Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by Admin (administrator) on PC-PORTABLE on 30-06-2015 22:28:29
Running from D:\Users\Admin\Downloads
Loaded Profiles: Admin (Available Profiles: Admin & flo)
Platform: Windows 8.1 (X64) OS Language: Français (France)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_190.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_190.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2883582482-3555326582-3093543286-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-2883582482-3555326582-3093543286-1001\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_190_Plugin.exe [927920 2015-06-23] (Adobe Systems Incorporated)
HKU\S-1-5-21-2883582482-3555326582-3093543286-1001\...\MountPoints2: {b092c2c0-b500-11e4-825b-60a44c73f7b6} - "G:\Memorybar.exe" 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2883582482-3555326582-3093543286-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2883582482-3555326582-3093543286-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/fr-fr/?ocid=iehp
HKU\S-1-5-21-2883582482-3555326582-3093543286-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=fr-FR&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Ffr.yhs4.search.yahoo.com%2Fyhs%2Fweb%3Fhspart%3Diry%26hsimp%3Dyhs%2Dfullyhosted%5F003%26type%3Dwncy%5Fclu%5F15%5F20%26param1%3D1%26param2%3Df%253D1%2526b%253DIE%2526cc%253Dfr%2526pa%253DWincy%2526cd%253D2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyBtA0FyB0ByC0BtCzyyEtN0D0Tzu0StCtBtBzztN1L2XzutAtFtCtDtFyCtFtCtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyEzy0E0CyE0F0EzytGtAyEyEyEtG0E0F0C0CtGyDtC0A0DtGyDzz0ByDyCyCzyyByBtByCtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBzz0CyDtCyCyCyCtGzy0D0A0AtGyEtD0EtCtG0BtDtA0EtGzyyD0EzyyE0DtA0EtDzztC0F2QtN0A0LzuyEtN1B2Z1V1T1S1NzuyByDyB%2526cr%253D587738433%2526a%253Dwncy%5Fclu%5F15%5F20%2526os%253DWindows%208.1&OSP=http%3A%2F%2Ffr.yhs4.search.yahoo.com%2Fyhs%2Fsearch%3Fhspart%3Diry%26hsimp%3Dyhs%2Dfullyhosted%5F003%26type%3Dwncy%5Fclu%5F15%5F20%26param1%3D1%26param2%3Df%253D4%2526b%253DIE%2526cc%253Dfr%2526pa%253DWincy%2526cd%253D2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyBtA0FyB0ByC0BtCzyyEtN0D0Tzu0StCtBtBzztN1L2XzutAtFtCtDtFyCtFtCtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyEzy0E0CyE0F0EzytGtAyEyEyEtG0E0F0C0CtGyDtC0A0DtGyDzz0ByDyCyCzyyByBtByCtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBzz0CyDtCyCyCyCtGzy0D0A0AtGyEtD0EtCtG0BtDtA0EtGzyyD0EzyyE0DtA0EtDzztC0F2QtN0A0LzuyEtN1B2Z1V1T1S1NzuyByDyB%2526cr%253D587738433%2526a%253Dwncy%5Fclu%5F15%5F20%2526os%253DWindows%208.1%26p%3D%7BsearchTerms%7D
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2883582482-3555326582-3093543286-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2883582482-3555326582-3093543286-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: CheaapME -> {D01ED302-C29D-4356-94DF-68BFB110DBE0} -> C:\Program Files (x86)\CheaapME\XOkOg00P62r0JE.x64.dll [2015-06-24] ()
BHO: CHeapMe -> {FBB0C3E0-0369-4A7B-BBCB-A53A797BE890} -> C:\Program Files (x86)\CHeapMe\o7fNxytg9gBTJZ.x64.dll [2015-06-24] ()
BHO-x32: CheaapME -> {D01ED302-C29D-4356-94DF-68BFB110DBE0} -> C:\Program Files (x86)\CheaapME\XOkOg00P62r0JE.dll [2015-06-24] ()
BHO-x32: CHeapMe -> {FBB0C3E0-0369-4A7B-BBCB-A53A797BE890} -> C:\Program Files (x86)\CHeapMe\o7fNxytg9gBTJZ.dll [2015-06-24] ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2E923306-8324-4E39-87C5-ED3C9D078FF8}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{80AE6B39-9DD0-4293-80DB-586F2E041C12}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{C4CFD088-D56A-4F2F-989A-31D5AF871758}: [DhcpNameServer] 172.20.10.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default
FF DefaultSearchEngine: Search Provided by Yahoo
FF Homepage: hxxp://www.google.fr/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll [2015-06-23] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_190.dll [2015-06-23] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File
FF user.js: detected! => C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\user.js [2015-06-11]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll [2014-12-17] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\searchplugins\search-provided-by-yahoo.xml [2015-05-13]
FF Extension: SSaveNNewaAppzz - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\Extensions\98C@QPfWoM.net [2015-06-15]
FF Extension: bestadblocker - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\Extensions\aJEHFdJ9@5.org [2015-06-04]
FF Extension: PRiceMMinus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\Extensions\C@X8At3.net [2015-06-04]
FF Extension: CheiappMea - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\Extensions\DHH2OnrU@hj.net [2015-06-24]
FF Extension: Browser AdBlocker - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\Extensions\lkrqsorrdnkofrf@nkswr_gyxtef.edu [2015-06-11]
FF Extension: PriciEMinus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\a2bfatdy.default\Extensions\rTro@LX.com [2015-06-04]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 2969302e; c:\Program Files (x86)\LibraryEngine\LibraryEngine.dll [1747456 2015-06-23] () [File not signed]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 NMSAccessU; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R1 {38f9a7a9-76b1-4da2-9a2f-bb178cdbe11e}Gw64; C:\Windows\System32\drivers\{38f9a7a9-76b1-4da2-9a2f-bb178cdbe11e}Gw64.sys [48784 2015-06-11] (StdLib)
S3 RtlWlanu; \SystemRoot\system32\DRIVERS\rtwlanu.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-30 22:28 - 2015-06-30 22:28 - 00000000 ____D C:\FRST
2015-06-30 22:02 - 2015-06-30 22:02 - 00000000 ____D C:\Users\Admin\AppData\Local\GWX
2015-06-24 22:06 - 2015-06-24 22:06 - 00000000 ____D C:\Program Files (x86)\RealtimeBoard Extension
2015-06-24 22:06 - 2015-06-24 22:06 - 00000000 ____D C:\Program Files (x86)\CheiappMea
2015-06-24 22:06 - 2015-06-24 22:06 - 00000000 ____D C:\Program Files (x86)\CHeapMe
2015-06-24 22:06 - 2015-06-24 22:06 - 00000000 ____D C:\Program Files (x86)\CheaapME
2015-06-24 21:45 - 2015-06-30 22:21 - 00402238 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-23 18:59 - 2015-06-23 18:59 - 00000000 ____D C:\Program Files (x86)\LibraryEngine
2015-06-23 18:58 - 2015-06-23 18:59 - 00000000 ____D C:\ProgramData\f4406cc800001706
2015-06-15 12:04 - 2015-06-15 12:04 - 00000000 ____D C:\Program Files (x86)\SeaveuNewaiAppz
2015-06-15 12:04 - 2015-06-15 12:04 - 00000000 ____D C:\Program Files (x86)\SaveuNewaAppz
2015-06-15 12:03 - 2015-06-15 12:03 - 00000000 ____D C:\Program Files (x86)\SSaveNNewaAppzz
2015-06-11 22:37 - 2015-06-11 22:37 - 00000000 ____D C:\Users\Admin\AppData\Local\Google
2015-06-11 22:04 - 2015-06-11 22:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-11 22:01 - 2015-06-30 22:06 - 00000938 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-06-11 22:01 - 2015-06-30 22:06 - 00000934 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-06-11 22:01 - 2015-06-23 18:28 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-11 22:01 - 2015-06-11 22:01 - 00003910 _____ C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-06-11 22:01 - 2015-06-11 22:01 - 00003674 _____ C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-06-11 22:01 - 2015-06-11 22:01 - 00000000 ____D C:\Users\Admin\AppData\Local\globalUpdate
2015-06-11 22:00 - 2015-06-23 18:57 - 00000000 ____D C:\Users\Admin\AppData\Local\BoBrowser
2015-06-11 22:00 - 2015-06-11 22:00 - 00003158 _____ C:\WINDOWS\System32\Tasks\Run_Bobby_Browser
2015-06-11 22:00 - 2015-06-11 06:50 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{38f9a7a9-76b1-4da2-9a2f-bb178cdbe11e}Gw64.sys
2015-06-11 21:59 - 2015-06-11 22:00 - 00006877 _____ C:\claraInstaller.txt
2015-06-11 21:44 - 2015-06-11 21:44 - 00000079 _____ C:\Program Files (x86)\prefs.js
2015-06-11 21:23 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-06-11 21:23 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-06-11 21:23 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-06-11 21:23 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-06-11 21:23 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-06-11 21:23 - 2015-04-09 00:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-06-11 21:23 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-06-11 21:23 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-06-11 21:23 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-06-11 21:23 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-06-11 21:22 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-06-11 21:22 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-06-11 21:22 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-06-11 21:22 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-06-11 21:22 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-06-11 21:22 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-06-11 21:22 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-06-11 21:22 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-06-11 21:22 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-06-11 21:22 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-06-11 21:22 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-06-11 21:22 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-06-11 21:22 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-06-11 21:22 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-06-11 21:22 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-06-11 21:22 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-06-11 21:22 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-06-11 21:22 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-06-11 21:22 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-06-11 21:22 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-06-11 21:22 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-06-11 21:22 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-06-11 21:22 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-06-11 21:22 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-06-11 21:22 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-06-11 21:22 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-06-11 21:22 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-06-11 21:22 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-06-11 21:22 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-06-11 21:22 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-06-11 21:22 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-06-11 21:22 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-06-11 21:22 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-06-11 21:22 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-06-11 21:22 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-06-11 21:22 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-06-11 21:22 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-06-11 21:22 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-06-11 21:22 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-06-11 21:22 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-06-11 21:22 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-06-11 21:22 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-06-11 21:22 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-06-11 21:22 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-06-11 21:22 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-06-11 21:22 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-06-11 21:22 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-06-11 21:22 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-06-11 21:22 - 2015-04-16 08:17 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-06-11 21:22 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-06-11 21:22 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-06-11 21:22 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-06-11 21:22 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-06-11 21:22 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-06-11 21:22 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-06-11 21:22 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-06-11 21:22 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-06-11 21:22 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-06-11 21:22 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-06-11 21:22 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-06-11 21:22 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-06-11 21:22 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-06-11 21:22 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-06-11 21:22 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-06-11 21:22 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-06-11 21:22 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-06-11 21:22 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-06-11 21:22 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-06-11 21:22 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-06-11 21:22 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-06-11 21:22 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-06-09 19:38 - 2015-06-09 19:38 - 00000000 ____D C:\Users\flo\AppData\Local\GWX
2015-06-04 22:48 - 2015-06-15 12:24 - 00000000 ____D C:\Program Files (x86)\Justin Bieber
2015-06-04 22:48 - 2015-06-11 22:41 - 00000000 ____D C:\Program Files (x86)\bestadblocker
2015-06-04 22:47 - 2015-06-15 12:13 - 00000000 ____D C:\Program Files (x86)\PriciEMinus
2015-06-04 22:24 - 2015-06-24 22:06 - 00000000 ____D C:\ProgramData\1969570847681683649
2015-06-04 22:24 - 2015-06-15 12:13 - 00000000 ____D C:\Program Files (x86)\PriceMinus
2015-06-04 22:24 - 2015-06-04 22:24 - 00000000 ____D C:\Program Files (x86)\PRiceMMinus
2015-06-04 22:23 - 2015-06-11 22:23 - 00000000 ____D C:\ProgramData\{a8eccf67-5f8b-6c8a-a8ec-ccf675f83d9d}
2015-06-03 21:33 - 2015-06-03 21:50 - 00000436 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-30 22:17 - 2014-12-17 18:49 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2883582482-3555326582-3093543286-1001
2015-06-30 22:12 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-06-30 22:05 - 2014-12-17 19:11 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-06-30 22:04 - 2015-05-13 23:44 - 00003948 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{91290FDA-6BC5-4617-8840-B5018458E913}
2015-06-30 22:01 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-25 03:08 - 2013-08-22 17:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-06-23 19:05 - 2014-12-17 19:11 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-06-23 18:59 - 2015-01-31 16:03 - 00000000 ____D C:\Users\Admin\AppData\Local\Unity
2015-06-23 18:27 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-23 18:27 - 2013-08-22 16:44 - 00503432 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-06-23 18:25 - 2014-12-17 19:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-20 05:02 - 2015-02-11 15:36 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-06-20 05:02 - 2015-02-11 15:36 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-15 13:34 - 2015-02-11 15:27 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-06-15 13:34 - 2015-02-11 15:27 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-06-15 13:34 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-06-15 13:34 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-06-15 13:34 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-06-15 12:14 - 2015-02-09 13:47 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-06-15 12:10 - 2015-02-09 13:47 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-15 12:10 - 2015-01-20 21:17 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 22:01 - 2013-08-22 15:25 - 00000269 _____ C:\WINDOWS\win.ini
2015-06-09 07:21 - 2014-04-15 16:11 - 00812350 _____ C:\WINDOWS\system32\perfh00C.dat
2015-06-09 07:21 - 2014-04-15 16:11 - 00159412 _____ C:\WINDOWS\system32\perfc00C.dat
2015-06-09 07:21 - 2014-03-18 12:03 - 01824010 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-03 21:22 - 2014-12-17 18:43 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\FileManager
2015-06-03 10:59 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Camera
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\sppui
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-06-03 10:58 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-06-03 10:58 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-06-03 10:58 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-06-03 10:58 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\servicing
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ___SD C:\WINDOWS\system32\dsc
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sppui
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\setup
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\Com
2015-06-03 10:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\IME
2015-06-03 10:56 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-06-03 10:56 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-06-03 10:56 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-06-03 10:53 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\WindowsPowerShell
2015-06-03 10:53 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-06-03 10:53 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-06-03 10:53 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-06-03 10:40 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-06-02 20:12 - 2013-08-22 17:36 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2015-06-02 20:12 - 2013-08-22 17:36 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2015-06-01 21:26 - 2015-01-31 14:18 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2883582482-3555326582-3093543286-1002
2015-06-01 21:23 - 2015-02-17 18:00 - 00000000 ____D C:\WINDOWS\Minidump
2015-06-01 21:21 - 2015-05-13 07:30 - 00000000 ____D C:\Program Files\Macgo iPhone Explorer
2015-06-01 21:20 - 2015-05-13 23:47 - 00000000 ____D C:\Users\Admin\AppData\Local\Chromium

==================== Files in the root of some directories =======

2015-06-11 21:44 - 2015-06-11 21:44 - 0000079 _____ () C:\Program Files (x86)\prefs.js
2015-02-18 19:12 - 2015-02-18 19:12 - 0004096 ____H () C:\Users\Admin\AppData\Local\keyfile3.drm
2014-12-17 18:54 - 2005-12-22 04:02 - 6273282 _____ (Xzeos Software                                              ) C:\ProgramData\kiddyweb_free.exe

Files to move or delete:
====================
C:\ProgramData\kiddyweb_free.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-02 20:01

==================== End of log ============================