Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-11-2016
Ran by TOSHIBA (administrator) on TOSHIBA-TOSH (02-12-2016 02:41:53)
Running from C:\Users\TOSHIBA\Desktop
Loaded Profiles: TOSHIBA (Available Profiles: TOSHIBA)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: العربية (السعودية)‏
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TOSHIBA Corporation) C:\Program Files\Toshiba\TECO\TecoService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TECO\Teco.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosLeSrvUseMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosLeBtMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosLeSrvProvider.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosAVRC.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosOBEX.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosBtProc.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TPHM\TPCHWMsg.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\Install\{342DA0B3-C3B8-4A8E-B186-2A1110C55652}\GoogleToolbarInstaller_updater_signed.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2011-12-06] (Conexant Systems, Inc.)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2165120 2012-02-06] (SRS Labs, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2867984 2011-12-23] (Synaptics Incorporated)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [378968 2011-12-22] (Alcor Micro Corp.)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [989056 2011-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1548208 2011-11-25] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-12-15] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-11-26] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-12] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [150992 2012-02-17] (Toshiba Europe GmbH)
HKLM\...\Run: [VDownloader] => C:\Program Files\VDownloader\VDownloader.exe [879104 2013-07-10] (Vitzo)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NBAgent] => C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe [1492264 2011-11-18] (Nero AG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [253312 2011-11-22] (TOSHIBA)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [273528 2013-02-03] (RealNetworks, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\SSMMgr.exe [688128 2011-07-05] ()
HKU\S-1-5-19\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-20\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-2462956341-1370525219-663813987-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-02-17] (Google Inc.)
HKU\S-1-5-21-2462956341-1370525219-663813987-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9105112 2016-11-16] (Piriform Ltd)
HKU\S-1-5-21-2462956341-1370525219-663813987-1000\...\MountPoints2: D - D:\autorun.exe
HKU\S-1-5-21-2462956341-1370525219-663813987-1000\...\MountPoints2: {45441b78-e4ab-11e2-a12a-047d7b8f277e} - E:\Startme.exe
HKU\S-1-5-21-2462956341-1370525219-663813987-1000\...\MountPoints2: {bca953ca-9899-11e2-9b1a-047d7b8f277e} - E:\NokiaPCIA_Autorun.exe
HKU\S-1-5-18\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll => No File
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk [2016-03-25]
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2013-02-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2013-02-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{9A13C78C-DE0A-4650-B5CB-5B5E2DFE3C20}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{DE045073-236D-4714-8C96-2151E0B8CD43}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.com
HKU\S-1-5-21-2462956341-1370525219-663813987-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
SearchScopes: HKLM -> DefaultScope {6147DEAC-1E47-48DA-893C-116407A0D3F1} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM -> {6147DEAC-1E47-48DA-893C-116407A0D3F1} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM-x32 -> DefaultScope {6147DEAC-1E47-48DA-893C-116407A0D3F1} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM-x32 -> {6147DEAC-1E47-48DA-893C-116407A0D3F1} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKU\S-1-5-21-2462956341-1370525219-663813987-1000 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
SearchScopes: HKU\S-1-5-21-2462956341-1370525219-663813987-1000 -> {6147DEAC-1E47-48DA-893C-116407A0D3F1} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA_enLY533
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2016-11-30] (AO Kaspersky Lab)
BHO: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll [2011-11-04] ()
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06] (Adobe Systems Incorporated)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2013-02-03] (RealPlayer)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-17] (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2016-11-30] (AO Kaspersky Lab)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-17] (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2011-11-04] ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2016-11-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2016-11-30] (AO Kaspersky Lab)
Toolbar: HKU\S-1-5-21-2462956341-1370525219-663813987-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013-02-03] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-11-30]
FF HKU\S-1-5-21-2462956341-1370525219-663813987-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\TOSHIBA\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\TOSHIBA\AppData\Roaming\IDM\idmmzcc5 [2013-06-08] [not signed]
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2012-02-17] (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-01-13] (Nero AG)
FF Plugin-x32: @real.com/nppl3260;version=12.0.1.669 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2013-02-03] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=12.0.1.669 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll [2013-02-03] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=12.0.1.669 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2013-02-03] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=12.0.1.669 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2013-02-03] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.669 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll [2013-02-03] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-06-08] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2011-09-28] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2011-06-06] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2462956341-1370525219-663813987-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\TOSHIBA\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\PepperFlash\pepflashplayer.dll => No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\pdf.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
CHR Profile: C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default [2016-12-02]
CHR Extension: (Kaspersky Protection) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2016-12-01]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2016-11-29]
CHR Extension: (Chrome Web Store Payments) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-29]
CHR Extension: (Chrome Media Router) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-29]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [aaaaipkbmjkakicapiinmamgjlkaeehh] - C:\ProgramData\AskPartnerNetwork\Toolbar\KMPV7\CRX\ToolbarCR.crx
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2013-02-03]
CHR HKLM-x32\...\Chrome\Extension: [jmolcgpienlcieaajfkkdamlngancncm] - C:\Users\TOSHIBA\Desktop\PSY\Internet Download Manager\IDMGCExt.crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-08-31] (Kaspersky Lab ZAO)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2016-11-30] (SurfRight B.V.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 cm_km; C:\windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
R0 kl1; C:\windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\windows\System32\DRIVERS\klbackupflt.sys [70000 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\windows\System32\DRIVERS\kldisk.sys [77728 2016-11-30] (AO Kaspersky Lab)
R3 klflt; C:\windows\System32\DRIVERS\klflt.sys [181640 2016-11-30] (AO Kaspersky Lab)
R1 klhk; C:\windows\System32\DRIVERS\klhk.sys [237480 2016-11-30] (AO Kaspersky Lab)
R1 KLIF; C:\windows\System32\DRIVERS\klif.sys [943536 2016-11-30] (AO Kaspersky Lab)
R1 KLIM6; C:\windows\System32\DRIVERS\klim6.sys [49240 2016-11-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\windows\System32\DRIVERS\klkbdflt.sys [41144 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\windows\System32\DRIVERS\klpd.sys [41352 2016-11-30] (AO Kaspersky Lab)
R1 kltdi; C:\windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO)
R1 Klwtp; C:\windows\System32\DRIVERS\klwtp.sys [103096 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\windows\System32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
S3 mvusbews; C:\windows\System32\Drivers\mvusbews.sys [20480 2012-08-21] (Marvell Semiconductor, Inc.)
R2 npf; C:\windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
R3 SmbDrv; C:\windows\System32\DRIVERS\Smb_driver.sys [21264 2011-12-23] (Synaptics Incorporated)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-02 02:41 - 2016-12-02 02:42 - 00026329 _____ C:\Users\TOSHIBA\Desktop\FRST.txt
2016-12-02 02:41 - 2016-12-02 02:41 - 00000000 ____D C:\FRST
2016-12-02 02:41 - 2016-12-02 02:39 - 02411520 _____ (Farbar) C:\Users\TOSHIBA\Desktop\FRST64.exe
2016-12-02 02:37 - 2016-12-02 02:39 - 02411520 _____ (Farbar) C:\Users\TOSHIBA\Downloads\FRST64.exe
2016-12-01 02:54 - 2016-12-01 02:54 - 00149554 _____ C:\Users\TOSHIBA\Desktop\ZHPDiag 1.txt
2016-11-30 06:11 - 2016-12-02 02:32 - 00003032 _____ C:\windows\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2016-11-30 06:11 - 2016-11-30 06:15 - 00000000 ____D C:\Program Files\Common Files\AV
2016-11-30 05:03 - 2016-11-30 05:03 - 00002423 _____ C:\Users\TOSHIBA\Desktop\الخدمات النقدية الآمنة.lnk
2016-11-30 05:03 - 2016-11-30 05:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2016-11-30 05:03 - 2016-11-30 05:02 - 00002147 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2016-11-30 05:02 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\windows\system32\klfphc.dll
2016-11-30 05:01 - 2016-12-01 22:11 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-11-30 05:01 - 2016-11-30 05:01 - 00000000 ____D C:\windows\ELAMBKUP
2016-11-30 05:01 - 2016-11-30 05:01 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-11-30 05:00 - 2016-11-30 06:10 - 00943536 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klif.sys
2016-11-30 05:00 - 2016-11-30 06:10 - 00181640 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klflt.sys
2016-11-30 04:33 - 2016-11-30 04:33 - 00012872 _____ (SurfRight B.V.) C:\windows\system32\bootdelete.exe
2016-11-30 04:33 - 2016-11-30 04:33 - 00000000 ____D C:\Users\TOSHIBA\Desktop\SSSSSSSSSS
2016-11-30 04:20 - 2016-12-01 05:24 - 00003504 _____ C:\windows\System32\Tasks\ReclaimerUpdateXML_TOSHIBA
2016-11-30 04:20 - 2016-11-30 04:21 - 00003510 _____ C:\windows\System32\Tasks\ReclaimerUpdateFiles_TOSHIBA
2016-11-30 04:20 - 2016-11-30 04:20 - 00003628 _____ C:\windows\System32\Tasks\RNUpgradeHelperResumePrompt_TOSHIBA
2016-11-30 04:20 - 2016-11-30 04:20 - 00003226 _____ C:\windows\System32\Tasks\RNUpgradeHelperLogonPrompt_TOSHIBA
2016-11-30 04:19 - 2016-11-30 04:19 - 00019888 _____ C:\windows\system32\.crusader
2016-11-30 03:39 - 2016-11-30 04:19 - 00000000 ____D C:\ProgramData\HitmanPro
2016-11-30 03:39 - 2016-11-30 03:39 - 00001926 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2016-11-30 03:39 - 2016-11-30 03:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2016-11-30 03:39 - 2016-11-30 03:39 - 00000000 ____D C:\Program Files\HitmanPro
2016-11-30 03:25 - 2016-11-30 03:34 - 11581544 _____ (SurfRight B.V.) C:\Users\TOSHIBA\Downloads\HitmanPro_x64.exe
2016-11-30 01:36 - 2016-12-01 02:54 - 00149551 _____ C:\Users\TOSHIBA\Desktop\ZHPDiag.txt
2016-11-30 01:32 - 2016-12-01 02:49 - 00000795 _____ C:\Users\TOSHIBA\Desktop\ZHPDiag.lnk
2016-11-30 01:32 - 2016-11-30 01:29 - 02511360 _____ C:\Users\TOSHIBA\Desktop\ZHPDiag3.exe
2016-11-30 01:26 - 2016-11-30 01:29 - 02511360 _____ C:\Users\TOSHIBA\Downloads\ZHPDiag3.exe
2016-11-29 00:51 - 2016-11-30 07:34 - 00001476 _____ C:\Users\TOSHIBA\Desktop\ZHPCleaner.txt
2016-11-29 00:43 - 2016-11-29 00:42 - 02553856 _____ C:\Users\TOSHIBA\Desktop\ZHPCleaner.exe
2016-11-29 00:42 - 2016-12-01 02:51 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\ZHP
2016-11-29 00:42 - 2016-11-30 07:26 - 00000805 _____ C:\Users\TOSHIBA\Desktop\ZHPCleaner.lnk
2016-11-29 00:41 - 2016-11-29 00:42 - 02553856 _____ C:\Users\TOSHIBA\Downloads\ZHPCleaner.exe
2016-11-29 00:37 - 2016-11-29 00:37 - 00000000 _____ C:\Users\TOSHIBA\Downloads\RogueKiller (3).exe
2016-11-29 00:36 - 2016-11-29 00:36 - 00000000 _____ C:\Users\TOSHIBA\Downloads\RogueKiller (2).exe
2016-11-29 00:27 - 2016-11-29 00:28 - 00000000 _____ C:\Users\TOSHIBA\Downloads\RogueKiller (1).exe
2016-11-28 20:48 - 2016-11-28 20:48 - 00000000 _____ C:\Users\TOSHIBA\Downloads\RogueKiller.exe
2016-11-28 20:47 - 2016-11-28 20:48 - 00000000 _____ C:\Users\TOSHIBA\Desktop\RogueKiller.exe
2016-11-28 14:08 - 2016-11-28 14:09 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\Microsoft Games
2016-11-28 13:43 - 2016-11-28 13:44 - 00504144 _____ (Microsoft Corporation) C:\Users\TOSHIBA\Downloads\winsdk_web.exe
2016-11-28 08:09 - 2016-11-28 08:09 - 00000017 _____ C:\Users\TOSHIBA\AppData\Local\resmon.resmoncfg
2016-11-28 07:05 - 2016-11-28 07:05 - 00064178 _____ C:\Users\TOSHIBA\Documents\cc_20161128_070542.reg
2016-11-28 06:39 - 2016-11-28 06:40 - 00000833 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-11-28 06:39 - 2016-11-28 06:39 - 00002802 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2016-11-28 06:39 - 2016-11-28 06:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-11-28 06:39 - 2016-11-28 06:39 - 00000000 ____D C:\Program Files\CCleaner
2016-11-28 04:46 - 2016-11-28 04:46 - 00047174 _____ C:\Users\TOSHIBA\Desktop\vv.txt
2016-11-28 00:42 - 2016-11-28 00:42 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\ESET
2016-11-28 00:37 - 2016-11-28 00:42 - 06761600 _____ (ESET spol. s r.o.) C:\Users\TOSHIBA\Downloads\esetonlinescanner_enu.exe
2016-11-28 00:34 - 2016-11-28 00:35 - 02870984 _____ (ESET) C:\Users\TOSHIBA\Downloads\esetsmartinstaller_fra (1).exe
2016-11-28 00:03 - 2016-11-28 00:03 - 00000000 ____D C:\Program Files (x86)\ESET
2016-11-27 23:57 - 2016-11-28 00:02 - 02870984 _____ (ESET) C:\Users\TOSHIBA\Downloads\esetsmartinstaller_fra.exe
2016-11-19 23:53 - 2016-11-19 23:53 - 02450464 _____ (Kaspersky Lab) C:\Users\TOSHIBA\Downloads\kis17.0.0.611aen_ar_11401.exe
2016-11-19 19:50 - 2016-11-30 06:14 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2016-11-12 17:06 - 2016-11-12 17:06 - 00048001 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_arabic-1333814.zip
2016-11-12 17:05 - 2016-11-12 17:05 - 00046772 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_arabic-1329343.zip
2016-11-12 17:01 - 2016-11-12 17:01 - 00012108 _____ C:\Users\TOSHIBA\Downloads\sakamoto-desu-ga-havent-you-heard-im-sakamoto_arabic-1320154.zip
2016-11-12 17:01 - 2016-11-12 17:01 - 00011030 _____ C:\Users\TOSHIBA\Downloads\sakamoto-desu-ga-havent-you-heard-im-sakamoto_HI_arabic-1311493.zip
2016-11-12 17:00 - 2016-11-12 17:00 - 00011008 _____ C:\Users\TOSHIBA\Downloads\sakamoto-desu-ga-havent-you-heard-im-sakamoto_arabic-1312614.zip
2016-11-12 16:59 - 2016-11-12 16:59 - 00010005 _____ C:\Users\TOSHIBA\Downloads\sakamoto-desu-ga-havent-you-heard-im-sakamoto_arabic-1311839.zip
2016-11-11 16:35 - 2016-11-11 16:35 - 00012000 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_HI_arabic-1333825.zip
2016-11-11 16:34 - 2016-11-11 16:34 - 00000539 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_HI_arabic-1330661.zip
2016-11-11 16:33 - 2016-11-11 16:33 - 00008005 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_arabic-1320404.zip
2016-11-11 05:47 - 2016-11-11 05:47 - 00045442 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_arabic-1325318.zip
2016-11-11 05:45 - 2016-11-11 05:45 - 00009469 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_arabic-1317046.zip
2016-11-11 05:35 - 2016-11-11 05:35 - 00008430 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_HI_arabic-1310504.zip
2016-11-11 05:35 - 2016-11-11 05:35 - 00000328 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_arabic-1366260 (1).zip
2016-11-11 05:33 - 2016-11-11 05:33 - 00000328 _____ C:\Users\TOSHIBA\Downloads\kabaneri-of-the-iron-fortress_arabic-1366260.zip
2016-11-11 04:51 - 2016-11-11 04:51 - 00000631 _____ C:\Users\TOSHIBA\Downloads\index.m3u8
2016-11-07 23:47 - 2016-11-11 07:37 - 00000000 ____D C:\Users\TOSHIBA\Desktop\مجلد جديد ‫(3)‬
2016-11-07 22:20 - 2016-11-07 23:38 - 00000000 ____D C:\Users\TOSHIBA\Desktop\مجلد جديد ‫‬
2016-11-07 15:22 - 2016-11-07 15:22 - 00009762 _____ C:\Users\TOSHIBA\Downloads\boku-no-hero-academia-tv_arabic-1311334.zip
2016-11-07 15:18 - 2016-11-07 15:18 - 00170229 _____ C:\Users\TOSHIBA\Downloads\suki-tte-ii-na-yo_HI_arabic-1125523.zip
2016-11-07 15:17 - 2016-11-07 15:17 - 00121468 _____ C:\Users\TOSHIBA\Downloads\suki-tte-ii-na-yo_english-1269532.zip
2016-11-07 15:16 - 2016-11-07 15:16 - 00179823 _____ C:\Users\TOSHIBA\Downloads\suki-tte-ii-na-yo_HI_arabic-1247495.zip
2016-11-07 15:14 - 2016-11-07 15:14 - 00153035 _____ C:\Users\TOSHIBA\Downloads\boku-no-hero-academia-tv_arabic-1428922.zip
2016-11-06 22:01 - 2016-11-06 22:01 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_mvusbews_01007.Wdf
2016-11-06 22:01 - 2016-11-06 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-11-06 22:01 - 2012-08-31 18:32 - 00126880 _____ (HP) C:\windows\system32\HPSIsvc.exe
2016-11-06 22:01 - 2012-08-21 16:07 - 01696256 _____ C:\windows\system32\HP1100SM.EXE
2016-11-06 22:01 - 2012-08-21 16:07 - 00288768 _____ C:\windows\system32\HP1100LM.DLL
2016-11-06 22:00 - 2016-11-06 22:00 - 00000000 ____D C:\Program Files\HP
2016-11-06 22:00 - 2012-08-21 12:13 - 00350720 _____ C:\windows\system32\mvhlewsi.dll
2016-11-06 22:00 - 2012-08-21 12:11 - 00047104 _____ C:\windows\system32\HP1100SMs.dll
2016-11-06 22:00 - 2012-08-21 11:57 - 00082944 _____ C:\windows\system32\mvusbews.dll
2016-11-06 22:00 - 2012-08-21 11:57 - 00020480 _____ (Marvell Semiconductor, Inc.) C:\windows\system32\Drivers\mvusbews.sys
2016-11-06 22:00 - 2012-06-21 11:38 - 01490656 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01007.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-02 02:33 - 2009-07-14 08:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-02 02:33 - 2009-07-14 08:45 - 00024400 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-02 02:30 - 2013-04-10 02:09 - 00000936 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2462956341-1370525219-663813987-1000UA.job
2016-12-02 02:30 - 2012-02-17 02:51 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-12-02 02:29 - 2012-02-17 02:54 - 00000842 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-01 22:11 - 2012-02-17 02:54 - 00000838 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-01 22:11 - 2009-07-14 09:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-12-01 02:43 - 2009-07-14 07:20 - 00000000 ____D C:\windows\inf
2016-11-30 10:06 - 2009-07-14 07:20 - 00000000 ____D C:\windows\system32\NDF
2016-11-30 06:10 - 2015-06-11 19:32 - 00049240 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klim6.sys
2016-11-30 06:10 - 2015-06-08 19:43 - 00041352 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klpd.sys
2016-11-30 06:10 - 2015-06-06 08:51 - 00077728 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\kldisk.sys
2016-11-30 05:19 - 2015-07-04 02:18 - 00237480 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klhk.sys
2016-11-30 04:18 - 2016-03-02 01:06 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\ShdUpdate
2016-11-30 02:14 - 2013-04-10 02:09 - 00000914 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2462956341-1370525219-663813987-1000Core.job
2016-11-29 09:59 - 2012-02-17 02:51 - 00003768 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2016-11-29 09:58 - 2012-02-17 02:51 - 00796352 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-11-29 09:58 - 2012-02-17 02:51 - 00142528 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-29 09:58 - 2012-02-17 02:51 - 00000000 ____D C:\windows\SysWOW64\Macromed
2016-11-29 09:58 - 2012-02-17 02:51 - 00000000 ____D C:\windows\system32\Macromed
2016-11-28 14:00 - 2013-12-16 23:38 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\ElevatedDiagnostics
2016-11-28 13:58 - 2009-07-14 09:08 - 00032570 _____ C:\windows\Tasks\SCHEDLGU.TXT
2016-11-28 13:09 - 2013-02-06 02:02 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\Media Player Classic
2016-11-28 13:07 - 2013-07-14 18:13 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013
2016-11-28 10:12 - 2014-08-06 01:08 - 00000000 ____D C:\Users\TOSHIBA\Desktop\مجلد جديد ‫(2)‬
2016-11-28 09:45 - 2013-10-22 15:16 - 00000000 ____D C:\Program Files (x86)\Pro Evolution Soccer 2014
2016-11-28 09:45 - 2013-05-23 13:59 - 00000000 ____D C:\Program Files (x86)\Pro Evolution Soccer 2013
2016-11-28 08:59 - 2013-07-12 23:41 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\vlc
2016-11-28 07:04 - 2013-07-17 19:27 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\uTorrent
2016-11-28 07:04 - 2013-06-22 18:53 - 00000000 ____D C:\windows\Minidump
2016-11-28 07:04 - 2013-04-27 03:10 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\IDM
2016-11-28 07:04 - 2012-02-18 02:39 - 00000000 ____D C:\windows\Panther
2016-11-28 07:04 - 2009-07-14 07:20 - 00000000 ____D C:\windows\ModemLogs
2016-11-28 06:08 - 2014-07-06 07:38 - 00000000 ____D C:\windows\system32\tprb
2016-11-28 04:38 - 2014-07-06 07:38 - 00000000 ____D C:\windows\SysWOW64\mjcm
2016-11-19 19:39 - 2013-02-06 02:38 - 00106224 _____ (G Data Software) C:\windows\SysWOW64\Drivers\GRD.sys
2016-11-12 03:11 - 2011-11-22 18:31 - 00581454 _____ C:\windows\system32\perfh00C.dat
2016-11-12 03:11 - 2011-11-22 18:31 - 00476628 _____ C:\windows\system32\perfh001.dat
2016-11-12 03:11 - 2011-11-22 18:31 - 00111976 _____ C:\windows\system32\perfc00C.dat
2016-11-12 03:11 - 2011-11-22 18:31 - 00093258 _____ C:\windows\system32\perfc001.dat
2016-11-12 03:11 - 2009-07-14 09:13 - 02028542 _____ C:\windows\system32\PerfStringBackup.INI
2016-11-11 04:46 - 2012-02-17 02:55 - 00002206 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-11 04:46 - 2012-02-17 02:55 - 00002194 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-07 21:47 - 2013-02-03 17:38 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\Google
2016-11-07 19:31 - 2016-07-25 17:18 - 00000000 ____D C:\QUSAY KUN ANIME
2016-11-04 00:58 - 2013-10-21 00:59 - 00000000 ____D C:\Users\TOSHIBA\Desktop\خودها ولا لوحها
2016-11-03 22:12 - 2016-10-21 00:32 - 00000000 ____D C:\Users\TOSHIBA\Desktop\Pirates of the Caribbean Tetralogy 2003-2011 720p x264 aac jbr

==================== Files in the root of some directories =======

2013-07-11 21:21 - 2010-01-26 09:11 - 0444283 _____ () C:\Program Files\Common Files\WinPcapNmap.exe
2016-06-07 00:47 - 2016-06-21 00:15 - 0003584 _____ () C:\Users\TOSHIBA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-15 19:26 - 2014-03-15 19:26 - 0000057 _____ () C:\Users\TOSHIBA\AppData\Local\Images.fl
2016-11-28 08:09 - 2016-11-28 08:09 - 0000017 _____ () C:\Users\TOSHIBA\AppData\Local\resmon.resmoncfg
2013-07-11 21:21 - 2010-05-28 21:37 - 0015086 _____ () C:\ProgramData\Amazon.ico
2013-07-11 21:21 - 2010-07-20 11:53 - 0071926 _____ () C:\ProgramData\MercadoLivre.ico

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <===== ATTENTION


LastRegBack: 2016-11-27 21:36

==================== End of FRST.txt ============================