~ ZHPDiag v2015.7.18.93 By Nicolas Coolman (2015/07/18)
~ Run by User (Administrator) (2015/07/18 13:37:23)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: Version OK
~ Mode: Scan
~ Report: C:\Users\User\Desktop\ZHPDiag.txt
~ Report: C:\Users\User\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
~ Windows 8.1, 64-bit (Build 9600)

---\\ Internet Browsers (4) - 0s
GCIE: Google Chrome v43.0.2357.134
MFIE: Mozilla Firefox 38.0.1 (x86 en-US) v38.0.1
OPIE: Opera 30.0.1835.125 v30.0.1835.125
MSIE: Internet Explorer v11.0.9600.17631

---\\ Windows Product Information (3) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Generation : OK
Windows Activation Technologies : OK

---\\ System protection software (1) - 0s
Malwarebytes Anti-Malware version 2.1.8.1057

---\\ Surveillance software (2) - 0s
Adobe Flash Player 10 ActiveX
Adobe Reader XI

---\\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 60 Stepping 3, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 8266.092 MB (72% free)
~ System Restore: Active (Enable)
~ System drive C: has 27 GB free of 114 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: ADMIN
~ User Name: User
~ Logged in as Administrator

---\\ Enumeration of the disk units (3) - 1s
~ Drive C: has 27 GB free of 114 GB (System)
~ Drive F: has 727 GB free of 953 GB
~ Drive H: has 114 GB free of 114 GB

---\\ Search Generic System Files (22) - 0s
[MD5.C10A66189DC8C090E7C84873EDCEBC88] - (.Microsoft Corporation - Windows Explorer.) () -- C:\Windows\Explorer.exe [2501368]
[MD5.6E0BDFBEEED65B017F2E4C2C910B0520] - (.Microsoft Corporation - Windows host process (Rundll32).) () -- C:\Windows\System32\rundll32.exe [52736]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Windows Start-Up Application.) () -- C:\Windows\System32\Wininit.exe [144384]
[MD5.9DFE41A69DF70AAB75CB5BA8C1109EA2] - (.Microsoft Corporation - Internet Extensions for Win32.) () -- C:\Windows\System32\wininet.dll [2358272]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Windows Logon Application.) () -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Software Licensing Library.) () -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [76800]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - i8042 Port Driver.) () -- C:\Windows\System32\drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [142848]
[MD5.7A1A3F213CDB3363D179D5014272025D] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [282624]
[MD5.038C77D577900EE39410662478BB0D50] - (.Microsoft Corporation - NT File System Driver.) () -- C:\Windows\System32\drivers\ntfs.sys [2009920]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Parallel Port Driver.) () -- C:\Windows\System32\drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Volume Shadow Copy Driver.) () -- C:\Windows\System32\drivers\volsnap.sys [310080]

---\\ Process running (25) - 1s
[MD5.E1CE82592245B9E9621F17FBF457DB4E] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 344.7.) -- C:\Windows\system32\nvvsvc.exe [934032] [PID.1004]
[MD5.B1F2D06DD129C900A172EF4466A3A4AB] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1247432] [PID.368]
[MD5.E1CE82592245B9E9621F17FBF457DB4E] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 344.7.) -- C:\Windows\system32\nvvsvc.exe [934032] [PID.380]
[MD5.7736CDCCA38519FD637C82638A06B4FF] - (.Acronis - Acronis Scheduler 2.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1143720] [PID.1652]
[MD5.051B0369593D350A0610FC2E3F1F8AFD] - (.Acronis - File Level CDP Manager Service.) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [3783672] [PID.1736]
[MD5.BBBC59715AA9EFD1BAE7B048AACC0B24] - (.ELAN Microelectronics Corp. - Elan Service.) -- C:\Program Files\Elantech\ETDService.exe [101192] [PID.1904]
[MD5.34E75903D327D9D02AA5F92F87C808EF] - (.NVIDIA Corporation - NVIDIA GeForce Experience Service.) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744] [PID.1948]
[MD5.0DB1E3F6189C628675F855C0EB510419] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696] [PID.2000]
[MD5.086DA58F38AB4C690D594D223F6C4BC4] - (.Nalpeiron Ltd. - Nalpeiron LAN Service Build March 20th 2012.) -- C:\Windows\SysWOW64\nalserv.exe [135168] [PID.1036]
[MD5.B1EF4686961986DFFB7FE8F18E6FCB5B] - (.Nalpeiron Ltd. - This service enables products that use the.) -- C:\Windows\SysWOW64\nlssrv32.exe [66560] [PID.2096]
[MD5.9EA1D43D68AAAE216CDA9C89CEF24D9E] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912] [PID.2128]
[MD5.8EB877DD871935DF1074BFF18CB301AB] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848] [PID.2152]
[MD5.8EB877DD871935DF1074BFF18CB301AB] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848] [PID.2720]
[MD5.083277D852E22BBC3EB83BB6A6B53C2D] - (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe [2890056] [PID.3800]
[MD5.8EB877DD871935DF1074BFF18CB301AB] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848] [PID.3812]
[MD5.90AC42BBCDF908DD576853CB5CACA761] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072] [PID.4080]
[MD5.FCB9BBDA6424D46D7463B9CC6A49E041] - (.ELAN Microelectronics Corp. - ETDTouch.) -- C:\Program Files\Elantech\ETDTouch.exe [85832] [PID.2208]
[MD5.982E78DB8D18FE4E7235071A22F5C389] - (.ELAN Microelectronics Corp. - ETD Control Center Helper.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe [2249032] [PID.3140]
[MD5.0011163AC036C71E03883DD10C626F81] - (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576] [PID.4760]
[MD5.8AF9F5700E5AA71303FD98D3DA976345] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2445512] [PID.4768]
[MD5.59F8DA04498B80D58FD8638370C5C84F] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688] [PID.5036]
[MD5.E429410581E60535B555DDA729424885] - (.DuckLink Software - DuckLink Screen Capture.) -- C:\Program Files (x86)\DuckLink\DuckCapture\DuckCapture.exe [436736] [PID.5264]
[MD5.7FFF753D3392CC6271432C2A476C4240] - (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote Clipper.) -- C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe [1210376] [PID.5856]
[MD5.E903DA0A3B4F2204351F1B5EBDFA4C47] - (.Dolby Laboratories Inc. - Dolby Digital Plus Profile Selector.) -- C:\Program Files\Dolby Digital Plus\ddp.exe [585600] [PID.6408]
[MD5.430D7B719DD345E305DF94529FFD183D] - (.Acronis - TrueImage Sync Agent Service.) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7084672] [PID.1144]

---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2) (5) - 0s
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [bcipapbfhdnmgihoimbjiadmhpcgcnil] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [efaidnbmnnnibpcajpcglclefindmkaj] __MSG_web2pdfExtnName__
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call
G2 - GCE: Preference [User Data\Default] [lmjegmlicamnimmfhcmpkclmigmmcbeh] Application Launcher for Drive (by Google)

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) (16) - 0s
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazondotcom.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\twitter.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - EXT: (. - RandomApp.) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\i0x64l8i.default\extensions\_clsguybaoca_dpt@daecgpisvdpvpp.org
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited.) -- C:\Users\User\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- D:\Installed in disc D\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.45.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Oracle Corp..) -- C:\Program Files (x86)\Java\jre1.8.0_45\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.45.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll

---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) (21) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hote est sain (The hosts file is clean) (24)

---\\ Browser Helper Object (BHO) (O2) (2) - 1s
O2 - BHO: (no name) [64Bits] - {074C1DC5-9320-4A9A-947D-C042949C6216} (Orphean)
O2 - BHO: Evernote extension [64Bits] - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} . (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote Clipper for Microsoft Internet Exp.) -- C:\Program Files (x86)\Evernote\Evernote\EvernoteIEx64.dll

---\\ Auto loading programs from Registry and folders (O4) (38) - 0s
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [RtHDVBg_Dolby] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
O4 - HKLM\..\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
O4 - HKLM\..\Run: [ShadowPlay] . (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\Windows\System32\rundll32.exe
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\Windows\System32\rundll32.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] . (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] D:\Installed in disc D\DAEMON Tools Lite\DTLite.exe (.not file.)
O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Facebook Installer.) -- C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [Viber] C:\Users\User\AppData\Local\Viber\Viber.exe (.not file.)
O4 - HKCU\..\Run: [Adobe Acrobat Synchronizer] . (.Adobe Systems Incorporated - Adobe Collaboration Synchronizer 15.7.) -- C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
O4 - HKCU\..\Run: [DuckCapture] . (.DuckLink Software - DuckLink Screen Capture.) -- C:\Program Files (x86)\DuckLink\DuckCapture\DuckCapture.exe
O4 - HKCU\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Sticky Notes.) -- C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] D:\Installed in disc D\iTunesHelper.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [TrueImageMonitor.exe] . (.Acronis - Acronis True Image Monitor.) -- C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Wow6432Node\Run: [AcronisTibMounterMonitor] . (.Acronis - Acronis TIB Monitor.) -- C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [DAEMON Tools Lite] D:\Installed in disc D\DAEMON Tools Lite\DTLite.exe (.not file.)
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Facebook Installer.) -- C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [Viber] C:\Users\User\AppData\Local\Viber\Viber.exe (.not file.)
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [Adobe Acrobat Synchronizer] . (.Adobe Systems Incorporated - Adobe Collaboration Synchronizer 15.7.) -- C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [DuckCapture] . (.DuckLink Software - DuckLink Screen Capture.) -- C:\Program Files (x86)\DuckLink\DuckCapture\DuckCapture.exe
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Sticky Notes.) -- C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-21-2821764334-1850713081-2027466748-1001\..\Run: [GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

---\\ Lop.com/Domain Hijackers (O17) (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

---\\ AppInit_DLLs Registry value Autorun (O20) (1) - 0s
O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 344.) - C:\Windows\system32\nvinitx.dll

---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23) (19) - 1s
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) . (.Acronis - Acronis Scheduler 2.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Elan Service (ETDService) . (.ELAN Microelectronics Corp. - Elan Service.) - C:\Program Files\Elantech\ETDService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce Experience Service.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) . (...) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Nalpeiron Control Service (NalServ) . (.Nalpeiron Ltd. - Nalpeiron LAN Service Build March 20th 2012.) - C:\Windows\SysWOW64\nalserv.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) . (.Nalpeiron Ltd. - This service enables products that use the.) - C:\Windows\SysWOW64\nlssrv32.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 344.7.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Acronis Sync Agent Service (syncagentsrv) . (.Acronis - TrueImage Sync Agent Service.) - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

---\\ Task Planned Automatically (O39) (27) - 2s
[MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104]
[MD5.D0E69BC0FE8F77067237AE4900017A0D] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_209_pepper.exe [1155760]
[MD5.011BD8A49AF856E8A8EE32652D1CFC05] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [268976]
[MD5.7C6D524C78A1722AD987B9E47AC1FEE2] [APT] [DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001Core] (.Dropbox, Inc..) -- C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512]
[MD5.7C6D524C78A1722AD987B9E47AC1FEE2] [APT] [DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001UA] (.Dropbox, Inc..) -- C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512]
[MD5.28405F60CCF4023CD253B0EB3640C078] [APT] [HPCustParticipation HP Deskjet 3070 B611 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPCustPartic.exe [4119656]
[MD5.00000000000000000000000000000000] [APT] [LiveToRead] (.Hewlett-Packard Co..) -- c:\programdata\{435d80fe-85b9-4a71-435d-d80fe85b03fa}\8496398093982811925b.exe (.not file.) [0]
[MD5.EF1E82732B47957D33EEB74844F213AD] [APT] [Opera scheduled Autoupdate 1422464805] (.Opera Software.) -- C:\Program Files (x86)\Opera\launcher.exe [908408]
[MD5.3BBEC4CC2A388B4C5D1EFE20EAD7D98F] [APT] [{9AA081E5-A6E6-4DE3-AFAC-8C4A5068B396}] (.Google Inc..) -- c:\program files (x86)\Google\Chrome\application\chrome.exe [813896]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job [892]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [830]
O39 - APT: DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001Core - (.Dropbox, Inc..) -- C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001Core.job [874]
O39 - APT: DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001UA - (.Dropbox, Inc..) -- C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001UA.job [926]
O39 - APT: LiveToRead - (.Hewlett-Packard Co..) -- C:\Windows\Tasks\LiveToRead.job [364]
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3886]
O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier [3848]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3718]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\CreateChoiceProcessTask [3542]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Dolby Selector [3118]
O39 - APT: DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001Core - (.Dropbox, Inc..) -- C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001Core [3490]
O39 - APT: DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001UA - (.Dropbox, Inc..) -- C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2821764334-1850713081-2027466748-1001UA [3870]
O39 - APT: HPCustParticipation HP Deskjet 3070 B611 series - (.Hewlett-Packard Co..) -- C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 3070 B611 series [3612]
O39 - APT: LiveToRead - (.Hewlett-Packard Co..) -- C:\Windows\System32\Tasks\LiveToRead [3244]
O39 - APT: Opera scheduled Autoupdate 1422464805 - (.Opera Software.) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1422464805 [3824]
O39 - APT: {9AA081E5-A6E6-4DE3-AFAC-8C4A5068B396} - (.Google Inc..) -- C:\Windows\System32\Tasks\{9AA081E5-A6E6-4DE3-AFAC-8C4A5068B396} [3114]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{C69E69C8-A6C1-457C-AE8B-7D0D91DDA366} [3142]

---\\ Software installed (O42) (97) - 6s
O42 - Logiciel: ETDWare PS/2-X64 11.6.28.201_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech
O42 - Logiciel: KMSpico v9.1.3 - (...) [HKLM][64Bits] -- KMSpico_is1 =>PUA.KMSpico
O42 - Logiciel: Sublime Text 2.0.2 - (...) [HKLM][64Bits] -- Sublime Text 2_is1
O42 - Logiciel: WinRAR 5.00 (64-áèòîâà âåðñèÿ) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140}
O42 - Logiciel: HP Deskjet 3070 B611 series Product Improvement Study - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {5FC9F9EE-C530-4DB7-8509-C166E42355CD}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Dolby Digital Plus Home Theater - (.Dolby Laboratories Inc.) [HKLM][64Bits] -- {7E3D8FA1-6092-469A-955B-68FC4A2C67CA}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {89AFB053-A343-46EF-97E4-D593AD7184E6}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484}
O42 - Logiciel: Microsoft Access MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Excel MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft PowerPoint MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Publisher MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Outlook MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Word MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft InfoPath MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft DCF MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft OneNote MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Groove MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Access Setup Metadata MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0117-0409-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Lync MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-0409-1000-0000000FF1CE}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {93F692D4-0C4D-4EED-9BFE-657C1D5959FE}
O42 - Logiciel: HP Deskjet 3070 B611 series Basic Device Software - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {B08ED12B-F101-45D1-B13C-B203EA67AD6B}
O42 - Logiciel: NVIDIA Graphics Driver 344.75 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA GeForce Experience 2.1.4 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience
O42 - Logiciel: NVIDIA PhysX System Software 9.14.0702 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Flash Player 18 PPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player PPAPI
O42 - Logiciel: BB FlashBack Pro 5 - (.Blueberry.) [HKLM][64Bits] -- BB FlashBack Pro 5
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Media Player - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: DuckCapture Standard 2.7 - (.DuckLink.) [HKLM][64Bits] -- DuckCapture_is1
O42 - Logiciel: FileZilla Client 3.11.0.2 - (.Tim Kosse.) [HKLM][64Bits] -- FileZilla Client
O42 - Logiciel: foobar2000 v1.3.7 - (.Peter Pawlowski.) [HKLM][64Bits] -- foobar2000
O42 - Logiciel: GOM Player - (.Gretech Corporation.) [HKLM][64Bits] -- GOM Player
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Heroes of Might and Magic® III Complete - (...) [HKLM][64Bits] -- Heroes of Might and Magic® III
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Mozilla Firefox 38.0.1 (x86 en-US) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 38.0.1 (x86 en-US)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++
O42 - Logiciel: Opera Stable 30.0.1835.125 - (.Opera Software.) [HKLM][64Bits] -- Opera 30.0.1835.125
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3
O42 - Logiciel: StartIsBack+ - (.startisback.com.) [HKLM][64Bits] -- StartIsBack
O42 - Logiciel: SDL Trados 2011 SP2 - Remove suite of products - (.SDL.) [HKLM][64Bits] -- TranslationStudio2011
O42 - Logiciel: WampServer 2.5 - (.Hervé Leclerc (HeL).) [HKLM][64Bits] -- WampServer 2_is1
O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPFix_is1
O42 - Logiciel: PxMergeModule - (.Your Company Name.) [HKLM][64Bits] -- {024521CF-C07E-4F8E-8481-0D75695E03AF}
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {111EE7DF-FC45-40C7-98A7-753AC46B12FB}
O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}
O42 - Logiciel: Skype™ 7.1 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Java 8 Update 45 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218045F0}
O42 - Logiciel: Adobe Creative Suite 5 Master Collection - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {288DB08D-0708-4A94-B055-55B99E39EB62}
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM][64Bits] -- {4EE2EF4B-25D3-4D44-8384-A2B96F811F55}
O42 - Logiciel: Data Lifeguard Diagnostic for Windows 1.28 - (.Western Digital Corporation.) [HKLM][64Bits] -- {519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: SDL Passolo Essential 2011 SP6 - (.SDL.) [HKLM][64Bits] -- {627163CD-8116-4982-9AC1-8C6DE4A499A0}
O42 - Logiciel: Prezi - (.Prezi.com.) [HKLM][64Bits] -- {63B8F931-2BF3-4D5D-9C28-E2EF88D83DFD}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {6E9EF98E-259E-416D-B5F8-0ABDB99942CE}
O42 - Logiciel: SDL Trados Studio 2011 SP2 - (.SDL.) [HKLM][64Bits] -- {7205B6D1-2975-4DDC-85D4-30AECFBFC138}
O42 - Logiciel: SDL Trados Compatibility module - (.SDL.) [HKLM][64Bits] -- {7230BA04-AE1B-4C17-91A0-E7DF6DF6E05C}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: True Image WD Edition - (.Acronis.) [HKLM][64Bits] -- {85CB1512-2D4A-4469-AC21-6B111D169CEB}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2}
O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}
O42 - Logiciel: HP Deskjet 3070 B611 series Help - (.Hewlett Packard.) [HKLM][64Bits] -- {9F20CE56-3828-432D-A3C5-3EC6A2ED93C6}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215}
O42 - Logiciel: Adobe Acrobat DC - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-1033-FFFF-7760-0C0F074E4100}
O42 - Logiciel: Adobe Reader XI (11.0.10) - Francais - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B455E95A-B804-439F-B533-336B1635AE97}
O42 - Logiciel: Evernote v. 5.8.11 - (.Evernote Corp..) [HKLM][64Bits] -- {B6B185C8-1C37-11E5-A35A-0050569584E9}
O42 - Logiciel: The Sims™ 3 - (.Electronic Arts.) [HKLM][64Bits] -- {C05D8CDB-417D-4335-A38C-A0659EDFD6B8}
O42 - Logiciel: WD Black? Dual Drive - (.Western Digital.) [HKLM][64Bits] -- {CA4C4325-B9D0-45A2-A32A-7AE2BC204D78}
O42 - Logiciel: WD Black? Dual Drive - (.Western Digital.) [HKLM][64Bits] -- {CA4C4325-B9D0-45A2-A32A-7AE2BC204D78}Visible
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}
O42 - Logiciel: Adobe Media Player - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DE3A9DC5-9A5D-6485-9662-347162C7E4CA}
O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM][64Bits] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Microsoft WSE 2.0 SP3 Runtime - (.Microsoft Corp..) [HKLM][64Bits] -- {F3CA9611-CD42-4562-ADAB-A554CF8E17F1}
O42 - Logiciel: GitHub - (.GitHub, Inc..) [HKCU][64Bits] -- 5f7eb300e2ea4ebf
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent

---\\ HKCU & HKLM Software Keys (117) - 6s
HKLM\SOFTWARE\Wow6432Node\Acronis
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\Blueberry Software
HKLM\SOFTWARE\Wow6432Node\Disc Soft
HKLM\SOFTWARE\Wow6432Node\DivXNetworks
HKLM\SOFTWARE\Wow6432Node\Electronic Arts
HKLM\SOFTWARE\Wow6432Node\Evernote
HKLM\SOFTWARE\Wow6432Node\FileZilla 3
HKLM\SOFTWARE\Wow6432Node\FileZilla Client
HKLM\SOFTWARE\Wow6432Node\foobar2000
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\GRETECH
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Lamantine
HKLM\SOFTWARE\Wow6432Node\LogSys
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\MAXSOFT-OCRON
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\mcafeeupdater
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\NeoSmart Technologies
HKLM\SOFTWARE\Wow6432Node\New World Computing
HKLM\SOFTWARE\Wow6432Node\Notepad++
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OpenOffice.org
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\PowerPivot
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\SDL
HKLM\SOFTWARE\Wow6432Node\Sims
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Sonic
HKLM\SOFTWARE\Wow6432Node\Sun Microsystems
HKLM\SOFTWARE\Wow6432Node\Trados
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\Western Digital
HKLM\SOFTWARE\Wow6432Node\Windows
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Acronis
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Alarm
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\Avg
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Blueberry Software
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Disc Soft
HKCU\SOFTWARE\Dolby
HKCU\SOFTWARE\Dropbox
HKCU\SOFTWARE\DropboxUpdate
HKCU\SOFTWARE\Elantech
HKCU\SOFTWARE\Electronic Arts
HKCU\SOFTWARE\Evernote
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\foobar2000
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\GRETECH
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Lamantine
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\LogiShrd
HKCU\SOFTWARE\LogSys
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\Minnetonka Audio Software
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\New World Computing
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OpenOffice.org
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\PACE Anti-Piracy
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\SDL
HKCU\SOFTWARE\ShutDownControl
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SkypeRS
HKCU\SOFTWARE\SourceForge
HKCU\SOFTWARE\StartIsBack
HKCU\SOFTWARE\Stefan Angelov
HKCU\SOFTWARE\SubSystems
HKCU\SOFTWARE\SYNCJM
HKCU\SOFTWARE\Trados
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\Viber
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contents of the Common Files folders (O43) (238) - 4s
O43 - CFD: 2014/08/30 21:47:50 - [] D -- C:\Program Files (x86)\3DO
O43 - CFD: 2015/01/27 22:11:35 - [] D -- C:\Program Files (x86)\Acronis
O43 - CFD: 2015/04/20 23:25:16 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2014/06/15 21:21:42 - [] D -- C:\Program Files (x86)\Adobe Media Player
O43 - CFD: 2014/11/18 22:51:14 - [0] D -- C:\Program Files (x86)\AGEIA Technologies
O43 - CFD: 2014/06/15 21:35:05 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2014/07/10 22:02:40 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 2015/06/27 16:41:44 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2014/08/30 21:47:18 - [] D -- C:\Program Files (x86)\directx
O43 - CFD: 2015/05/17 00:40:19 - [] D -- C:\Program Files (x86)\DuckLink
O43 - CFD: 2014/08/31 21:20:01 - [] D -- C:\Program Files (x86)\Electronic Arts
O43 - CFD: 2014/06/18 09:35:54 - [] D -- C:\Program Files (x86)\Evernote
O43 - CFD: 2014/09/01 21:25:05 - [] D -- C:\Program Files (x86)\Firefly Studios
O43 - CFD: 2014/07/01 22:15:57 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/01/28 20:06:12 - [] D -- C:\Program Files (x86)\GRETECH
O43 - CFD: 2015/03/29 11:54:08 - [] D -- C:\Program Files (x86)\HP
O43 - CFD: 2014/08/31 21:20:01 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2014/06/14 23:15:23 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/04/14 22:34:20 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2014/06/15 20:49:20 - [] D -- C:\Program Files (x86)\JRE
O43 - CFD: 2015/07/17 23:42:30 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2014/06/14 23:29:33 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 2014/10/15 08:15:43 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET
O43 - CFD: 2014/06/14 23:29:29 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2014/12/14 18:35:19 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2014/06/14 23:31:09 - [] D -- C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 2014/09/09 11:03:28 - [] D -- C:\Program Files (x86)\Microsoft WSE
O43 - CFD: 2014/06/15 08:28:43 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2015/07/17 23:35:32 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/05/28 07:33:35 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2014/09/09 11:04:13 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2014/09/03 09:42:52 - [] D -- C:\Program Files (x86)\MSECache
O43 - CFD: 2014/06/15 21:21:38 - [] D -- C:\Program Files (x86)\My Company Name
O43 - CFD: 2015/01/31 17:34:33 - [0] D -- C:\Program Files (x86)\NeoSmart Technologies
O43 - CFD: 2015/07/18 13:36:00 - [] D -- C:\Program Files (x86)\Nervous Stroke
O43 - CFD: 2015/06/28 14:24:38 - [] D -- C:\Program Files (x86)\Notepad++
O43 - CFD: 2014/11/18 22:50:44 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 2014/09/09 11:03:27 - [] D -- C:\Program Files (x86)\Open XML SDK
O43 - CFD: 2014/06/15 20:49:20 - [] D -- C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 2015/07/14 21:31:10 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2015/03/23 00:10:48 - [] D -- C:\Program Files (x86)\Prezi
O43 - CFD: 2014/06/15 21:35:31 - [] D -- C:\Program Files (x86)\QuickTime
O43 - CFD: 2014/06/14 23:13:03 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2014/06/30 23:14:20 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2014/09/09 11:03:59 - [] D -- C:\Program Files (x86)\SDL
O43 - CFD: 2015/05/28 07:34:12 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2014/06/14 23:04:36 - [] D -- C:\Program Files (x86)\StartIsBack
O43 - CFD: 2014/06/14 23:12:57 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2015/01/27 22:15:51 - [] D -- C:\Program Files (x86)\Western Digital
O43 - CFD: 2015/01/29 23:31:41 - [] D -- C:\Program Files (x86)\Western Digital Corporation
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2013/08/22 18:36:30 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2013/08/22 18:36:30 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2013/08/22 18:36:30 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2015/07/18 13:34:26 - [] D -- C:\Program Files (x86)\ZHPFix
O43 - CFD: 2014/08/30 21:47:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3DO
O43 - CFD: 2015/03/13 20:21:32 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/03/13 20:21:32 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/01/27 22:11:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
O43 - CFD: 2015/03/13 20:21:32 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/06/15 21:21:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
O43 - CFD: 2014/06/15 21:29:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS5
O43 - CFD: 2015/06/27 16:41:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blueberry Software
O43 - CFD: 2014/08/30 20:20:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
O43 - CFD: 2015/05/17 00:40:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DuckLink
O43 - CFD: 2015/06/28 14:00:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
O43 - CFD: 2015/06/30 22:12:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
O43 - CFD: 2014/07/14 18:00:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
O43 - CFD: 2015/03/13 20:21:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/06/06 09:16:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
O43 - CFD: 2015/03/29 11:54:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 2014/06/14 23:15:23 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 2014/07/10 22:03:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2015/04/14 22:29:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2013/08/22 18:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/17 23:42:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2015/03/13 20:21:24 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2014/12/14 12:14:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2014/09/03 20:20:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 2014/06/14 23:21:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 2014/06/15 20:49:36 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.2
O43 - CFD: 2015/03/29 13:36:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
O43 - CFD: 2014/06/15 21:35:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2014/09/09 11:03:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SDL
O43 - CFD: 2014/09/16 22:24:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2015/05/27 10:07:38 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2015/03/13 20:21:32 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2013/08/23 02:30:57 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2014/06/15 20:47:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WampServer
O43 - CFD: 2015/01/29 23:31:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation
O43 - CFD: 2014/06/14 23:06:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/07/18 13:32:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
O43 - CFD: 2014/07/10 22:03:13 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 2015/01/27 22:11:43 - [] D -- C:\ProgramData\Acronis
O43 - CFD: 2015/04/20 23:27:13 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2014/06/15 21:27:33 - [0] D -- C:\ProgramData\ALM
O43 - CFD: 2014/07/10 22:02:44 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2014/07/10 22:03:08 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2013/08/22 17:45:52 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/08/30 20:37:18 - [] D -- C:\ProgramData\AVG2014
O43 - CFD: 2015/07/01 23:50:13 - [] D -- C:\ProgramData\Blueberry
O43 - CFD: 2014/06/15 15:15:15 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2014/06/29 15:14:53 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 2013/08/22 17:45:52 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 17:45:52 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/06/19 07:22:27 - [] D -- C:\ProgramData\Dropbox
O43 - CFD: 2014/07/14 18:01:41 - [] D -- C:\ProgramData\GRETECH
O43 - CFD: 2015/03/29 11:52:56 - [] D -- C:\ProgramData\HP
O43 - CFD: 2014/06/14 23:13:32 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2015/06/27 16:41:47 - [] D -- C:\ProgramData\LogSys
O43 - CFD: 2015/06/29 20:09:21 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2014/07/08 20:40:30 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2014/08/30 20:37:18 - [] D -- C:\ProgramData\MFAData
O43 - CFD: 2015/03/14 01:51:10 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/03/14 02:43:50 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/05/12 20:16:56 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2014/11/18 22:51:06 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 2014/11/18 22:50:48 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2015/04/14 22:28:50 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2014/06/15 21:44:19 - [] D -- C:\ProgramData\PACE Anti-Piracy
O43 - CFD: 2014/09/09 11:02:51 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2014/06/14 23:17:34 - [] D -- C:\ProgramData\Qualcomm Atheros
O43 - CFD: 2015/04/20 23:26:15 - [] D -- C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2014/09/09 11:03:59 - [] D -- C:\ProgramData\SDL
O43 - CFD: 2014/09/09 11:03:36 - [] D -- C:\ProgramData\SDL International
O43 - CFD: 2015/04/09 22:50:55 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2013/08/22 17:45:52 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2014/06/15 20:49:09 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2013/08/22 17:45:52 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2014/08/30 21:47:50 - [] D -- C:\Program Files (x86)\Common Files\3DO Shared
O43 - CFD: 2015/01/27 22:11:55 - [] D -- C:\Program Files (x86)\Common Files\Acronis
O43 - CFD: 2015/04/20 23:26:15 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2014/06/15 21:20:10 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2014/07/10 22:03:08 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2015/06/27 16:41:45 - [] D -- C:\Program Files (x86)\Common Files\Blueberry Software
O43 - CFD: 2014/06/14 23:12:01 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2014/06/14 23:15:03 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2014/06/14 23:14:20 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 2014/06/15 20:49:09 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2015/02/12 11:25:57 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2014/06/14 23:13:51 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 2014/06/15 21:21:38 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 2014/09/09 11:04:26 - [] D -- C:\Program Files (x86)\Common Files\SDL
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2014/09/16 22:24:01 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2014/06/15 21:21:38 - [] D -- C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 2015/01/24 15:07:29 - [] D -- C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 2015/03/13 20:21:32 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2015/01/27 22:12:44 - [] D -- C:\Users\User\AppData\Roaming\Acronis
O43 - CFD: 2015/05/24 11:34:56 - [] D -- C:\Users\User\AppData\Roaming\Adobe
O43 - CFD: 2014/07/10 22:03:39 - [] D -- C:\Users\User\AppData\Roaming\Apple Computer
O43 - CFD: 2014/06/15 15:17:21 - [] D -- C:\Users\User\AppData\Roaming\AVG2014
O43 - CFD: 2015/07/01 23:57:07 - [] D -- C:\Users\User\AppData\Roaming\Blueberry
O43 - CFD: 2015/05/24 12:59:02 - [] D -- C:\Users\User\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 2015/03/31 22:04:34 - [] D -- C:\Users\User\AppData\Roaming\com.prezi.PreziDesktop
O43 - CFD: 2014/06/29 15:16:10 - [] D -- C:\Users\User\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 2015/07/18 09:44:14 - [] D -- C:\Users\User\AppData\Roaming\Dropbox
O43 - CFD: 2015/05/17 00:40:22 - [] D -- C:\Users\User\AppData\Roaming\DuckLink
O43 - CFD: 2015/07/01 20:46:35 - [] D -- C:\Users\User\AppData\Roaming\FileZilla
O43 - CFD: 2015/07/08 21:00:49 - [] D -- C:\Users\User\AppData\Roaming\foobar2000
O43 - CFD: 2015/02/25 23:10:15 - [] D -- C:\Users\User\AppData\Roaming\GitHub
O43 - CFD: 2014/07/14 18:00:51 - [] D -- C:\Users\User\AppData\Roaming\GRETECH
O43 - CFD: 2015/06/30 21:44:26 - [] D -- C:\Users\User\AppData\Roaming\HpUpdate
O43 - CFD: 2015/03/13 19:46:07 - [] D -- C:\Users\User\AppData\Roaming\Identities
O43 - CFD: 2014/06/14 23:13:34 - [] D -- C:\Users\User\AppData\Roaming\Intel Corporation
O43 - CFD: 2015/06/27 16:41:57 - [] D -- C:\Users\User\AppData\Roaming\LogSys
O43 - CFD: 2014/06/14 23:30:35 - [] D -- C:\Users\User\AppData\Roaming\Macromedia
O43 - CFD: 2015/05/18 09:13:17 - [] SD -- C:\Users\User\AppData\Roaming\Microsoft
O43 - CFD: 2015/05/12 20:17:13 - [] D -- C:\Users\User\AppData\Roaming\Mozilla
O43 - CFD: 2015/06/28 14:24:39 - [] D -- C:\Users\User\AppData\Roaming\Notepad++
O43 - CFD: 2015/01/04 17:06:43 - [] D -- C:\Users\User\AppData\Roaming\NVIDIA
O43 - CFD: 2014/07/15 13:11:34 - [] D -- C:\Users\User\AppData\Roaming\OpenOffice.org
O43 - CFD: 2015/01/28 20:06:47 - [] D -- C:\Users\User\AppData\Roaming\Opera Software
O43 - CFD: 2015/04/14 22:27:46 - [] D -- C:\Users\User\AppData\Roaming\Oracle
O43 - CFD: 2014/06/15 21:44:19 - [] D -- C:\Users\User\AppData\Roaming\PACE Anti-Piracy
O43 - CFD: 2015/04/20 23:27:49 - [] D -- C:\Users\User\AppData\Roaming\PDAppFlex
O43 - CFD: 2014/06/15 21:31:06 - [] D -- C:\Users\User\AppData\Roaming\ResourceCentral.E6E1B28A311BC518DB6C6883EA3757FDE0E90ADC.1
O43 - CFD: 2014/09/09 11:08:58 - [] D -- C:\Users\User\AppData\Roaming\SDL
O43 - CFD: 2015/07/18 13:23:49 - [] D -- C:\Users\User\AppData\Roaming\Skype
O43 - CFD: 2014/09/02 14:13:39 - [] D -- C:\Users\User\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
O43 - CFD: 2014/10/12 10:22:46 - [] D -- C:\Users\User\AppData\Roaming\Sublime Text 2
O43 - CFD: 2014/06/15 15:16:52 - [] D -- C:\Users\User\AppData\Roaming\TuneUp Software
O43 - CFD: 2015/06/28 23:44:18 - [] D -- C:\Users\User\AppData\Roaming\uTorrent
O43 - CFD: 2014/06/14 23:06:38 - [] D -- C:\Users\User\AppData\Roaming\WinRAR
O43 - CFD: 2015/07/18 13:37:28 - [] D -- C:\Users\User\AppData\Roaming\ZHP
O43 - CFD: 2015/07/18 09:47:30 - [] D -- C:\Users\User\AppData\Local\Adobe
O43 - CFD: 2014/06/15 21:35:06 - [] D -- C:\Users\User\AppData\Local\Apple
O43 - CFD: 2014/07/10 22:03:18 - [] D -- C:\Users\User\AppData\Local\Apple Computer
O43 - CFD: 2014/10/11 21:03:12 - [] D -- C:\Users\User\AppData\Local\Apps
O43 - CFD: 2014/08/30 20:36:11 - [] D -- C:\Users\User\AppData\Local\Avg2014
O43 - CFD: 2015/06/30 21:17:05 - [] D -- C:\Users\User\AppData\Local\CrashDumps
O43 - CFD: 2015/02/25 23:05:20 - [0] D -- C:\Users\User\AppData\Local\Deployment
O43 - CFD: 2015/06/19 07:22:27 - [] D -- C:\Users\User\AppData\Local\Dropbox
O43 - CFD: 2015/04/13 10:25:20 - [0] D -- C:\Users\User\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2014/11/16 23:37:22 - [] SHD -- C:\Users\User\AppData\Local\EmieBrowserModeList
O43 - CFD: 2014/06/18 21:51:10 - [] SHD -- C:\Users\User\AppData\Local\EmieSiteList
O43 - CFD: 2014/06/18 21:51:10 - [] SHD -- C:\Users\User\AppData\Local\EmieUserList
O43 - CFD: 2014/06/18 09:36:00 - [] D -- C:\Users\User\AppData\Local\Evernote
O43 - CFD: 2015/01/12 02:16:01 - [] D -- C:\Users\User\AppData\Local\EvernoteNW
O43 - CFD: 2014/07/28 21:21:35 - [] D -- C:\Users\User\AppData\Local\Facebook
O43 - CFD: 2015/02/25 23:10:15 - [] D -- C:\Users\User\AppData\Local\GitHub
O43 - CFD: 2014/07/01 22:16:09 - [] D -- C:\Users\User\AppData\Local\Google
O43 - CFD: 2015/03/29 11:35:14 - [] D -- C:\Users\User\AppData\Local\HP
O43 - CFD: 2015/03/08 22:56:34 - [] D -- C:\Users\User\AppData\Local\Intel_Corporation
O43 - CFD: 2014/06/15 15:15:15 - [] D -- C:\Users\User\AppData\Local\MFAData
O43 - CFD: 2015/03/13 20:19:39 - [] D -- C:\Users\User\AppData\Local\Microsoft
O43 - CFD: 2015/02/26 00:29:20 - [] D -- C:\Users\User\AppData\Local\Microsoft Help
O43 - CFD: 2015/05/12 20:17:13 - [] D -- C:\Users\User\AppData\Local\Mozilla
O43 - CFD: 2015/01/27 23:10:00 - [] D -- C:\Users\User\AppData\Local\NeoSmart_Technologies
O43 - CFD: 2014/06/14 23:21:09 - [] D -- C:\Users\User\AppData\Local\NVIDIA
O43 - CFD: 2014/07/30 22:10:47 - [] D -- C:\Users\User\AppData\Local\NVIDIA Corporation
O43 - CFD: 2015/01/28 20:06:47 - [] D -- C:\Users\User\AppData\Local\Opera Software
O43 - CFD: 2014/06/15 21:44:19 - [0] D -- C:\Users\User\AppData\Local\PACE Anti-Piracy
O43 - CFD: 2015/06/17 21:09:54 - [] D -- C:\Users\User\AppData\Local\Packages
O43 - CFD: 2014/06/14 23:07:05 - [] D -- C:\Users\User\AppData\Local\Programs
O43 - CFD: 2014/09/09 11:29:14 - [] D -- C:\Users\User\AppData\Local\SDL
O43 - CFD: 2014/09/01 21:26:34 - [] D -- C:\Users\User\AppData\Local\SKIDROW
O43 - CFD: 2014/06/14 23:37:28 - [] D -- C:\Users\User\AppData\Local\Skype
O43 - CFD: 2015/07/18 13:37:21 - [] D -- C:\Users\User\AppData\Local\Temp
O43 - CFD: 2015/02/01 14:00:30 - [] D -- C:\Users\User\AppData\Local\VirtualStore
O43 - CFD: 2013/08/22 18:36:32 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2013/08/22 18:36:32 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/03/16 08:58:24 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/07/10 07:28:35 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 2014/10/12 10:26:43 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
O43 - CFD: 2015/02/12 20:10:49 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2013/08/22 18:36:32 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/09/03 20:20:01 - [0] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 2015/07/10 07:28:41 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2013/08/22 18:36:32 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/06/14 23:06:01 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ System Drivers List (SDL) (O58) (60) - 1s
O58 - SDL:2013/08/22 15:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896]
O58 - SDL:2015/07/12 22:54:53 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\4B210E00.sys [113880]
O58 - SDL:2013/08/22 15:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176]
O58 - SDL:2015/01/27 22:11:56 A . (.Acronis - File Level CDP Kernel Helper.) -- C:\Windows\System32\drivers\afcdp.sys [367200]
O58 - SDL:2013/08/22 15:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200]
O58 - SDL:2013/08/22 15:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424]
O58 - SDL:2013/08/22 15:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952]
O58 - SDL:2013/08/22 15:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016]
O58 - SDL:2013/06/18 17:45:02 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\Windows\System32\drivers\athw8x.sys [3680256]
O58 - SDL:2013/08/13 02:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624]
O58 - SDL:2014/04/28 06:33:30 A . (.Qualcomm Atheros - Qualcomm Atheros BtFilter Driver.) -- C:\Windows\System32\drivers\btfilter.sys [599240]
O58 - SDL:2013/08/22 15:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296]
O58 - SDL:2009/06/23 03:00:00 N . (.Sonic Solutions - CDR4 64-bit CD and DVD Place Holder Driver.) -- C:\Windows\System32\drivers\cdr4_xp.sys [10224]
O58 - SDL:2009/06/23 03:00:00 N . (.Sonic Solutions - CDRAL 64-bit Place Holder Driver (see PxHel.) -- C:\Windows\System32\drivers\cdralw2k.sys [10224]
O58 - SDL:2013/10/02 04:31:08 A . (.ELAN Microelectronics Corp. - ETD Kernel Center.) -- C:\Windows\System32\drivers\ETD.sys [370504]
O58 - SDL:2013/08/22 15:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024]
O58 - SDL:2015/01/27 22:11:43 A . (.Acronis International GmbH - Acronis Storage Filter Management Driver.) -- C:\Windows\System32\drivers\fltsrv.sys [108832]
O58 - SDL:2012/08/21 13:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240]
O58 - SDL:2013/08/22 15:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352]
O58 - SDL:2013/07/30 21:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568]
O58 - SDL:2013/07/25 22:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320]
O58 - SDL:2013/08/07 14:23:46 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStorA.sys [644968]
O58 - SDL:2013/08/10 03:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248]
O58 - SDL:2013/08/22 15:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000]
O58 - SDL:2013/08/20 02:20:18 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [4165120]
O58 - SDL:2013/08/20 02:25:01 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [449528]
O58 - SDL:2013/08/09 00:25:13 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [39320]
O58 - SDL:2013/08/09 00:25:13 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [26008]
O58 - SDL:2013/06/18 17:45:14 A . (.Broadcom Corporation - Broadcom NetLink (TM) Gigabit Ethernet NDIS.) -- C:\Windows\System32\drivers\k57nd60a.sys [425984]
O58 - SDL:2013/08/22 15:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408]
O58 - SDL:2013/08/22 15:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536]
O58 - SDL:2013/08/22 15:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760]
O58 - SDL:2013/08/22 15:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784]
O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25816]
O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [109272]
O58 - SDL:2015/07/18 00:02:06 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [113880]
O58 - SDL:2013/08/22 15:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672]
O58 - SDL:2013/08/22 15:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840]
O58 - SDL:2013/08/22 15:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840]
O58 - SDL:2015/06/18 08:42:02 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [64216]
O58 - SDL:2014/11/13 03:20:36 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [13213512]
O58 - SDL:2014/11/13 03:20:36 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvpciflt.sys [31560]
O58 - SDL:2013/08/22 15:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368]
O58 - SDL:2013/08/22 15:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288]
O58 - SDL:2014/10/03 22:23:02 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\System32\drivers\nvvad64v.sys [38216]
O58 - SDL:2009/07/09 03:00:00 N . (.Sonic Solutions - Px Engine Device Driver for 64-bit Windows.) -- C:\Windows\System32\drivers\PxHlpa64.sys [55280]
O58 - SDL:2013/08/27 15:37:54 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [3613528]
O58 - SDL:2013/08/30 13:05:34 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\Windows\System32\drivers\RtsPStor.sys [356056]
O58 - SDL:2013/08/22 18:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040]
O58 - SDL:2013/08/22 15:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896]
O58 - SDL:2013/08/22 15:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760]
O58 - SDL:2015/01/27 22:11:44 A . (.Acronis - Acronis Snapshot API.) -- C:\Windows\System32\drivers\snapman.sys [233760]
O58 - SDL:2013/08/22 15:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072]
O58 - SDL:2015/01/27 22:11:53 A . (.Acronis International GmbH - Acronis Try&Decide Volume Filter Driver.) -- C:\Windows\System32\drivers\tdrpman.sys [1462560]
O58 - SDL:2013/09/04 02:53:52 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverx64.sys [99288]
O58 - SDL:2015/01/27 22:11:53 A . (.Acronis International GmbH - Acronis Backup Archive Explorer.) -- C:\Windows\System32\drivers\tib.sys [1120032]
O58 - SDL:2015/01/27 22:11:54 A . (.Acronis - Acronis Backup Archive Mounter.) -- C:\Windows\System32\drivers\tib_mounter.sys [183224]
O58 - SDL:2013/08/22 15:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808]
O58 - SDL:2013/08/22 15:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800]
O58 - SDL:2013/08/22 15:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504]

---\\ Last modified or created user files (O61) (10) - 32s
O61 - LFC: 2015/07/16 18:43:17 A . (..) -- C:\Users\User\AppData\Roaming\appdataFr25.bin [24]
O61 - LFC: 2015/07/14 13:00:18 A . (..) -- C:\Users\User\AppData\Local\NVIDIA\NvBackend\UMDShim\nvcoproc.bin [5119797]
O61 - LFC: 2015/07/17 23:28:19 A . (..) -- C:\Users\User\AppData\Local\NVIDIA\NvBackend\Packages\00007aae\DAO.19774245.exe [5915664]
O61 - LFC: 2015/07/14 23:06:15 A . (..) -- C:\Users\User\AppData\Local\NVIDIA\NvBackend\Packages\00007a87\CoProc update.19763320.exe [514472]
O61 - LFC: 2015/07/17 15:01:02 A . (.NVIDIA Corporation.) -- C:\Users\User\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe [628664]
O61 - LFC: 2015/07/17 15:01:00 A . (.NVIDIA Corporation.) -- C:\Users\User\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe [172984]
O61 - LFC: 2015/07/17 15:00:56 A . (.NVIDIA Corporation.) -- C:\Users\User\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\Ontology.dll [1357240]
O61 - LFC: 2015/07/14 20:48:53 A . (..) -- C:\Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\EL53SS6Q\SkypeSetupFull[1].exe [4892672]
O61 - LFC: 2015/07/18 13:36:25 A . (..) -- C:\Users\User\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]
O61 - LFC: 2015/07/13 10:14:22 A . (..) -- C:\Users\User\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll [16307888]

---\\ File Associations Shell Spawning (O67) (9) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Start Menu Internet (SMI) (O68) (16) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe

---\\ Search Browser Infection (SBI) (O69) (3) - 1s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {14672F25-22A1-4895-820D-57AA80D750ED} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Goo) - http://www.google.com/

---\\ Search Svchost Services (SSS) (O83) (36) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Application Experience Service.) -- C:\Windows\System32\aelupsvc.dll [208896]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [155136]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [155136]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\system32\srvsvc.dll [324096]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\Windows\System32\gpsvc.dll [1261056]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\ikeext.dll [1063424]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [914432]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [110080]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\system32\iscsiexe.dll [150528]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [107008]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\Windows\system32\schedsvc.dll [1212928]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [220672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Multimedia Class Scheduler Service.) -- C:\Windows\system32\mmcss.dll [70656]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\Windows\System32\browser.dll [134144]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [225280]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [324096]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\Windows\System32\wercplsupport.dll [81408]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\Windows\system32\kmsvc.dll [97792]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [339456]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Windows Location Framework Service.) -- C:\Windows\System32\GeofenceMonitorService.dll [491520]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\Windows\system32\wlidsvc.dll [1576960]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\system32\themeservice.dll [50688]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\Windows\System32\DeviceSetupManager.dll [201728]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\Windows\System32\ncasvc.dll [164352]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [101376]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [534528]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [223744]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\sens.dll [71680]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [433664]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [306688]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\system32\wuaueng.dll [3557376]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [1017856]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [629760]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Software installation Service.) -- C:\Windows\System32\appmgmts.dll [183296]
O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [90464]

---\\ Firewall Active Exception List (FirewallRules) (O87) (13) - 0s
O87 - FAEL: "{08BC7BE3-CC76-47EA-8C24-FB9D0D08E3BF}" [In-None-P6-TRUE] .(.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O87 - FAEL: "{C5AB8E01-ABF7-4A53-8DC0-FA02DF7A739B}" [In-None-P6-TRUE] .(.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O87 - FAEL: "{FD32D9A1-2DB8-494E-A75C-08B523BE755E}" [In-None-P6-TRUE] .(.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O87 - FAEL: "{036DBF31-FF23-4AA4-BC7D-024887C1C334}" [In-None-P17-TRUE] .(.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O87 - FAEL: "{F8E89D3D-E6B2-4427-B8D7-629263AF75A8}" [In-None-P6-TRUE] .(.NVIDIA Corporation - NVIDIA Streamer Server Component.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
O87 - FAEL: "{77F9D8FB-7293-4B93-B455-2CC78AD6986B}" [In-None-P17-TRUE] .(.NVIDIA Corporation - NVIDIA Streamer Server Component.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
O87 - FAEL: "{04B8FD3E-38D2-4B23-B93A-722D7C9B3BB9}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{201808DC-811E-4C36-96C4-AEBADC71A49B}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{8FDB8C99-1887-46EC-9BA4-B864CE4A4702}" [In-None-P17-TRUE] .(.Skype Limited - Facebook Video Calling.) -- C:\Users\User\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "TCP Query User{524DC122-106B-4D31-88C7-A6DF4D377882}C:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe
O87 - FAEL: "UDP Query User{E32FCF82-66F7-4D95-89B2-1A1DD2AB7EB3}C:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe
O87 - FAEL: "{E7394DBB-10B6-4947-997B-C98127EC59B1}" [In-None-P6-TRUE] .(.Acronis - TrueImage Sync Agent Service.) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
O87 - FAEL: "{1C205D30-06EB-449B-8697-4851CCCBA39F}" [In-None-P17-TRUE] .(.Acronis - TrueImage Sync Agent Service.) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped) (27) - 16s
SR - Auto [2013/02/15 14:01:52] [ 1143720] Acronis Scheduler2 Service (AcrSch2Svc) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - Demand [2015/07/15 22:41:13] [ 268976] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - Auto [2014/06/12 19:32:48] [ 43336] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - Auto [2011/08/30 23:05:32] [ 462184] Bonjour Service (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - Demand [2013/08/26 13:10:50] [ 279024] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe
SR - Auto [2013/10/02 04:31:06] [ 101192] Elan Service (ETDService) . (.ELAN Microelectronics Corp..) - C:\Program Files\Elantech\ETDService.exe
SR - Auto [2014/11/06 20:07:54] [ 1148744] NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
SS - Demand [2014/06/06 13:15:46] [ 136120] Google Updater Service (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - Auto [2013/08/07 14:24:00] [ 15720] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - Auto [2013/05/11 17:45:38] [ 733696] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SS - Demand [2013/05/11 17:45:54] [ 822232] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
SS - Demand [2014/07/08 08:49:58] [ 641352] iPod Service (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - Auto [2013/09/04 02:53:52] [ 169432] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - Auto [2013/09/04 02:53:54] [ 390616] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SS - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SS - Demand [2015/05/24 13:38:23] [ 148080] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - Auto [2012/06/29 13:07:20] [ 135168] Nalpeiron Control Service (NalServ) . (.Nalpeiron Ltd..) - C:\Windows\SysWOW64\nalserv.exe
SR - Auto [2012/06/29 13:07:20] [ 66560] Nalpeiron Licensing Service (nlsX86cc) . (.Nalpeiron Ltd..) - C:\Windows\SysWOW64\nlssrv32.exe
SR - Auto [2014/11/06 20:07:54] [ 1795912] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
SR - Auto [2014/11/06 20:07:49] [19819848] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
SR - Auto [2014/11/13 00:56:42] [ 934032] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SS - Auto [2015/01/02 20:45:12] [ 315488] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - Demand [2010/02/19 13:37:14] [ 517096] (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SR - Auto [2013/03/26 19:23:52] [ 7084672] Acronis Sync Agent Service (syncagentsrv) . (.Acronis.) - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
SS - Demand [2014/05/01 14:34:30] [ 24576] wampapache64 (wampapache64) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe
SS - Demand [2014/05/01 14:38:12] [12942848] wampmysqld64 (wampmysqld64) . (...) - c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe

---\\ Additional Scan (O88) (1) - 0s
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 =>PUA.KMSpico

---\\ Summary of the elements found on your workstation (1) - 0s
http://www.nicolascoolman.fr/pup-kmspico/ =>PUA.KMSpico

~ End of the scan, 87509 items in 71 seconds (871)(0)()