cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-08-2016 01
Ran by mourad (administrator) on ANDRIOD-5437890 (16-08-2016 14:01:31)
Running from C:\Users\mourad\Desktop
Loaded Profiles: mourad (Available Profiles: mourad)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Spanish (Spain, International Sort)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\avp.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Monitor\BtMon2.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Monitor\BtMon64.exe
() C:\Program Files (x86)\DFX\DFX.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\avpui.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [DFX] => C:\Program Files (x86)\DFX\DFX.exe [1595384 2016-06-22] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1021736 2016-01-08] (Samsung)
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3966064 2016-08-05] (Tonec Inc.)
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: F - F:\Startme.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {1059bba4-4e28-11e4-afe7-0022fad8423a} - F:\Setup.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {1059bbc0-4e28-11e4-afe7-0022fad8423a} - F:\Setup.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {229e6dc9-444b-11e5-8835-80a99556a02c} - H:\LGAutoRun.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {3c3b783a-afaf-11e5-81e2-aac4b3d3b48b} - H:\autorun.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {46d593fd-bac2-11e5-9d37-c9f6a9709940} - G:\Setup.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {603cee84-d24e-11e5-833d-e7496563566c} - H:\Setup.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {a0595980-5268-11e4-a0d8-0022fad8423a} - F:\Setup.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {e16daa76-8fb1-11e5-8268-002318b92542} - G:\Startme.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {f8176921-a35a-11e5-811e-aca21365ea49} - G:\AutoRun.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {f8176925-a35a-11e5-811e-aca21365ea49} - G:\AutoRun.exe
HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\MountPoints2: {f817692b-a35a-11e5-811e-d7807bedc6be} - G:\AutoRun.exe
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Monitor.lnk [2016-08-08]
ShortcutTarget: Bluetooth Monitor.lnk -> C:\Program Files (x86)\Toshiba\Bluetooth Monitor\BtMon2.exe (TOSHIBA CORPORATION)
BootExecute: autocheck pwNativeautocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{08B1291A-1623-40D7-AC20-2EBA71FEC140}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA2F9F82-A895-423A-99FC-38E78356614E}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{BE9E45B3-5A5F-41F6-BED6-1F6254ABE04C}: [DhcpNameServer] 192.168.3.1 192.168.3.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-454156101-2345760694-676353058-1000\Software\Microsoft\Internet Explorer\Main,Local Page = hxxp://www.babal.net/?gjj
HKU\S-1-5-21-454156101-2345760694-676353058-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.babal.net/?gjj
HKU\S-1-5-21-454156101-2345760694-676353058-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKU\S-1-5-21-454156101-2345760694-676353058-1000\Software\Microsoft\Internet Explorer\Main,Default Page URL = hxxp://www.babal.net/?gjj
URLSearchHook: [S-1-5-21-454156101-2345760694-676353058-1000] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-454156101-2345760694-676353058-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-454156101-2345760694-676353058-1000 -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-07-13] (Internet Download Manager, Tonec Inc.)
BHO: Kaspersky Protection -> {03993315-5CE9-4F00-8790-D14A94F1D91A} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\x64\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-11] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-11] (Oracle Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-07-13] (Internet Download Manager, Tonec Inc.)
BHO-x32: Kaspersky Protection -> {03993315-5CE9-4F00-8790-D14A94F1D91A} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-10-16] (Wondershare)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-08-11] (Oracle Corporation)
BHO-x32: LeapFTP Internet Explorer Hook -> {A5479DA1-7843-43A7-B5C0-BE342C77B629} -> C:\Program Files (x86)\LeapFTP 3.0\lftpie.dll [2010-10-30] (LeapWare)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-11] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {001032CB-B0AC-4F2C-A650-AD4B2B26E5DA} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\x64\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {001032CB-B0AC-4F2C-A650-AD4B2B26E5DA} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\IEExt\ie_plugin.dll [2015-12-22] (AO Kaspersky Lab)
Toolbar: HKU\S-1-5-21-454156101-2345760694-676353058-1000 -> No Name - {04B84C46-5ABB-476B-A7D7-40435D9AE611} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - No File
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\mourad\AppData\Roaming\Mozilla\Firefox\Profiles\cbabaezd.default-1460330565581
FF Session Restore: -> is enabled.
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-09] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-09] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-454156101-2345760694-676353058-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\mourad\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-454156101-2345760694-676353058-1000: @talk.google.com/O1DPlugin -> C:\Users\mourad\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-454156101-2345760694-676353058-1000: @tools.google.com/Google Update;version=3 -> C:\Users\mourad\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-454156101-2345760694-676353058-1000: @tools.google.com/Google Update;version=9 -> C:\Users\mourad\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-454156101-2345760694-676353058-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\mourad\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\mourad\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\mourad\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Extension: RightToClick - C:\Users\mourad\AppData\Roaming\Mozilla\Firefox\Profiles\cbabaezd.default-1460330565581\extensions\{cd617375-6743-4ee8-bac4-fbf10f35729e}.xpi [2016-04-20]
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2016-08-03]
FF Extension: Barre d'outils eBuyClub - C:\Users\mourad\AppData\Roaming\Mozilla\Firefox\Profiles\cbabaezd.default-1460330565581\extensions\ebctb@plebicom.xul.xpi [2016-08-10]
FF Extension: Hotspot Shield Free VPN Proxy – Unblock Sites - C:\Users\mourad\AppData\Roaming\Mozilla\Firefox\Profiles\cbabaezd.default-1460330565581\Extensions\hotspot-shield@anchorfree.com.xpi [2016-06-24]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF Extension: Wondershare Video Converter Ultimate - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2016-06-02] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_ACF0E80077C511E59DED005056C00008@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\FFExt\light_plugin_firefox\addon.xpi
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\FFExt\light_plugin_firefox\addon.xpi [2016-04-29]
FF HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-454156101-2345760694-676353058-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\mourad\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\mourad\AppData\Roaming\IDM\idmmzcc5 [2016-08-16] [not signed]

Chrome:
=======
CHR HomePage: Default -> yandex.ru/?__PARAM__from=chromehp
CHR DefaultSearchURL: Default -> hxxp://yandex.ru/search/?__PARAM__from=chromesearch&text={searchTerms}
CHR DefaultSearchKeyword: Default -> yandex.ru
CHR DefaultSuggestURL: Default -> hxxp://suggest.yandex.net/suggest-ff.cgi?uil=ru&part={searchTerms}
CHR Profile: C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Яндекс) - C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ablpcikjmhamjanpibkccdmpoekjigja [2016-05-04]
CHR Extension: (Стартовая — Яндекс) - C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpegcopcfajiiibidlaelhjjblpefbjk [2016-05-04]
CHR Extension: (Vysor) - C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2016-08-14]
CHR Extension: (Kaspersky Protection) - C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpeeaghdjmhlakojjcgfdhgcejdaefmi [2016-08-14]
CHR Extension: (IDM Integration Module) - C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-07-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-04]
CHR Extension: (Chrome Media Router) - C:\Users\mourad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-09]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-08-05]
CHR HKLM\...\Chrome\Extension: [lpeeaghdjmhlakojjcgfdhgcejdaefmi] - hxxps://chrome.google.com/webstore/detail/lpeeaghdjmhlakojjcgfdhgcejdaefmi
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-08-05]
CHR HKLM-x32\...\Chrome\Extension: [ablpcikjmhamjanpibkccdmpoekjigja] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cpegcopcfajiiibidlaelhjjblpefbjk] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fdjdjkkjoiomafnihnobkinnfjnnlhdg] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lpeeaghdjmhlakojjcgfdhgcejdaefmi] - hxxps://chrome.google.com/webstore/detail/lpeeaghdjmhlakojjcgfdhgcejdaefmi
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-08-05]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2159832 2016-08-12] (Adobe Systems, Incorporated)
R2 AVP16.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\avp.exe [236928 2015-12-22] (AO Kaspersky Lab)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [432792 2015-12-14] (BlueStack Systems, Inc.)
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [412312 2015-12-14] (BlueStack Systems, Inc.)
S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [854680 2015-12-14] (BlueStack Systems, Inc.)
S2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2015-09-14] ()
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2729592 2016-07-19] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-07-19] ()
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.1\x64\vssbridge64.exe [152488 2015-12-22] (AO Kaspersky Lab)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [112792 2015-09-14] ()
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2015-09-14] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Dr.Fone for Android\DriverInstall.exe [115976 2016-01-28] (Wondershare)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146016 2015-12-14] (BlueStack Systems)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
S3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2015-08-31] (Windows (R) Win 7 DDK provider)
R3 DFX12; C:\Windows\System32\drivers\dfx12x64.sys [29688 2015-11-12] (Windows (R) Win 7 DDK provider)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] ()
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] ()
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] ()
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2015-10-28] (Sony Mobile Communications)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2015-02-04] (AnchorFree Inc.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-07-31] (REALiX(tm))
R3 IFXTPM; C:\Windows\System32\DRIVERS\IFXTPM.SYS [58880 2008-07-31] (Infineon Technologies AG)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-09-11] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [79240 2015-12-01] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [78200 2015-12-02] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [182152 2015-12-11] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [236976 2016-04-29] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP16.0.1\Bases\klids.sys [182360 2016-08-16] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [997808 2016-04-29] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [50776 2016-04-29] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [52608 2015-11-11] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45960 2015-12-07] (AO Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [112520 2015-12-03] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [194440 2015-12-03] (AO Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 netr28ux; C:\Windows\System32\DRIVERS\netr28ux.sys [2246488 2015-11-19] (MediaTek Inc.)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
R3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [118016 2010-08-27] (TCT International Mobile Ltd)
R2 risdptsk; C:\Windows\System32\DRIVERS\risdsn64.sys [76288 2009-09-24] (REDC)
S3 RTL8187; C:\Windows\System32\DRIVERS\rtl8187.sys [448512 2010-12-14] (Realtek Semiconductor Corporation ) [File not signed]
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2010-04-27] (MCCI Corporation)
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2010-04-27] (MCCI Corporation)
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2010-04-27] (MCCI Corporation)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-10-12] (Anchorfree Inc.)
S3 tenCapture; C:\Windows\System32\DRIVERS\tenCapture.sys [23736 2012-07-20] (Hajo Krabbenhöft)
S3 Tosrfcom; no ImagePath
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [18392 2013-01-25] (Scott)
S1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-09-08] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [146072 2015-09-08] (Oracle Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [125520 2015-10-02] (Oracle Corporation)
S3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [95232 2010-11-20] (Microsoft Corporation) [File not signed]
S3 vpcuxd; C:\Windows\system32\drivers\vpcuxd.sys [16384 2010-11-20] (Microsoft Corporation) [File not signed]
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
S3 X86BDA; C:\Windows\System32\DRIVERS\OEMDrv.sys [268416 2011-06-08] ( ) [File not signed]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
S3 ZTEusbMB; C:\Windows\System32\DRIVERS\ZTEusbnmeaext2.sys [119680 2009-09-19] (ZTE Incorporated)
S3 andnetadb; System32\Drivers\lgandnetadb.sys [X]
S3 AndNetDiag; system32\DRIVERS\lgandnetdiag64.sys [X]
S3 ANDNetModem; system32\DRIVERS\lgandnetmodem64.sys [X]
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]
S3 catchme; \??\C:\Users\mourad\AppData\Local\Temp\catchmevspm.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S3 ndisahMP; system32\DRIVERS\ndisah.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-08-16 14:01 - 2016-08-16 14:02 - 00026300 _____ C:\Users\mourad\Desktop\FRST.txt
2016-08-16 13:59 - 2016-08-16 14:01 - 00000000 ____D C:\FRST
2016-08-16 13:58 - 2016-08-16 13:58 - 02394624 _____ (Farbar) C:\Users\mourad\Desktop\FRST64.exe
2016-08-16 12:29 - 2016-08-16 12:29 - 00000000 ____H C:\ProgramData\cm-lock
2016-08-16 11:50 - 2016-08-16 11:50 - 00001310 _____ C:\Windows\PWCMDLST.BAK
2016-08-16 10:50 - 2016-08-16 10:50 - 00201293 _____ C:\ubnldr.exe
2016-08-16 10:50 - 2016-08-16 10:50 - 00185012 _____ C:\ubnldr
2016-08-16 10:50 - 2016-08-16 10:50 - 00008192 _____ C:\ubnldr.mbr
2016-08-16 10:48 - 2016-08-16 10:50 - 00000000 ____D C:\wifislax
2016-08-16 10:47 - 2016-08-16 10:50 - 00000000 ____D C:\unetbtin
2016-08-15 20:20 - 2016-08-15 20:21 - 00005381 _____ C:\Users\mourad\Downloads\ps_action_4_by_demolitionn.atn
2016-08-15 20:16 - 2016-08-15 20:16 - 00008344 _____ C:\Users\mourad\Downloads\action_set_05_by_kissofdeathxxx.atn
2016-08-15 19:55 - 2016-08-15 19:55 - 00001670 _____ C:\Users\Public\Desktop\DFX.lnk
2016-08-15 19:55 - 2016-08-15 19:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DFX Audio Enhancer
2016-08-15 19:54 - 2016-08-15 19:54 - 00000000 ____D C:\Users\mourad\AppData\Roaming\vlc
2016-08-15 17:21 - 2016-08-15 17:21 - 00000000 ____D C:\Users\mourad\AppData\Local\CrashRpt
2016-08-15 16:19 - 2016-08-15 16:19 - 00009210 _____ C:\Users\mourad\Desktop\ZHPFixReport.txt
2016-08-15 13:49 - 2016-08-15 13:50 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-08-15 13:49 - 2016-08-15 13:49 - 00001809 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2016-08-15 13:49 - 2016-08-15 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-08-15 13:10 - 2016-08-15 13:10 - 00000000 ____D C:\Windows\System32\Tasks\Games
2016-08-15 12:15 - 2016-08-15 12:15 - 03521617 _____ (Nicolas Coolman ) C:\Users\mourad\Desktop\ZHPFix.exe
2016-08-15 00:27 - 2016-08-15 00:27 - 02293248 _____ C:\Users\mourad\ZHPDiag3.exe
2016-08-14 13:43 - 2016-08-14 13:43 - 00001541 _____ C:\Users\mourad\Desktop\mbam.exe - Shortcut.lnk
2016-08-13 19:28 - 2015-11-19 16:06 - 02246488 _____ (MediaTek Inc.) C:\Windows\system32\Drivers\netr28ux.sys
2016-08-13 19:28 - 2015-11-19 16:06 - 00343712 _____ (Mediatek Inc.) C:\Windows\system32\RaCoInstx.dll
2016-08-13 19:28 - 2015-11-19 15:57 - 00079216 _____ C:\Windows\SysWOW64\Drivers\FW_7662.bin
2016-08-13 19:28 - 2015-11-19 15:57 - 00079216 _____ C:\Windows\system32\Drivers\FW_7662.bin
2016-08-13 19:28 - 2015-11-19 15:57 - 00020626 _____ C:\Windows\SysWOW64\Drivers\Patch_7662.bin
2016-08-13 19:28 - 2015-11-19 15:57 - 00020626 _____ C:\Windows\system32\Drivers\Patch_7662.bin
2016-08-13 19:28 - 2015-11-19 15:57 - 00016389 _____ C:\Windows\SysWOW64\RaCoInst.dat
2016-08-13 19:28 - 2015-11-19 15:57 - 00016389 _____ C:\Windows\system32\RaCoInst.dat
2016-08-12 15:14 - 2016-08-12 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2016-08-12 15:14 - 2016-08-12 15:13 - 00002071 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk
2016-08-12 15:08 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2016-08-12 15:07 - 2016-08-12 15:07 - 00000000 ____D C:\Windows\ELAMBKUP
2016-08-12 15:04 - 2016-08-16 12:30 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-08-12 15:04 - 2016-08-12 15:04 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-08-12 15:01 - 2016-04-29 06:12 - 00997808 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2016-08-12 15:01 - 2016-04-29 06:12 - 00236976 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2016-08-12 15:01 - 2015-12-11 17:28 - 00182152 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2016-08-12 14:12 - 2016-08-12 15:15 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2016-08-11 12:03 - 2016-08-11 12:03 - 00079064 _____ (Malwarebytes) C:\Windows\system32\Drivers\egnscy.sys
2016-08-11 11:13 - 2016-08-13 10:17 - 00000000 ____D C:\Users\mourad\AppData\Roaming\IDM
2016-08-10 22:40 - 2016-08-11 11:14 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-08-10 22:39 - 2016-08-11 15:06 - 00000000 ____D C:\ProgramData\RogueKiller
2016-08-10 21:23 - 2016-08-10 22:21 - 00000000 ____D C:\AdwCleaner
2016-08-10 18:28 - 2016-08-15 16:19 - 00000000 ____D C:\Users\mourad\AppData\Roaming\ZHP
2016-08-09 18:08 - 2016-08-09 18:12 - 41796699 _____ C:\Users\mourad\Documents\20000101_014139.mp4
2016-08-09 17:57 - 2016-08-09 18:07 - 92215104 _____ C:\Users\mourad\Documents\20160730_190638.mp4
2016-08-09 17:51 - 2016-08-09 17:55 - 40345640 _____ C:\Users\mourad\Documents\20160806_150920.mp4
2016-08-09 15:26 - 2016-08-10 19:22 - 00000928 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-08-09 15:26 - 2016-08-09 15:26 - 00000896 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-08-09 15:26 - 2016-08-09 15:26 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-08-09 15:26 - 2016-08-09 15:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 ____D C:\Windows\Options
2016-08-08 19:16 - 2016-08-08 19:16 - 00000032 _____ C:\Windows\0
2016-08-08 19:16 - 2016-08-08 19:16 - 00000000 _____ C:\Windows\SysWOW64\0
2016-08-08 00:19 - 2016-08-08 00:19 - 00011693 _____ C:\Users\mourad\Downloads\download.htm
2016-08-05 19:15 - 2016-08-05 19:24 - 00001881 _____ C:\Users\mourad\Desktop\CyberGhost 6.lnk
2016-08-05 19:15 - 2016-08-05 19:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6
2016-08-05 19:14 - 2016-08-05 19:15 - 00000000 ____D C:\Program Files\CyberGhost 6
2016-08-05 15:50 - 2016-08-05 13:04 - 00217256 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2016-08-05 15:47 - 2016-08-05 15:47 - 00001033 _____ C:\Users\mourad\Desktop\GameRanger.lnk
2016-08-05 15:47 - 2016-08-05 15:47 - 00001019 _____ C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk
2016-08-05 15:47 - 2016-08-05 15:47 - 00000000 ____D C:\Users\mourad\AppData\Roaming\GameRanger
2016-07-31 14:06 - 2016-08-15 12:47 - 00000000 ____D C:\Program Files (x86)\7-Data Recovery Suite
2016-07-31 13:16 - 2016-07-31 13:16 - 00000000 ____D C:\Windows\IObit
2016-07-31 13:15 - 2016-07-31 13:15 - 00000000 ____D C:\Users\mourad\AppData\Roaming\IObit
2016-07-31 13:07 - 2016-07-31 13:07 - 90411358 _____ C:\Users\mourad\Downloads\Ashampoo® Burning Studio 16.rar
2016-07-30 18:29 - 2016-07-30 18:29 - 00001222 _____ C:\Users\Public\Desktop\WiFi HotSpot Creator.lnk
2016-07-30 18:29 - 2016-07-30 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WiFi HotSpot Creator
2016-07-30 10:46 - 2016-07-30 10:46 - 00000000 ____D C:\Program Files\EaseUS
2016-07-29 16:07 - 2016-07-29 16:07 - 00000053 __RSH C:\Windows\system32\Drivers\winhv.winsecurity
2016-07-29 16:07 - 2016-07-29 16:07 - 00000000 ____D C:\ProgramData\CodeMeter
2016-07-29 13:35 - 2015-08-11 12:22 - 03067392 _____ C:\Windows\system32\pwNative.exe
2016-07-29 13:35 - 2013-09-30 15:26 - 00019152 ____N C:\Windows\system32\pwdrvio.sys
2016-07-29 13:35 - 2013-09-30 15:26 - 00012504 ____N C:\Windows\system32\pwdspio.sys
2016-07-29 13:33 - 2016-07-29 13:34 - 00000000 ____D C:\Program Files\MiniTool Partition Wizard Free 9.1
2016-07-29 13:33 - 2016-07-29 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.1
2016-07-25 15:20 - 2016-07-25 15:22 - 60881640 _____ C:\Users\mourad\Downloads\Pokémon GO_v0.29.3_apkpure.com.apk
2016-07-23 21:43 - 2016-08-11 12:03 - 00000000 ____D C:\Program Files (x86)\Kat MP3 Recorder
2016-07-23 21:43 - 2016-07-26 02:08 - 00000000 ____D C:\Users\mourad\Documents\KatMP3Recorder
2016-07-23 21:43 - 2016-07-23 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kat MP3 Recorder
2016-07-23 10:52 - 2016-07-23 10:52 - 00737549 _____ C:\Users\mourad\Downloads\Android-build-tools-v24.0.1.zip
2016-07-23 10:48 - 2016-07-23 10:48 - 01218068 _____ C:\Users\mourad\Downloads\Android-device-check-1.01.zip
2016-07-23 10:01 - 2016-07-23 10:01 - 00000000 ____D C:\adb
2016-07-22 08:55 - 2016-07-22 08:55 - 00003120 _____ C:\Windows\SysWOW64\FRSA5SIS.ocx
2016-07-22 08:55 - 2016-07-22 08:55 - 00003120 _____ C:\Windows\N64949GQ.ocx
2016-07-22 08:55 - 2016-07-22 08:55 - 00000000 ____D C:\ProgramData\Thinix
2016-07-22 08:48 - 2016-07-22 08:48 - 00000000 ____D C:\Program Files (x86)\Thinix
2016-07-22 07:47 - 2016-07-22 07:53 - 00000000 ____D C:\Users\Public\Documents\RootGenius
2016-07-22 07:44 - 2016-07-22 07:44 - 00000000 ____D C:\Users\mourad\AppData\Roaming\Shuame
2016-07-22 07:43 - 2016-07-22 07:46 - 07453104 _____ C:\Users\mourad\Downloads\RootGenius_en_2.2.6.exe
2016-07-22 01:32 - 2016-07-22 08:24 - 00000000 ____D C:\Program Files (x86)\Kingo Android ROOT
2016-07-22 01:32 - 2016-07-22 01:32 - 00000000 ____D C:\Users\mourad\Documents\wmshua
2016-07-22 01:32 - 2016-07-22 01:32 - 00000000 ____D C:\Users\mourad\AppData\Roaming\ZJMedia
2016-07-22 01:32 - 2016-07-22 01:32 - 00000000 ____D C:\Users\mourad\AppData\Local\ZJMedia
2016-07-22 01:14 - 2016-07-22 01:14 - 00000000 ____D C:\Users\mourad\AppData\Local\oneClickRoot
2016-07-22 01:14 - 2016-07-22 01:14 - 00000000 ____D C:\Users\mourad\AppData\Local\AWSToolkit
2016-07-22 01:10 - 2016-07-22 01:10 - 00000000 ____D C:\Program Files (x86)\One Click Root
2016-07-22 01:08 - 2016-07-22 01:08 - 00000000 ____D C:\Users\mourad\AppData\Roaming\One Click Root
2016-07-19 02:05 - 2016-07-19 02:05 - 00000000 ____D C:\ProgramData\SP_FT_Logs
2016-07-18 02:16 - 2016-07-18 02:16 - 00000000 ____D C:\Windows\SysWOW64\SupportAppPBMovistar Internet Movil
2016-07-18 02:16 - 2016-07-18 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movistar Internet Movil
2016-07-18 02:16 - 2016-07-18 02:16 - 00000000 ____D C:\Program Files (x86)\Movistar Internet Movil
2016-07-17 03:09 - 2016-07-17 03:09 - 00043872 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2016-07-17 03:09 - 2016-07-17 03:09 - 00036736 _____ (Connectify) C:\Windows\system32\Drivers\cfywlan1.sys
2016-07-17 00:17 - 2014-06-28 00:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-07-17 00:16 - 2015-02-03 03:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-07-17 00:16 - 2015-02-03 03:31 - 02644992 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-07-17 00:16 - 2015-02-03 03:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-07-17 00:16 - 2015-02-03 03:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-07-17 00:16 - 2015-02-03 03:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-07-17 00:16 - 2015-02-03 03:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-07-17 00:16 - 2015-02-03 03:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-07-17 00:16 - 2015-02-03 03:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-07-17 00:16 - 2015-02-03 03:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-07-17 00:16 - 2015-02-03 03:30 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-07-17 00:16 - 2015-02-03 03:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-07-17 00:16 - 2015-02-03 03:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-07-17 00:16 - 2015-02-03 03:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-07-17 00:16 - 2015-02-03 03:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-07-17 00:16 - 2015-02-03 03:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-07-17 00:16 - 2015-02-03 03:28 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-07-17 00:16 - 2015-02-03 03:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 02135040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-07-17 00:16 - 2015-02-03 03:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-07-17 00:16 - 2015-02-03 03:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-07-17 00:16 - 2015-02-03 03:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-07-17 00:16 - 2015-02-03 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-07-17 00:16 - 2015-02-03 03:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-07-17 00:16 - 2015-02-03 03:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-07-17 00:15 - 2015-02-03 03:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-07-17 00:15 - 2015-02-03 03:34 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-07-17 00:15 - 2015-02-03 03:34 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-07-17 00:15 - 2015-02-03 03:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-07-17 00:15 - 2015-02-03 03:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-07-17 00:15 - 2015-02-03 03:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-07-17 00:15 - 2015-02-03 03:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-07-17 00:15 - 2015-02-03 03:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-07-17 00:15 - 2015-02-03 03:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-07-17 00:15 - 2015-02-03 03:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-07-17 00:15 - 2015-02-03 03:30 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-07-17 00:15 - 2015-02-03 03:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-07-17 00:15 - 2015-02-03 03:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-07-17 00:15 - 2015-02-03 03:28 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-07-17 00:15 - 2015-02-03 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-07-17 00:15 - 2015-02-03 03:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-07-17 00:15 - 2015-02-03 03:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-07-17 00:15 - 2015-02-03 03:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-07-17 00:15 - 2015-02-03 03:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-07-17 00:15 - 2015-02-03 03:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-07-17 00:15 - 2015-02-03 03:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-07-17 00:15 - 2015-02-03 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-07-17 00:15 - 2015-02-03 03:08 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-07-17 00:15 - 2015-02-03 02:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-07-17 00:15 - 2015-01-30 23:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-07-17 00:15 - 2014-10-31 22:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-07-17 00:15 - 2014-06-28 00:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-07-17 00:14 - 2015-02-03 03:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-07-17 00:14 - 2015-02-03 03:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-07-17 00:14 - 2015-02-03 03:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-07-17 00:14 - 2015-02-03 03:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-07-17 00:14 - 2015-02-03 03:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-07-17 00:14 - 2015-02-03 03:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-07-17 00:14 - 2015-02-03 03:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-07-17 00:14 - 2015-02-03 03:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-07-17 00:14 - 2015-02-03 03:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-07-17 00:14 - 2015-02-03 03:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-07-17 00:14 - 2015-02-03 03:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-07-17 00:14 - 2015-02-03 03:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-08-16 14:00 - 2014-10-05 08:27 - 00000000 ____D C:\Users\mourad\AppData\Roaming\DMCache
2016-08-16 13:52 - 2016-04-16 12:33 - 00001082 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-454156101-2345760694-676353058-1000UA.job
2016-08-16 13:52 - 2016-04-16 12:33 - 00001030 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-454156101-2345760694-676353058-1000Core.job
2016-08-16 13:18 - 2015-11-22 23:47 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-16 13:06 - 2015-11-13 00:16 - 00000838 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-08-16 13:00 - 2015-08-16 19:53 - 00000683 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2016-08-16 12:41 - 2009-07-14 04:45 - 00034352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-16 12:41 - 2009-07-14 04:45 - 00034352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-16 12:38 - 2009-07-14 09:31 - 00747230 _____ C:\Windows\system32\perfh00A.dat
2016-08-16 12:38 - 2009-07-14 09:31 - 00158670 _____ C:\Windows\system32\perfc00A.dat
2016-08-16 12:38 - 2009-07-14 05:13 - 01675926 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-16 12:38 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\inf
2016-08-16 12:33 - 2015-12-01 17:02 - 00000000 ____D C:\Users\mourad\Desktop\Download
2016-08-16 12:25 - 2015-11-22 23:47 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-16 12:24 - 2009-07-14 05:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-15 20:25 - 2016-07-16 04:55 - 00000000 ____D C:\Users\mourad\Downloads\Compressed
2016-08-15 20:05 - 2016-05-12 01:35 - 00000000 ____D C:\Users\mourad\AppData\Roaming\WhatsApp
2016-08-15 20:05 - 2016-05-12 01:35 - 00000000 ____D C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-08-15 20:05 - 2016-05-12 01:34 - 00000000 ____D C:\Users\mourad\AppData\Local\WhatsApp
2016-08-15 20:03 - 2016-05-12 01:33 - 00000000 ____D C:\Users\mourad\AppData\Local\SquirrelTemp
2016-08-15 19:55 - 2016-02-16 15:03 - 00000000 ____D C:\Program Files (x86)\DFX
2016-08-15 19:03 - 2016-07-16 04:03 - 00000000 ____D C:\Users\mourad\Downloads\Video
2016-08-15 17:16 - 2015-10-10 20:12 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-15 13:19 - 2015-08-17 02:01 - 00000000 ____D C:\ProgramData\TEMP
2016-08-15 00:27 - 2014-10-04 20:06 - 00000000 ____D C:\Users\mourad
2016-08-14 20:05 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\NDF
2016-08-14 19:45 - 2016-05-01 23:34 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-08-14 19:31 - 2009-07-14 05:37 - 00000000 ____D C:\Windows\DigitalLocker
2016-08-14 00:35 - 2016-01-07 02:16 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-08-13 19:28 - 2016-01-03 23:32 - 00000000 ____D C:\ProgramData\Mediatek Driver
2016-08-13 15:27 - 2016-05-11 15:59 - 00000000 ____D C:\Users\mourad\Documents\Euro Truck Simulator 2
2016-08-13 15:24 - 2015-10-15 17:40 - 00000000 ____D C:\Users\mourad\AppData\Local\CrashDumps
2016-08-13 15:02 - 2016-03-19 01:05 - 00000000 ____D C:\Users\mourad\Desktop\jbala
2016-08-13 10:54 - 2015-09-29 00:55 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-08-13 10:54 - 2015-09-29 00:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-08-13 09:50 - 2015-09-29 00:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-08-12 15:47 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-08-12 15:14 - 2016-02-16 15:03 - 00000000 ____D C:\Users\Invitado
2016-08-12 15:14 - 2016-02-16 15:03 - 00000000 ____D C:\Users\Administrador
2016-08-11 18:05 - 2014-10-05 12:27 - 00000000 ____D C:\ProgramData\Oracle
2016-08-11 18:03 - 2015-11-15 09:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-08-11 18:03 - 2015-11-15 09:56 - 00000000 ____D C:\Program Files\Java
2016-08-11 18:03 - 2014-10-05 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-11 18:01 - 2014-10-05 12:27 - 00000000 ____D C:\Program Files (x86)\Java
2016-08-11 17:49 - 2015-11-13 00:35 - 00000000 ____D C:\Users\mourad\.oracle_jre_usage
2016-08-11 17:46 - 2015-11-15 10:01 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-08-11 16:41 - 2015-12-04 19:39 - 00000000 ____D C:\Users\mourad\AppData\Roaming\Spiritsoft
2016-08-09 19:52 - 2015-11-13 00:17 - 00003776 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-08-09 19:51 - 2014-10-05 08:22 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-08-09 19:51 - 2014-10-05 08:22 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-08-09 19:50 - 2014-10-05 08:13 - 00000000 ____D C:\Users\mourad\AppData\Local\Adobe
2016-08-09 14:48 - 2016-06-28 15:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-09 14:01 - 2016-01-23 00:03 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2016-08-09 14:01 - 2015-01-04 21:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-08-09 13:07 - 2016-04-11 12:55 - 00000000 ____D C:\Users\mourad\AppData\Roaming\MPC-HC
2016-08-09 11:53 - 2016-01-21 02:35 - 00000000 ____D C:\Users\mourad\AppData\Roaming\uTorrent
2016-08-09 11:43 - 2014-10-21 15:37 - 00000000 ____D C:\Windows\Minidump
2016-08-09 11:43 - 2012-06-13 18:43 - 00000000 ____D C:\Windows\Panther
2016-08-08 23:40 - 2016-03-21 13:46 - 00002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-08 23:24 - 2016-01-23 22:42 - 00000000 ____D C:\Users\mourad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Disabled Startup
2016-08-08 18:25 - 2014-10-05 11:34 - 00000000 ____D C:\Users\mourad\AppData\Local\ElevatedDiagnostics
2016-08-08 17:47 - 2015-09-10 23:13 - 00000000 ____D C:\Program Files (x86)\Toshiba
2016-08-03 14:22 - 2015-09-29 22:48 - 00001063 _____ C:\Users\mourad\Desktop\wifi.txt
2016-08-03 14:19 - 2015-12-07 13:31 - 00002668 _____ C:\Users\mourad\Desktop\d8jedmem.txt
2016-07-31 13:19 - 2015-11-16 00:06 - 00000000 ____D C:\ProgramData\ProductData
2016-07-31 13:16 - 2015-11-16 00:05 - 00002890 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (mourad)
2016-07-31 13:15 - 2015-11-16 00:05 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2016-07-29 13:47 - 2016-04-16 12:33 - 00004058 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-454156101-2345760694-676353058-1000UA
2016-07-29 13:47 - 2016-04-16 12:33 - 00003662 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-454156101-2345760694-676353058-1000Core
2016-07-28 20:13 - 2015-11-22 23:47 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-07-28 20:13 - 2015-11-22 23:47 - 00003844 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-07-26 14:24 - 2016-01-17 00:08 - 00504488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-07-25 15:28 - 2014-10-14 18:53 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-07-23 21:17 - 2009-07-14 05:08 - 00032616 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-07-23 17:57 - 2015-09-16 20:27 - 00000000 ____D C:\Program Files (x86)\honestech
2016-07-23 12:26 - 2015-09-16 20:24 - 00000000 ____D C:\ProgramData\InstallShield
2016-07-23 10:03 - 2015-12-09 15:59 - 00000000 ____D C:\Program Files\DIFX
2016-07-21 03:58 - 2015-10-14 23:09 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2016-07-21 03:58 - 2015-10-14 23:08 - 00000000 ____D C:\ProgramData\Hotspot Shield
2016-07-21 03:57 - 2016-02-22 00:46 - 00001008 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk
2016-07-17 21:45 - 2016-01-03 18:33 - 00000000 ____D C:\Users\mourad\Desktop\quick
2016-07-17 03:07 - 2009-07-14 04:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-07-17 02:57 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-07-17 02:57 - 2009-07-14 03:20 - 00000000 ____D C:\Windows\system32\Dism
2016-07-17 00:08 - 2009-07-14 05:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

==================== Files in the root of some directories =======

2015-12-18 13:20 - 2015-02-04 10:05 - 0016920 _____ (Internet Download Manager, Tonec Inc.) C:\Program Files\MediumILStart.exe
2015-03-26 11:48 - 2015-03-26 11:48 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2016-04-14 22:03 - 2016-07-02 04:18 - 0000132 _____ () C:\Users\mourad\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-04-16 14:06 - 2016-04-16 14:50 - 0033156 _____ () C:\Users\mourad\AppData\Roaming\net.telestream.wirecast.xml
2016-04-10 15:14 - 2016-04-10 15:14 - 0001167 _____ () C:\Users\mourad\AppData\Roaming\trace_FilterInstaller.1.txt
2016-04-10 15:14 - 2016-04-10 15:45 - 0000905 _____ () C:\Users\mourad\AppData\Roaming\trace_FilterInstaller.txt
2016-04-10 15:14 - 2016-04-10 15:45 - 0000000 _____ () C:\Users\mourad\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2016-06-16 12:53 - 2016-06-16 12:53 - 0001456 _____ () C:\Users\mourad\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-04-22 11:05 - 2016-05-04 23:56 - 0000600 _____ () C:\Users\mourad\AppData\Local\PUTTY.RND
2016-06-11 20:23 - 2016-06-11 20:24 - 0000000 _____ () C:\Users\mourad\AppData\Local\{2883D159-8BB1-4E42-8F91-5AF9B6A1EC8F}
2016-06-07 23:19 - 2016-06-07 23:19 - 0000000 _____ () C:\Users\mourad\AppData\Local\{BB930292-EA2A-4FF4-9E1F-3B114C5E3A3F}
2016-08-16 12:29 - 2016-08-16 12:29 - 0000000 ____H () C:\ProgramData\cm-lock
2015-11-20 00:13 - 2015-11-20 00:13 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-01-06 11:09 - 2016-01-06 11:09 - 0005069 _____ () C:\ProgramData\zssznwhl.aqy

Files to move or delete:
====================
C:\Users\mourad\ZHPDiag3.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-08-03 16:29

==================== End of FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité