:Commands
[CreateRestorePoint]
[Emptytemp]

:OTL
SRV:64bit: - [2015-08-19 09:57:32 | 007,743,472 | ---- | M] (Reimage®) [Disabled] -- C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe -- (ReimageRealTimeProtector)
SRV:64bit: - [2013-09-07 01:33:10 | 000,527,360 | -HS- | M] () [Disabled] -- C:\Program Files\KMSpico\Service_KMS.exe -- (Service KMSELDI)
SRV - [2016-01-31 00:03:02 | 000,000,000 | ---D | M] [Disabled] -- C:\Program Files (x86)\Google\Desktop\Install\{54ea0dce-1abd-14d2-896b-1dd2ce562286}\ \...\? [WARNING: C:\Program Files (x86)\Google\Desktop\Install\{54ea0dce-1abd-14d2-896b-1dd2ce562286}\ \...\?] -- (?etadpug) Google Update Service (gupdate)
SRV - [2015-06-29 22:58:28 | 000,039,368 | ---- | M] (Optimal Software s.r.o.) [Disabled] -- C:\Program Files (x86)\Accelerer PC\SpeedCheckerService.exe -- (SCService)
SRV - [2015-06-29 22:58:22 | 000,445,384 | ---- | M] (Optimal Software s.r.o.) [Disabled] -- C:\Program Files (x86)\Accelerer PC\PCSUService.exe -- (PCSUService)
SRV - [2015-04-16 09:49:43 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) [Auto] -- C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe -- (iSafeService)
DRV:64bit: - [2015-09-10 02:55:42 | 000,067,976 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System] -- C:\Windows\System32\drivers\iSafeNetFilter.sys -- (iSafeNetFilter)
DRV:64bit: - [2015-04-16 09:55:45 | 000,053,568 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | On_Demand] -- C:\Windows\System32\drivers\iSafeKrnlBoot.sys -- (iSafeKrnlBoot)
DRV - [2015-09-11 10:56:04 | 000,103,904 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System] -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys -- (iSafeKrnlR3)
DRV - [2015-08-20 04:10:09 | 000,061,832 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | System] -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys -- (iSafeKrnlMon)
DRV - [2015-08-20 04:10:08 | 000,110,112 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System] -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys -- (iSafeKrnlKit)
DRV - [2015-05-14 04:50:13 | 000,260,856 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | System] -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys -- (iSafeKrnl)
O4 - HKU\VM_ON_C..\Run: [Google Update] C:\Users\VM\AppData\Local\Google\Desktop\Install\{54ea0dce-1abd-14d2-896b-1dd2ce562286}\???\???\???\{54ea0dce-1abd-14d2-896b-1dd2ce562286}\GoogleUpdate.exe (RedShift IT SRL)
O20 - HKU\VM_ON_C Winlogon: Shell - ("C:\Users\VM\AppData\Local\Temp\alvua.exe") - C:\Users\VM\AppData\Local\Temp\alvua.exe File not found
MsConfig:64bit - StartUpReg: PCSpeedUp - hkey= - key= - C:\Program Files (x86)\Accelerer PC\PCSUNotifier.exe (Optimal Software s.r.o.)
[2016-02-06 17:10:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Accelerer PC
[2016-02-06 17:11:08 | 000,001,055 | ---- | C] () -- C:\Users\VM\Desktop\Accelerer PC.lnk
[2016-02-06 17:13:54 | 000,000,000 | ---D | C] -- C:\Users\VM\Documents\PCSpeedUp
[2016-02-06 17:11:23 | 000,000,338 | ---- | C] () -- C:\Windows\tasks\PC SpeedUp Service Deactivator.job
[2016-01-30 22:39:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elex-tech
[2016-01-30 22:35:24 | 000,000,000 | ---D | C] -- C:\Users\VM\AppData\Roaming\Elex-tech
[2016-01-30 22:32:11 | 000,916,008 | ---- | M] () -- C:\Users\VM\Desktop\yet_another_cleaner_sfto.exe
[2016-02-06 17:54:01 | 000,409,600 | ---- | C] (shithead mujaheddin) -- C:\Users\VM\AppData\Roaming\hrt54is56ijfgte.exe
[2016-02-06 17:53:55 | 000,000,000 | ---D | C] -- C:\Users\VM\AppData\Roaming\ide56
[2016-02-06 17:38:40 | 000,000,000 | ---D | C] -- C:\Users\VM\Desktop\Emotet + Zbot
[2016-02-06 17:27:09 | 000,000,000 | ---D | C] -- C:\Users\VM\Documents\OneSafe PC Cleaner
[2016-01-30 23:58:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OneSafe PC Cleaner
[2016-02-06 17:27:08 | 000,000,000 | ---D | C] -- C:\Users\VM\AppData\Roaming\OneSafe PC Cleaner
[2016-02-06 17:27:07 | 000,001,117 | ---- | M] () -- C:\Users\VM\Desktop\OneSafe PC Cleaner.lnk
[2016-01-30 23:58:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HiDefMedia
[2016-01-30 22:18:20 | 000,000,000 | ---D | C] -- C:\Users\VM\AppData\Roaming\Uniblue
[2016-01-30 22:18:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Uniblue
[2016-01-30 21:54:35 | 018,727,080 | ---- | C] (Uniblue Systems Limited ) -- C:\Users\VM\Desktop\SpeedUpMyPC-standalone-setup.exe
[2016-02-06 17:59:35 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\SpeedUpMyPC Startup.job
[2016-01-30 22:19:49 | 000,000,272 | ---- | C] () -- C:\Windows\tasks\SpeedUpMyPC Maintenance.job
[2016-01-30 22:12:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SearchProtect
[2016-02-06 17:22:15 | 000,000,000 | ---- | C] () --C:\Users\VM\AppData\Local\overhmacead.exe
[2016-02-06 17:52:17 | 000,047,616 | ---- | C] () -- C:\Windows\SysWow64\pqcovwqpu.exe
[2016-02-06 17:44:34 | 000,047,616 | ---- | C] () -- C:\Windows\SysWow64\kkmikegltyyzo.exe
[2016-02-06 17:42:30 | 000,047,616 | ---- | C] () -- C:\Windows\SysWow64\lfgkzcaevqlq.exe
[2016-02-06 17:40:01 | 000,047,616 | ---- | C] () -- C:\Windows\SysWow64\fgjgutmo.exe
[2016-02-06 17:21:48 | 000,047,616 | ---- | C] () -- C:\Windows\SysWow64\uqoelieotttrpb.exe
[2016-01-30 23:56:51 | 000,000,000 | ---D | C] -- C:\Users\VM\AppData\Roaming\0C1F1L1G1L1B0R1P2X0S1M1T1C1P
[2016-01-30 22:52:40 | 000,000,000 | ---- | M] () -- C:\Users\VM\AppData\Local\{A7B1F934-B2CA-476D-934A-550FDE2C40E9}

:files
C:\Program Files (x86)\Google\Desktop\Install
C:\Users\VM\AppData\Local\Google\Desktop\Install