Publicité
Publicité
Format du document : text/plain
Prévisualisation
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-06-2015
Ran by max07 (administrator) on ROMU on 13-06-2015 09:04:34
Running from C:\Users\romu\Desktop
Loaded Profiles: max07 (Available Profiles: max07)
Platform: Windows 8.1 (X64) OS Language: Anglais (États-Unis)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
(BitTorrent Inc.) C:\Users\romu\AppData\Roaming\uTorrent\uTorrent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7510896 2014-01-13] (Realtek Semiconductor)
HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2803440 2013-12-13] (Synaptics Incorporated)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-10-08] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [uTorrent] => C:\Users\romu\AppData\Roaming\uTorrent\uTorrent.exe [1998432 2015-06-01] (BitTorrent Inc.)
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [457728 2014-03-18] (Microsoft Corporation)
AppInit_DLLs-x32: c:\progra~3\{8bd06~1\1170~1.1\dese.dll => "c:\progra~3\{8bd06~1\1170~1.1\dese.dll" File not found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Universal Media Server.lnk [2015-03-27]
ShortcutTarget: Universal Media Server.lnk -> C:\Program Files (x86)\Universal Media Server\UMS.exe (Universal Media Server)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-27] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCON14/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCON14/4
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCON14/4
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {758738E7-BCFE-4E0B-ACD3-05B4083052CD} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {758738E7-BCFE-4E0B-ACD3-05B4083052CD} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3530046813-1433694769-850257653-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3530046813-1433694769-850257653-1001 -> {758738E7-BCFE-4E0B-ACD3-05B4083052CD} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-03-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-07] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-27] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-07] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-27] (Avast Software s.r.o.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 24.200.241.37 24.202.72.13
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-02-25] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-06] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-06]
Chrome:
=======
CHR Profile: C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-06]
CHR Extension: (YouTube) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-06]
CHR Extension: (Google Search) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-06]
CHR Extension: (AdBlock) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-03-06]
CHR Extension: (Avast Online Security) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-06]
CHR Extension: (Google Wallet) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06]
CHR Extension: (Gmail) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-06]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-27] (Avast Software s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [321024 2013-08-22] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2736824 2015-04-07] (Microsoft Corporation)
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-10-08] (Hewlett-Packard Development Company, L.P.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-21] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-27] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-27] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-27] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-27] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-27] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-27] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-27] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2013-11-11] (Intel Corporation)
S3 ksapi64; C:\Windows\system32\drivers\ksapi64.sys [56680 2015-05-31] (Kingsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2014-01-23] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [291544 2014-01-03] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3379416 2014-03-22] (Realtek Semiconductor Corporation )
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2013-12-13] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2013-12-13] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-06-12] ()
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-21] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-13 09:04 - 2015-06-13 09:05 - 00017501 _____ C:\Users\romu\Desktop\FRST.txt
2015-06-13 09:03 - 2015-06-13 09:04 - 00000000 ____D C:\FRST
2015-06-13 09:03 - 2015-06-13 09:03 - 02108928 _____ (Farbar) C:\Users\romu\Desktop\FRST64.exe
2015-06-13 09:02 - 2015-06-13 09:03 - 02108928 _____ (Farbar) C:\Users\romu\Downloads\FRST64.exe
2015-06-13 07:52 - 2015-06-13 07:52 - 00000232 _____ C:\Windows\setupact.log
2015-06-13 07:52 - 2015-06-13 07:52 - 00000000 _____ C:\Windows\setuperr.log
2015-06-12 20:00 - 2015-06-12 20:00 - 00002286 _____ C:\Users\romu\Downloads\Mark.Ronson.Uptown.Special.CD.2015-P2P [www.frenchtorrentdb.com].torrent
2015-06-12 19:58 - 2015-06-12 19:58 - 00024334 _____ C:\Users\romu\Downloads\Le.Coeur.A.Ses.Raisons.S03.FRENCH.DVDRip.x264.LiBERTY [www.frenchtorrentdb.com].torrent
2015-06-12 19:57 - 2015-06-12 19:57 - 00023973 _____ C:\Users\romu\Downloads\Le.Coeur.A.Ses.Raisons.S02.FRENCH.DVDRip.x264.LiBERTY [www.frenchtorrentdb.com].torrent
2015-06-12 19:57 - 2015-06-12 19:57 - 00020068 _____ C:\Users\romu\Downloads\Le.Coeur.A.Ses.Raisons.S01.FRENCH.DVDRip.x264.LiBERTY [www.frenchtorrentdb.com].torrent
2015-06-12 19:57 - 2015-06-12 19:57 - 00015572 _____ C:\Users\romu\Downloads\Pitbull - Globalization 2014.torrent
2015-06-12 19:55 - 2015-06-12 19:55 - 00020244 _____ C:\Users\romu\Downloads\Pitbull - Global Warming Meltdown (Deluxe Version) 320kbps {Aryan_l33t}-[LittleFairyRG].torrent
2015-06-12 11:49 - 2015-04-13 19:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-12 11:49 - 2015-04-13 19:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-12 08:20 - 2015-06-12 08:20 - 00034235 _____ C:\Users\romu\Downloads\The.Walking.Dead.S05.FRENCH.HDTV.x264-CaCoLaC [www.frenchtorrentdb.com].torrent
2015-06-12 08:02 - 2015-06-13 08:11 - 00845759 _____ C:\Windows\WindowsUpdate.log
2015-06-11 23:42 - 2015-06-11 23:56 - 00000000 ____D C:\ProgramData\RogueKiller
2015-06-11 23:16 - 2015-06-11 23:16 - 00001089 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-06-11 22:41 - 2015-06-11 22:41 - 00160402 _____ C:\Users\romu\Downloads\Anna Bell Peaks - BurningAngel HD 1080p - POV.torrent
2015-06-11 22:37 - 2015-06-11 22:37 - 00010802 _____ C:\Users\romu\Downloads\ZZSeries - Brazzers House Episode 3.mp4.torrent
2015-06-11 22:36 - 2015-06-11 22:36 - 00011302 _____ C:\Users\romu\Downloads\ZZSeries - Brazzers House Episode 4.mp4.torrent
2015-06-11 07:49 - 2015-06-11 07:49 - 00011493 _____ C:\Users\romu\Downloads\Hitman Pro v3.7.1.186 (x32,x64) avec Crack (1).torrent
2015-06-11 07:41 - 2015-06-11 07:41 - 00011493 _____ C:\Users\romu\Downloads\Hitman Pro v3.7.1.186 (x32,x64) avec Crack.torrent
2015-06-11 07:33 - 2015-06-12 19:54 - 00000000 ____D C:\Users\romu\AppData\Local\CrashDumps
2015-06-10 22:07 - 2015-06-10 22:07 - 00008658 _____ C:\Users\romu\Downloads\RogueKiller X64 et X86 portable et installation ( V10.8.1 03 Juin_2015 ) Novirus.torrent
2015-06-10 21:56 - 2015-06-10 21:56 - 00004130 _____ C:\Windows\system32\.crusader
2015-06-10 21:41 - 2015-06-12 19:49 - 00035064 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-06-10 21:40 - 2015-06-10 21:41 - 11024496 _____ (SurfRight B.V.) C:\Users\romu\Downloads\HitmanPro_x64.exe
2015-06-10 21:32 - 2015-06-10 21:34 - 158065592 _____ C:\Users\romu\Downloads\EmsisoftEmergencyKit.exe
2015-06-10 21:25 - 2015-06-10 21:29 - 162722326 _____ C:\Users\romu\Downloads\EmsisoftEmergencyKit.zip
2015-06-10 21:25 - 2015-06-10 21:25 - 00221384 _____ (ESET) C:\Users\romu\Downloads\ESETPoweliksCleaner.exe
2015-06-10 21:24 - 2015-06-10 21:24 - 17639160 _____ C:\Users\romu\Downloads\RogueKiller.exe
2015-06-10 21:24 - 2015-06-10 21:24 - 17639160 _____ C:\Users\romu\Desktop\RogueKiller.exe
2015-06-10 21:24 - 2015-06-10 21:24 - 10105736 _____ (SurfRight B.V.) C:\Users\romu\Downloads\HitmanPro.exe
2015-06-10 20:18 - 2015-06-10 20:19 - 00000000 ____D C:\KVRT_Data
2015-06-10 20:16 - 2015-06-10 20:18 - 104199840 _____ (Kaspersky Lab ZAO) C:\Users\romu\Downloads\KVRT.exe
2015-06-10 20:16 - 2015-06-10 20:16 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\romu\Downloads\tdsskiller.exe
2015-06-10 20:07 - 2015-06-10 20:09 - 00000000 ____D C:\Program Files\CCleaner
2015-06-10 20:07 - 2015-06-10 20:07 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-06-10 20:07 - 2015-06-10 20:07 - 00000841 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-06-10 19:58 - 2015-06-10 19:58 - 00002503 _____ C:\Users\romu\Downloads\CCleaner 5.05.5176 Professional Edition [CRACK].torrent
2015-06-10 10:34 - 2015-06-12 11:25 - 00485728 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 09:30 - 2015-06-10 09:30 - 06549184 _____ (Piriform Ltd) C:\Users\romu\Downloads\ccsetup506.exe
2015-06-09 20:13 - 2015-06-09 20:13 - 00013259 _____ C:\Users\romu\Downloads\Chappie.2015.FRENCH.BRRip.x264.AC3-DesTroY [www.frenchtorrentdb.com].torrent
2015-06-09 20:12 - 2015-06-09 20:12 - 00056286 _____ C:\Users\romu\Downloads\The.DUFF.2015.FRENCH.DVDRip.XviD-GLUPS [www.frenchtorrentdb.com].torrent
2015-06-09 09:32 - 2015-06-09 09:32 - 00014555 _____ C:\Users\romu\Downloads\Sons.Of.Anarchy.S07E13.FiNAL.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-09 09:31 - 2015-06-09 09:31 - 00014517 _____ C:\Users\romu\Downloads\Sons.Of.Anarchy.S07E12.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-08 20:58 - 2015-06-08 20:58 - 00198781 _____ C:\Users\romu\Downloads\Lela Star Videos Pack (Brazzers) [Big Ass, Big Tits].torrent
2015-06-08 20:49 - 2015-06-08 20:49 - 00023375 _____ C:\Users\romu\Downloads\Peta Jensen - Brazzers (btas) College midterm stress release (08.06.2015).mp4.torrent
2015-06-08 12:28 - 2015-06-08 12:28 - 00700105 _____ C:\Users\romu\Downloads\Pirates Des Caraibes INTEGRALE 720P HDrip French AC3 5.1+6db SubForces x264 SubZero[www.bluetigers.ca].torrent
2015-06-07 14:42 - 2015-06-07 14:42 - 00014545 _____ C:\Users\romu\Downloads\Hawaii.Five-0.2010.S05E23.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-07 10:13 - 2015-06-07 10:13 - 00540072 _____ (Neuber Software) C:\Users\romu\Downloads\SvchostAnalyzer (1).exe
2015-06-07 08:35 - 2015-06-07 08:35 - 00540072 _____ (Neuber Software) C:\Users\romu\Downloads\SvchostAnalyzer.exe
2015-06-07 08:18 - 2015-06-11 07:34 - 00000000 ____D C:\Windows\Minidump
2015-06-06 20:25 - 2015-06-06 20:25 - 00728754 _____ C:\Users\romu\Downloads\Le Petit Dinosaure.torrent
2015-06-06 20:23 - 2015-06-06 20:23 - 00057073 _____ C:\Users\romu\Downloads\le petit dinosaure4.torrent
2015-06-06 08:27 - 2015-06-06 08:27 - 04525536 _____ (LionSea Software ) C:\Users\romu\Downloads\Smart_Svchost_Exe_Fixer_Pro_Setup.exe
2015-06-06 08:26 - 2015-06-06 08:26 - 04525536 _____ (LionSea Software ) C:\Users\romu\Downloads\Non confirmé 721113.crdownload
2015-06-04 08:41 - 2015-06-04 08:41 - 04354084 _____ (Safer Networking Limited ) C:\Users\romu\Downloads\spybotsd13.exe
2015-06-03 15:36 - 2015-06-03 15:36 - 00000000 ____D C:\Users\romu\Documents\CyberLink
2015-06-02 22:50 - 2015-06-02 22:50 - 00012911 _____ C:\Users\romu\Downloads\Madison Ivy - First Anal.mp4.torrent
2015-06-02 22:48 - 2015-06-02 22:48 - 00022893 _____ C:\Users\romu\Downloads\btaw_peta_jensen_bb021215_480p_1000.mp4.torrent
2015-06-02 22:42 - 2015-06-02 22:42 - 00022311 _____ C:\Users\romu\Downloads\[Brazzers] BigTitsAtSchool – Bijou - Ballad of the Nutsucker - (01.06.15) [480p].mp4.torrent
2015-06-02 22:42 - 2015-06-02 22:42 - 00022311 _____ C:\Users\romu\Downloads\[Brazzers] BigTitsAtSchool – Bijou - Ballad of the Nutsucker - (01.06.15) [480p].mp4 (1).torrent
2015-06-02 14:23 - 2015-06-02 14:23 - 00011517 _____ C:\Users\romu\Downloads\Sons.Of.Anarchy.S07E11.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-01 17:38 - 2015-06-01 17:38 - 00000865 _____ C:\Users\romu\Desktop\µTorrent.lnk
2015-06-01 17:35 - 2015-06-01 17:35 - 01998432 _____ (BitTorrent Inc.) C:\Users\romu\Downloads\uTorrent.exe
2015-05-31 14:17 - 2015-05-31 14:17 - 00014525 _____ C:\Users\romu\Downloads\Hawaii.Five-0.2010.S05E22.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-05-31 11:23 - 2015-06-13 07:07 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-31 11:23 - 2015-05-31 11:23 - 00001121 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-05-31 11:23 - 2015-05-31 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-31 11:23 - 2015-05-31 11:23 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-05-31 11:23 - 2015-04-14 12:38 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-31 11:23 - 2015-04-14 12:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-31 11:23 - 2015-04-14 12:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-31 10:33 - 2015-05-31 10:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-05-31 01:01 - 2015-05-31 01:01 - 00081768 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi.sys
2015-05-31 01:01 - 2015-05-31 01:01 - 00056680 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi64.sys
2015-05-31 01:01 - 2015-05-31 01:01 - 00000000 ____D C:\ProgramData\Kingsoft
2015-05-31 01:01 - 2015-05-31 01:01 - 00000000 ____D C:\ProgramData\cmcm
2015-05-31 01:01 - 2015-05-31 01:01 - 00000000 ____D C:\Program Files (x86)\cmcm
2015-05-29 10:30 - 2015-06-12 19:54 - 00000000 ____D C:\Users\romu\Documents\Youcam
2015-05-17 19:57 - 2015-05-17 19:57 - 00001039 _____ C:\Users\Public\Desktop\Universal Media Server.lnk
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-13 09:05 - 2015-03-06 15:12 - 00000000 ____D C:\Users\romu\AppData\Roaming\uTorrent
2015-06-13 09:00 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\sru
2015-06-13 08:30 - 2015-03-06 14:14 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-13 01:30 - 2015-03-06 14:14 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-12 23:36 - 2015-03-07 02:30 - 00005056 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for ROMU-max07 romu
2015-06-12 23:03 - 2013-08-22 11:20 - 00000000 ____D C:\Windows\CbsTemp
2015-06-12 21:20 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-12 20:13 - 2015-01-11 11:48 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3530046813-1433694769-850257653-1001
2015-06-12 19:49 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\AppReadiness
2015-06-12 12:16 - 2015-03-06 15:49 - 00000000 ____D C:\Users\romu\OneDrive
2015-06-12 12:06 - 2013-08-22 10:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Windows\ToastData
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\sppui
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\setup
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\inetsrv
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\Com
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\MediaViewer
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\WindowsPowerShell
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-06-12 11:19 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-06-12 11:19 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-06-12 11:19 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\servicing
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ___SD C:\Windows\system32\dsc
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\sppui
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\setup
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\migwiz
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\inetsrv
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\Com
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\IME
2015-06-12 11:18 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\Sysprep
2015-06-12 11:18 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\oobe
2015-06-12 11:18 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\Dism
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\FileManager
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\Camera
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-06-12 10:49 - 2013-08-22 11:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2015-06-12 10:48 - 2013-08-22 11:36 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2015-06-12 10:41 - 2013-08-22 09:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-06-12 10:23 - 2015-01-15 19:29 - 00000000 ____D C:\Windows\system32\MRT
2015-06-12 10:18 - 2015-01-15 19:29 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 23:56 - 2014-12-28 22:22 - 00000000 ____D C:\Users\romu
2015-06-11 23:41 - 2015-03-07 04:47 - 00000000 ____D C:\Users\romu\AppData\Roaming\vlc
2015-06-11 20:18 - 2015-04-07 18:35 - 00000000 ____D C:\Users\romu\Desktop\tattoo
2015-06-11 07:50 - 2015-03-07 04:12 - 00000000 ____D C:\Users\romu\Desktop\romu
2015-06-10 20:07 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\rescache
2015-06-10 12:42 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-06-10 12:42 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-06-10 12:42 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-06-06 10:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\TAPI
2015-06-03 17:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\AppCompat
2015-06-03 15:37 - 2015-03-07 13:38 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2015-06-03 15:36 - 2015-03-06 00:47 - 00000000 ____D C:\Users\romu\AppData\Roaming\CyberLink
2015-06-03 15:31 - 2015-03-07 13:34 - 00000000 ____D C:\Users\Public\CyberLink
2015-06-03 15:31 - 2014-12-28 22:25 - 00000000 ____D C:\Users\romu\AppData\Local\CyberLink
2015-06-03 15:31 - 2014-08-20 09:04 - 00000000 ____D C:\ProgramData\CyberLink
2015-06-03 15:21 - 2015-04-28 22:18 - 00000000 ____D C:\Users\romu\AppData\Roaming\dvdcss
2015-06-01 17:28 - 2015-03-12 00:38 - 00000000 ____D C:\Users\romu\AppData\Roaming\qBittorrent
2015-05-31 01:09 - 2014-08-20 09:02 - 00000000 ____D C:\ProgramData\install_clap
2015-05-31 01:04 - 2014-04-02 06:25 - 00000000 ____D C:\Windows\Panther
2015-05-29 10:30 - 2015-03-06 14:15 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-22 17:44 - 2014-12-28 22:22 - 00000000 ____D C:\Users\romu\AppData\Local\Packages
2015-05-22 12:19 - 2015-03-06 15:23 - 00000000 ____D C:\Program Files (x86)\Universal Media Server
2015-05-22 12:16 - 2015-02-11 08:00 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-05-17 19:57 - 2015-03-06 15:24 - 00000000 ____D C:\ProgramData\UMS
2015-05-17 19:56 - 2015-03-27 11:09 - 00001947 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Media Server.lnk
2015-05-17 19:56 - 2015-03-27 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Media Server
2015-05-15 04:25 - 2015-03-06 14:14 - 00004052 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-15 04:25 - 2015-03-06 14:14 - 00003816 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
==================== Files in the root of some directories =======
2015-03-12 02:05 - 2015-03-12 02:05 - 0000016 _____ () C:\ProgramData\mntemp
Some files in TEMP:
====================
C:\Users\romu\AppData\Local\Temp\dllnt_dump.dll
C:\Users\romu\AppData\Local\Temp\vlc-2.2.1-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-10 12:16
==================== End of log ============================
Ran by max07 (administrator) on ROMU on 13-06-2015 09:04:34
Running from C:\Users\romu\Desktop
Loaded Profiles: max07 (Available Profiles: max07)
Platform: Windows 8.1 (X64) OS Language: Anglais (États-Unis)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
(BitTorrent Inc.) C:\Users\romu\AppData\Roaming\uTorrent\uTorrent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7510896 2014-01-13] (Realtek Semiconductor)
HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2803440 2013-12-13] (Synaptics Incorporated)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-10-08] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [uTorrent] => C:\Users\romu\AppData\Roaming\uTorrent\uTorrent.exe [1998432 2015-06-01] (BitTorrent Inc.)
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [457728 2014-03-18] (Microsoft Corporation)
AppInit_DLLs-x32: c:\progra~3\{8bd06~1\1170~1.1\dese.dll => "c:\progra~3\{8bd06~1\1170~1.1\dese.dll" File not found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Universal Media Server.lnk [2015-03-27]
ShortcutTarget: Universal Media Server.lnk -> C:\Program Files (x86)\Universal Media Server\UMS.exe (Universal Media Server)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-27] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCON14/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCON14/4
HKU\S-1-5-21-3530046813-1433694769-850257653-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPCON14/4
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {758738E7-BCFE-4E0B-ACD3-05B4083052CD} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {758738E7-BCFE-4E0B-ACD3-05B4083052CD} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3530046813-1433694769-850257653-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3530046813-1433694769-850257653-1001 -> {758738E7-BCFE-4E0B-ACD3-05B4083052CD} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-03-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-07] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-27] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-07] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-27] (Avast Software s.r.o.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 24.200.241.37 24.202.72.13
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-02-25] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-06] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-06]
Chrome:
=======
CHR Profile: C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-06]
CHR Extension: (YouTube) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-06]
CHR Extension: (Google Search) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-06]
CHR Extension: (AdBlock) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-03-06]
CHR Extension: (Avast Online Security) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-06]
CHR Extension: (Google Wallet) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06]
CHR Extension: (Gmail) - C:\Users\romu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-06]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-27] (Avast Software s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [321024 2013-08-22] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2736824 2015-04-07] (Microsoft Corporation)
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-10-08] (Hewlett-Packard Development Company, L.P.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-21] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-27] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-27] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-27] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-27] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-27] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-27] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-27] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2013-11-11] (Intel Corporation)
S3 ksapi64; C:\Windows\system32\drivers\ksapi64.sys [56680 2015-05-31] (Kingsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2014-01-23] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [291544 2014-01-03] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3379416 2014-03-22] (Realtek Semiconductor Corporation )
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2013-12-13] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2013-12-13] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-06-12] ()
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-21] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-13 09:04 - 2015-06-13 09:05 - 00017501 _____ C:\Users\romu\Desktop\FRST.txt
2015-06-13 09:03 - 2015-06-13 09:04 - 00000000 ____D C:\FRST
2015-06-13 09:03 - 2015-06-13 09:03 - 02108928 _____ (Farbar) C:\Users\romu\Desktop\FRST64.exe
2015-06-13 09:02 - 2015-06-13 09:03 - 02108928 _____ (Farbar) C:\Users\romu\Downloads\FRST64.exe
2015-06-13 07:52 - 2015-06-13 07:52 - 00000232 _____ C:\Windows\setupact.log
2015-06-13 07:52 - 2015-06-13 07:52 - 00000000 _____ C:\Windows\setuperr.log
2015-06-12 20:00 - 2015-06-12 20:00 - 00002286 _____ C:\Users\romu\Downloads\Mark.Ronson.Uptown.Special.CD.2015-P2P [www.frenchtorrentdb.com].torrent
2015-06-12 19:58 - 2015-06-12 19:58 - 00024334 _____ C:\Users\romu\Downloads\Le.Coeur.A.Ses.Raisons.S03.FRENCH.DVDRip.x264.LiBERTY [www.frenchtorrentdb.com].torrent
2015-06-12 19:57 - 2015-06-12 19:57 - 00023973 _____ C:\Users\romu\Downloads\Le.Coeur.A.Ses.Raisons.S02.FRENCH.DVDRip.x264.LiBERTY [www.frenchtorrentdb.com].torrent
2015-06-12 19:57 - 2015-06-12 19:57 - 00020068 _____ C:\Users\romu\Downloads\Le.Coeur.A.Ses.Raisons.S01.FRENCH.DVDRip.x264.LiBERTY [www.frenchtorrentdb.com].torrent
2015-06-12 19:57 - 2015-06-12 19:57 - 00015572 _____ C:\Users\romu\Downloads\Pitbull - Globalization 2014.torrent
2015-06-12 19:55 - 2015-06-12 19:55 - 00020244 _____ C:\Users\romu\Downloads\Pitbull - Global Warming Meltdown (Deluxe Version) 320kbps {Aryan_l33t}-[LittleFairyRG].torrent
2015-06-12 11:49 - 2015-04-13 19:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-12 11:49 - 2015-04-13 19:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-12 08:20 - 2015-06-12 08:20 - 00034235 _____ C:\Users\romu\Downloads\The.Walking.Dead.S05.FRENCH.HDTV.x264-CaCoLaC [www.frenchtorrentdb.com].torrent
2015-06-12 08:02 - 2015-06-13 08:11 - 00845759 _____ C:\Windows\WindowsUpdate.log
2015-06-11 23:42 - 2015-06-11 23:56 - 00000000 ____D C:\ProgramData\RogueKiller
2015-06-11 23:16 - 2015-06-11 23:16 - 00001089 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-06-11 22:41 - 2015-06-11 22:41 - 00160402 _____ C:\Users\romu\Downloads\Anna Bell Peaks - BurningAngel HD 1080p - POV.torrent
2015-06-11 22:37 - 2015-06-11 22:37 - 00010802 _____ C:\Users\romu\Downloads\ZZSeries - Brazzers House Episode 3.mp4.torrent
2015-06-11 22:36 - 2015-06-11 22:36 - 00011302 _____ C:\Users\romu\Downloads\ZZSeries - Brazzers House Episode 4.mp4.torrent
2015-06-11 07:49 - 2015-06-11 07:49 - 00011493 _____ C:\Users\romu\Downloads\Hitman Pro v3.7.1.186 (x32,x64) avec Crack (1).torrent
2015-06-11 07:41 - 2015-06-11 07:41 - 00011493 _____ C:\Users\romu\Downloads\Hitman Pro v3.7.1.186 (x32,x64) avec Crack.torrent
2015-06-11 07:33 - 2015-06-12 19:54 - 00000000 ____D C:\Users\romu\AppData\Local\CrashDumps
2015-06-10 22:07 - 2015-06-10 22:07 - 00008658 _____ C:\Users\romu\Downloads\RogueKiller X64 et X86 portable et installation ( V10.8.1 03 Juin_2015 ) Novirus.torrent
2015-06-10 21:56 - 2015-06-10 21:56 - 00004130 _____ C:\Windows\system32\.crusader
2015-06-10 21:41 - 2015-06-12 19:49 - 00035064 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-06-10 21:40 - 2015-06-10 21:41 - 11024496 _____ (SurfRight B.V.) C:\Users\romu\Downloads\HitmanPro_x64.exe
2015-06-10 21:32 - 2015-06-10 21:34 - 158065592 _____ C:\Users\romu\Downloads\EmsisoftEmergencyKit.exe
2015-06-10 21:25 - 2015-06-10 21:29 - 162722326 _____ C:\Users\romu\Downloads\EmsisoftEmergencyKit.zip
2015-06-10 21:25 - 2015-06-10 21:25 - 00221384 _____ (ESET) C:\Users\romu\Downloads\ESETPoweliksCleaner.exe
2015-06-10 21:24 - 2015-06-10 21:24 - 17639160 _____ C:\Users\romu\Downloads\RogueKiller.exe
2015-06-10 21:24 - 2015-06-10 21:24 - 17639160 _____ C:\Users\romu\Desktop\RogueKiller.exe
2015-06-10 21:24 - 2015-06-10 21:24 - 10105736 _____ (SurfRight B.V.) C:\Users\romu\Downloads\HitmanPro.exe
2015-06-10 20:18 - 2015-06-10 20:19 - 00000000 ____D C:\KVRT_Data
2015-06-10 20:16 - 2015-06-10 20:18 - 104199840 _____ (Kaspersky Lab ZAO) C:\Users\romu\Downloads\KVRT.exe
2015-06-10 20:16 - 2015-06-10 20:16 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\romu\Downloads\tdsskiller.exe
2015-06-10 20:07 - 2015-06-10 20:09 - 00000000 ____D C:\Program Files\CCleaner
2015-06-10 20:07 - 2015-06-10 20:07 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-06-10 20:07 - 2015-06-10 20:07 - 00000841 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-06-10 19:58 - 2015-06-10 19:58 - 00002503 _____ C:\Users\romu\Downloads\CCleaner 5.05.5176 Professional Edition [CRACK].torrent
2015-06-10 10:34 - 2015-06-12 11:25 - 00485728 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 09:30 - 2015-06-10 09:30 - 06549184 _____ (Piriform Ltd) C:\Users\romu\Downloads\ccsetup506.exe
2015-06-09 20:13 - 2015-06-09 20:13 - 00013259 _____ C:\Users\romu\Downloads\Chappie.2015.FRENCH.BRRip.x264.AC3-DesTroY [www.frenchtorrentdb.com].torrent
2015-06-09 20:12 - 2015-06-09 20:12 - 00056286 _____ C:\Users\romu\Downloads\The.DUFF.2015.FRENCH.DVDRip.XviD-GLUPS [www.frenchtorrentdb.com].torrent
2015-06-09 09:32 - 2015-06-09 09:32 - 00014555 _____ C:\Users\romu\Downloads\Sons.Of.Anarchy.S07E13.FiNAL.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-09 09:31 - 2015-06-09 09:31 - 00014517 _____ C:\Users\romu\Downloads\Sons.Of.Anarchy.S07E12.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-08 20:58 - 2015-06-08 20:58 - 00198781 _____ C:\Users\romu\Downloads\Lela Star Videos Pack (Brazzers) [Big Ass, Big Tits].torrent
2015-06-08 20:49 - 2015-06-08 20:49 - 00023375 _____ C:\Users\romu\Downloads\Peta Jensen - Brazzers (btas) College midterm stress release (08.06.2015).mp4.torrent
2015-06-08 12:28 - 2015-06-08 12:28 - 00700105 _____ C:\Users\romu\Downloads\Pirates Des Caraibes INTEGRALE 720P HDrip French AC3 5.1+6db SubForces x264 SubZero[www.bluetigers.ca].torrent
2015-06-07 14:42 - 2015-06-07 14:42 - 00014545 _____ C:\Users\romu\Downloads\Hawaii.Five-0.2010.S05E23.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-07 10:13 - 2015-06-07 10:13 - 00540072 _____ (Neuber Software) C:\Users\romu\Downloads\SvchostAnalyzer (1).exe
2015-06-07 08:35 - 2015-06-07 08:35 - 00540072 _____ (Neuber Software) C:\Users\romu\Downloads\SvchostAnalyzer.exe
2015-06-07 08:18 - 2015-06-11 07:34 - 00000000 ____D C:\Windows\Minidump
2015-06-06 20:25 - 2015-06-06 20:25 - 00728754 _____ C:\Users\romu\Downloads\Le Petit Dinosaure.torrent
2015-06-06 20:23 - 2015-06-06 20:23 - 00057073 _____ C:\Users\romu\Downloads\le petit dinosaure4.torrent
2015-06-06 08:27 - 2015-06-06 08:27 - 04525536 _____ (LionSea Software ) C:\Users\romu\Downloads\Smart_Svchost_Exe_Fixer_Pro_Setup.exe
2015-06-06 08:26 - 2015-06-06 08:26 - 04525536 _____ (LionSea Software ) C:\Users\romu\Downloads\Non confirmé 721113.crdownload
2015-06-04 08:41 - 2015-06-04 08:41 - 04354084 _____ (Safer Networking Limited ) C:\Users\romu\Downloads\spybotsd13.exe
2015-06-03 15:36 - 2015-06-03 15:36 - 00000000 ____D C:\Users\romu\Documents\CyberLink
2015-06-02 22:50 - 2015-06-02 22:50 - 00012911 _____ C:\Users\romu\Downloads\Madison Ivy - First Anal.mp4.torrent
2015-06-02 22:48 - 2015-06-02 22:48 - 00022893 _____ C:\Users\romu\Downloads\btaw_peta_jensen_bb021215_480p_1000.mp4.torrent
2015-06-02 22:42 - 2015-06-02 22:42 - 00022311 _____ C:\Users\romu\Downloads\[Brazzers] BigTitsAtSchool – Bijou - Ballad of the Nutsucker - (01.06.15) [480p].mp4.torrent
2015-06-02 22:42 - 2015-06-02 22:42 - 00022311 _____ C:\Users\romu\Downloads\[Brazzers] BigTitsAtSchool – Bijou - Ballad of the Nutsucker - (01.06.15) [480p].mp4 (1).torrent
2015-06-02 14:23 - 2015-06-02 14:23 - 00011517 _____ C:\Users\romu\Downloads\Sons.Of.Anarchy.S07E11.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-06-01 17:38 - 2015-06-01 17:38 - 00000865 _____ C:\Users\romu\Desktop\µTorrent.lnk
2015-06-01 17:35 - 2015-06-01 17:35 - 01998432 _____ (BitTorrent Inc.) C:\Users\romu\Downloads\uTorrent.exe
2015-05-31 14:17 - 2015-05-31 14:17 - 00014525 _____ C:\Users\romu\Downloads\Hawaii.Five-0.2010.S05E22.FRENCH.WEB-DL.XviD-ASPHiXiAS[www.bluetigers.ca].torrent
2015-05-31 11:23 - 2015-06-13 07:07 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-31 11:23 - 2015-05-31 11:23 - 00001121 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-05-31 11:23 - 2015-05-31 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-31 11:23 - 2015-05-31 11:23 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-05-31 11:23 - 2015-04-14 12:38 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-31 11:23 - 2015-04-14 12:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-31 11:23 - 2015-04-14 12:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-31 10:33 - 2015-05-31 10:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-05-31 01:01 - 2015-05-31 01:01 - 00081768 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi.sys
2015-05-31 01:01 - 2015-05-31 01:01 - 00056680 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi64.sys
2015-05-31 01:01 - 2015-05-31 01:01 - 00000000 ____D C:\ProgramData\Kingsoft
2015-05-31 01:01 - 2015-05-31 01:01 - 00000000 ____D C:\ProgramData\cmcm
2015-05-31 01:01 - 2015-05-31 01:01 - 00000000 ____D C:\Program Files (x86)\cmcm
2015-05-29 10:30 - 2015-06-12 19:54 - 00000000 ____D C:\Users\romu\Documents\Youcam
2015-05-17 19:57 - 2015-05-17 19:57 - 00001039 _____ C:\Users\Public\Desktop\Universal Media Server.lnk
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-13 09:05 - 2015-03-06 15:12 - 00000000 ____D C:\Users\romu\AppData\Roaming\uTorrent
2015-06-13 09:00 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\sru
2015-06-13 08:30 - 2015-03-06 14:14 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-13 01:30 - 2015-03-06 14:14 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-12 23:36 - 2015-03-07 02:30 - 00005056 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for ROMU-max07 romu
2015-06-12 23:03 - 2013-08-22 11:20 - 00000000 ____D C:\Windows\CbsTemp
2015-06-12 21:20 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-12 20:13 - 2015-01-11 11:48 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3530046813-1433694769-850257653-1001
2015-06-12 19:49 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\AppReadiness
2015-06-12 12:16 - 2015-03-06 15:49 - 00000000 ____D C:\Users\romu\OneDrive
2015-06-12 12:06 - 2013-08-22 10:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Windows\ToastData
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\sppui
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\setup
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\inetsrv
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\Com
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\MediaViewer
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\WindowsPowerShell
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-06-12 11:19 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-06-12 11:19 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-06-12 11:19 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-06-12 11:19 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\servicing
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ___SD C:\Windows\system32\dsc
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\sppui
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\setup
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\migwiz
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\inetsrv
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\Com
2015-06-12 11:18 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\IME
2015-06-12 11:18 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\Sysprep
2015-06-12 11:18 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\oobe
2015-06-12 11:18 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\Dism
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\FileManager
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\Camera
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-06-12 11:17 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2015-06-12 10:49 - 2013-08-22 11:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2015-06-12 10:48 - 2013-08-22 11:36 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2015-06-12 10:41 - 2013-08-22 09:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-06-12 10:23 - 2015-01-15 19:29 - 00000000 ____D C:\Windows\system32\MRT
2015-06-12 10:18 - 2015-01-15 19:29 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 23:56 - 2014-12-28 22:22 - 00000000 ____D C:\Users\romu
2015-06-11 23:41 - 2015-03-07 04:47 - 00000000 ____D C:\Users\romu\AppData\Roaming\vlc
2015-06-11 20:18 - 2015-04-07 18:35 - 00000000 ____D C:\Users\romu\Desktop\tattoo
2015-06-11 07:50 - 2015-03-07 04:12 - 00000000 ____D C:\Users\romu\Desktop\romu
2015-06-10 20:07 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\rescache
2015-06-10 12:42 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-06-10 12:42 - 2013-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-06-10 12:42 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-06-06 10:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\TAPI
2015-06-03 17:19 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\AppCompat
2015-06-03 15:37 - 2015-03-07 13:38 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2015-06-03 15:36 - 2015-03-06 00:47 - 00000000 ____D C:\Users\romu\AppData\Roaming\CyberLink
2015-06-03 15:31 - 2015-03-07 13:34 - 00000000 ____D C:\Users\Public\CyberLink
2015-06-03 15:31 - 2014-12-28 22:25 - 00000000 ____D C:\Users\romu\AppData\Local\CyberLink
2015-06-03 15:31 - 2014-08-20 09:04 - 00000000 ____D C:\ProgramData\CyberLink
2015-06-03 15:21 - 2015-04-28 22:18 - 00000000 ____D C:\Users\romu\AppData\Roaming\dvdcss
2015-06-01 17:28 - 2015-03-12 00:38 - 00000000 ____D C:\Users\romu\AppData\Roaming\qBittorrent
2015-05-31 01:09 - 2014-08-20 09:02 - 00000000 ____D C:\ProgramData\install_clap
2015-05-31 01:04 - 2014-04-02 06:25 - 00000000 ____D C:\Windows\Panther
2015-05-29 10:30 - 2015-03-06 14:15 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-22 17:44 - 2014-12-28 22:22 - 00000000 ____D C:\Users\romu\AppData\Local\Packages
2015-05-22 12:19 - 2015-03-06 15:23 - 00000000 ____D C:\Program Files (x86)\Universal Media Server
2015-05-22 12:16 - 2015-02-11 08:00 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-05-17 19:57 - 2015-03-06 15:24 - 00000000 ____D C:\ProgramData\UMS
2015-05-17 19:56 - 2015-03-27 11:09 - 00001947 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Media Server.lnk
2015-05-17 19:56 - 2015-03-27 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Media Server
2015-05-15 04:25 - 2015-03-06 14:14 - 00004052 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-15 04:25 - 2015-03-06 14:14 - 00003816 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
==================== Files in the root of some directories =======
2015-03-12 02:05 - 2015-03-12 02:05 - 0000016 _____ () C:\ProgramData\mntemp
Some files in TEMP:
====================
C:\Users\romu\AppData\Local\Temp\dllnt_dump.dll
C:\Users\romu\AppData\Local\Temp\vlc-2.2.1-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-10 12:16
==================== End of log ============================