Publicité
Publicité
Format du document : text/plain
Prévisualisation
---\\ Google Chrome, Start,Search,Extensions (11) - 0s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://id.moe.gov.ae
G0 - GCSP: Preferences [User Data\Default][HomePage] http://portal.office.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.google-analytics.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.ae
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.moe.gov.ae
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.
---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (17) - 3s
M0 - MFSP: prefs.js [soso - t1yt75mz.default] https://www.google.ae/?gws_rd=ssl
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\nation-secure-search.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.51.2] - (.Oracle Corp..) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll =>.Oracle Corp.
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.51.2] - (.Oracle Corp..) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll =>.Oracle Corp.
P2 - FPN: [HKLM] [@kaspersky.com/content_blocker] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com =>.kaspersky.com
P2 - FPN: [HKLM] [@kaspersky.com/online_banking] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com =>.kaspersky.com
P2 - FPN: [HKLM] [@kaspersky.com/virtual_keyboard] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com =>.kaspersky.com
P2 - FPN: [HKLM] [@photodex.com/PhotodexPresenter] - (.Photodex Corporation.) -- C:\Program Files\Photodex Presenter\npPxPlay.dll =>.Photodex Corporation
P2 - FPN: [HKLM] [@rim.com/npappworld] - (...) -- C:\Program Files\Research In Motion Limited\BlackBerry World Browser Plugin\npappworld.dll
P2 - FPN: [HKLM] [@RIM.com/WebSLLauncher,version=1.0] - (.Research In Motion.) -- C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll =>.Research In Motion
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll =>.Google Inc.
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc..) -- C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll =>.Google Inc.
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\6\NP_wtapp.dll =>.WildTangent
---\\ Internet Explorer Extensions, Start, Search (11) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
---\\ Internet Explorer, Proxy Management (7) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation
---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (3)
---\\ Browser Helper Object (BHO) (9) - 1s
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll =>.Hewlett-Packard Company®
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll =>.Adobe Systems, Incorporated®
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealDownloader - RealTimes Video Downloader.) -- C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll =>.RealNetworks, Inc.®
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (Orphan)
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} . (.Atheros Commnucations - Bluetooth IE PlugIn.) -- C:\Program Files\Bluetooth Suite\IEPlugIn.dll =>.Atheros Commnucations
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>.Google Inc®
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} (Orphan)
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll =>.Hewlett-Packard Company®
---\\ Auto loading programs from Registry and folders (28) - 1s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated®
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe =>.IDT, Inc.
O4 - HKLM\..\Run: [AtherosBtStack] . (.ÔÑßÉ Atheros Communications - ÎÇÏã ãßÏøÓ Bluetooth.) -- C:\Program Files\Bluetooth Suite\BtvStack.exe
O4 - HKLM\..\Run: [AthBtTray] . (.Atheros Commnucations - Bluetooth Suite Common Rescource.) -- C:\Program Files\Bluetooth Suite\AthBtTray.exe =>.Atheros Commnucations
O4 - HKLM\..\Run: [HPQuickWebProxy] . (.Hewlett-Packard Company - HP QuickWeb Utilities.) -- C:\Program Files\Hewlett-Packard\HP QuickWeb\hpqwutils.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [HPConnectionManager] . (.Hewlett-Packard Development Company L.P. - HPCMDelayStart Application.) -- C:\Program Files\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe =>.Apple Inc.®
O4 - HKLM\..\Run: [ASUS Ai Charger] . (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe =>.ASUSTek Computer Inc.
O4 - HKLM\..\Run: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [HPOSD] . (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files\Hewlett-Packard\HP On Screen Display\HPOSD.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] . (.BlackBerry Limited - Launch Agent Service.) -- C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe =>.Research In Motion®
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Company®
O4 - HKCU\..\Run: [googletalk] . (.Google - Google Talk.) -- C:\Users\soso\AppData\Roaming\Google\Google Talk\googletalk.exe =>.Google
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>.Google Inc®
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud Services.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe =>.Apple Inc.®
O4 - HKCU\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\soso\AppData\Local\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [googletalk] . (.Google - Google Talk.) -- C:\Users\soso\AppData\Roaming\Google\Google Talk\googletalk.exe =>.Google
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>.Google Inc®
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud Services.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe =>.Apple Inc.®
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\soso\AppData\Local\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
---\\ Global shortcuts Startup (70) - 21s
O4 - GS\Desktop [Administrator]: 2013-03 (Mar) - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\Pictures\My Scans\math
O4 - GS\Desktop [Administrator]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [Administrator]: Find and Mount.lnk . (...) C:\Program Files\A-FF Find and Mount\FindAndMount.exe
O4 - GS\Desktop [Administrator]: GI-Arabic Now 1.0.lnk . (...) C:\Program Files\GISolution\GIArabic\GIArabic.exe
O4 - GS\Desktop [Administrator]: Loader - ÑãÒ ÇÎÊÕÇÑ.lnk . (.Research In Motion Limited - Handheld Application Loader Wizard.) C:\Program Files\Common Files\Research In Motion\AppLoader\Loader.exe =>.Research In Motion®
O4 - GS\Desktop [Administrator]: math5 - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\math5
O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\soso\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [Administrator]: ÇáÎÏãÇÊ ÇáäÞÏíÉ ÇáÂãäÉ.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
O4 - GS\Quicklaunch [Administrator]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {0BBA07BB13591CD196FDC2E08A82564A} =>.Gretech Corp.
O4 - GS\Quicklaunch [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrator]: PhoneClean.lnk . (.iMobie Inc. - PhoneClean.) C:\Program Files\iMobie\PhoneClean\PhoneClean.exe {7584FF49D7A755C0224B4B4D473169E2} =>.iMobie Inc.
O4 - GS\Quicklaunch [Administrator]: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe =>.Yahoo! Inc.®
O4 - GS\sendTo [Administrator]: Dropbox.lnk . (...) C:\Users\soso\Dropbox
O4 - GS\sendTo [Administrator]: Evernote.lnk . (.Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 9 - Evernote.) C:\Program Files\Evernote\Evernote\Evernote.exe
O4 - GS\sendTo [Administrator]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrator]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Startup [Administrator]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [Guest]: 2013-03 (Mar) - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\Pictures\My Scans\math
O4 - GS\Desktop [Guest]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [Guest]: Find and Mount.lnk . (...) C:\Program Files\A-FF Find and Mount\FindAndMount.exe
O4 - GS\Desktop [Guest]: GI-Arabic Now 1.0.lnk . (...) C:\Program Files\GISolution\GIArabic\GIArabic.exe
O4 - GS\Desktop [Guest]: Loader - ÑãÒ ÇÎÊÕÇÑ.lnk . (.Research In Motion Limited - Handheld Application Loader Wizard.) C:\Program Files\Common Files\Research In Motion\AppLoader\Loader.exe =>.Research In Motion®
O4 - GS\Desktop [Guest]: math5 - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\math5
O4 - GS\Desktop [Guest]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\soso\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [Guest]: ÇáÎÏãÇÊ ÇáäÞÏíÉ ÇáÂãäÉ.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
O4 - GS\Quicklaunch [Guest]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {0BBA07BB13591CD196FDC2E08A82564A} =>.Gretech Corp.
O4 - GS\Quicklaunch [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Guest]: PhoneClean.lnk . (.iMobie Inc. - PhoneClean.) C:\Program Files\iMobie\PhoneClean\PhoneClean.exe {7584FF49D7A755C0224B4B4D473169E2} =>.iMobie Inc.
O4 - GS\Quicklaunch [Guest]: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe =>.Yahoo! Inc.®
O4 - GS\sendTo [Guest]: Dropbox.lnk . (...) C:\Users\soso\Dropbox
O4 - GS\sendTo [Guest]: Evernote.lnk . (.Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 9 - Evernote.) C:\Program Files\Evernote\Evernote\Evernote.exe
O4 - GS\sendTo [Guest]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Guest]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Startup [Guest]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [soso]: 2013-03 (Mar) - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\Pictures\My Scans\math
O4 - GS\Desktop [soso]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [soso]: Find and Mount.lnk . (...) C:\Program Files\A-FF Find and Mount\FindAndMount.exe
O4 - GS\Desktop [soso]: GI-Arabic Now 1.0.lnk . (...) C:\Program Files\GISolution\GIArabic\GIArabic.exe
O4 - GS\Desktop [soso]: Loader - ÑãÒ ÇÎÊÕÇÑ.lnk . (.Research In Motion Limited - Handheld Application Loader Wizard.) C:\Program Files\Common Files\Research In Motion\AppLoader\Loader.exe =>.Research In Motion®
O4 - GS\Desktop [soso]: math5 - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\math5
O4 - GS\Desktop [soso]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\soso\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [soso]: ÇáÎÏãÇÊ ÇáäÞÏíÉ ÇáÂãäÉ.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
O4 - GS\Quicklaunch [soso]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {0BBA07BB13591CD196FDC2E08A82564A} =>.Gretech Corp.
O4 - GS\Quicklaunch [soso]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [soso]: PhoneClean.lnk . (.iMobie Inc. - PhoneClean.) C:\Program Files\iMobie\PhoneClean\PhoneClean.exe {7584FF49D7A755C0224B4B4D473169E2} =>.iMobie Inc.
O4 - GS\Quicklaunch [soso]: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe =>.Yahoo! Inc.®
O4 - GS\sendTo [soso]: Dropbox.lnk . (...) C:\Users\soso\Dropbox
O4 - GS\sendTo [soso]: Evernote.lnk . (.Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 9 - Evernote.) C:\Program Files\Evernote\Evernote\Evernote.exe
O4 - GS\sendTo [soso]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [soso]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [soso]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Startup [soso]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\CommonDesktop [Public]: HitmanPro.lnk . (.SurfRight B.V. - HitmanPro 3.7.) C:\Program Files\HitmanPro\HitmanPro.exe =>.SurfRight B.V.®
O4 - GS\CommonDesktop [Public]: HP Officejet 7110 series.lnk . (.Hewlett-Packard Co. - HP Printer Assistant.) C:\Program Files\HP\HP Officejet 7110 series\Bin\HP Officejet 7110 series.exe =>.Hewlett Packard®
O4 - GS\CommonDesktop [Public]: HP Photo Creations.lnk . (.Visan / RocketLife - PhotoProduct.exe.) C:\Program Files\HP Photo Creations\PhotoProduct.exe =>.Visan Industries®
O4 - GS\CommonDesktop [Public]: HP Print and Scan Doctor.lnk . (...) C:\Program Files\HP\Diagnostics\PSDR\HPPSDr.exe =>.Hewlett Packard®
O4 - GS\CommonDesktop [Public]: HP Solution Center.lnk . (.Hewlett-Packard Company - hpqdirec.exe.) C:\Program Files\HP\Digital Imaging\bin\Hpqdirec.exe =>.Hewlett-Packard Company
O4 - GS\CommonDesktop [Public]: iTunes.lnk . (.Apple Inc. - iTunes.) C:\Program Files\iTunes\iTunes.exe =>.Apple Inc.®
O4 - GS\CommonDesktop [Public]: Kaspersky Total Security.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Total Security 16.0.1\avpui.exe
O4 - GS\CommonDesktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes - Malwarebytes Anti-Malware.) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe =>.Malwarebytes Corporation®
O4 - GS\CommonDesktop [Public]: NXT 2.1 Programming.lnk . (...) C:\Program Files\LEGO Software\LEGO MINDSTORMS Edu NXT\MINDSTORMSNXT.exe
O4 - GS\CommonDesktop [Public]: QuickTime Player.lnk . (.Apple Inc. - QuickTime Player.) C:\Program Files\QuickTime\QuickTimePlayer.exe =>.Apple Inc.®
O4 - GS\CommonDesktop [Public]: RealPlayer (RealTimes).lnk . (.RealNetworks, Inc. - RealPlayer.) C:\program files\real\realplayer\RealPlay.exe =>.RealNetworks, Inc.®
O4 - GS\CommonDesktop [Public]: Safe Money.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Total Security 16.0.1\avpui.exe
O4 - GS\CommonDesktop [Public]: ãÊÌÑ ÇáãÓÊáÒãÇÊ - HP Officejet 7110 series.lnk . (.Hewlett-Packard Co. - DesktopSureSupply.) C:\Program Files\HP\HP Officejet 7110 series\Bin\hpqDTSS.exe =>.Hewlett Packard®
O4 - GS\Startup [Public]: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe =>.Hewlett Packard®
O4 - GS\Startup [Public]: RealTimes.lnk . (.RealNetworks, Inc. - RealPlayer with RealTimes.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe =>.RealNetworks, Inc.®
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\thienthanty\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\thienthanty\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dl
O13 - DefaultPrefix:www.websearches.com
O9 - Extra button: ??? - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 652.48.00.114
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = afaqe2e.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 652.48.00.114
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = afaqe2e.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 652.48.00.114
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpDomain = afaqe2e.com
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
G0 - GCSP: Preferences [User Data\Default][HomePage] http://id.moe.gov.ae
G0 - GCSP: Preferences [User Data\Default][HomePage] http://portal.office.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.google-analytics.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.ae
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.moe.gov.ae
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.
---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (17) - 3s
M0 - MFSP: prefs.js [soso - t1yt75mz.default] https://www.google.ae/?gws_rd=ssl
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\nation-secure-search.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.51.2] - (.Oracle Corp..) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll =>.Oracle Corp.
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.51.2] - (.Oracle Corp..) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll =>.Oracle Corp.
P2 - FPN: [HKLM] [@kaspersky.com/content_blocker] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com =>.kaspersky.com
P2 - FPN: [HKLM] [@kaspersky.com/online_banking] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com =>.kaspersky.com
P2 - FPN: [HKLM] [@kaspersky.com/virtual_keyboard] - (.kaspersky.com.) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com =>.kaspersky.com
P2 - FPN: [HKLM] [@photodex.com/PhotodexPresenter] - (.Photodex Corporation.) -- C:\Program Files\Photodex Presenter\npPxPlay.dll =>.Photodex Corporation
P2 - FPN: [HKLM] [@rim.com/npappworld] - (...) -- C:\Program Files\Research In Motion Limited\BlackBerry World Browser Plugin\npappworld.dll
P2 - FPN: [HKLM] [@RIM.com/WebSLLauncher,version=1.0] - (.Research In Motion.) -- C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll =>.Research In Motion
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll =>.Google Inc.
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc..) -- C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll =>.Google Inc.
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\6\NP_wtapp.dll =>.WildTangent
---\\ Internet Explorer Extensions, Start, Search (11) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
---\\ Internet Explorer, Proxy Management (7) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation
---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (3)
---\\ Browser Helper Object (BHO) (9) - 1s
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll =>.Hewlett-Packard Company®
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll =>.Adobe Systems, Incorporated®
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealDownloader - RealTimes Video Downloader.) -- C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll =>.RealNetworks, Inc.®
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (Orphan)
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} . (.Atheros Commnucations - Bluetooth IE PlugIn.) -- C:\Program Files\Bluetooth Suite\IEPlugIn.dll =>.Atheros Commnucations
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>.Google Inc®
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} (Orphan)
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll =>.Hewlett-Packard Company®
---\\ Auto loading programs from Registry and folders (28) - 1s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated®
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe =>.IDT, Inc.
O4 - HKLM\..\Run: [AtherosBtStack] . (.ÔÑßÉ Atheros Communications - ÎÇÏã ãßÏøÓ Bluetooth.) -- C:\Program Files\Bluetooth Suite\BtvStack.exe
O4 - HKLM\..\Run: [AthBtTray] . (.Atheros Commnucations - Bluetooth Suite Common Rescource.) -- C:\Program Files\Bluetooth Suite\AthBtTray.exe =>.Atheros Commnucations
O4 - HKLM\..\Run: [HPQuickWebProxy] . (.Hewlett-Packard Company - HP QuickWeb Utilities.) -- C:\Program Files\Hewlett-Packard\HP QuickWeb\hpqwutils.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [HPConnectionManager] . (.Hewlett-Packard Development Company L.P. - HPCMDelayStart Application.) -- C:\Program Files\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe =>.Apple Inc.®
O4 - HKLM\..\Run: [ASUS Ai Charger] . (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe =>.ASUSTek Computer Inc.
O4 - HKLM\..\Run: [HP Quick Launch] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [HPOSD] . (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files\Hewlett-Packard\HP On Screen Display\HPOSD.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] . (.BlackBerry Limited - Launch Agent Service.) -- C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe =>.Research In Motion®
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Company®
O4 - HKCU\..\Run: [googletalk] . (.Google - Google Talk.) -- C:\Users\soso\AppData\Roaming\Google\Google Talk\googletalk.exe =>.Google
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>.Google Inc®
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud Services.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe =>.Apple Inc.®
O4 - HKCU\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\soso\AppData\Local\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [googletalk] . (.Google - Google Talk.) -- C:\Users\soso\AppData\Roaming\Google\Google Talk\googletalk.exe =>.Google
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>.Google Inc®
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud Services.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe =>.Apple Inc.®
O4 - HKUS\S-1-5-21-326591620-3134671043-2444896497-1000\..\Run: [Dropbox Update] . (.Dropbox, Inc. - Dropbox Update.) -- C:\Users\soso\AppData\Local\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
---\\ Global shortcuts Startup (70) - 21s
O4 - GS\Desktop [Administrator]: 2013-03 (Mar) - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\Pictures\My Scans\math
O4 - GS\Desktop [Administrator]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [Administrator]: Find and Mount.lnk . (...) C:\Program Files\A-FF Find and Mount\FindAndMount.exe
O4 - GS\Desktop [Administrator]: GI-Arabic Now 1.0.lnk . (...) C:\Program Files\GISolution\GIArabic\GIArabic.exe
O4 - GS\Desktop [Administrator]: Loader - ÑãÒ ÇÎÊÕÇÑ.lnk . (.Research In Motion Limited - Handheld Application Loader Wizard.) C:\Program Files\Common Files\Research In Motion\AppLoader\Loader.exe =>.Research In Motion®
O4 - GS\Desktop [Administrator]: math5 - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\math5
O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\soso\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [Administrator]: ÇáÎÏãÇÊ ÇáäÞÏíÉ ÇáÂãäÉ.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
O4 - GS\Quicklaunch [Administrator]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {0BBA07BB13591CD196FDC2E08A82564A} =>.Gretech Corp.
O4 - GS\Quicklaunch [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrator]: PhoneClean.lnk . (.iMobie Inc. - PhoneClean.) C:\Program Files\iMobie\PhoneClean\PhoneClean.exe {7584FF49D7A755C0224B4B4D473169E2} =>.iMobie Inc.
O4 - GS\Quicklaunch [Administrator]: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe =>.Yahoo! Inc.®
O4 - GS\sendTo [Administrator]: Dropbox.lnk . (...) C:\Users\soso\Dropbox
O4 - GS\sendTo [Administrator]: Evernote.lnk . (.Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 9 - Evernote.) C:\Program Files\Evernote\Evernote\Evernote.exe
O4 - GS\sendTo [Administrator]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrator]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Startup [Administrator]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [Guest]: 2013-03 (Mar) - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\Pictures\My Scans\math
O4 - GS\Desktop [Guest]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [Guest]: Find and Mount.lnk . (...) C:\Program Files\A-FF Find and Mount\FindAndMount.exe
O4 - GS\Desktop [Guest]: GI-Arabic Now 1.0.lnk . (...) C:\Program Files\GISolution\GIArabic\GIArabic.exe
O4 - GS\Desktop [Guest]: Loader - ÑãÒ ÇÎÊÕÇÑ.lnk . (.Research In Motion Limited - Handheld Application Loader Wizard.) C:\Program Files\Common Files\Research In Motion\AppLoader\Loader.exe =>.Research In Motion®
O4 - GS\Desktop [Guest]: math5 - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\math5
O4 - GS\Desktop [Guest]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\soso\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [Guest]: ÇáÎÏãÇÊ ÇáäÞÏíÉ ÇáÂãäÉ.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
O4 - GS\Quicklaunch [Guest]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {0BBA07BB13591CD196FDC2E08A82564A} =>.Gretech Corp.
O4 - GS\Quicklaunch [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Guest]: PhoneClean.lnk . (.iMobie Inc. - PhoneClean.) C:\Program Files\iMobie\PhoneClean\PhoneClean.exe {7584FF49D7A755C0224B4B4D473169E2} =>.iMobie Inc.
O4 - GS\Quicklaunch [Guest]: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe =>.Yahoo! Inc.®
O4 - GS\sendTo [Guest]: Dropbox.lnk . (...) C:\Users\soso\Dropbox
O4 - GS\sendTo [Guest]: Evernote.lnk . (.Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 9 - Evernote.) C:\Program Files\Evernote\Evernote\Evernote.exe
O4 - GS\sendTo [Guest]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Guest]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Startup [Guest]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [soso]: 2013-03 (Mar) - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\Pictures\My Scans\math
O4 - GS\Desktop [soso]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\Desktop [soso]: Find and Mount.lnk . (...) C:\Program Files\A-FF Find and Mount\FindAndMount.exe
O4 - GS\Desktop [soso]: GI-Arabic Now 1.0.lnk . (...) C:\Program Files\GISolution\GIArabic\GIArabic.exe
O4 - GS\Desktop [soso]: Loader - ÑãÒ ÇÎÊÕÇÑ.lnk . (.Research In Motion Limited - Handheld Application Loader Wizard.) C:\Program Files\Common Files\Research In Motion\AppLoader\Loader.exe =>.Research In Motion®
O4 - GS\Desktop [soso]: math5 - ÑãÒ ÇÎÊÕÇÑ.lnk . (...) C:\Users\soso\math5
O4 - GS\Desktop [soso]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\soso\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [soso]: ÇáÎÏãÇÊ ÇáäÞÏíÉ ÇáÂãäÉ.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
O4 - GS\Quicklaunch [soso]: GOM Player.lnk . (.Gretech Corp. - GOM Player.) C:\Program Files\GRETECH\GomPlayer\GOM.exe {0BBA07BB13591CD196FDC2E08A82564A} =>.Gretech Corp.
O4 - GS\Quicklaunch [soso]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [soso]: PhoneClean.lnk . (.iMobie Inc. - PhoneClean.) C:\Program Files\iMobie\PhoneClean\PhoneClean.exe {7584FF49D7A755C0224B4B4D473169E2} =>.iMobie Inc.
O4 - GS\Quicklaunch [soso]: Yahoo! Messenger.lnk . (.Yahoo! Inc. - Yahoo! Messenger.) C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe =>.Yahoo! Inc.®
O4 - GS\sendTo [soso]: Dropbox.lnk . (...) C:\Users\soso\Dropbox
O4 - GS\sendTo [soso]: Evernote.lnk . (.Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 9 - Evernote.) C:\Program Files\Evernote\Evernote\Evernote.exe
O4 - GS\sendTo [soso]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - GS\TaskBar [soso]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [soso]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\Startup [soso]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Users\soso\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox, Inc®
O4 - GS\CommonDesktop [Public]: HitmanPro.lnk . (.SurfRight B.V. - HitmanPro 3.7.) C:\Program Files\HitmanPro\HitmanPro.exe =>.SurfRight B.V.®
O4 - GS\CommonDesktop [Public]: HP Officejet 7110 series.lnk . (.Hewlett-Packard Co. - HP Printer Assistant.) C:\Program Files\HP\HP Officejet 7110 series\Bin\HP Officejet 7110 series.exe =>.Hewlett Packard®
O4 - GS\CommonDesktop [Public]: HP Photo Creations.lnk . (.Visan / RocketLife - PhotoProduct.exe.) C:\Program Files\HP Photo Creations\PhotoProduct.exe =>.Visan Industries®
O4 - GS\CommonDesktop [Public]: HP Print and Scan Doctor.lnk . (...) C:\Program Files\HP\Diagnostics\PSDR\HPPSDr.exe =>.Hewlett Packard®
O4 - GS\CommonDesktop [Public]: HP Solution Center.lnk . (.Hewlett-Packard Company - hpqdirec.exe.) C:\Program Files\HP\Digital Imaging\bin\Hpqdirec.exe =>.Hewlett-Packard Company
O4 - GS\CommonDesktop [Public]: iTunes.lnk . (.Apple Inc. - iTunes.) C:\Program Files\iTunes\iTunes.exe =>.Apple Inc.®
O4 - GS\CommonDesktop [Public]: Kaspersky Total Security.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Total Security 16.0.1\avpui.exe
O4 - GS\CommonDesktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes - Malwarebytes Anti-Malware.) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe =>.Malwarebytes Corporation®
O4 - GS\CommonDesktop [Public]: NXT 2.1 Programming.lnk . (...) C:\Program Files\LEGO Software\LEGO MINDSTORMS Edu NXT\MINDSTORMSNXT.exe
O4 - GS\CommonDesktop [Public]: QuickTime Player.lnk . (.Apple Inc. - QuickTime Player.) C:\Program Files\QuickTime\QuickTimePlayer.exe =>.Apple Inc.®
O4 - GS\CommonDesktop [Public]: RealPlayer (RealTimes).lnk . (.RealNetworks, Inc. - RealPlayer.) C:\program files\real\realplayer\RealPlay.exe =>.RealNetworks, Inc.®
O4 - GS\CommonDesktop [Public]: Safe Money.lnk . (...) C:\Program Files\Kaspersky Lab\Kaspersky Total Security 16.0.1\avpui.exe
O4 - GS\CommonDesktop [Public]: ãÊÌÑ ÇáãÓÊáÒãÇÊ - HP Officejet 7110 series.lnk . (.Hewlett-Packard Co. - DesktopSureSupply.) C:\Program Files\HP\HP Officejet 7110 series\Bin\hpqDTSS.exe =>.Hewlett Packard®
O4 - GS\Startup [Public]: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe =>.Hewlett Packard®
O4 - GS\Startup [Public]: RealTimes.lnk . (.RealNetworks, Inc. - RealPlayer with RealTimes.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe =>.RealNetworks, Inc.®
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\thienthanty\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\thienthanty\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dl
O13 - DefaultPrefix:www.websearches.com
O9 - Extra button: ??? - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 652.48.00.114
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = afaqe2e.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 652.48.00.114
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = afaqe2e.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 652.48.00.114
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpDomain = afaqe2e.com
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll