Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by Cyril (administrator) on PC-CYRIL on 03-07-2015 20:39:59
Running from C:\Users\Cyril\Downloads
Loaded Profiles: Cyril (Available Profiles: Cyril)
Platform: Windows 8.1 (X64) OS Language: Français (France)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(CybelSoft) C:\Program Files\ma-config.com\MaConfigAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_194.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_194.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-26] (Avast Software s.r.o.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mbot_fr_366] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2015-04-10] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5768480 2015-01-27] (IObit)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3571319914-373718637-969622834-1002\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2015-03-16] (Glarysoft Ltd)
HKU\S-1-5-21-3571319914-373718637-969622834-1002\...\MountPoints2: {5c6c3c51-d916-11e4-bf19-84a6c8d4ab42} - "G:\startme.exe" 
HKU\S-1-5-21-3571319914-373718637-969622834-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [176064 2015-05-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [154256 2015-05-12] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-26] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
BootExecute: autocheck autochk *  
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:56162;https=127.0.0.1:56162
ProxyEnable: [S-1-5-21-3571319914-373718637-969622834-1002] => Internet Explorer proxy is enabled
ProxyServer: [S-1-5-21-3571319914-373718637-969622834-1002] => http=127.0.0.1:56162;https=127.0.0.1:56162
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSERT1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSERT1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1419960767&from=smt&uid=ST750LM022XHN-M750MBB_S2UQJ9DC905761&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1419960767&from=smt&uid=ST750LM022XHN-M750MBB_S2UQJ9DC905761&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1419960767&from=smt&uid=ST750LM022XHN-M750MBB_S2UQJ9DC905761&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1419960767&from=smt&uid=ST750LM022XHN-M750MBB_S2UQJ9DC905761&q={searchTerms}
HKU\S-1-5-21-3571319914-373718637-969622834-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3571319914-373718637-969622834-1002 -> {465582AA-DDCA-4BB0-91C3-B455C9A06B46} URL = http://fr.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=402027&p={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-05-29] (IObit)
BHO: No Name -> {11111111-1111-1111-1111-110711011121} ->  No File
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2014-10-27] (RealDownloader)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-11] (Avast Software s.r.o.)
BHO-x32: No Name -> {11111111-1111-1111-1111-110711011121} ->  No File
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2014-10-27] (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2015-06-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2014-10-17] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-06-26] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Hosts: 54.225.95.126	ajakpekbmnkgnjbpajgkdhimcbeoocam
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{B1E73700-7CCA-463D-9910-4094D460D86D}: [DhcpNameServer] 89.2.0.1 89.2.0.2
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1419960767&from=smt&uid=ST750LM022XHN-M750MBB_S2UQJ9DC905761

FireFox:
========
FF ProfilePath: C:\Users\Cyril\AppData\Roaming\Mozilla\Firefox\Profiles\v9kzqqve.default-1435601419616
FF Homepage: www.google.fr
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_194.dll [2015-06-26] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll [2015-06-26] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-06-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-06-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2014-12-22] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.15 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2014-10-27] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2014-12-22] (RealPlayer Cloud)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-27] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3571319914-373718637-969622834-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Cyril\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo_ff.xml [2013-11-30]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-12-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-02-19]
FF HKLM-x32\...\Firefox\Extensions: [{338950EA-82DB-44C1-930D-0C28E023C9F0}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome: 
=======
CHR Profile: C:\Users\Cyril\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Cyril\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-28]
CHR Extension: (Google Wallet) - C:\Users\Cyril\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-23]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-11]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-26] (Avast Software s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] ()
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [344864 2015-01-27] (IObit)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit)
S2 lxeaCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 MaConfigAgent; C:\Program Files\ma-config.com\MaConfigAgent.exe [2773632 2015-06-19] (CybelSoft)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-10-26] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-12-22] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2014-10-30] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-26] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-26] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-28] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-26] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-26] ()
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-11-30] (ASUS Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1424184 2014-12-28] (Motorola Solutions, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-12-30] (Disc Soft Ltd)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2014-11-10] (IObit)
S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2015-03-31] (Sony Mobile Communications)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2014-12-27] (Glarysoft Ltd)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-28] (REALiX(tm))
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 ma-config_amd64; C:\Program Files\ma-config.com\Drivers\ma-config_amd64.sys [17568 2014-02-24] (CybelSoft)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-28] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-03-18] (Intel Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew01.sys [3354384 2015-03-18] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2014-11-10] (IObit.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32496 2013-11-30] (Synaptics Incorporated)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2014-11-10] (IObit.com)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows (R) Win 7 DDK provider)
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-03 20:39 - 2015-07-03 20:40 - 00023515 _____ C:\Users\Cyril\Downloads\FRST.txt
2015-07-03 20:39 - 2015-07-03 20:40 - 00000000 ____D C:\FRST
2015-07-03 20:39 - 2015-07-03 20:39 - 02112512 _____ (Farbar) C:\Users\Cyril\Downloads\FRST64.exe
2015-07-03 19:59 - 2014-06-27 09:43 - 00865384 _____ (ASUSTek Computer INC.) C:\Users\Cyril\Desktop\ASUS Recovery.exe
2015-07-03 19:52 - 2015-07-03 19:52 - 00196362 _____ C:\Users\Cyril\Desktop\ASUSRecovery_VER2002.zip
2015-07-03 19:44 - 2015-07-03 19:44 - 00002164 _____ C:\Users\Public\Desktop\ASUS Backtracker.lnk
2015-07-03 19:43 - 2015-07-03 19:43 - 00000000 ____D C:\Users\Cyril\Desktop\Data
2015-07-03 19:43 - 2015-07-03 19:43 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\WinRAR
2015-07-03 19:43 - 2014-04-17 19:08 - 00190064 _____ (AsusTek Computer Inc.) C:\Users\Cyril\Desktop\Setup.exe
2015-07-03 19:43 - 2013-07-22 19:05 - 00000012 _____ C:\Users\Cyril\Desktop\SilentInstall.cmd
2015-07-03 19:42 - 2015-07-03 19:42 - 11624797 _____ C:\Users\Cyril\Desktop\BackTracker_Win81_64_VER307.zip
2015-07-02 20:02 - 2015-07-02 20:02 - 00000000 ____D C:\Intel
2015-07-02 20:00 - 2015-07-02 20:01 - 292264080 _____ (NVIDIA Corporation) C:\Users\Cyril\Downloads\353.30-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-07-02 19:59 - 2015-07-02 20:01 - 131775792 _____ (Intel Corporation) C:\Users\Cyril\Downloads\win64_152824.exe
2015-07-02 19:59 - 2015-07-02 19:59 - 01853178 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-07-02 19:59 - 2015-07-02 19:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-07-02 19:59 - 2015-07-02 19:59 - 00000000 ____D C:\Users\Cyril\Intel
2015-07-02 19:59 - 2015-07-02 19:59 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\Intel Corporation
2015-07-02 19:58 - 2015-07-02 19:58 - 17535472 _____ (Intel Corporation) C:\Users\Cyril\Downloads\STOR_Win7_8_8.1_12.9.0.1001.exe
2015-07-02 19:57 - 2015-07-02 19:57 - 00000925 _____ C:\Users\Public\Desktop\Ma-Config.com - Démarrer la détection.lnk
2015-07-02 19:57 - 2015-07-02 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com
2015-07-02 19:57 - 2015-07-02 19:57 - 00000000 ____D C:\ProgramData\ma-config.com
2015-07-02 19:57 - 2015-07-02 19:57 - 00000000 ____D C:\Program Files\ma-config.com
2015-07-02 19:56 - 2015-07-02 19:56 - 05976480 _____ C:\Users\Cyril\Downloads\MaConfigx64_7_1_7_0.exe
2015-07-02 19:56 - 2015-07-02 19:56 - 00003132 _____ C:\Windows\System32\Tasks\{5845002D-AECF-4D7A-98DA-42B633EB2D08}
2015-07-02 19:55 - 2015-07-02 19:55 - 00268128 _____ C:\Users\Cyril\Downloads\MaConfig_Win.exe
2015-07-02 19:34 - 2015-07-02 19:34 - 00231760 _____ C:\Users\Cyril\Downloads\CrucialFRScan.exe
2015-07-02 19:18 - 2015-07-02 19:20 - 00315872 _____ C:\Windows\Minidump\070215-109781-01.dmp
2015-07-02 18:37 - 2015-07-02 18:37 - 00003166 _____ C:\Windows\System32\Tasks\SmartDefrag3_Startup
2015-07-02 18:37 - 2015-07-02 18:37 - 00003164 _____ C:\Windows\System32\Tasks\SmartDefrag3_Update
2015-07-02 18:37 - 2015-07-02 18:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2015-07-02 18:37 - 2014-06-04 15:17 - 00128288 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll
2015-07-02 18:29 - 2015-07-02 18:29 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-07-02 18:24 - 2015-07-02 18:24 - 00002396 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Cyril
2015-07-02 18:24 - 2015-07-02 18:24 - 00000296 _____ C:\Windows\Tasks\Uninstaller_SkipUac_Cyril.job
2015-07-02 18:21 - 2015-07-02 18:21 - 13586016 _____ (Yamicsoft) C:\Users\Cyril\Downloads\windows8manager.exe
2015-07-02 18:13 - 2015-07-02 18:13 - 00000000 ____D C:\Users\Cyril\AppData\Local\Macromedia
2015-07-02 18:08 - 2015-07-02 18:08 - 3500933120 ____H C:\GDELTEMP
2015-07-02 17:47 - 2015-07-02 17:47 - 00006544 ____N C:\bootsqm.dat
2015-07-02 17:31 - 2015-07-02 17:31 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2015-07-02 13:15 - 2015-07-02 13:33 - 00365642 _____ C:\Windows\AsDebug.log
2015-07-02 13:15 - 2015-07-02 13:33 - 00063566 _____ C:\Windows\AsCDProc.log
2015-07-02 13:01 - 2015-07-02 13:01 - 00000000 ___HD C:\$SysReset
2015-07-02 12:56 - 2015-07-02 19:17 - 858099684 _____ C:\Windows\MEMORY.DMP
2015-07-01 18:22 - 2015-07-02 13:51 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\Skype
2015-07-01 18:22 - 2015-07-01 18:22 - 00000000 ____D C:\Users\Cyril\AppData\Local\Skype
2015-07-01 18:21 - 2015-07-01 18:22 - 00000000 ____D C:\ProgramData\Skype
2015-07-01 18:21 - 2015-07-01 18:21 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-01 18:21 - 2015-07-01 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-07-01 18:16 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2015-07-01 18:16 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2015-07-01 18:16 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2015-07-01 18:16 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2015-07-01 18:16 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2015-07-01 18:16 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2015-07-01 12:19 - 2015-07-03 19:48 - 00005615 _____ C:\Windows\setupact.log
2015-07-01 12:19 - 2015-07-01 12:19 - 00000000 _____ C:\Windows\setuperr.log
2015-07-01 12:17 - 2015-07-02 19:17 - 00002936 _____ C:\Windows\PFRO.log
2015-07-01 08:33 - 2015-06-28 00:11 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-07-01 08:33 - 2015-06-26 12:10 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-07-01 08:33 - 2015-06-26 12:10 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-07-01 08:33 - 2015-06-26 12:10 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2015-07-01 08:33 - 2015-06-26 12:10 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-07-01 08:33 - 2015-06-26 12:10 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-07-01 08:33 - 2015-06-26 12:10 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-07-01 08:33 - 2015-06-26 12:10 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2015-07-01 08:33 - 2015-06-26 12:10 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys
2015-06-27 19:05 - 2015-07-02 17:34 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{712FD271-B856-47A6-949C-979550D5F935}
2015-06-27 19:00 - 2015-06-27 19:00 - 00798800 _____ C:\Users\Cyril\Downloads\PMUPokerSetup.exe.part
2015-06-27 18:10 - 2015-06-27 18:10 - 00029523 _____ C:\Users\Cyril\Downloads\hijackthis.log
2015-06-27 18:10 - 2015-06-27 18:10 - 00000000 ____D C:\Users\Cyril\AppData\Local\VS Revo Group
2015-06-27 18:10 - 2015-06-27 18:10 - 00000000 ____D C:\ProgramData\VS Revo Group
2015-06-27 18:09 - 2015-06-27 18:09 - 00388608 _____ (Trend Micro Inc.) C:\Users\Cyril\Downloads\HijackThis.exe
2015-06-27 18:08 - 2015-06-27 18:08 - 10801480 _____ (VS Revo Group ) C:\Users\Cyril\Downloads\RevoUninProSetup.exe
2015-06-27 18:01 - 2015-06-27 18:02 - 00866576 _____ (Prog ) C:\Users\Cyril\Downloads\hijackthis_hijackthis_2.exe
2015-06-27 14:12 - 2015-06-27 14:12 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-06-27 14:11 - 2015-06-27 14:11 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-06-27 14:11 - 2015-06-27 14:11 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-06-27 14:08 - 2015-06-27 14:08 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-06-27 14:07 - 2015-06-27 14:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2015-06-27 14:07 - 2015-06-27 14:07 - 06521800 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2015-06-27 14:07 - 2015-06-27 14:07 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2015-06-27 14:07 - 2015-06-27 14:07 - 01488000 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-06-27 14:07 - 2015-06-27 14:07 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-06-27 14:07 - 2015-06-27 14:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2015-06-27 14:07 - 2015-06-27 14:07 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2015-06-27 14:06 - 2015-06-27 14:06 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-06-27 14:06 - 2015-06-27 14:06 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-06-27 14:06 - 2015-06-27 14:06 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2015-06-27 14:04 - 2015-06-27 14:04 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2015-06-27 14:04 - 2015-06-27 14:04 - 00513480 _____ C:\Windows\system32\locale.nls
2015-06-27 14:04 - 2015-06-27 14:04 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-06-27 14:04 - 2015-06-27 14:04 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-06-27 14:04 - 2015-06-27 14:04 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-06-27 14:03 - 2015-06-27 14:03 - 03682304 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 02223104 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00133288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-06-27 14:03 - 2015-06-27 14:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-06-27 14:03 - 2015-06-27 14:03 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-06-27 14:03 - 2015-06-27 14:03 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-06-27 14:03 - 2015-06-27 14:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 18823168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 02485056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 01454080 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2015-06-27 14:02 - 2015-06-27 14:02 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-06-27 14:02 - 2015-06-27 14:02 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 01084416 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00952896 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-06-27 14:02 - 2015-06-27 14:02 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00551232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00473408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-06-27 14:02 - 2015-06-27 14:02 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-06-27 14:02 - 2015-06-27 14:02 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2015-06-27 14:02 - 2015-06-27 14:02 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2015-06-27 14:02 - 2015-06-27 14:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2015-06-27 14:02 - 2015-06-27 14:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2015-06-27 14:02 - 2015-06-27 14:02 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2015-06-27 14:02 - 2015-06-27 14:02 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll
2015-06-27 13:59 - 2015-06-27 13:59 - 02171904 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-06-27 13:59 - 2015-06-27 13:59 - 00672984 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-06-27 13:59 - 2015-06-27 13:59 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2015-06-27 13:59 - 2015-06-27 13:59 - 00273240 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-06-27 13:54 - 2015-06-27 13:54 - 85127168 _____ C:\Windows\system32\config\SOFTWARE.iobit
2015-06-27 13:54 - 2015-06-27 13:54 - 01081344 _____ C:\Windows\system32\config\DEFAULT.iobit
2015-06-27 13:54 - 2015-06-27 13:54 - 00069632 _____ C:\Windows\system32\config\SAM.iobit
2015-06-27 13:54 - 2015-06-27 13:54 - 00032768 _____ C:\Windows\system32\config\SECURITY.iobit
2015-06-26 12:25 - 2015-06-26 12:25 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-06-26 12:25 - 2015-06-26 12:25 - 00176040 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-06-26 12:25 - 2015-06-26 12:25 - 00176040 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-06-26 12:25 - 2015-06-26 12:25 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-06-26 12:25 - 2015-06-26 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-06-26 12:25 - 2015-06-26 12:25 - 00000000 ____D C:\Program Files (x86)\Java
2015-06-26 12:10 - 2015-06-26 12:10 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-06-25 18:34 - 2015-07-02 17:31 - 00003888 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-06-25 12:29 - 2015-06-20 05:02 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-25 12:29 - 2015-06-20 05:02 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-11 14:29 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-06-11 14:29 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-06-11 14:29 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-06-11 14:29 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-06-11 14:28 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-11 14:28 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-11 14:28 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-11 14:28 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-11 14:28 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-11 14:28 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-11 14:28 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-11 14:28 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-11 14:28 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-11 14:28 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-11 14:28 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-11 14:28 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-11 14:28 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-06-11 14:28 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-06-11 14:28 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-11 14:28 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-11 14:28 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-11 14:28 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-11 14:28 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-06-11 14:28 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-11 14:28 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-11 14:28 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-11 14:28 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-11 14:28 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-11 14:28 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-11 14:28 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-11 14:28 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-11 14:28 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-11 14:28 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-11 14:28 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-11 14:28 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-06-11 14:28 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-11 14:28 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-06-11 14:28 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-06-11 14:28 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-11 14:28 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-11 14:28 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-11 14:28 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-11 14:28 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-11 14:28 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-06-11 14:28 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-11 14:28 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-11 14:28 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-11 14:28 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-11 14:28 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-11 14:28 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-11 14:28 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-11 14:28 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-11 14:28 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-11 14:28 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-11 14:28 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-11 14:28 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-11 14:28 - 2015-04-16 08:17 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2015-06-11 14:28 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2015-06-11 14:28 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2015-06-11 14:28 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-06-11 14:28 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-06-11 14:28 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll
2015-06-11 14:28 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-06-11 14:28 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-06-11 14:28 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-06-11 14:28 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-06-11 14:28 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-06-11 14:28 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-06-11 14:28 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-06-11 14:28 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-06-11 14:28 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-06-11 14:28 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-06-11 14:28 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-06-11 14:28 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-06-11 14:28 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-06-11 14:28 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2015-06-11 14:28 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2015-06-11 14:27 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-08 01:01 - 2015-07-02 18:01 - 00000000 ____D C:\Users\Cyril\AppData\Local\Spotify
2015-06-08 01:01 - 2015-06-08 01:01 - 00001841 _____ C:\Users\Cyril\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-06-08 00:04 - 2015-07-02 18:01 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\Spotify
2015-06-05 09:58 - 2015-06-11 13:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-03 17:53 - 2015-03-18 19:47 - 00000350 _____ C:\Windows\Tasks\GlaryInitialize 5.job
2015-11-03 17:52 - 2014-01-21 09:37 - 00000000 __RDO C:\Users\Cyril\SkyDrive
2015-11-03 17:51 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-03 19:51 - 2013-11-14 09:32 - 01827432 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-03 19:51 - 2013-11-14 09:13 - 00813388 _____ C:\Windows\system32\perfh00C.dat
2015-07-03 19:51 - 2013-11-14 09:13 - 00159948 _____ C:\Windows\system32\perfc00C.dat
2015-07-03 19:45 - 2012-08-02 15:33 - 00000000 ____D C:\Windows\Log
2015-07-03 19:44 - 2012-08-17 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-07-03 19:44 - 2012-08-17 02:53 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-07-03 19:17 - 2014-09-12 13:56 - 01879661 _____ C:\Windows\WindowsUpdate.log
2015-07-03 19:11 - 2013-01-02 18:12 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3571319914-373718637-969622834-1002
2015-07-03 18:58 - 2013-12-31 13:24 - 00000000 ____D C:\ProgramData\ProductData
2015-07-02 21:20 - 2014-01-21 01:52 - 00000000 ____D C:\Users\Cyril
2015-07-02 21:20 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-07-02 21:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-07-02 19:59 - 2012-10-23 02:24 - 00000000 ____D C:\Program Files\Intel
2015-07-02 19:59 - 2012-10-23 02:15 - 00000000 ____D C:\ProgramData\Intel
2015-07-02 19:18 - 2015-04-25 17:42 - 00000000 ____D C:\Windows\Minidump
2015-07-02 18:37 - 2014-08-14 19:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3
2015-07-02 18:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-07-02 18:33 - 2013-01-02 18:01 - 00000000 ____D C:\Users\Cyril\AppData\Local\Packages
2015-07-02 18:23 - 2013-11-15 22:54 - 00000000 ____D C:\ProgramData\IObit
2015-07-02 18:10 - 2013-02-16 05:30 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\GlarySoft
2015-07-02 18:07 - 2013-01-02 22:48 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-02 18:01 - 2013-01-12 00:49 - 00000000 ____D C:\Users\Cyril\AppData\Local\Facebook
2015-07-02 18:01 - 2013-01-02 22:48 - 00000000 ____D C:\Users\Cyril\AppData\Local\Google
2015-07-02 18:01 - 2013-01-02 18:33 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\Mozilla
2015-07-02 18:01 - 2013-01-02 18:04 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\Adobe
2015-07-02 17:49 - 2015-05-29 20:33 - 00000260 _____ C:\Windows\Tasks\ASC8_SkipUac_Cyril.job
2015-07-02 17:49 - 2015-05-27 10:23 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-02 17:49 - 2015-05-27 10:23 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-02 17:49 - 2015-01-18 19:23 - 00003768 _____ C:\Windows\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-1.job
2015-07-02 17:49 - 2015-01-18 19:23 - 00002778 _____ C:\Windows\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-5_user.job
2015-07-02 17:49 - 2015-01-18 19:23 - 00002778 _____ C:\Windows\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-5.job
2015-07-02 17:49 - 2015-01-18 19:22 - 00005850 _____ C:\Windows\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-6.job
2015-07-02 17:49 - 2015-01-18 19:22 - 00005506 _____ C:\Windows\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-7.job
2015-07-02 17:49 - 2015-01-18 19:22 - 00004482 _____ C:\Windows\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-4.job
2015-07-02 17:49 - 2013-01-12 00:49 - 00000946 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3571319914-373718637-969622834-1002UA.job
2015-07-02 17:49 - 2013-01-12 00:49 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3571319914-373718637-969622834-1002Core.job
2015-07-02 17:49 - 2013-01-02 21:55 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-02 17:34 - 2015-04-19 17:50 - 00003178 _____ C:\Windows\System32\Tasks\Driver Booster Update
2015-07-02 17:34 - 2015-03-29 21:03 - 00003342 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3571319914-373718637-969622834-1002
2015-07-02 17:34 - 2015-03-29 21:03 - 00003286 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3571319914-373718637-969622834-1002
2015-07-02 17:34 - 2015-01-18 19:23 - 00006774 _____ C:\Windows\System32\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-1
2015-07-02 17:34 - 2015-01-18 19:23 - 00005784 _____ C:\Windows\System32\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-5
2015-07-02 17:34 - 2015-01-18 19:22 - 00008856 _____ C:\Windows\System32\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-6
2015-07-02 17:34 - 2015-01-18 19:22 - 00008512 _____ C:\Windows\System32\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-7
2015-07-02 17:34 - 2014-12-22 22:13 - 00003364 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3571319914-373718637-969622834-1002
2015-07-02 17:34 - 2014-12-22 22:13 - 00003308 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3571319914-373718637-969622834-1002
2015-07-02 17:34 - 2014-01-29 01:38 - 00003072 _____ C:\Windows\System32\Tasks\{7ECD1ED9-8DA8-4160-BDC1-7EA6C2DB3279}
2015-07-02 17:34 - 2013-12-16 22:04 - 00003148 _____ C:\Windows\System32\Tasks\{946E8105-C158-4DB4-B366-E68252C12A3A}
2015-07-02 17:34 - 2013-01-03 01:42 - 00003034 _____ C:\Windows\System32\Tasks\{1FAB5C2D-CE23-401D-A896-B21CBFDF34B9}
2015-07-02 17:34 - 2013-01-02 22:48 - 00004068 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-02 17:34 - 2013-01-02 22:48 - 00003832 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-02 17:33 - 2014-12-29 13:56 - 00003384 _____ C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3571319914-373718637-969622834-1002
2015-07-02 17:33 - 2014-12-22 22:13 - 00003426 _____ C:\Windows\System32\Tasks\RealDownloader Update Check
2015-07-02 17:33 - 2013-10-04 19:12 - 00003758 _____ C:\Windows\System32\Tasks\Programme de mise à jour en ligne de Real Player
2015-07-02 17:33 - 2013-10-04 19:12 - 00003696 _____ C:\Windows\System32\Tasks\Programme de mise à jour en ligne de Adobe
2015-07-02 17:32 - 2015-05-29 20:33 - 00002362 _____ C:\Windows\System32\Tasks\ASC8_SkipUac_Cyril
2015-07-02 17:32 - 2015-04-19 17:50 - 00002876 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Cyril)
2015-07-02 17:32 - 2015-01-18 19:22 - 00007488 _____ C:\Windows\System32\Tasks\d0f6e469-a573-473c-94d8-aab7e5f4f046-4
2015-07-02 17:32 - 2013-01-12 00:49 - 00003796 _____ C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3571319914-373718637-969622834-1002UA
2015-07-02 17:32 - 2013-01-12 00:49 - 00003446 _____ C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3571319914-373718637-969622834-1002Core
2015-07-02 17:32 - 2013-01-05 12:15 - 00003268 _____ C:\Windows\System32\Tasks\AsusVibeSchedule
2015-07-02 17:32 - 2012-10-23 02:39 - 00003114 _____ C:\Windows\System32\Tasks\ASUS Live Update
2015-07-02 17:31 - 2015-05-29 20:34 - 00003186 _____ C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-07-02 17:31 - 2013-01-02 21:55 - 00003892 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-02 13:50 - 2013-01-07 18:42 - 00124962 _____ C:\ProgramData\lxea.log
2015-07-02 13:50 - 2013-01-03 01:53 - 00079037 _____ C:\ProgramData\lxeascan.log
2015-07-01 20:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-07-01 18:21 - 2012-07-26 09:59 - 00000000 ____D C:\Windows\CbsTemp
2015-07-01 17:50 - 2013-11-15 22:54 - 00000000 ____D C:\Program Files (x86)\IObit
2015-06-29 20:06 - 2013-11-15 22:54 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\IObit
2015-06-29 20:05 - 2014-01-26 19:02 - 00165659 _____ C:\MyXML.xml
2015-06-28 21:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-06-28 21:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\setup
2015-06-28 21:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup
2015-06-27 18:10 - 2013-01-02 18:02 - 00000000 ____D C:\Users\Cyril\AppData\Local\VirtualStore
2015-06-14 17:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-06-12 20:51 - 2013-08-22 16:44 - 00507328 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-12 20:46 - 2014-12-14 13:33 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-12 20:46 - 2014-08-03 11:48 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-12 20:46 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-11 16:29 - 2013-07-18 01:13 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 16:21 - 2013-01-03 03:08 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 14:11 - 2015-04-06 18:37 - 00000000 ____D C:\Users\Cyril_2\AppData\Local\Packages
2015-06-11 14:10 - 2015-04-22 23:30 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\Canon
2015-06-11 14:10 - 2015-04-22 23:19 - 00000000 ____D C:\Program Files (x86)\Canon
2015-06-11 14:10 - 2015-01-23 12:22 - 00000000 ____D C:\Users\Cyril\AppData\Local\NVIDIA Corporation
2015-06-11 14:10 - 2013-12-31 11:01 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\DAEMON Tools Lite
2015-06-11 14:10 - 2013-07-30 22:13 - 00000000 ____D C:\Users\Cyril\Documents\samsung
2015-06-11 14:10 - 2013-07-30 22:09 - 00000000 ____D C:\ProgramData\Samsung
2015-06-11 14:10 - 2013-01-02 22:49 - 00000000 ____D C:\Users\Cyril\AppData\Roaming\Real
2015-06-11 14:10 - 2013-01-02 22:33 - 00000000 ____D C:\ProgramData\Real
2015-06-11 14:10 - 2013-01-02 18:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-11 14:10 - 2012-08-17 02:52 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-06-08 10:27 - 2014-09-12 14:47 - 00000000 ____D C:\Users\Cyril\AppData\Local\Adobe

==================== Files in the root of some directories =======

2014-12-27 21:08 - 2014-12-27 21:08 - 0000078 _____ () C:\Users\Cyril\AppData\Roaming\Selection Tools.installation.log
2013-01-02 18:05 - 2015-05-27 10:17 - 0000401 _____ () C:\Users\Cyril\AppData\Roaming\sp_data.sys
2014-08-28 10:35 - 2014-08-28 10:35 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-01-03 01:43 - 2013-01-03 01:43 - 0000000 _____ () C:\ProgramData\cmn_upld.log
2014-01-21 01:44 - 2014-01-21 01:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-01-03 01:55 - 2013-01-03 01:55 - 0000252 _____ () C:\ProgramData\FastPics.log
2013-01-07 18:42 - 2015-07-02 13:50 - 0124962 _____ () C:\ProgramData\lxea.log
2013-05-22 11:26 - 2014-04-03 13:54 - 0000309 _____ () C:\ProgramData\lxeaDiagnostics.log
2013-01-03 14:19 - 2014-07-04 15:51 - 0145964 _____ () C:\ProgramData\lxeaJSW.log
2013-01-03 01:53 - 2015-07-02 13:50 - 0079037 _____ () C:\ProgramData\lxeascan.log
2013-01-03 01:43 - 2013-01-03 01:43 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log
2012-08-17 02:52 - 2012-07-30 08:03 - 0000217 _____ () C:\ProgramData\SetStretch.cmd
2012-08-17 02:52 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-01-25 17:18 - 2014-01-25 17:18 - 3754560 _____ () C:\ProgramData\SPL8983.tmp
2013-01-03 01:43 - 2013-01-03 01:43 - 0000000 _____ () C:\ProgramData\UpdaterLog.txt
2013-01-05 12:16 - 2013-01-05 12:18 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2013-01-05 12:16 - 2013-01-05 12:16 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-01 09:26

==================== End of log ============================