VerifierExt) -- C:\WINDOWS\SysNative\drivers\VerifierExt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (amdsata) -- C:\WINDOWS\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (amdxata) -- C:\WINDOWS\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (CLFS) -- C:\WINDOWS\SysNative\drivers\clfs.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (sdstor) -- C:\WINDOWS\SysNative\drivers\sdstor.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WFPLWFS) -- C:\WINDOWS\SysNative\drivers\wfplwfs.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UASPStor) -- C:\WINDOWS\SysNative\drivers\uaspstor.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (hidinterrupt) -- C:\WINDOWS\SysNative\drivers\hidinterrupt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (SerCx2) -- C:\WINDOWS\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (amdsbs) -- C:\WINDOWS\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:[b]64bit:[/b] - (stexstor) -- C:\WINDOWS\SysNative\drivers\stexstor.sys (Promise Technology, Inc.)
DRV:[b]64bit:[/b] - (spaceport) -- C:\WINDOWS\SysNative\drivers\spaceport.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (ADP80XX) -- C:\WINDOWS\SysNative\drivers\adp80xx.sys (PMC-Sierra)
DRV:[b]64bit:[/b] - (EhStorClass) -- C:\WINDOWS\SysNative\drivers\EhStorClass.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (SpbCx) -- C:\WINDOWS\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (mvumis) -- C:\WINDOWS\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV:[b]64bit:[/b] - (WdBoot) -- C:\WINDOWS\SysNative\drivers\WdBoot.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (b06bdrv) -- C:\WINDOWS\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (ebdrv) -- C:\WINDOWS\SysNative\drivers\evbda.sys (QLogic Corporation)
DRV:[b]64bit:[/b] - (mlx4_bus) -- C:\WINDOWS\SysNative\drivers\mlx4_bus.sys (Mellanox)
DRV:[b]64bit:[/b] - (ibbus) -- C:\WINDOWS\SysNative\drivers\ibbus.sys (Mellanox)
DRV:[b]64bit:[/b] - (WinMad) -- C:\WINDOWS\SysNative\drivers\winmad.sys (Mellanox)
DRV:[b]64bit:[/b] - (ndfltr) -- C:\WINDOWS\SysNative\drivers\ndfltr.sys (Mellanox)
DRV:[b]64bit:[/b] - (WinVerbs) -- C:\WINDOWS\SysNative\drivers\winverbs.sys (Mellanox)
DRV:[b]64bit:[/b] - (UrsSynopsys) -- C:\WINDOWS\SysNative\drivers\urssynopsys.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UrsChipidea) -- C:\WINDOWS\SysNative\drivers\urschipidea.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (ufxsynopsys) -- C:\WINDOWS\SysNative\drivers\ufxsynopsys.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Ufx01000) -- C:\WINDOWS\SysNative\drivers\ufx01000.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UfxChipidea) -- C:\WINDOWS\SysNative\drivers\UfxChipidea.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UrsCx01000) -- C:\WINDOWS\SysNative\drivers\urscx01000.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vpci) -- C:\WINDOWS\SysNative\drivers\vpci.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WindowsTrustedRT) -- C:\WINDOWS\SysNative\drivers\WindowsTrustedRT.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (WindowsTrustedRTProxy) -- C:\WINDOWS\SysNative\drivers\WindowsTrustedRTProxy.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (intelpep) -- C:\WINDOWS\SysNative\drivers\intelpep.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UcmCx0101) -- C:\WINDOWS\SysNative\drivers\UcmCx.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (ahcache) -- C:\WINDOWS\SysNative\drivers\ahcache.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\WINDOWS\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TsUsbGD) -- C:\WINDOWS\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (MsLldp) -- C:\WINDOWS\SysNative\drivers\mslldp.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (NdisImPlatform) -- C:\WINDOWS\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (NdisVirtualBus) -- C:\WINDOWS\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Ndu) -- C:\WINDOWS\SysNative\drivers\Ndu.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (vhf) -- C:\WINDOWS\SysNative\drivers\vhf.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (UdeCx) -- C:\WINDOWS\SysNative\drivers\Udecx.sys ()
DRV:[b]64bit:[/b] - (genericusbfn) -- C:\WINDOWS\SysNative\drivers\genericusbfn.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (CapImg) -- C:\WINDOWS\SysNative\drivers\capimg.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (bthhfhid) -- C:\WINDOWS\SysNative\drivers\BthhfHid.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BthAvrcpTg) -- C:\WINDOWS\SysNative\drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (kdnic) -- C:\WINDOWS\SysNative\drivers\kdnic.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (mshidumdf) -- C:\WINDOWS\SysNative\drivers\mshidumdf.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (hidi2c) -- C:\WINDOWS\SysNative\drivers\hidi2c.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (acpipagr) -- C:\WINDOWS\SysNative\drivers\acpipagr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (CompositeBus) -- C:\WINDOWS\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (acpitime) -- C:\WINDOWS\SysNative\drivers\acpitime.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (netvsc) -- C:\WINDOWS\SysNative\drivers\netvsc.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (storqosflt) -- C:\WINDOWS\SysNative\drivers\storqosflt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Synth3dVsc) -- C:\WINDOWS\SysNative\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (hyperkbd) -- C:\WINDOWS\SysNative\drivers\hyperkbd.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BasicRender) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (BasicDisplay) -- C:\WINDOWS\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (FileCrypt) -- C:\WINDOWS\SysNative\drivers\filecrypt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (npsvctrig) -- C:\WINDOWS\SysNative\drivers\npsvctrig.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (dmvsc) -- C:\WINDOWS\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (HyperVideo) -- C:\WINDOWS\SysNative\drivers\HyperVideo.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (gencounter) -- C:\WINDOWS\SysNative\drivers\vmgencounter.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (xboxgip) -- C:\WINDOWS\SysNative\drivers\xboxgip.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (xinputhid) -- C:\WINDOWS\SysNative\drivers\xinputhid.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (MMCSS) -- C:\WINDOWS\SysNative\drivers\mmcss.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (condrv) -- C:\WINDOWS\SysNative\drivers\condrv.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (IoQos) -- C:\WINDOWS\SysNative\drivers\ioqos.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (aswSP) -- C:\WINDOWS\SysNative\drivers\aswsp.sys (Avast Software s.r.o.)
DRV:[b]64bit:[/b] - (iaLPSSi_I2C) -- C:\WINDOWS\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (bcmfn2) -- C:\WINDOWS\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)
DRV:[b]64bit:[/b] - (iaLPSSi_GPIO) -- C:\WINDOWS\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (aswStm) -- C:\WINDOWS\SysNative\drivers\aswStm.sys (Avast Software s.r.o.)
DRV:[b]64bit:[/b] - (aswVmm) -- C:\WINDOWS\SysNative\drivers\aswVmm.sys ()
DRV:[b]64bit:[/b] - (aswMonFlt) -- C:\WINDOWS\SysNative\drivers\aswMonFlt.sys (Avast Software s.r.o.)
DRV:[b]64bit:[/b] - (aswRvrt) -- C:\WINDOWS\SysNative\drivers\aswRvrt.sys ()
DRV:[b]64bit:[/b] - (aswHwid) -- C:\WINDOWS\SysNative\drivers\aswHwid.sys ()
DRV:[b]64bit:[/b] - (aswRdr) -- C:\WINDOWS\SysNative\drivers\aswRdr2.sys (Avast Software s.r.o.)
DRV:[b]64bit:[/b] - (aswSnx) -- C:\WINDOWS\SysNative\drivers\aswSnx.sys (Avast Software s.r.o.)
DRV:[b]64bit:[/b] - (Sftplay) -- C:\WINDOWS\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Sftredir) -- C:\WINDOWS\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Sftvol) -- C:\WINDOWS\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (Sftfs) -- C:\WINDOWS\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (USBAAPL64) -- C:\WINDOWS\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:[b]64bit:[/b] - (GEARAspiWDM) -- C:\WINDOWS\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:[b]64bit:[/b] - (RimVSerPort) -- C:\WINDOWS\SysNative\drivers\RimSerial_AMD64.sys (Research in Motion Ltd)
DRV:[b]64bit:[/b] - (PCDSRVC{F36B3A4C-F95654BD-06000000}_0) -- c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms (PC-Doctor, Inc.)
DRV:[b]64bit:[/b] - (NVNET) -- C:\WINDOWS\SysNative\drivers\nvmf6264.sys (NVIDIA Corporation)
DRV - (swenum) -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys (Microsoft Corporation)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{35E9854B-BD9A-4D38-9BE7-0756CAFD8B82}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{35E9854B-BD9A-4D38-9BE7-0756CAFD8B82}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://fr.yahoo.com/?fr=hp-avast&type=avastbcl
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKCU\..\SearchScopes\{35E9854B-BD9A-4D38-9BE7-0756CAFD8B82}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect_x86_64: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@rim.com/npappworld: C:\Program Files (x86)\Research In Motion Limited\Plug-in du navigateur BlackBerry App World\npappworld.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@lightspark.github.com/Lightspark;version=1: C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015/12/11 10:56:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{58CAB265-FA8B-46bc-8E7B-CF0D5153C65D}: C:\Program Files (x86)\Tomabo\YouTube Video Downloader Pro\YTVDP_FF.xpi [2013/05/13 12:09:58 | 000,009,992 | ---- | M] ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.7.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.7.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 31.7.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 31.7.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\arslan\AppData\Roaming\IDM\idmmzcc5

[2014/12/15 17:00:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\arslan\AppData\Roaming\mozilla\Extensions
[2011/02/12 14:35:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\arslan\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2014/12/31 20:41:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\arslan\AppData\Roaming\mozilla\Firefox\Profiles\rigeu5me.default\extensions
[2014/11/03 14:00:38 | 000,000,000 | ---D | M] (multirevenuegooglemailcom) -- C:\Users\arslan\AppData\Roaming\mozilla\Firefox\Profiles\rigeu5me.default\extensions\multirevenue@googlemail.com
[2013/08/10 19:21:24 | 000,002,329 | ---- | M] () -- C:\Users\arslan\AppData\Roaming\mozilla\firefox\profiles\rigeu5me.default\searchplugins\amazon.xml
[2014/02/15 11:27:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/03/30 11:21:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2012/01/30 19:59:08 | 000,000,000 | ---D | M] (z) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{f8110dde-23e7-fa1b-60e2-652121b2c23a}
File not found (No name found) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\EXTENSIONS\{45ABA4D5-F844-43BB-8B47-85B6E5F25B7F}
File not found (No name found) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\EXTENSIONS\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
File not found (No name found) -- C:\PROGRAM FILES (X86)\NOSIBAY\BUBBLE DOCK\EXTENSIONS\FFSURFMATCH
[2015/12/11 10:56:08 | 000,000,000 | ---D | M] (Avast Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
File not found (No name found) -- C:\USERS\ARSLAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RIGEU5ME.DEFAULT\EXTENSIONS\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
File not found (No name found) -- C:\USERS\ARSLAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RIGEU5ME.DEFAULT\EXTENSIONS\39ED7C16-185D-4F88-B976-666D4928BA01@FE4550C1-7A4F-4A62-AD1C-45E0AFDF81A4.COM
File not found (No name found) -- C:\USERS\ARSLAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RIGEU5ME.DEFAULT\EXTENSIONS\ABB@AMAZON.COM
File not found (No name found) -- C:\USERS\ARSLAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RIGEU5ME.DEFAULT\EXTENSIONS\CROSSRIDERAPP12765@CROSSRIDER.COM
File not found (No name found) -- C:\USERS\ARSLAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RIGEU5ME.DEFAULT\EXTENSIONS\FFXTLBR@BABYLON.COM
File not found (No name found) -- C:\USERS\ARSLAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RIGEU5ME.DEFAULT\EXTENSIONS\TYLERKEITH11@AOL.COM
[2011/03/30 11:21:08 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2015/11/18 16:57:04 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\WINDOWS\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (Avast Software s.r.o.)
O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (Avast Software s.r.o.)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [Adobe Creative Cloud] C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKCU..\Run: [OneDrive] C:\Users\arslan\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O4 - Startup: C:\Users\arslan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk = C:\Program Files (x86)\LimeWire\LimeWire.exe (Lime Wire, LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:[b]64bit:[/b] - Extra context menu item: Download video on this page - C:\Program Files (x86)\Tomabo\YouTube Video Downloader Pro\YTVDP_IE.dll (Tomabo)
O8:[b]64bit:[/b] - Extra context menu item: Download video this links to - C:\Program Files (x86)\Tomabo\YouTube Video Downloader Pro\YTVDP_IE.dll (Tomabo)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download video on this page - C:\Program Files (x86)\Tomabo\YouTube Video Downloader Pro\YTVDP_IE.dll (Tomabo)
O8 - Extra context menu item: Download video this links to - C:\Program Files (x86)\Tomabo\YouTube Video Downloader Pro\YTVDP_IE.dll (Tomabo)
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Download Video - {D4B2B40A-A2BB-433F-910A-5C63D6D83E56} - C:\Program Files (x86)\Tomabo\YouTube Video Downloader Pro\YTVDP_IE.dll (Tomabo)
O9 - Extra 'Tools' menuitem : Download video on this page - {D4B2B40A-A2BB-433F-910A-5C63D6D83E56} - C:\Program Files (x86)\Tomabo\YouTube Video Downloader Pro\YTVDP_IE.dll (Tomabo)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab (RIM AxLoader)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{c4493392-b692-45c1-bbb9-71be2f0ef3ad}: DhcpNameServer = 192.168.0.254
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\WINDOWS\SysNative\tbauth.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\WINDOWS\SysWOW64\tbauth.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\WINDOWS\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - File not found
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/04/27 13:58:32 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] dosvc - C:\WINDOWS\SysNative\dosvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wlidsvc - C:\WINDOWS\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DcpSvc - C:\WINDOWS\SysNative\dcpsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\WINDOWS\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NetSetupSvc - C:\WINDOWS\SysNative\NetSetupSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] dmwappushservice - C:\WINDOWS\SysNative\dmwappushsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblGameSave - C:\WINDOWS\SysNative\XblGameSave.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XboxNetApiSvc - C:\WINDOWS\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UsoSvc - C:\WINDOWS\SysNative\usocore.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UserManager - C:\WINDOWS\SysNative\usermgr.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] lfsvc - C:\WINDOWS\SysNative\lfsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DmEnrollmentSvc - C:\WINDOWS\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblAuthManager - C:\WINDOWS\SysNative\XblAuthManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] RetailDemo - C:\WINDOWS\SysNative\RDXService.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\WINDOWS\SysNative\DeviceSetupManager.dll (Microsoft Corporation)

MsConfig:64bit - StartUpFolder: C:^Users^arslan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^La Chaîne Météo.lnk - - File not found
MsConfig:64bit - StartUpFolder: C:^Users^arslan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk - C:\Program Files (x86)\LimeWire\LimeWire.exe - (Lime Wire, LLC)
MsConfig:64bit - StartUpFolder: C:^Users^arslan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe - ()
MsConfig:64bit - StartUpReg: [b]APSDaemon[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: [b]avast5[/b] - hkey= - key= - C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
MsConfig:64bit - StartUpReg: [b]iTunesHelper[/b] - hkey= - key= - File not found
MsConfig:64bit - StartUpReg: [b]LMab1err[/b] - hkey= - key= - C:\Program Files (x86)\Lexmark\ErrorApp\lmab1err.exe ()
MsConfig:64bit - StartUpReg: [b]LMADEmon[/b] - hkey= - key= - C:\Program Files (x86)\Lexmark S310 Series\LMADEmon.exe ()
MsConfig:64bit - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: [b]SmartMenu[/b] - hkey= - key= - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
MsConfig:64bit - StartUpReg: [b]Sony PC Companion[/b] - hkey= - key= - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Sony)
MsConfig:64bit - State: "services" - Reg Error: Key error.
MsConfig:64bit - State: "startup" - Reg Error: Key error.

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - U
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C49181C5-51A7-39B8-A058-B35C7BAD6E1F} - .NET Framework
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\inf\unregmp2.exe /ShowWMP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D3D70DDE-B3B4-33DE-A8CD-808A85D68682} - .NET Framework
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:[b]64bit:[/b] vidc.ffds - ff_vfw.dll ()
Drivers32: msacm.divxa32 - C:\WINDOWS\SysWow64\DivXa32.acm (Packed With Joy !)
Drivers32: msacm.l3acm - C:\WINDOWS\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\SysWow64\lameACM.acm (http://www.mp3dev.org/)
Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.ffds - C:\WINDOWS\SysWow64\ff_vfw.dll ()
Drivers32: vidc.lags - C:\WINDOWS\SysWow64\Lagarith.dll ( )
Drivers32: vidc.x264 - C:\WINDOWS\SysWow64\x264vfw.dll (x264vfw project)
Drivers32: vidc.xvid - C:\WINDOWS\SysWow64\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2016/06/12 23:25:33 | 022,851,472 | ---- | C] (Malwarebytes ) -- C:\Users\arslan\Desktop\mbam-setup-2.2.1.1043.exe
[2016/06/12 22:42:14 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\arslan\Desktop\OTL.exe
[2016/06/12 21:45:22 | 000,000,000 | ---D | C] -- C:\Users\arslan\Desktop\C.V divers
[2016/06/12 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\arslan\AppData\Roaming\Tomabo
[2016/06/12 21:30:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Video Downloader Pro
[2016/06/12 21:30:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tomabo
[2016/06/12 20:34:17 | 000,000,000 | ---D | C] -- C:\Users\arslan\Start Menu
[3 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Users\arslan\AppData\Local\*.tmp files -> C:\Users\arslan\AppData\Local\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

File not found -- C:\Users\arslan\Desktop\makeover..
[2016/06/12 23:36:18 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\ARSLAN-HP_arslan_HistoryPrediction.bin
[2016/06/12 23:32:07 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2016/06/12 23:26:07 | 022,851,472 | ---- | M] (Malwarebytes ) -- C:\Users\arslan\Desktop\mbam-setup-2.2.1.1043.exe
[2016/06/12 23:17:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\arslan\Desktop\OTL.exe
[2016/06/12 23:07:20 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2016/06/12 23:07:18 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys
[2016/06/12 23:07:18 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2016/06/12 23:05:17 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2016/06/12 23:05:13 | 3220,672,512 | -HS- | M] () -- C:\hiberfil.sys
[2016/06/12 23:00:07 | 000,001,387 | ---- | M] () -- C:\Users\arslan\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2016/06/12 23:00:07 | 000,001,253 | ---- | M] () -- C:\Users\arslan\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2016/06/12 23:00:06 | 000,001,363 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2016/06/12 22:56:37 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2016/06/12 22:51:39 | 000,000,001 | ---- | M] () -- C:\WINDOWS\SysWow64\fr.html
[2016/06/12 22:49:42 | 003,677,248 | ---- | M] () -- C:\Users\arslan\Desktop\adwcleaner_5.119.exe
[2016/06/12 22:48:20 | 000,001,096 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2016/06/12 21:24:11 | 000,003,908 | ---- | M] () -- C:\Users\arslan\Desktop\tomabo-youtube-video-downloader-pro-v3-7-10-incl-keygen-and-patch.torrent
[2016/06/12 20:56:23 | 000,001,173 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016/06/12 18:13:27 | 002,124,440 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2016/06/12 18:13:27 | 000,928,450 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat
[2016/06/12 18:13:27 | 000,825,204 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2016/06/12 18:13:27 | 000,197,210 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat
[2016/06/12 18:13:27 | 000,171,664 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2016/06/09 21:02:05 | 000,000,336 | ---- | M] () -- C:\WINDOWS\tasks\HPCeeScheduleForarslan.job
[2016/05/31 16:08:23 | 000,000,544 | ---- | M] () -- C:\WINDOWS\tasks\PCDRScheduledMaintenance.job
[3 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Users\arslan\AppData\Local\*.tmp files -> C:\Users\arslan\AppData\Local\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

File not found -- C:\Users\arslan\Desktop\makeover..
[2016/06/12 23:32:07 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2016/06/12 23:06:13 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\ARSLAN-HP_arslan_HistoryPrediction.bin
[2016/06/12 22:46:34 | 003,677,248 | ---- | C] () -- C:\Users\arslan\Desktop\adwcleaner_5.119.exe
[2016/06/12 21:24:07 | 000,003,908 | ---- | C] () -- C:\Users\arslan\Desktop\tomabo-youtube-video-downloader-pro-v3-7-10-incl-keygen-and-patch.torrent
[2016/06/12 16:50:34 | 000,000,001 | ---- | C] () -- C:\WINDOWS\SysWow64\fr.html
[2016/04/12 21:55:41 | 001,767,000 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015/12/31 15:28:50 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2015/12/09 12:54:18 | 000,000,342 | ---- | C] () -- C:\WINDOWS\SysWow64\data.bin
[2015/10/05 19:20:03 | 002,027,078 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2015/09/10 07:11:03 | 001,823,232 | ---- | C] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/09/10 07:11:03 | 000,200,704 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015/07/31 00:42:17 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015/07/31 00:42:16 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015/07/30 23:50:14 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2015/07/10 07:13:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015/07/10 05:48:21 | 000,270,848 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015/07/10 05:43:42 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015/07/10 05:38:35 | 000,028,672 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015/07/10 05:37:56 | 000,081,408 | ---- | C] () -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2015/07/10 05:37:56 | 000,057,344 | ---- | C] () -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2015/07/10 05:37:44 | 000,156,672 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
[2015/07/10 05:30:30 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015/07/10 05:27:10 | 000,161,632 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015/07/10 05:26:53 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015/07/10 05:26:00 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015/07/10 05:24:36 | 000,022,016 | ---- | C] () -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2015/07/10 05:24:34 | 000,053,760 | ---- | C] () -- C:\WINDOWS\SysWow64\WpKbdLayout.dll
[2015/07/10 04:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015/07/10 03:57:08 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2015/06/20 14:04:32 | 000,000,363 | ---- | C] () -- C:\Users\arslan\Ordinateur.lnk
[2014/06/09 19:32:42 | 000,000,000 | ---- | C] () -- C:\Users\arslan\AppData\Local\{403FBFE5-6730-47CC-9E87-2C496210AE24}
[2013/12/19 14:48:57 | 000,000,132 | ---- | C] () -- C:\Users\arslan\AppData\Roaming\WB.CFG
[2013/05/04 16:39:11 | 000,024,928 | ---- | C] () -- C:\Users\arslan\AppData\Roaming\UserTile.png
[2013/03/01 19:17:53 | 000,001,115 | ---- | C] () -- C:\Users\arslan\Documents - Raccourci.lnk
[2012/05/10 13:39:12 | 000,000,097 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2012/01/30 19:59:05 | 000,000,000 | ---- | C] () -- C:\ProgramData\56d884e6b1ed54b3787a0d9bfe9e1c05_c
[2011/12/27 18:08:40 | 000,000,008 | ---- | C] () -- C:\Users\arslan\AppData\Roaming\7npiy47ngq4jm5if.dat
[2011/10/28 22:30:00 | 000,000,017 | ---- | C] () -- C:\Users\arslan\AppData\Local\resmon.resmoncfg
[2011/02/26 23:01:51 | 000,198,656 | ---- | C] () -- C:\Users\arslan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/26 19:53:21 | 000,000,422 | ---- | C] () -- C:\Users\arslan\AppData\Roaming\wklnhst.dat

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2015/10/08 21:02:04 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\WINDOWS\SysNative\windows.storage.dll -- [2015/10/05 20:05:00 | 006,487,248 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2015/10/05 20:05:00 | 005,120,056 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\WINDOWS\SysNative\wbem\fastprox.dll -- [2015/07/10 05:18:20 | 000,995,328 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2015/07/10 05:28:52 | 000,754,688 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\WINDOWS\SysNative\wbem\wbemess.dll -- [2015/07/10 05:17:59 | 000,516,096 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2016/04/09 09:18:55 | 011,264,000 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\ieframe.dll
[3 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
Invalid Environment Variable: alluserprofile
Invalid Environment Variable: alluserprofile

[color=#A23BEC]< %appdata%\*. >[/color]
[2014/11/13 00:09:22 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\94221
[2014/12/11 17:57:31 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Adobe
[2012/07/20 22:48:02 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Apowersoft
[2011/03/23 21:03:15 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Apple Computer
[2014/01/13 19:05:45 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Audacity
[2013/12/05 15:49:45 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\AVAST Software
[2013/10/07 20:14:50 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\BitTorrent
[2013/04/13 15:54:14 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012/05/07 11:53:23 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\com.adobe.example.widget.F826D533138FC008516DC0DE4625BA08DCDBC443.1
[2011/03/12 21:43:16 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\CyberLink
[2014/03/24 18:05:48 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\DivX
[2011/12/14 04:47:49 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\DMCache
[2013/11/21 23:42:11 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\dvdcss
[2013/02/16 22:04:50 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\DVDVideoSoft
[2011/10/12 21:48:49 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\FreeAudioPack
[2011/10/12 21:55:24 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\FreeCDRipper
[2012/04/29 22:13:14 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\GetRightToGo
[2011/02/27 12:58:44 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Google
[2011/09/26 20:48:55 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Hewlett-Packard
[2014/03/24 20:23:40 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\HP Support Assistant
[2012/11/20 14:54:36 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\hpqLog
[2014/03/24 20:23:40 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\HpUpdate
[2015/10/11 10:40:54 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Identities
[2013/04/27 21:33:59 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\IDM
[2016/06/12 23:09:38 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\LimeWire
[2011/01/22 15:51:36 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Macromedia
[2014/11/12 18:50:34 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Malwarebytes
[2009/07/14 09:44:38 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Media Center Programs
[2015/10/29 15:49:34 | 000,000,000 | --SD | M] -- C:\Users\arslan\AppData\Roaming\Microsoft
[2011/02/25 14:18:38 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Mozilla
[2012/07/20 22:50:27 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\MP-Manager
[2011/08/17 16:46:12 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\MPMAN
[2013/04/27 16:00:27 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Notepad++
[2014/03/24 18:05:49 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\NVIDIA
[2011/03/30 11:26:51 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\OpenOffice.org
[2011/12/01 14:45:18 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\PhotoFiltre
[2013/11/11 21:05:41 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Samsung
[2016/06/12 23:27:52 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Skype
[2016/06/12 21:19:59 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\SoftGrid Client
[2012/05/04 14:05:32 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\SPAMfighter
[2015/08/25 13:21:52 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\TeamViewer
[2011/01/26 19:53:23 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Template
[2015/03/04 13:22:45 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Thunderbird
[2012/01/01 14:59:36 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Tific
[2016/06/12 21:35:57 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Tomabo
[2011/08/03 13:05:47 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\TP
[2014/08/31 13:24:23 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\uTorrent
[2016/02/12 23:44:32 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\vlc
[2012/08/11 19:24:01 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\WildTangent
[2011/09/24 14:23:16 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\WinBatch
[2011/04/01 22:32:42 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\Windows Live Writer
[2012/04/29 22:14:10 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\WinRAR
[2011/08/03 12:47:05 | 000,000,000 | ---D | M] -- C:\Users\arslan\AppData\Roaming\{90140011-0061-040C-0000-0000000FF1CE}

[color=#A23BEC]< %appdata%\*.exe /s >[/color]
[2011/02/12 14:35:25 | 000,163,840 | ---- | M] (Mozilla Foundation) -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\crashreporter.exe
[2011/02/12 14:35:25 | 000,196,608 | ---- | M] (Mozilla Foundation) -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\updater.exe
[2011/02/12 14:35:25 | 000,014,848 | ---- | M] () -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\xpcshell.exe
[2011/02/12 14:35:25 | 000,077,824 | ---- | M] (Mozilla Foundation) -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\xpicleanup.exe
[2011/02/12 14:35:25 | 000,266,240 | ---- | M] (Mozilla Foundation) -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\xpidl.exe
[2011/02/12 14:35:25 | 000,018,432 | ---- | M] () -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\xpt_dump.exe
[2011/02/12 14:35:25 | 000,014,336 | ---- | M] () -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\xpt_link.exe
[2011/02/12 14:35:25 | 000,073,728 | ---- | M] (Mozilla Foundation) -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner-stub.exe
[2011/02/12 14:35:25 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Users\arslan\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner.exe
[2013/04/27 18:19:09 | 000,054,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\arslan\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2012/04/29 20:11:19 | 000,117,427 | ---- | M] (Adobe Systems, Inc.) -- C:\Users\arslan\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\digitaleditions\digitaleditions.exe
[2014/01/13 14:46:08 | 000,071,894 | R--- | M] () -- C:\Users\arslan\AppData\Roaming\Microsoft\Installer\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}\GPUploader.exe
[2013/12/27 12:24:36 | 000,071,894 | R--- | M] () -- C:\Users\arslan\AppData\Roaming\Microsoft\Installer\{D4C4A751-F7F3-4DCA-B825-9AC391BFFC3F}\GPUploader.exe

[color=#A23BEC]< %systemdrive%\*. >[/color]
[2015/10/05 19:50:45 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2016/06/02 11:27:00 | 000,000,000 | -H-D | M] -- C:\$WINDOWS.~BT
[2015/11/08 16:04:47 | 000,000,000 | ---D | M] -- C:\2febd74205889687eb7e4c2e075e2216
[2013/10/09 22:37:29 | 000,000,000 | ---D | M] -- C:\a07b8384c3bc8fc8b9
[2016/06/12 22:59:49 | 000,000,000 | ---D | M] -- C:\AdwCleaner
[2016/05/26 07:36:48 | 000,000,000 | -HSD | M] -- C:\Config.Msi
[2015/07/30 23:51:49 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011/06/30 10:07:04 | 000,000,000 | RHSD | M] -- C:\hp
[2015/10/05 19:52:26 | 000,000,000 | ---D | M] -- C:\inetpub
[2015/09/10 07:51:48 | 000,000,000 | ---D | M] -- C:\Logs
[2014/12/17 18:53:12 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2015/07/31 00:44:12 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2016/06/12 22:55:11 | 000,000,000 | R--D | M] -- C:\Program Files
[2016/06/12 22:59:57 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2016/06/12 23:00:06 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2016/04/10 00:52:32 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012/10/18 19:52:37 | 000,000,000 | ---D | M] -- C:\Sharing Downloads
[2014/03/25 19:47:34 | 000,000,000 | ---D | M] -- C:\swsetup
[2016/06/12 21:30:22 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011/01/22 15:50:17 | 000,000,000 | -H-D | M] -- C:\SYSTEM.SAV
[2013/12/09 19:45:15 | 000,000,000 | ---D | M] -- C:\temp
[2012/10/18 19:51:05 | 000,000,000 | ---D | M] -- C:\toolbarImages
[2015/10/25 16:41:34 | 000,000,000 | R--D | M] -- C:\Users
[2016/04/29 00:18:13 | 000,000,000 | ---D | M] -- C:\WINDOWS

[color=#A23BEC]< %systemdrive%\*.exe >[/color]
[2007/11/07 09:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

[color=#A23BEC]< %programfiles%\*. >[/color]
[2013/03/01 12:46:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
[2010/07/08 17:47:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Activation Assistant for the 2007 Microsoft Office suites
[2014/12/11 17:55:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2013/04/13 15:54:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe Download Assistant
[2011/10/25 17:29:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AIST
[2016/06/12 22:59:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Amazon
[2012/07/20 22:47:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apowersoft
[2013/07/06 17:40:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2014/09/19 15:07:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2013/11/11 20:04:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cobian Backup 11
[2015/12/11 10:52:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2013/12/09 21:02:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Convar
[2013/11/11 20:50:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
[2014/04/04 16:07:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
[2013/03/01 20:09:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DsNET Corp
[2011/01/27 23:14:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\eRightSoft
[2012/02/25 12:11:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Firebird
[2013/12/06 20:22:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2015/09/16 23:22:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GUMD190.tmp
[2014/03/28 21:22:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hewlett-Packard
[2010/07/08 17:46:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hp
[2012/05/04 16:23:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Games
[2014/08/28 23:27:45 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2011/12/14 11:51:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Download Manager
[2016/05/13 23:35:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2015/03/08 12:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2011/02/12 14:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2013/03/01 12:48:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lexmark
[2013/03/01 12:48:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lexmark S310 Series
[2011/02/12 14:35:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LimeWire
[2011/12/24 20:07:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LP
[2016/06/12 23:05:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2013/03/01 17:51:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2011/08/03 13:09:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Analysis Services
[2015/05/13 18:56:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Application Virtualization Client
[2014/12/17 18:53:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2016/01/14 22:44:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2014/11/13 19:09:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server
[2010/07/08 18:19:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2013/11/03 13:35:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio
[2013/11/03 13:51:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2014/11/13 19:06:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
[2015/10/05 19:33:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2012/02/25 12:11:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Modulo-Planner
[2013/11/24 20:40:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2015/06/02 19:21:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2015/06/02 13:16:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Thunderbird
[2015/10/05 19:52:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2011/01/23 23:16:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2013/04/27 16:00:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Notepad++
[2015/12/19 16:13:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2012/10/18 19:52:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OneStopSoft.com
[2011/01/22 15:50:34 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Online Services
[2011/01/27 23:19:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenCandyDemoInstaller
[2011/03/30 11:21:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenOffice.org 3
[2013/01/26 14:54:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PlayerPlus
[2014/09/19 15:04:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
[2010/07/08 17:43:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2015/10/05 19:52:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2011/12/16 12:37:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Research In Motion Limited
[2016/05/26 07:36:31 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2013/06/05 10:40:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Sony
[2014/03/15 12:51:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Sony Ericsson
[2010/07/08 18:02:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Symantec
[2010/07/08 17:43:32 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
[2016/06/12 21:30:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Tomabo
[2014/11/21 20:34:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Total Video Converter
[2013/04/27 16:25:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Trend Micro
[2009/07/14 06:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2013/11/03 20:56:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Utilitaire de configuration iPhone
[2012/02/02 17:18:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
[2011/10/03 17:54:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WildTangent Games
[2015/09/10 07:08:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2013/04/27 20:11:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2015/10/05 19:33:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2015/09/10 07:08:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2016/03/16 17:26:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2015/07/31 00:42:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2015/09/10 07:08:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2016/03/16 17:26:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2015/10/05 19:33:30 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
[2015/07/31 00:42:06 | 000,000,000 | --SD | M] -- C:\Program Files (x86)\WindowsPowerShell
[2013/04/21 16:22:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR

[color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color]
[2008/06/06 23:03:52 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\CyberLink\PowerDirector\EventLog.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2015/09/10 08:16:18 | 000,271,867 | ---- | M] () MD5=1708C42BE5FE35E318861F737D76D93F -- C:\WINDOWS\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16384_none_6409c31348ca7b5e\explorer.exe
[2015/11/25 07:12:23 | 004,047,288 | ---- | M] (Microsoft Corporation) MD5=4EEB94F7E1ABAB5503EEFEA7F2394370 -- C:\WINDOWS\SysWOW64\explorer.exe
[2015/11/25 07:12:23 | 004,047,288 | ---- | M] (Microsoft Corporation) MD5=4EEB94F7E1ABAB5503EEFEA7F2394370 -- C:\WINDOWS\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16603_none_640d784b48c6fd34\explorer.exe
[2015/09/10 08:05:38 | 000,371,555 | ---- | M] () MD5=98ADE1F7784610D9C4348074BED44E35 -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16384_none_59b518c11469b963\explorer.exe
[2015/12/12 19:54:56 | 000,197,570 | ---- | M] () MD5=9ED432549BFDBECD1F2F90DA05143EF4 -- C:\WINDOWS\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16431_none_640b2f9348c91d1b\explorer.exe
[2015/11/25 07:42:36 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=D2EAEC106F183572317AF7D68E381063 -- C:\WINDOWS\explorer.exe
[2015/11/25 07:42:36 | 004,532,304 | ---- | M] (Microsoft Corporation) MD5=D2EAEC106F183572317AF7D68E381063 -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16603_none_59b8cdf914663b39\explorer.exe
[2015/12/12 19:43:32 | 000,153,087 | ---- | M] () MD5=D88CD55F1D579656CE41F7BDC2E6FC54 -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.10240.16431_none_59b6854114685b20\explorer.exe

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2015/07/10 05:29:36 | 000,708,608 | ---- | M] (Microsoft Corporation) MD5=415414A10B77B9F56EB561C23806431D -- C:\WINDOWS\SysWOW64\netlogon.dll
[2015/07/10 05:29:36 | 000,708,608 | ---- | M] (Microsoft Corporation) MD5=415414A10B77B9F56EB561C23806431D -- C:\WINDOWS\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10240.16384_none_100cd3440707f4f6\netlogon.dll
[2015/07/10 05:19:04 | 000,836,096 | ---- | M] (Microsoft Corporation) MD5=5E9439E5FA71649335D8FB0090843062 -- C:\WINDOWS\SysNative\netlogon.dll
[2015/07/10 05:19:04 | 000,836,096 | ---- | M] (Microsoft Corporation) MD5=5E9439E5FA71649335D8FB0090843062 -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10240.16384_none_05b828f1d2a732fb\netlogon.dll
[2016/04/27 07:20:38 | 000,847,360 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\netlogon.dll
[2016/04/27 07:20:38 | 000,847,360 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10586.122_none_6ad60f2e96f10ba3\netlogon.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2015/07/10 05:18:32 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=5F6D4F12EA33BFC0F0F8CEEAC332AB2B -- C:\WINDOWS\SysNative\userinit.exe
[2015/07/10 05:18:32 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=5F6D4F12EA33BFC0F0F8CEEAC332AB2B -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10240.16384_none_e4292bc46c5d42af\userinit.exe
[2015/07/10 05:29:03 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A89C18F5E6D8981D5E937B325290915A -- C:\WINDOWS\SysWOW64\userinit.exe
[2015/07/10 05:29:03 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A89C18F5E6D8981D5E937B325290915A -- C:\WINDOWS\WinSxS\wow64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10240.16384_none_ee7dd616a0be04aa\userinit.exe
[2015/10/30 09:09:14 | 000,030,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\userinit.exe
[2015/10/30 09:09:14 | 000,030,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10586.0_none_68ae526e7c072b3c\userinit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2015/11/14 13:20:47 | 000,060,437 | ---- | M] () MD5=0EF4781711B4337C5411A9FD3A8F0A9B -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16485_none_77c474f56f9ddd17\winlogon.exe
[2015/09/10 08:12:39 | 000,067,130 | ---- | M] () MD5=8020A193D06ADC02048CAC55A1753B08 -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16384_none_77c372c56f9ec699\winlogon.exe
[2016/01/05 03:57:35 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=DA32F9BFA7851AD4247353EA03755DE6 -- C:\WINDOWS\SysNative\winlogon.exe
[2016/01/05 03:57:35 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=DA32F9BFA7851AD4247353EA03755DE6 -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16644_none_77c6cec36f9bac1a\winlogon.exe
[2016/01/15 00:33:12 | 000,051,648 | ---- | M] () MD5=DAC9E248300B1FD47B776ACB14224F26 -- C:\WINDOWS\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16590_none_77c554f96f9d1e4c\winlogon.exe
[2016/03/10 14:07:16 | 000,960,480 | ---- | M] (MalwareBytes) MD5=F86A4139730504047F52CCFB8C47E9F5 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe
[2016/04/27 07:20:38 | 000,584,704 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\winlogon.exe
[2016/04/27 07:20:38 | 000,584,704 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10586.63_none_f3dc0aaa859f8abd\winlogon.exe

[color=#A23BEC]< >[/color]

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:56E2E879

< End of report >

Publicité


Signaler le contenu de ce document

Publicité