~ ZHPDiag v2016.8.6.127 By Nicolas Coolman (2016/08/06)
~ Run by user 1 (Administrator) (2016/08/07 07:58:52)
~ Web: https://www.nicolascoolman.com
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: Version KO
~ Mode: Scan
~ Report: C:\Users\user 1\Desktop\ZHPDiag.txt
~ Report: C:\Users\user 1\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)

---\\ Internet Browsers (2) - 0s
MFIE: Mozilla Firefox 47.0.1 (x86 en-US)
MSIE: Internet Explorer v11.0.9600.18376

---\\ Windows Product Information (4) - 3s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ System protection software (1) - 0s
Malwarebytes Anti-Malware version 2.2.1.1043

---\\ Surveillance software (1) - 1s
Adobe Flash Player 22 ActiveX

---\\ Information on the system (6) - 0s
~ Operating System: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3318.68 MB (59% free)
System Restore: Activé (Enable)
System drive C: has 193 GB () free of 237 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: USER1-PC
~ User Name: user 1
~ Logged in as Administrator

---\\ Enumeration of the disk units (2) - 0s
~ Drive C: has 193 GB free of 237 GB (System)
~ Drive D: has GB free of 0 GB

---\\ State of the Windows Security Center (12) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Search Generic System Files (24) - 0s
[MD5.3DA48EA028AD771C5B71727F0C3984E9] - 09/04/2016 - (.Microsoft Corporation - Windows Explorer.) -- C:\Windows\Explorer.exe [2973184] =>.Microsoft Corporation
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - 14/07/2009 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] =>.Microsoft Corporation
[MD5.B5C5DCAD3899512020D135600129D665] - 14/07/2009 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\Windows\System32\Wininit.exe [96256] =>.Microsoft Corporation
[MD5.167ADC25991BC960DDC2D9651C55B6FF] - 10/06/2016 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\Windows\System32\wininet.dll [2392576] =>.Microsoft Corporation
[MD5.52449FD429D6053B78AE564DEF303870] - 17/07/2014 - (.Microsoft Corporation - Windows Logon Application.) -- C:\Windows\System32\Winlogon.exe [304128] =>.Microsoft Corporation
[MD5.E3AE23569749DE12D45BA3B489A036AE] - 20/11/2010 - (.Microsoft Corporation - Software Licensing Library.) -- C:\Windows\System32\sppcomapi.dll [193536] =>.Microsoft Corporation
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 22/10/2011 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\Windows\System32\dnsapi.dll [270336] =>.Microsoft Corporation
[MD5.93B49FA857F7036A4EFF32371F6E7391] - 13/10/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [338944] =>.Microsoft Corporation
[MD5.338C86357871C167A96AB976519BF59E] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21584] =>.Microsoft Windows®
[MD5.77EA11B065E0A8AB902D78145CA51E10] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70656] =>.Microsoft Corporation
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [108544] =>.Microsoft Corporation
[MD5.F024449C97EC1E464AAFFDA18593DB88] - 20/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [78336] =>.Microsoft Corporation
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [108544] =>.Microsoft Corporation
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 14/07/2009 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\Windows\System32\drivers\i8042prt.sys [80896] =>.Microsoft Corporation
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [101888] =>.Microsoft Corporation
[MD5.89CC31A9E81F840D914ABC2E3BD70F9C] - 12/05/2016 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [124416] =>.Microsoft Corporation
[MD5.A00996C9BFEF29A93B9F21DBE1DC502D] - 11/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [188928] =>.Microsoft Corporation
[MD5.978E7A2E4BF4E8E70D0776EF0D9E97FB] - 11/01/2016 - (.Microsoft Corporation - NT File System Driver.) -- C:\Windows\System32\drivers\ntfs.sys [1212352] =>.Microsoft Windows®
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 14/07/2009 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\Windows\System32\drivers\Parport.sys [79360] =>.Microsoft Corporation
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 14/07/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] =>.Microsoft Corporation
[MD5.B973FCFC50DC1434E1970A146F7E3885] - 20/11/2010 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [133632] =>.Microsoft Corporation
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [71168] =>.Microsoft Corporation
[MD5.BB8817D0508DD5EA69C770C8DEF5AB67] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [74752] =>.Microsoft Corporation
[MD5.F497F67932C6FA693D7DE2780631CFE7] - 20/11/2010 - (.Microsoft Corporation - Volume Shadow Copy Driver.) -- C:\Windows\System32\drivers\volsnap.sys [245632] =>.Microsoft Windows®

---\\ Non Microsoft non disabled Windows Services (22) - 2s
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Program Files\IDT\WDM\AEstSrv.exe =>.Andrea Electronics Corporation
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe =>.Broadcom Corporation®
O23 - Service: Credential Vault Host Control Service (Credential Vault Host Control Service) . (.Broadcom Corporation - Host Control Application.) - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe {1F0637BA61ED9BD1536E17E44F3FEC1E} =>.Broadcom Corporation
O23 - Service: Credential Vault Host Storage (Credential Vault Host Storage) . (.Broadcom Corporation - Host Storage Application.) - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe {1F0637BA61ED9BD1536E17E44F3FEC1E} =>.Broadcom Corporation
O23 - Service: Dell Feature Enhancement Pack Service (DFEPService) . (.Dell Inc. - Dell - Dell Feature Enhancement Pack Servic.) - c:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe {61FCAA5700000000041A} =>.Dell Inc.
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel Corporation - Mobile Wireless Group®
O23 - Service: Intel(R) PROSet Monitoring Service (Intel(R) PROSet Monitoring Service) . (.Intel Corporation - Intel® PROSet Monitoring Service.) - C:\Windows\System32\IProsetMonitor.exe =>.Intel Corporation®
O23 - Service: Intel(R) Identity Protection Technology Host Interface Serv (jhi_service) . (.Intel Corporation - Intel IPT Host Interface Service.) - C:\Program Files\Intel\Services\IPT\jhi_service.exe =>.Intel® Identity Protection Technology Software®
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
O23 - Service: O2FLASH (O2FLASH) . (.O2Micro International - O2 Flash Memory Service.) - C:\Windows\System32\drivers\o2flash.exe =>.O2Micro Inc.®
O23 - Service: O2SDIOAssist (O2SDIOAssist) . (...) - c:\Windows\System32\srvany.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel Corporation - Mobile Wireless Group®
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) . (.Sonic Solutions - RoxWatch12 Module.) - C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe =>.Sonic Solutions®
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: SpyHunter 4 Service (SpyHunter 4 Service) . (.Enigma Software Group USA, LLC. - Service scanner interface.) - C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe =>.Enigma Software Group USA, LLC®
O23 - Service: @C:\Windows\system32\stlang.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\stacsv.exe =>.IDT, Inc.
O23 - Service: NTRU TSS v1.2.1.36 TCS (tcsd_win32.exe) . (...) - C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
O23 - Service: TdmService (TdmService) . (.Wave Systems Corp. - TDM Service.) - C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe =>.Wave Systems Corp.®
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®
O23 - Service: Wave Authentication Manager Service (Wave Authentication Manager Service) . (.Wave Systems Corp. - WaveAMService.) - C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe =>.Wave Systems Corp.
O23 - Service: Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Zero Config Servic.) - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe =>.Intel(R) Corporation

---\\ Services not Microsoft (SR=Run, SS=Stop) (29) - 20s

SS - Demand [19/07/2016] [ 270016] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [03/03/2009] [ 81920] Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\IDT\WDM\AEstSrv.exe =>.Andrea Electronics Corporation
SR - Auto [07/07/2016] [ 197128] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
SR - Auto [08/02/2011] [ 660768] Bluetooth Service (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe =>.Broadcom Corporation®
SR - Auto [11/05/2011] [ 826272] Credential Vault Host Control Service (Credential Vault Host Control Service) . (.Broadcom Corporation.) - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe {1F0637BA61ED9BD1536E17E44F3FEC1E} =>.Broadcom Corporation
SR - Auto [11/05/2011] [ 31648] Credential Vault Host Storage (Credential Vault Host Storage) . (.Broadcom Corporation.) - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe {1F0637BA61ED9BD1536E17E44F3FEC1E} =>.Broadcom Corporation
SR - Auto [24/08/2011] [ 1568664] Dell Feature Enhancement Pack Service (DFEPService) . (.Dell Inc..) - c:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe {61FCAA5700000000041A} =>.Dell Inc.
SR - Auto [23/12/2010] [ 936208] Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel Corporation - Mobile Wireless Group®
SR - Auto [22/09/2010] [ 110752] Intel(R) PROSet Monitoring Service (Intel(R) PROSet Monitoring Service) . (.Intel Corporation.) - C:\Windows\System32\IProsetMonitor.exe =>.Intel Corporation®
SR - Auto [24/02/2011] [ 212944] Intel(R) Identity Protection Technology Host Interface Serv (jhi_service) . (.Intel Corporation.) - C:\Program Files\Intel\Services\IPT\jhi_service.exe =>.Intel® Identity Protection Technology Software®
SR - Auto [09/08/2011] [ 325912] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
SS - Demand [28/06/2016] [ 146888] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Auto [11/02/2010] [ 72296] O2FLASH (O2FLASH) . (.O2Micro International.) - C:\Windows\System32\drivers\o2flash.exe =>.O2Micro Inc.®
SR - Auto [19/04/2003] [ 8192] O2SDIOAssist (O2SDIOAssist) . (...) - c:\Windows\System32\srvany.exe
SR - Auto [23/12/2010] [ 481552] Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel Corporation - Mobile Wireless Group®
SS - Demand [25/11/2010] [ 1116656] RoxMediaDB12OEM (RoxMediaDB12OEM) . (.Sonic Solutions.) - C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe =>.Sonic Solutions®
SS - Auto [25/11/2010] [ 219632] Roxio Hard Drive Watcher 12 (RoxWatch12) . (.Sonic Solutions.) - C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe =>.Sonic Solutions®
SS - Demand [24/05/2011] [ 1508232] SecureStorageService (SecureStorageService) . (.Wave Systems Corp..) - C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Secure Storage Manager\SecureStorageService.exe =>.Wave Systems Corp.®
SS - Auto [23/05/2016] [ 324224] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SS - Auto [19/07/2016] [ 797352] SpyHunter 4 Service (SpyHunter 4 Service) . (.Enigma Software Group USA, LLC..) - C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe =>.Enigma Software Group USA, LLC®
SR - Auto [25/01/2011] [ 274514] @C:\Windows\system32\stlang.dll (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\stacsv.exe =>.IDT, Inc.
SR - Demand [03/08/2016] [ 1452320] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe =>.Valve®
SS - Demand [09/11/2010] [ 74392] stllssvr (stllssvr) . (.MicroVision Development, Inc..) - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe =>.MicroVision Development Inc.®
SS - Auto [17/02/2011] [ 1633280] NTRU TSS v1.2.1.36 TCS (tcsd_win32.exe) . (...) - C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
SR - Auto [28/05/2011] [ 2605424] TdmService (TdmService) . (.Wave Systems Corp..) - C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe =>.Wave Systems Corp.®
SR - Auto [09/08/2011] [ 2656536] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®
SR - Auto [01/07/2011] [ 1131520] Wave Authentication Manager Service (Wave Authentication Manager Service) . (.Wave Systems Corp..) - C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe =>.Wave Systems Corp.
SR - Auto [23/12/2010] [ 577536] Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe =>.Intel(R) Corporation

---\\ Task Planned Automatically (16) - 5s
[MD5.00000000000000000000000000000000] [APT] [TaskName] (...) -- Task To Run (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.32B31B696CB8E8F380831DFEB80A67E4] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [270016] (.Activate.) =>.Adobe Systems Incorporated®
[MD5.932B0CBB2DFBFD4BC1843B16740E9CD6] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1648720] (.Activate.) =>.AVAST Software a.s.®
[MD5.7F872258386EA84059ACCBFEBA930651] [APT] [ComputerZ-Tray] (.版权所有 (C) 2008-2016 www.ludashi.com.) -- c:\program files\LuDaShi\ComputerZTray.exe [2948520] (.Activate.) {26279F0F2F11970DCCF63EBA88F2D4C4}
[MD5.6D51713A36C0733A4BDD94EAD5A33AD9] [APT] [HPCustParticipation HP Photosmart 5520 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe [2938984] (.Activate.) =>.Hewlett Packard®
[MD5.5FA35D553BE9D2279ECC0BD7A569A744] [APT] [SafeZone scheduled Autoupdate 1467920485] (.Avast Software.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [735736] (.Activate.) =>.AVAST Software s.r.o.®
[MD5.24F0F4ADE02A0AE2C3208248DCD7285B] [APT] [SpyHunter4Startup] (.Enigma Software Group USA, LLC..) -- C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [7445672] (.Activate.) =>.Enigma Software Group USA, LLC®
[MD5.00000000000000000000000000000000] [APT] [{0FA3607F-92ED-4F74-9C84-117FFF7CF4EC}] (...) -- C:\Program Files\GreatMaker\MaohaWiFi\Uninstall.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.CD11D500328F07AE1666D046F94179E0] [APT] [AVAST Software] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [702056] (.Activate.) =>.AVAST Software a.s.®
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [830] =>.Adobe Systems Incorporated®
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3768] =>.Adobe Systems Incorporated®
O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\avast! Emergency Update [3922] =>.AVAST Software a.s.®
O39 - APT: ComputerZ-Tray - (.版权所有 (C) 2008-2016 www.ludashi.com.) -- C:\Windows\System32\Tasks\ComputerZ-Tray [3334] {26279F0F2F11970DCCF63EBA88F2D4C4}
O39 - APT: HPCustParticipation HP Photosmart 5520 series - (.Hewlett-Packard Co..) -- C:\Windows\System32\Tasks\HPCustParticipation HP Photosmart 5520 series [3624] =>.Hewlett Packard®
O39 - APT: SafeZone scheduled Autoupdate 1467920485 - (.Avast Software.) -- C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1467920485 [3890] =>.AVAST Software s.r.o.®
O39 - APT: SpyHunter4Startup - (.Enigma Software Group USA, LLC..) -- C:\Windows\System32\Tasks\SpyHunter4Startup [3330] =>.Enigma Software Group USA, LLC®

---\\ Process running (53) - 6s
[MD5.A97FCA92BE4E62BC589371058CBC769E] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\stacsv.exe [274514] [PID.1076] =>.IDT, Inc.
[MD5.816025E303A1DAE89E39D3D77CCBA2FB] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe [936208] [PID.1544] =>.Intel Corporation - Mobile Wireless Group®
[MD5.4F5D56FF81B8C0294E22DCC62136F253] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Zero Config Servic.) -- C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe [577536] [PID.1716] =>.Intel(R) Corporation
[MD5.1D0CF63DF5F1E7C7D2A89ACB417A5B21] - (.UPEK Inc. - Fingerprint Server Process for Vista.) -- C:\Program Files\Common Files\SPBA\upeksvr.exe [57168] [PID.1800] =>.UPEK Inc.®
[MD5.8EF7C84BB20329D6DCAC09CF6B19345A] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128] [PID.400] =>.AVAST Software a.s.®
[MD5.6AE7CBE46D1C6F92B5E037E4DE89C441] - (.Broadcom Corporation - Host Control Application.) -- C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [826272] [PID.1644] {1F0637BA61ED9BD1536E17E44F3FEC1E} =>.Broadcom Corporation
[MD5.9864058A3860B4C56E59FAF7D9A0ADED] - (.Broadcom Corporation - Host Storage Application.) -- C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [31648] [PID.1888] {1F0637BA61ED9BD1536E17E44F3FEC1E} =>.Broadcom Corporation
[MD5.0BAD1BC9BA31218B682455182134537D] - (.Wave Systems Corp. - TDM Service.) -- C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe [2605424] [PID.2148] =>.Wave Systems Corp.®
[MD5.827DBC22C96EECF6D36A13162FABAFD3] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Program Files\IDT\WDM\AEstSrv.exe [81920] [PID.2272] =>.Andrea Electronics Corporation
[MD5.2A6008A9511330B7864B30A8B455AD0A] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [660768] [PID.2300] =>.Broadcom Corporation®
[MD5.5953ED0990B6F10C9C4C36C7B80941FE] - (.Dell Inc. - Dell - Dell Feature Enhancement Pack Servic.) -- c:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe [1568664] [PID.2528] {61FCAA5700000000041A} =>.Dell Inc.
[MD5.F2C6FB081B707863A0A21D639F325475] - (.Intel Corporation - Intel® PROSet Monitoring Service.) -- C:\Windows\System32\IProsetMonitor.exe [110752] [PID.2584] =>.Intel Corporation®
[MD5.6C85719A21B3F62C2C76280F4BD36C7B] - (.Intel Corporation - Intel IPT Host Interface Service.) -- C:\Program Files\Intel\Services\IPT\jhi_service.exe [212944] [PID.2620] =>.Intel® Identity Protection Technology Software®
[MD5.4E37455DB16AEC75862B1D0BC35B589E] - (.O2Micro International - O2 Flash Memory Service.) -- C:\Windows\System32\drivers\o2flash.exe [72296] [PID.2648] =>.O2Micro Inc.®
[MD5.4635935FC972C582632BF45C26BFCB0E] - (...) -- c:\Windows\System32\srvany.exe [8192] [PID.2700]
[MD5.B064FC671688A9A1C5F46AE06E87F70D] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [481552] [PID.2724] =>.Intel Corporation - Mobile Wireless Group®
[MD5.B3BBFEB98C4B7FC5E3084498A68DA433] - (.O2Micro. - SDIOAssist.) -- c:\Windows\System32\SDIOAssist.exe [223848] [PID.2752] =>.O2Micro Inc.®
[MD5.79E2E832DE566CFEDBF4E6DAFE73B959] - (.Wave Systems Corp. - WaveAMService.) -- C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1131520] [PID.2976] =>.Wave Systems Corp.
[MD5.0A70F4022EC2E14C159EFC4F69AA2477] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1710464] [PID.3048] =>.Microsoft Corporation®
[MD5.9C879E1C3B27085FB46EFECCD7120D51] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [193408] [PID.3192] =>.Microsoft Corporation®
[MD5.6103B6E41E588551189862453879E098] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe [505720] [PID.1652] =>.Alps Electric Co., LTD.®
[MD5.12C864E55D5ED1A4061FA18BCCD80AC5] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [536668] [PID.2460] =>.IDT, Inc.
[MD5.A92AC5C2B800460316E2FBD99349ABF2] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Framework.) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1210640] [PID.4016] =>.Intel Corporation - Mobile Wireless Group®
[MD5.A0EDCF34A355729CD4A38648A6142FE6] - (.Copyright (C) 2008 - FF_Protection MFC Application.) -- C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704] [PID.2640] =>.STMicroelectronics®
[MD5.8817313A31DB7DEA4B2E329FB3AA90D3] - (.Dell Inc. - Dell Feature Enhancement Pack.) -- C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe [6306712] [PID.3644] {61FCAA5700000000041A} =>.Dell Inc.
[MD5.F928A70B855CF83E3CE9704BDD0BD895] - (.Wave Systems Corp. - Trusted Drive Manager User Notifier.) -- C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe [214384] [PID.3692] =>.Wave Systems Corp.®
[MD5.F5FBA8724DE219E96D9ABAF4772D31A3] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [87336] [PID.2388] =>.CyberLink®
[MD5.4164A47F3A2DA7EA44572904C3DF44A4] - (.Copyright 2008 - Roxio Burn Launcher.) -- C:\Program Files\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544] [PID.4156] =>.Sonic Solutions®
[MD5.6AADCD86580327E42AC2E725A394E0CF] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [143640] [PID.4184] =>.Intel Corporation®
[MD5.684578945B948339D02CE4FA38EEFF8A] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [176920] [PID.4192] =>.Intel Corporation®
[MD5.3A26349CFFC98FB67A58A9797AEC5C66] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [178456] [PID.4212] =>.Intel Corporation®
[MD5.34D296AFC913E302953C70463EF09A48] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe [96056] [PID.4224] =>.Hewlett-Packard Company®
[MD5.B70EFFF003D51A94FCC4C6C66F5E610F] - (.Alps Electric Co., Ltd. - ApMsgFwd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe [57680] [PID.4364] =>.Alps Electric Co., LTD.®
[MD5.A0B7545F54109730251301EEFB8785EA] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [8900328] [PID.4416] =>.AVAST Software a.s.®
[MD5.7A42A8E161DC32C5A40C5813ED64DF03] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\hidfind.exe [54744] [PID.4540] =>.Alps Electric Co., LTD.®
[MD5.DFC8186972EB21F75E5B532194AF4C3A] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver for Windows NT/.) -- C:\Program Files\DellTPad\ApntEx.exe [54640] [PID.4552] =>.Alps Electric Co., LTD.®
[MD5.EE9D93E2688A461FE532A866E291111F] - (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files\Steam\Steam.exe [2852128] [PID.4664] =>.Valve®
[MD5.3DECBA13E02DDD8C75276A1836492131] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [29494400] [PID.5128] =>.Skype Software Sarl®
[MD5.395BCC9122E705F6586217E32CD01CC9] - (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe [1837672] [PID.5200] =>.Hewlett Packard®
[MD5.14767A3B686BB46F600C2325D2689C8E] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [840992] [PID.6136] =>.Broadcom Corporation®
[MD5.586CBBFC7162FF4B6B4CE3864A6FDD7C] - (.Microsoft - DellSmartSettings.) -- C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe [494488] [PID.5320] {61FCAA5700000000041A} =>.Microsoft
[MD5.7F872258386EA84059ACCBFEBA930651] - (.版权所有 (C) 2008-2016 www.ludashi.com - 鲁大师 硬件防护中心.) -- c:\program files\LuDaShi\ComputerZTray.exe [2948520] [PID.5692] {26279F0F2F11970DCCF63EBA88F2D4C4}
[MD5.F4CC196E5633297C2122E5D7D92CE0EE] - (.Hewlett-Packard Co. - HPNetworkCommunicatorCom.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicatorCom.exe [790120] [PID.5108] =>.Hewlett Packard®
[MD5.A1CB053A6376D99D4751CF1961EE593F] - (.Intel Corporation - Intel(R) Management and Security Status.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1923864] [PID.5456] =>.Intel Corporation®
[MD5.519D66259DF1672AABCE9D2E0ACC5552] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325912] [PID.5660] =>.Intel Corporation®
[MD5.1B71370AEC1115F80D9A4A209317C968] - (.Intel Corporation - User Notification Service.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656536] [PID.5236] =>.Intel Corporation®
[MD5.11B3252211948CED1ADB4547091B2FF1] - (.Broadcom Corporation. - Bluetooth Stack COM Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe [2852128] [PID.5028] =>.Broadcom Corporation®
[MD5.D25980ADB2BAA5C57981407E67D3BC6E] - (.Valve Corporation - Steam Client WebHelper.) -- C:\Program Files\Steam\bin\steamwebhelper.exe [2065696] [PID.7808] =>.Valve®
[MD5.296268EE8C9427D49DDA579017014244] - (.Valve Corporation - Steam Client Service.) -- C:\Program Files\Common Files\Steam\SteamService.exe [1452320] [PID.7824] =>.Valve®
[MD5.8407A7766D201F0D44229F4F9F4DD15F] - (.Copyright (C) 2016 www.ludashi.com - MobileDeviceSrv Application.) -- c:\program files\LuDaShi\Utils\MobileDeviceSrv.exe [1916840] [PID.8008] {26279F0F2F11970DCCF63EBA88F2D4C4}
[MD5.6731A6CAAA1BE76A80AE7EA4A6181493] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\user 1\Downloads\ZHPDiag3(2).exe [2283008] [PID.9828] =>.Nicolas Coolman
[MD5.6731A6CAAA1BE76A80AE7EA4A6181493] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\user 1\Downloads\ZHPDiag3(3).exe [2283008] [PID.7528] =>.Nicolas Coolman
[MD5.BB2D3260AE196A01527F1709AF8C1EB4] - (...) -- C:\Program Files\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe [16823808] [PID.7740]

---\\ Google Chrome, Start,Search,Extensions (8) - 0s
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (5) - 2s
M0 - MFSP: prefs.js [user 1 - 5o672l43.default] https://www.google.com
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
P2 - EXT FILE: (...) -- C:\Users\user 1\AppData\Roaming\Mozilla\Firefox\Profiles\5o672l43.default\extensions\bingsearch.full@microsoft.com.xpi
P2 - EXT FILE: (...) -- C:\Users\user 1\AppData\Roaming\Mozilla\Firefox\Profiles\5o672l43.default\searchplugins\bing-.xml
P2 - FPN: [HKLM] [@alawar.com/npapi] - (.Alawar.) -- C:\Windows\npapi.dll

---\\ Internet Explorer Extensions, Start, Search (12) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.avast.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.avast.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.avast.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.avast.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

---\\ Internet Explorer, Proxy Management (6) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (31)

---\\ Browser Helper Object (BHO) (4) - 1s
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll =>.AVAST Software a.s.®
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll =>.Skype Software Sarl®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll =>.Sun Microsystems, Inc.®

---\\ Auto loading programs from Registry and folders (25) - 1s
O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe =>.Alps Electric Co., LTD.®
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe =>.IDT, Inc.
O4 - HKLM\..\Run: [IntelPROSet] . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Framework.) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe =>.Intel Corporation - Mobile Wireless Group®
O4 - HKLM\..\Run: [FreeFallProtection] . (.Copyright (C) 2008 - FF_Protection MFC Application.) -- C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe =>.STMicroelectronics®
O4 - HKLM\..\Run: [IMSS] . (.Intel Corporation - PIcon startup utility.) -- C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [DFEPApplication] . (.Dell Inc. - Dell Feature Enhancement Pack.) -- c:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe {61FCAA5700000000041A} =>.Dell Inc.
O4 - HKLM\..\Run: [TdmNotify] . (.Wave Systems Corp. - Trusted Drive Manager User Notifier.) -- C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe =>.Wave Systems Corp.®
O4 - HKLM\..\Run: [RemoteControl9] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe =>.CyberLink®
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] . (.CyberLink Corp. - PowerDVD Language Application.) -- C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe =>.CyberLink®
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files\Steam\Steam.exe =>.Valve®
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - HKCU\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\user 1\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation®
O4 - HKCU\..\Run: [HP Photosmart 5520 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe =>.Hewlett Packard®
O4 - HKCU\..\Run: [ctfmon] . (.Microsoft Corporation - CTF Loader.) -- C:\Windows\System32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\Run: [ComputerZ-Tray] . (.版权所有 (C) 2008-2016 www.ludashi.com - 鲁大师 硬件防护中心.) -- c:\program files\LuDaShi\ComputerZTray.exe {26279F0F2F11970DCCF63EBA88F2D4C4}
O4 - HKUS\S-1-5-18\..\Run: [ComputerZ-Tray] . (.版权所有 (C) 2008-2016 www.ludashi.com - 鲁大师 硬件防护中心.) -- c:\program files\LuDaShi\ComputerZTray.exe {26279F0F2F11970DCCF63EBA88F2D4C4}
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Windows Desktop Gadgets.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Windows Desktop Gadgets.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3511460339-1816064973-2629746193-1000\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files\Steam\Steam.exe =>.Valve®
O4 - HKUS\S-1-5-21-3511460339-1816064973-2629746193-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - HKUS\S-1-5-21-3511460339-1816064973-2629746193-1000\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\user 1\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-3511460339-1816064973-2629746193-1000\..\Run: [HP Photosmart 5520 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe =>.Hewlett Packard®
O4 - HKUS\S-1-5-21-3511460339-1816064973-2629746193-1000\..\Run: [ctfmon] . (.Microsoft Corporation - CTF Loader.) -- C:\Windows\System32\ctfmon.exe =>.Microsoft Corporation

---\\ Global shortcuts Startup (26) - 5s
O4 - GS\Desktop [Administrator]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleane.) C:\Users\user 1\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\sendTo [Administrator]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [Administrator]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Administrator]: UC浏览器.lnk . (...) C:\Program Files\UCBrowser\Application\UCBrowser.exe
O4 - GS\Startup [Administrator]: Smart Settings.lnk . (.Microsoft - DellSmartSettings.) C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe {61FCAA5700000000041A} =>.Microsoft
O4 - GS\Desktop [Guest]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleane.) C:\Users\user 1\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\sendTo [Guest]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [Guest]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Guest]: UC浏览器.lnk . (...) C:\Program Files\UCBrowser\Application\UCBrowser.exe
O4 - GS\Startup [Guest]: Smart Settings.lnk . (.Microsoft - DellSmartSettings.) C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe {61FCAA5700000000041A} =>.Microsoft
O4 - GS\Desktop [user 1]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleane.) C:\Users\user 1\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\sendTo [user 1]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [user 1]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [user 1]: UC浏览器.lnk . (...) C:\Program Files\UCBrowser\Application\UCBrowser.exe
O4 - GS\Startup [user 1]: Smart Settings.lnk . (.Microsoft - DellSmartSettings.) C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe {61FCAA5700000000041A} =>.Microsoft
O4 - GS\CommonDesktop [Public]: Avast Antivirus Gratuit.lnk . (.AVAST Software - avast! Antivirus.) C:\Program Files\AVAST Software\Avast\AvastUI.exe =>.AVAST Software a.s.®
O4 - GS\CommonDesktop [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.®
O4 - GS\CommonDesktop [Public]: eID Viewer.lnk . (.FedICT - Viewer for Belgian eID Cards.) C:\Program Files\Belgium Identity Card\EidViewer\eID Viewer.exe =>.Fedict
O4 - GS\CommonDesktop [Public]: HP Photosmart 5520 series.lnk . (.Hewlett-Packard Co. - HP Printer Assistant.) C:\Program Files\HP\HP Photosmart 5520 series\Bin\HP Photosmart 5520 series.exe =>.Hewlett Packard®
O4 - GS\CommonDesktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes - Malwarebytes Anti-Malware.) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe =>.Malwarebytes Corporation®
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: Roxio Creator Starter.lnk . (.Copyright © Sonic Solutions - Roxio Creator.) C:\Program Files\Roxio\OEM\Roxio Central 5\RoxioCentralFx.exe =>.Sonic Solutions®
O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\Windows\Installer\{FC965A47-4839-40CA-B618-18F486F042C6}\SkypeIcon.exe
O4 - GS\CommonDesktop [Public]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) C:\Program Files\Steam\Steam.exe =>.Valve®
O4 - GS\Startup [Public]: Bluetooth.lnk . (.Broadcom Corporation. - Bluetooth Tray Application.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe =>.Broadcom Corporation®
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc

---\\ Lop.com/Domain Hijackers (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{088661C6-CA68-46F6-8AA8-C1F8A28F0A99}: DhcpNameServer = 192.168.1.1

---\\ Extra protocols (25) - 0s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll =>.Skype Software Sarl®
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation®
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®

---\\ Software installed (80) - 14s
Access Access - (.Dell Inc..) [HKLM] -- {A7D91856-258D-4C87-8041-B170851CE432} =>.Wave Systems Corp.®
Access - (.Wave Systems Corp.) [HKLM] -- {ABBA2EA4-740E-4052-902B-9CA70B081E3F} =>.Wave Systems Corp.®
Drivers - (.Dell Inc..) [HKLM] -- {4E4E65EE-C456-45AC-B5AD-C62C3A325BD0} =>.Dell Inc.
Middleware - (.Dell Inc..) [HKLM] -- {841CBDD5-4BB5-403E-AEE3-2FADC3890BE8} =>.Dell Inc.
O42 - Logiciel: AccelerometerP11 - (.STMicroelectronics.) [HKLM] -- {87434D51-51DB-4109-B68F-A829ECDCF380} =>.STMicroelectronics
O42 - Logiciel: Adobe Flash Player 22 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: AdVenture Capitalist - (.Hyper Hippo Games.) [HKLM] -- Steam App 346900 =>.Valve®
O42 - Logiciel: Avast Antivirus Gratuit - (.AVAST Software.) [HKLM] -- Avast =>.AVAST Software a.s.®
O42 - Logiciel: Belgium e-ID middleware 4.1.18 (build 1730) - (.Belgian Government.) [HKLM] -- {4DDF16AE-8D5D-4027-A2D1-8CBB498E1730} =>.Belgian Government
O42 - Logiciel: BioAPI Framework - (.Dell Inc..) [HKLM] -- {9DAED4FC-2B0E-4F3F-8141-F2ABF02CCFCB} =>.Dell Inc.
O42 - Logiciel: Custom - (.Wave Systems Corp..) [HKLM] -- {7206B668-FEE0-455B-BB1F-9B5A2E0EC94A} =>.Wave Systems Corp.
O42 - Logiciel: CyberLink PowerDVD 9.5 - (.CyberLink Corp..) [HKLM] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8} =>.CyberLink®
O42 - Logiciel: CyberLink PowerDVD 9.5 - (.CyberLink Corp..) [HKLM] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8} =>.CyberLink®
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: Dell Client System Update - (.Dell Inc..) [HKLM] -- {2B2B45B1-3CA0-4F8D-BBB3-AC77ED46A0FE} =>.Dell Inc.
O42 - Logiciel: Dell ControlVault Host Components Installer - (.Broadcom Corporation.) [HKLM] -- {7FA89EC8-023D-4AEA-94E2-32820FBBDC44} =>.Broadcom Corporation
O42 - Logiciel: Dell Data Protection O42 - Logiciel: Dell Edoc Viewer - (.Dell Inc.) [HKLM] -- {3138EAD3-700B-4A10-B617-B3F8096EE30D} =>.Dell Inc
O42 - Logiciel: Dell Feature Enhancement Pack - (.Dell.) [HKLM] -- {992D1CE7-A20F-4AB0-9D9D-AFC3418844DA} =>.Dell
O42 - Logiciel: Dell Touchpad - (.ALPS ELECTRIC CO., LTD..) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD} =>.Alps Electric Co., LTD.®
O42 - Logiciel: DellAccess - (.Wave Systems Corp..) [HKLM] -- {F839C6BD-E92E-48FA-9CE6-7BFAF94F7096} =>.Wave Systems Corp.
O42 - Logiciel: DirectX 9 Runtime - (.Sonic Solutions.) [HKLM] -- {AF9E97C1-7431-426D-A8D5-ABE40995C0B1} =>.Sonic Solutions
O42 - Logiciel: Edna & Harvey: Harvey's New Eyes - (.Daedalic Entertainment.) [HKLM] -- Steam App 219910 =>.Valve®
O42 - Logiciel: EMBASSY Security Center - (.Wave Systems Corp..) [HKLM] -- {EEAFE1E5-076B-430A-96D9-B567792AFA88} =>.Wave Systems Corp.
O42 - Logiciel: Gemalto - (.Wave Systems Corp.) [HKLM] -- {0CCAF47C-E428-48C2-82B2-5F25CE1D67DA} =>.Wave Systems Corp
O42 - Logiciel: HP Photosmart 5520 series Basic Device Software - (.Hewlett-Packard Co..) [HKLM] -- {E8ED5ADB-3EB5-4890-85F6-0FEA13A47EEE} =>.Hewlett-Packard Co.
O42 - Logiciel: HP Photosmart 5520 series Help - (.Hewlett Packard.) [HKLM] -- {7137E26A-10F7-4B1C-9980-0893579E92DA} =>.Hewlett Packard
O42 - Logiciel: HP Photosmart 5520 series Product Improvement Study - (.Hewlett-Packard Co..) [HKLM] -- {B58FBD4F-C69A-41C1-94AC-1A47AD946C91} =>.Hewlett-Packard Co.
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} =>.Hewlett-Packard
O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM] -- ProInst
O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Identity Protection Technology 1.1.2.0 - (.Intel Corporation.) [HKLM] -- {C01A86F5-56E7-101F-9BC9-E3F1025EB779} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Network Connections 15.7.176.1 - (.Dell.) [HKLM] -- {8C9B6B1F-0A8E-402A-A60C-110BBB38D67E} =>.Dell
O42 - Logiciel: Intel(R) Network Connections 15.7.176.1 - (.Dell.) [HKLM] -- PROSetDX =>.Dell
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation®
O42 - Logiciel: Intel(R) PROSet/Wireless WiFi Software - (.Intel Corporation.) [HKLM] -- {4C1CCA11-0D08-4D5E-8444-2D9FB48BCABF} =>.Intel Corporation
O42 - Logiciel: Java Auto Updater - (.Sun Microsystems, Inc..) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Sun Microsystems, Inc.
O42 - Logiciel: Java(TM) 6 Update 27 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216027FF} =>.Oracle
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} =>.Microsoft Corporation
O42 - Logiciel: Malwarebytes Anti-Malware version 2.2.1.1043 - (.Malwarebytes.) [HKLM] -- Malwarebytes Anti-Malware_is1 =>.Malwarebytes
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: Mozilla Firefox 47.0.1 (x86 en-US) - (.Mozilla.) [HKLM] -- Mozilla Firefox 47.0.1 (x86 en-US) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: NTRU TCG Software Stack - (.Security Innovation, Inc..) [HKLM] -- {414B7B9C-B353-4821-9393-78AE034079E7}
O42 - Logiciel: O2Micro Flash Memory Card Windows Driver - (.O2Micro International LTD..) [HKLM] -- {0CB3B7EE-52C7-4136-AF40-605567D90318} =>.O2Micro International LTD.
O42 - Logiciel: O2Micro Flash Memory Card Windows Driver - (.O2Micro International LTD..) [HKLM] -- InstallShield_{0CB3B7EE-52C7-4136-AF40-605567D90318} =>.O2Micro Inc.®
O42 - Logiciel: PC-CCID - (.Gemalto.) [HKLM] -- {BD3068DE-D53B-4CE8-B2BC-32E1323441CD} =>.Gemalto
O42 - Logiciel: PhotoShowExpress - (.Sonic Solutions.) [HKLM] -- {3250260C-7A95-4632-893B-89657EB5545B} =>.Sonic Solutions
O42 - Logiciel: Preboot Manager - (.Wave Systems Corp..) [HKLM] -- {3A6BE9F4-5FC8-44BB-BE7B-32A29607FEF6} =>.Wave Systems Corp.
O42 - Logiciel: Private Information Manager - (.Wave Systems Corp..) [HKLM] -- {0B0A2153-58A6-4244-B458-25EDF5FCD809} =>.Wave Systems Corp.
O42 - Logiciel: Roxio Activation Module - (.Roxio.) [HKLM] -- {A121EEDE-C68F-461D-91AA-D48BA226AF1C} =>.Roxio
O42 - Logiciel: Roxio BackOnTrack - (.Roxio.) [HKLM] -- {5A06423A-210C-49FB-950E-CB0EB8C5CEC7} =>.Roxio
O42 - Logiciel: Roxio Burn - (.Roxio.) [HKLM] -- {7746BFAA-2B5D-4FFD-A0E8-4558F4668105} =>.Roxio
O42 - Logiciel: Roxio Creator Starter - (.Roxio.) [HKLM] -- {6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC} =>.Sonic Solutions®
O42 - Logiciel: Roxio Creator Starter - (.Roxio.) [HKLM] -- {EF56258E-0326-48C5-A86C-3BAC26FC15DF} =>.Roxio
O42 - Logiciel: Roxio Creator Starter - (.Roxio.) [HKLM] -- {F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878} =>.Roxio
O42 - Logiciel: Roxio Express Labeler 3 - (.Roxio.) [HKLM] -- {6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA} =>.Roxio
O42 - Logiciel: Roxio File Backup - (.Roxio.) [HKLM] -- {60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB} =>.Roxio
O42 - Logiciel: SafeZone Stable 1.48.2066.114 - (.Avast Software.) [HKLM] -- SafeZone 1.48.2066.114 =>.AVAST Software s.r.o.®
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} =>.Microsoft Corporation
O42 - Logiciel: Skype™ 7.26 - (.Skype Technologies S.A..) [HKLM] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A.
O42 - Logiciel: Sonic CinePlayer Decoder Pack - (.Sonic Solutions.) [HKLM] -- {9A00EC4E-27E1-42C4-98DD-662F32AC8870} =>.Sonic Solutions
O42 - Logiciel: SPBA 5.9 - (.UPEK Inc..) [HKLM] -- {2EECD5EF-5095-467C-B80C-4AB3096EFD60} =>.UPEK Inc.
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- Steam =>.Valve®
O42 - Logiciel: The Night of the Rabbit - (.Daedalic Entertainment.) [HKLM] -- Steam App 230820 =>.Valve®
O42 - Logiciel: The Whispered World Special Edition - (.Daedalic Entertainment.) [HKLM] -- Steam App 268540 =>.Valve®
O42 - Logiciel: Trusted Drive Manager - (.Wave Systems Corp..) [HKLM] -- {6AC87FB3-ACFC-4416-890C-8976D5A9B371} =>.Wave Systems Corp.
O42 - Logiciel: Upek Touchchip Fingerprint Reader - (.Dell Inc..) [HKLM] -- {4E60E212-3177-4B16-BCB3-616CCC52357D} =>.Dell Inc.
O42 - Logiciel: VASCO Card Reader Plug-In (32-Bit) - (.VASCO Data Security.) [HKLM] -- {47659F12-27AE-3200-9B8A-2BD803020304} =>.VASCO Data Security
O42 - Logiciel: VASCO Smart Card Reader Plug-In (User) - (.VASCO Data Security.) [HKCU] -- {c77cb28d-ddd3-46f7-b51a-14a599127ba7} =>.Vasco Data Security International GmbH®
O42 - Logiciel: Wave Infrastructure Installer - (.Wave Systems Corp.) [HKLM] -- {63CD55E5-2938-46FA-88E6-AE8EADDC7937} =>.Wave Systems Corp
O42 - Logiciel: Wave Support Software Installer - (.Wave Systems Corp.) [HKLM] -- {07D618CD-B016-438A-ADC9-A75BD23F85CE} =>.Wave Systems Corp
O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM] -- {436E0B79-2CFB-4E5F-9380-E17C1B25D0C5} =>.Broadcom Corporation
O42 - Logiciel: Windows Driver Package - Dell Inc. PBADRV System (09/11/2009 1.0.1.6) - (.Dell Inc..) [HKLM] -- 9512AA21B791B05A54E27065C45BBC417AB282DF =>.Microsoft Windows®
O42 - Logiciel: Windows Driver Package - Fedict SmartCard (08/08/2015 4.1.5) - (.Fedict.) [HKLM] -- 9F46F7AB1E3B1B5F5482EA8D97F401B04FBF7958 =>.Microsoft Windows®

---\\ HKCU & HKLM Software Keys (109) - 14s
HKLM\SOFTWARE\360Safe
HKLM\SOFTWARE\AdsFix
HKLM\SOFTWARE\Alps
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\Axalto
HKLM\SOFTWARE\BEID
HKLM\SOFTWARE\BioAPI
HKLM\SOFTWARE\Broadcom
HKLM\SOFTWARE\BSD
HKLM\SOFTWARE\CBSTEST
HKLM\SOFTWARE\ComputerZ
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\Data Fellows
HKLM\SOFTWARE\dbmkdb
HKLM\SOFTWARE\Debug
HKLM\SOFTWARE\Dell
HKLM\SOFTWARE\Dell Computer Corporation
HKLM\SOFTWARE\Dell Inc.
HKLM\SOFTWARE\EnigmaSoftwareGroup
HKLM\SOFTWARE\ESET
HKLM\SOFTWARE\F-Secure
HKLM\SOFTWARE\FreeFallProtection
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\Hewlett-Packard
HKLM\SOFTWARE\HitmanPro
HKLM\SOFTWARE\HP
HKLM\SOFTWARE\IDT
HKLM\SOFTWARE\illiminable
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\Khronos
HKLM\SOFTWARE\Lake
HKLM\SOFTWARE\LDSGameCenter
HKLM\SOFTWARE\ldssrv
HKLM\SOFTWARE\LiveUpdate360
HKLM\SOFTWARE\LuDaShi
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\ManageableUpdatePackage
HKLM\SOFTWARE\MicroVision
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\NTRU Cryptosystems
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Protector Suite
HKLM\SOFTWARE\Protector Suite QL
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\Roxio
HKLM\SOFTWARE\RSA
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\Software
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\STMicroelectronics
HKLM\SOFTWARE\Sysinternals
HKLM\SOFTWARE\UtilTool
HKLM\SOFTWARE\Valve
HKLM\SOFTWARE\Visan
HKLM\SOFTWARE\vtapi
HKLM\SOFTWARE\Wave Systems Corp
HKLM\SOFTWARE\Wave Systems Corp.
HKLM\SOFTWARE\Widcomm
HKLM\SOFTWARE\WOW6432Node
HKCU\SOFTWARE\AdsFix
HKCU\SOFTWARE\Alawar
HKCU\SOFTWARE\Alawar111
HKCU\SOFTWARE\Alps
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\BEID
HKCU\SOFTWARE\Bitdefender
HKCU\SOFTWARE\BSD
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\cks
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\Dell
HKCU\SOFTWARE\ESET
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\Hyper Hippo Productions Ltd.
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\Ludashi
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\PopWnd
HKCU\SOFTWARE\Pritc
HKCU\SOFTWARE\QGuan10in1
HKCU\SOFTWARE\QGuan10in12
HKCU\SOFTWARE\QiLu Inc.
HKCU\SOFTWARE\Roxio
HKCU\SOFTWARE\Rtp
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SNDA
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\UtilTool
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\VASCO
HKCU\SOFTWARE\Visan
HKCU\SOFTWARE\Widcomm
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contents of the Common Files folders (185) - 30s
O43 - CFD: 07/07/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.®
O43 - CFD: 18/06/2016 - [] D -- C:\Program Files\BeID Minidriver
O43 - CFD: 18/06/2016 - [] D -- C:\Program Files\Belgium Identity Card
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Broadcom Corporation {1F0637BA61ED9BD1536E17E44F3FEC1E}
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Cisco
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Common Files
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\CyberLink =>.CyberLink®
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Dell {61FCAA5700000000041A}
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Dell Inc
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\DellTPad =>.Alps Electric Co., LTD.®
O43 - CFD: 18/06/2016 - [] D -- C:\Program Files\DIFX =>.Microsoft Windows®
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\DVD Maker
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Enigma Software Group =>.Enigma Software Group USA, LLC®
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Gemalto
O43 - CFD: 19/07/2016 - [] D -- C:\Program Files\Google
O43 - CFD: 04/07/2016 - [] D -- C:\Program Files\Hewlett-Packard =>.Hewlett-Packard Company®
O43 - CFD: 04/07/2016 - [] D -- C:\Program Files\HP =>.Hewlett-Packard Company®
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\IDT
O43 - CFD: 22/10/2011 - [] HD -- C:\Program Files\InstallShield Installation Information =>.CyberLink®
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Intel =>.Microsoft Windows®
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Java =>.Sun Microsystems, Inc.®
O43 - CFD: 06/07/2016 - [] D -- C:\Program Files\LDSGameCenter =>.Qihoo 360 Software (Beijing) Company Limited®
O43 - CFD: 23/07/2016 - [] D -- C:\Program Files\LuDaShi
O43 - CFD: 06/07/2016 - [] D -- C:\Program Files\Malwarebytes Anti-Malware =>.Malwarebytes Corporation®
O43 - CFD: 20/07/2016 - [0] D -- C:\Program Files\Microsoft
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation®
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 10/02/2011 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 29/06/2016 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla Corporation®
O43 - CFD: 29/06/2016 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla Corporation®
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\NTRU Cryptosystems
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\O2Micro
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Roxio =>.MicroVision Development Inc.®
O43 - CFD: 01/08/2016 - [] RD -- C:\Program Files\Skype =>.Skype Software Sarl®
O43 - CFD: 07/08/2016 - [] D -- C:\Program Files\Steam =>.Valve®
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\STMicroelectronics =>.STMicroelectronics®
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 06/07/2016 - [] D -- C:\Program Files\UtilTool {324728EED9FB931B303E33CC10EB21D8}
O43 - CFD: 20/07/2016 - [0] D -- C:\Program Files\VS Revo Group
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\WIDCOMM =>.Broadcom Corporation®
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation®
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation®
O43 - CFD: 20/11/2010 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 07/08/2016 - [] D -- C:\Program Files\ZHPFix
O43 - CFD: 11/05/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 10/02/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 20/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 18/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID
O43 - CFD: 07/08/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9.5
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
O43 - CFD: 21/11/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 05/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 22/10/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 06/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Creator Starter
O43 - CFD: 15/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 22/10/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 15/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
O43 - CFD: 21/11/2010 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 22/10/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 08/07/2016 - [] D -- C:\ProgramData\AlawarWrapper
O43 - CFD: 14/07/2009 - [] SHD -- C:\ProgramData\Application Data
O43 - CFD: 07/07/2016 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Broadcom
O43 - CFD: 06/07/2016 - [] D -- C:\ProgramData\BSD
O43 - CFD: 06/07/2016 - [] D -- C:\ProgramData\clp
O43 - CFD: 11/05/2016 - [] D -- C:\ProgramData\Dell
O43 - CFD: 14/07/2009 - [] SHD -- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - [] SHD -- C:\ProgramData\Documents
O43 - CFD: 20/07/2016 - [] D -- C:\ProgramData\F-Secure
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 21/07/2016 - [] D -- C:\ProgramData\HitmanPro
O43 - CFD: 04/07/2016 - [] D -- C:\ProgramData\HP
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Intel
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Macrovision
O43 - CFD: 06/07/2016 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 20/07/2016 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 07/07/2016 - [] D -- C:\ProgramData\NETC
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\NTRU Cryptosystems
O43 - CFD: 18/06/2016 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\PhotoShow Shared Assets
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Roxio
O43 - CFD: 01/08/2016 - [] D -- C:\ProgramData\Skype
O43 - CFD: 20/07/2016 - [] D -- C:\ProgramData\Sonic
O43 - CFD: 14/07/2009 - [] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Sun
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - [] SHD -- C:\ProgramData\Templates
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Uninstall
O43 - CFD: 06/07/2016 - [] D -- C:\ProgramData\UtilTool
O43 - CFD: 04/07/2016 - [] D -- C:\ProgramData\Visan
O43 - CFD: 22/10/2011 - [] D -- C:\ProgramData\Wave Systems Corp
O43 - CFD: 07/07/2016 - [] D -- C:\Program Files\Common Files\AV
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\CyberLink
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\Intel
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\postureAgent
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\PX Storage Engine
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\Roxio Shared
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 15/05/2016 - [] D -- C:\Program Files\Common Files\Skype
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\Sonic Shared
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\SPBA
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 03/08/2016 - [] D -- C:\Program Files\Common Files\Steam
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\SureThing Shared
O43 - CFD: 20/07/2016 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 22/10/2011 - [] D -- C:\Program Files\Common Files\Windows Live
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Adobe
O43 - CFD: 07/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\AVAST Software
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Enigma Software Group
O43 - CFD: 15/05/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Five-BN Games
O43 - CFD: 16/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\HpUpdate
O43 - CFD: 11/05/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Identities
O43 - CFD: 11/05/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Intel
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Kuaizip
O43 - CFD: 08/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Legendary Mahjong
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\lockhomepage
O43 - CFD: 07/08/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Ludashi
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Macromedia
O43 - CFD: 21/11/2010 - [0] D -- C:\Users\user 1\AppData\Roaming\Media Center Programs
O43 - CFD: 20/07/2016 - [] SD -- C:\Users\user 1\AppData\Roaming\Microsoft
O43 - CFD: 12/05/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Mozilla
O43 - CFD: 08/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Opera Software
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Profiles
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\QuickScan
O43 - CFD: 11/05/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Roxio
O43 - CFD: 05/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Roxio Burn
O43 - CFD: 07/08/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Skype
O43 - CFD: 06/07/2016 - [0] D -- C:\Users\user 1\AppData\Roaming\Softlink
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\steam.transformice.com
O43 - CFD: 06/07/2016 - [0] D -- C:\Users\user 1\AppData\Roaming\tmp
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\UtilTool
O43 - CFD: 20/05/2016 - [] D -- C:\Users\user 1\AppData\Roaming\VASCO
O43 - CFD: 07/08/2016 - [] D -- C:\Users\user 1\AppData\Roaming\ZHP
O43 - CFD: 08/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Alawar
O43 - CFD: 08/07/2016 - [] D -- C:\Users\user 1\AppData\Local\AlawarWrapper
O43 - CFD: 11/05/2016 - [] SHD -- C:\Users\user 1\AppData\Local\Application Data
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Apps
O43 - CFD: 11/05/2016 - [] D -- C:\Users\user 1\AppData\Local\Broadcom
O43 - CFD: 15/05/2016 - [] D -- C:\Users\user 1\AppData\Local\CEF
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Daedalic Entertainment
O43 - CFD: 11/05/2016 - [] D -- C:\Users\user 1\AppData\Local\Dell
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Diagnostics
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Local\ElevatedDiagnostics
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Local\F-Secure
O43 - CFD: 20/07/2016 - [0] D -- C:\Users\user 1\AppData\Local\FSDART
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Google
O43 - CFD: 17/07/2016 - [] D -- C:\Users\user 1\AppData\Local\GWX
O43 - CFD: 11/05/2016 - [] SHD -- C:\Users\user 1\AppData\Local\History
O43 - CFD: 04/07/2016 - [] D -- C:\Users\user 1\AppData\Local\HP
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Microsoft
O43 - CFD: 15/05/2016 - [] D -- C:\Users\user 1\AppData\Local\Mozilla
O43 - CFD: 20/05/2016 - [] D -- C:\Users\user 1\AppData\Local\Package Cache
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Profiles
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Programs
O43 - CFD: 15/05/2016 - [] D -- C:\Users\user 1\AppData\Local\Steam
O43 - CFD: 07/08/2016 - [] D -- C:\Users\user 1\AppData\Local\Temp
O43 - CFD: 11/05/2016 - [] SHD -- C:\Users\user 1\AppData\Local\Temporary Internet Files
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Local\UCBrowser
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Local\VirtualStore
O43 - CFD: 07/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Wave Systems Corp
O43 - CFD: 08/07/2016 - [] D -- C:\Users\user 1\AppData\Local\Yandex
O43 - CFD: 06/07/2016 - [0] D -- C:\Users\user 1\AppData\Local\Programs\Common
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\user 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 20/07/2016 - [] RD -- C:\Users\user 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\user 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 20/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
O43 - CFD: 20/07/2016 - [] RD -- C:\Users\user 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 06/07/2016 - [] D -- C:\Users\user 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
O43 - CFD: 20/07/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\ESET
O43 - CFD: 18/07/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft

---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 0s
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.®
O106 - SIOI: FdeInitIcon Class [EnabledUnlockedFDEIconOverlay] - {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}. (.Wave Systems Corp. - TDM Icon Overlay.) -- C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll =>.Wave Systems Corp.®
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - Client Side Caching UI.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O106 - SIOI: FdeUninitIcon Class [UninitializedFdeIconOverlay] - {CF08DA3E-C97D-4891-A66B-E39B28DD270F}. (.Wave Systems Corp. - TDM Icon Overlay.) -- C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll =>.Wave Systems Corp.®

---\\ System Drivers List (100) - 6s
O58 - SDL:2016/04/12 10:47:56 A . (.Advanced Card Systems Ltd - PCSC/CCID IFD Handler.) -- C:\Windows\System32\drivers\a38usb.sys [37632] =>.Advanced Card Systems Ltd
O58 - SDL:2011/07/22 22:28:26 A . (.ST Microelectronics - Accelerometer Port I/O.) -- C:\Windows\System32\drivers\accelern.sys [44144] =>.STMicroelectronics®
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] =>.Microsoft Windows®
O58 - SDL:2011/10/22 09:54:40 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] =>.Microsoft Windows®
O58 - SDL:2011/10/22 09:54:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400] =>.Microsoft Windows®
O58 - SDL:2011/05/26 20:50:30 A . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\System32\drivers\Apfiltr.sys [305488] =>.Alps Electric Co., LTD.®
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] =>.Microsoft Windows®
O58 - SDL:2016/07/07 21:34:01 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [34008] =>.AVAST Software a.s.® (ALWIL Software)
O58 - SDL:2016/07/07 21:40:21 A . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [35096] =>.AVAST Software a.s.®
O58 - SDL:2016/07/07 21:34:01 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [91680] =>.AVAST Software a.s.®
O58 - SDL:2016/07/07 21:34:01 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [91232] =>.AVAST Software a.s.®
O58 - SDL:2016/07/07 21:34:01 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [60424] =>.AVAST Software a.s.® (ALWIL Software)
O58 - SDL:2016/07/07 21:33:22 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [816304] =>.AVAST Software a.s.®
O58 - SDL:2016/07/16 21:38:23 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswsp.sys [438296] =>.AVAST Software a.s.®
O58 - SDL:2016/07/07 21:34:01 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [118152] =>.AVAST Software a.s.®
O58 - SDL:2016/08/05 22:20:25 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswvmm.sys [224616] =>.AVAST Software a.s.® (ALWIL Software)
O58 - SDL:2009/07/14 00:02:49 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] =>.Broadcom Corporation
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/14 00:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/14 02:57:25 A . (.Brother Industries Ltd. - Brotehr Serial I/F Driver (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] =>.Brother Industries Ltd.
O58 - SDL:2009/07/14 00:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] =>.Brother Industries Ltd.
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] =>.Brother Industries Ltd.
O58 - SDL:2009/07/14 00:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] =>.Brother Industries Ltd.
O58 - SDL:2011/10/22 08:13:42 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter for Windo.) -- C:\Windows\System32\drivers\btwampfl.sys [302120] =>.Broadcom Corporation®
O58 - SDL:2011/10/22 08:13:42 A . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\drivers\btwaudio.sys [93224] =>.Broadcom Corporation®
O58 - SDL:2011/10/22 08:13:42 A . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\drivers\btwavdt.sys [114728] =>.Broadcom Corporation®
O58 - SDL:2011/10/22 08:13:42 A . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\System32\drivers\btwl2cap.sys [33832] =>.Broadcom Corporation®
O58 - SDL:2011/10/22 08:13:42 A . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\drivers\btwrchid.sys [18728] =>.Broadcom Corporation®
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] =>.Broadcom Corporation
O58 - SDL:2009/10/20 10:00:00 A . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see Px.) -- C:\Windows\System32\drivers\cdr4_xp.sys [9072] =>.Sonic Solutions®
O58 - SDL:2009/10/20 10:00:00 A . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\Windows\System32\drivers\cdralw2k.sys [9200] =>.Sonic Solutions®
O58 - SDL:2009/07/14 03:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] =>.Microsoft Windows®
O58 - SDL:2011/05/10 21:05:48 A . (.Broadcom Corporation - Broadcom Credential Vault USB Driver.) -- C:\Windows\System32\drivers\cvusbdrv.sys [33896] {1F0637BA61ED9BD1536E17E44F3FEC1E} =>.Broadcom Corporation
O58 - SDL:2009/07/14 03:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] =>.Microsoft Windows®
O58 - SDL:2010/10/28 17:41:02 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\Windows\System32\drivers\e1c6232.sys [238760] =>.Intel Corporation®
O58 - SDL:2009/07/14 03:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] =>.Microsoft Windows®
O58 - SDL:2016/07/19 15:57:54 A . (...) -- C:\Windows\System32\drivers\EsgScanner.sys [19984] =>.Enigma Software Group USA, LLC®
O58 - SDL:2009/07/14 00:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] =>.Broadcom Corporation
O58 - SDL:2011/07/20 00:24:20 A . (.Dell Inc. - Dell Tablet PC Key Button HID Driver.) -- C:\Windows\System32\drivers\HBtnKey.sys [11008] =>.Dell Inc.
O58 - SDL:2009/07/14 00:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] =>.Hauppauge Computer Works, Inc.
O58 - SDL:2010/10/20 04:33:40 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECI.sys [41088] =>.Intel Corporation
O58 - SDL:2016/07/21 07:06:06 A . (.© 2014 SurfRight B.V. - HitmanPro 3.7 Support Driver.) -- C:\Windows\System32\drivers\hitmanpro37.sys [39280] =>.SurfRight B.V.®
O58 - SDL:2009/07/14 03:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] =>.Microsoft Windows®
O58 - SDL:2010/09/20 15:32:40 A . (.Intel Corporation - NDIS 6.1 Advanced Networking Services..) -- C:\Windows\System32\drivers\iANSW60.sys [136416] =>.Intel Corporation®
O58 - SDL:2010/11/06 04:39:18 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x86.) -- C:\Windows\System32\drivers\iaStor.sys [354840] =>.Intel Corporation®
O58 - SDL:2011/10/22 09:54:40 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160] =>.Microsoft Windows®
O58 - SDL:2011/04/05 03:02:20 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [10542080] =>.Intel Corporation
O58 - SDL:2009/07/14 03:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] =>.Microsoft Windows®
O58 - SDL:2010/02/27 02:31:24 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\Windows\System32\drivers\Impcd.sys [132480] =>.Intel Corporation
O58 - SDL:2010/10/15 11:27:18 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [269824] =>.Intel(R) Corporation
O58 - SDL:2010/09/17 10:02:22 A . (.Intel Corporation - Intel(R) Network Adapter Diagnostic Driver.) -- C:\Windows\System32\drivers\iqvw32.sys [30368] =>.Intel Corporation®
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] =>.Microsoft Windows®
O58 - SDL:2016/03/10 14:08:52 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [24448] =>.Malwarebytes Corporation®
O58 - SDL:2016/03/10 14:08:56 A . (.Malwarebytes - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [126336] =>.Malwarebytes Corporation®
O58 - SDL:2016/07/20 22:10:23 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [170200] =>.Malwarebytes Corporation®
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] =>.Microsoft Windows®
O58 - SDL:2016/03/10 14:09:04 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [53120] =>.Malwarebytes Corporation®
O58 - SDL:2010/12/21 21:07:44 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETwNs32.sys [7434240] =>.Intel Corporation
O58 - SDL:2009/07/14 03:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] =>.Microsoft Windows®
O58 - SDL:2011/10/22 09:54:40 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120] =>.Microsoft Windows®
O58 - SDL:2011/10/22 09:54:40 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744] =>.Microsoft Windows®
O58 - SDL:2011/01/04 23:44:06 A . (.O2Micro - O2Micro Media Reader Driver.) -- C:\Windows\System32\drivers\o2mdfw7.sys [60904] =>.O2Micro Inc.®
O58 - SDL:2011/01/05 00:41:58 A . (.O2Micro - O2Micro Media Reader Driver.) -- C:\Windows\System32\drivers\O2MDRw7.sys [62440] =>.O2Micro Inc.®
O58 - SDL:2011/03/23 23:50:58 A . (.O2Micro - O2Micro SD Reader Driver.) -- C:\Windows\System32\drivers\o2sdjw7.sys [63976] =>.O2Micro Inc.®
O58 - SDL:2010/07/21 20:13:40 A . (.Dell Inc - PBA Support Driver.) -- C:\Windows\System32\drivers\PBADRV.sys [26608] =>.Dell Inc.®
O58 - SDL:2010/03/19 10:00:00 A . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\Windows\System32\drivers\pxhelp20.sys [45648] =>.Sonic Solutions®
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] =>.Microsoft Windows®
O58 - SDL:2009/07/13 22:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] =>.Microsoft Windows®
O58 - SDL:2011/07/16 06:30:50 A . (.ST Microelectronics - Disk Class Filter Driver for Accelerometer.) -- C:\Windows\System32\drivers\stdcfltn.sys [17904] =>.STMicroelectronics®
O58 - SDL:2009/07/14 03:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] =>.Microsoft Windows®
O58 - SDL:2011/01/25 11:57:18 A . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\drivers\stwrt.sys [435200] =>.IDT, Inc.
O58 - SDL:2009/07/14 03:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2009/07/13 23:40:44 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2009/07/13 23:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2009/07/13 23:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2009/07/13 23:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2009/07/13 23:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2009/07/13 23:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2009/07/13 23:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2009/07/13 23:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2009/07/13 23:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2009/07/13 23:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2009/07/13 23:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2009/07/13 23:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2009/07/13 23:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]

---\\ Last modified or created user files (7) - 54s
O61 - LFC: 2016/08/07 07:12:12 A . (..) -- C:\Users\user 1\Downloads\CKScanner(1).exe [468480]
O61 - LFC: 2016/08/07 07:16:51 A . (..) -- C:\Users\user 1\Downloads\CKScanner(2).exe [468480]
O61 - LFC: 2016/08/07 07:18:48 A . (..) -- C:\Users\user 1\Downloads\CKScanner(3).exe [468480]
O61 - LFC: 2016/08/07 07:19:39 A . (..) -- C:\Users\user 1\Downloads\ckscanner(4).exe [468480]
O61 - LFC: 2016/08/07 07:11:41 A . (..) -- C:\Users\user 1\Downloads\CKScanner.exe [468480]
O61 - LFC: 2016/08/07 07:05:06 A . (..) -- C:\Users\user 1\Downloads\winchk_2.0(1).exe [315000]
O61 - LFC: 2016/08/07 07:08:57 A . (..) -- C:\Users\user 1\Downloads\winchk_2.0(2).exe [315000]

---\\ File Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Start Menu Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software

---\\ Search Browser Infection (2) - 11s
O69 - SBI: SearchScopes [HKCU] {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} [DefaultScope] - (Avast Search) - http://search.avast.com/
O69 - SBI: SearchScopes [HKLM] {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} [DefaultScope] - (Avast Search) - http://search.avast.com/

---\\ Search Svchost Services (34) - 0s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Application Experience Service.) -- C:\Windows\System32\aelupsvc.dll [62464] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\System32\srvsvc.dll [168960] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\Windows\System32\gpsvc.dll [606720] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\IKEEXT.DLL [679424] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\Windows\System32\audiosrv.dll [475136] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [90624] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [286208] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [75264] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\Sens.dll [49664] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [300544] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [242176] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Remote Desktop Session Host Server Remote C.) -- C:\Windows\System32\termsrv.dll [523776] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [2062848] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [585728] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [328192] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [499712] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\Windows\System32\seclogon.dll [21504] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [47104] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\System32\iscsiexe.dll [114688] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Multimedia Class Scheduler Service.) -- C:\Windows\System32\mmcss.dll [49664] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\Windows\System32\wercplsupport.dll [61440] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [98304] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\Windows\System32\schedsvc.dll [751104] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\Windows\System32\KMSVC.DLL [71168] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [113664] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\Windows\System32\browser.dll [102912] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\System32\themeservice.dll [37376] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [76800] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Software installation Service.) -- C:\Windows\System32\appmgmts.dll [149504] =>.Microsoft Corporation
O83 - Search Svchost Services: HpSvc (HpSvc) . (.Copyright (C) 2008-2016 www.ludashi.com - 硬件防护核心服务.) -- c:\program files\LuDaShi\lpi\HpSvc.dll [239528] {26279F0F2F11970DCCF63EBA88F2D4C4}

---\\ Firewall Active Exception List (18) - 3s
O87 - FAEL: "{696AE843-B34E-4F4E-B57F-F833BA6E6F4C}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe =>.Steam SteamApps Games
O87 - FAEL: "{EA462E53-B456-4193-A95D-32B3DB0A6361}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe =>.Steam SteamApps Games
O87 - FAEL: "{D1D9718C-50B4-479A-9A15-59917D90803F}" [In-None-P6-TRUE] .(.Daedalic Entertainment GmbH - Visionaire Player for Edna & Harvey: Harvey.) -- C:\Program Files\Steam\steamapps\common\Edna and Harvey Harvey's New Eyes\harvey.exe =>.Steam SteamApps Games
O87 - FAEL: "{08367601-D0F2-4251-B961-8C65AB50617D}" [In-None-P17-TRUE] .(.Daedalic Entertainment GmbH - Visionaire Player for Edna & Harvey: Harvey.) -- C:\Program Files\Steam\steamapps\common\Edna and Harvey Harvey's New Eyes\harvey.exe =>.Steam SteamApps Games
O87 - FAEL: "{BED1FD0C-6F24-43E2-990A-8444CFFF80A3}" [In-None-P6-TRUE] .(.Daedalic Entertainment GmbH - The Whispered World Special Edition.) -- C:\Program Files\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe =>.Steam SteamApps Games
O87 - FAEL: "{A973FC62-62E7-45E6-B32F-C69FC16EB7C2}" [In-None-P17-TRUE] .(.Daedalic Entertainment GmbH - The Whispered World Special Edition.) -- C:\Program Files\Steam\steamapps\common\The Whispered World Special Edition\twwse.exe =>.Steam SteamApps Games
O87 - FAEL: "{33999F58-B278-426B-AD59-6CED35CF4C0E}" [In-None-P6-TRUE] .(.Daedalic Entertainment GmbH - Visionaire Player for The Night of the Rabb.) -- C:\Program Files\Steam\steamapps\common\The Night of the Rabbit\rabbit.exe =>.Steam SteamApps Games
O87 - FAEL: "{84713880-D261-401D-A8E9-7F002D398A72}" [In-None-P17-TRUE] .(.Daedalic Entertainment GmbH - Visionaire Player for The Night of the Rabb.) -- C:\Program Files\Steam\steamapps\common\The Night of the Rabbit\rabbit.exe =>.Steam SteamApps Games
O87 - FAEL: "{090955C2-746A-4DE3-9B38-6C3F62F7D4F1}" [In-None-P6-TRUE] .(.版权所有 (C) 2008-2016 www.ludashi.com - 鲁大师 硬件防护中心.) -- C:\Program Files\LuDaShi\ComputerZTray.exe {26279F0F2F11970DCCF63EBA88F2D4C4}
O87 - FAEL: "{F9F0C5F0-37AC-4184-B6E3-50370150479A}" [In-None-P17-TRUE] .(.版权所有 (C) 2008-2016 www.ludashi.com - 鲁大师 硬件防护中心.) -- C:\Program Files\LuDaShi\ComputerZTray.exe {26279F0F2F11970DCCF63EBA88F2D4C4}
O87 - FAEL: "{428E9EA0-F30C-4906-9085-F78E99AAA32D}" [In-None-P6-TRUE] .(.www.ludashi.com - 鲁讯迷你新闻页.) -- C:\Program Files\LuDaShi\Utils\mininews.exe {26279F0F2F11970DCCF63EBA88F2D4C4}
O87 - FAEL: "{141C1490-D3AD-4472-A0B2-63E280A35FDA}" [In-None-P17-TRUE] .(.www.ludashi.com - 鲁讯迷你新闻页.) -- C:\Program Files\LuDaShi\Utils\mininews.exe {26279F0F2F11970DCCF63EBA88F2D4C4}
O87 - FAEL: "{452929B2-8334-400D-BFE0-B2E7DAF69627}" [In-None-P6-TRUE] .(...) -- C:\Users\Public\SogouInput\USBDT\OctopusDownloader.exe (.not file.) =>.Superfluous.Sogou
O87 - FAEL: "{AD671E40-AABE-4A33-963A-311906C5EDDC}" [In-None-P17-TRUE] .(...) -- C:\Users\Public\SogouInput\USBDT\OctopusDownloader.exe (.not file.) =>.Superfluous.Sogou
O87 - FAEL: "{37D4A9BD-FDF6-4A46-B54F-7690E0CBCE85}" [In-None-P6-TRUE] .(...) -- C:\Users\Public\SogouInput\USBDT\OctopusDownloader.exe (.not file.) =>.Superfluous.Sogou
O87 - FAEL: "{BED027A3-26A0-47AC-9F64-72653130821F}" [In-None-P17-TRUE] .(...) -- C:\Users\Public\SogouInput\USBDT\OctopusDownloader.exe (.not file.) =>.Superfluous.Sogou
O87 - FAEL: "{8BEE26C6-5B50-47C5-B064-A6AB07A204C6}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Alawar.fr\Legendary Mahjong\Legendary Mahjong.wrp.exe (.not file.)
O87 - FAEL: "{EF41608C-C71A-4B98-B681-C77EA331746F}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Alawar.fr\Legendary Mahjong\F2PHttpDaemon.exe (.not file.)

---\\ Additional Scan (O88) (1) - 0s
~ No malicious or unnecessary items found.

---\\ Summary of the elements found (1) - 0s
https://www.nicolascoolman.com/fr/pup-sogou/ =>.Superfluous.Sogou

~ End of the scan, 28573 items in 00h03mn03s (942)