~ ZHPDiag v2016.1.31.23 By Nicolas Coolman (2016/01/30)
~ Run by I (Administrator) (2017/01/22 16:32:06)
~ Web: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: No network file
~ Mode: Scan
~ Report: C:\Users\I\Desktop\ZHPDiag.txt
~ Report: C:\Users\I\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 14393)

---\\ Internet Browsers (4) - 0s
GCIE: Google Chrome v55.0.2883.87
MFIE: Mozilla Firefox 50.1.0 (x86 en-US)
OPIE: Opera 42.0.2393.137
MSIE: Internet Explorer v11.576.14393.0

---\\ Windows Product Information (3) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ System protection software (1) - 6s
Windows Defender (Deactivate)

---\\ Surveillance software (2) - 7s
Adobe Flash Player 24 NPAPI
Adobe Acrobat Reader DC - Français

---\\ Sharing software PeerToPeer (1) - 7s
GreedyTorrent v1.01 beta build 170

---\\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 6195.244 MB (37% free)
System Restore: Activé (Enable)
System drive C: has 474 GB () free of 889 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: I-PC
~ User Name: I
~ Logged in as Administrator

---\\ Enumeration of the disk units (1) - 0s
~ Drive C: has 474 GB free of 889 GB (System)

---\\ State of the Windows Security Center (7) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Search Generic System Files (24) - 2s
[MD5.4E10FB1A015B49AC68F76C1A3F4D9C0F] - 11/11/2016 - (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\Explorer.exe [4673304] {33000001066EC325C431C9180E000000000106} =>.Microsoft Corporation
[MD5.C7645D43451C6D94D87F4D07BDE59C89] - 16/07/2016 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [69632] =>.Microsoft Corporation
[MD5.99A19C9A74E2F9820E501DCE77F84F70] - 16/07/2016 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\WINDOWS\System32\Wininit.exe [304240] {33000000D0ED4ADB049E69E8710000000000D0} =>.Microsoft Corporation
[MD5.E584CDC70F694F9A984A060A8291EB04] - 11/11/2016 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [2669056] =>.Microsoft Corporation
[MD5.917F081E2AB667C44F7D96DE1D16DFAE] - 14/12/2016 - (.Microsoft Corporation - Windows Logon Application.) -- C:\WINDOWS\System32\Winlogon.exe [673792] =>.Microsoft Corporation
[MD5.9600B7F2F89DE60A80D13DE42F672834] - 16/07/2016 - (.Microsoft Corporation - Software Licensing Library.) -- C:\WINDOWS\System32\sppcomapi.dll [402432] =>.Microsoft Corporation
[MD5.96B8A433F6407DE34850927C96C6CE9B] - 15/09/2016 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [646136] =>.Microsoft Windows®
[MD5.227CFE3EDA82029AAC1C088A16297CD7] - 15/09/2016 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\Syswow64\dnsapi.dll [496872] =>.Microsoft Windows®
[MD5.323AA1953ED9C01E23F740FA891FE064] - 15/10/2016 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [584032] =>.Microsoft Windows®
[MD5.A10F989A812B57B9695F6C305907C9C6] - 16/07/2016 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>.Microsoft Windows®
[MD5.F8FB51B9EF6372610E9B31A1D86B62FC] - 16/07/2016 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation
[MD5.613D0137C269187FA298A157E3D14A18] - 16/07/2016 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173056] =>.Microsoft Corporation
[MD5.0D1D392ED2597F295956D058D33BD7C3] - 05/10/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [144896] =>.Microsoft Corporation
[MD5.10E3515FE5DBA6656FA62C29342EC4A1] - 16/07/2016 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [83456] =>.Microsoft Corporation
[MD5.B54B30992620C97230013A74461C8517] - 16/07/2016 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114176] =>.Microsoft Corporation
[MD5.F1DAECC3B3D6399875D4F10529D6A77C] - 16/07/2016 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [212480] =>.Microsoft Corporation
[MD5.E671EDAB0726E05ECEF4058B4CD73C4D] - 30/09/2016 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [450392] =>.Microsoft Windows®
[MD5.6FEBB0A847FFD5F057B9AC8889F1B9A7] - 16/07/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [279040] =>.Microsoft Corporation
[MD5.DB69C6DA8B3DDFDC547D455CA23A8250] - 02/11/2016 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2255712] =>.Microsoft Windows®
[MD5.6B81BF7853D161DB8AC62CD8B9C2DE6B] - 16/07/2016 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation
[MD5.17E565710172ED71B8531D8822E1C5D1] - 16/07/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation
[MD5.7135785C21CA79D270D11037C43D3F19] - 16/07/2016 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [177152] =>.Microsoft Corporation
[MD5.9D2DD64A0B51C56285512DC9454340F6] - 16/07/2016 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118112] =>.Microsoft Windows®
[MD5.BF2546583BB75F01DDA60A7921DFB230] - 16/07/2016 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [391520] =>.Microsoft Windows®

---\\ Non Microsoft non disabled Windows Services (8) - 2s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe {0EBC1935D5294A594B4F32707B0A0AB9} =>.Apple Inc.
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) . (.WIBU-SYSTEMS AG - CodeMeter Runtime Server.) - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe =>.WIBU-SYSTEMS AG®
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET Internet Security\ekrn.exe {1DE10DED541D51E73BC486F492498836} =>.ESET
O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 369.0.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation®
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®

---\\ Services not Microsoft (SR=Run, SS=Stop) (15) - 18s

SR - Auto [19/12/2016] [ 82640] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [10/01/2017] [ 270936] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [02/03/2016] [ 83768] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe {0EBC1935D5294A594B4F32707B0A0AB9} =>.Apple Inc.
SR - Auto [03/12/2012] [ 2571704] CodeMeter Runtime Server (CodeMeter.exe) . (.WIBU-SYSTEMS AG.) - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe =>.WIBU-SYSTEMS AG®
SS - Demand [01/06/2015] [ 290224] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel Corporation - pGFX®
SR - Auto [14/12/2016] [ 2836296] ESET Service (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET Internet Security\ekrn.exe {1DE10DED541D51E73BC486F492498836} =>.ESET
SS - Auto [06/11/2015] [ 144200] Google Update Service (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [06/11/2015] [ 144200] Google Update Service (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Demand [01/06/2016] [ 651576] iPod Service (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe {0EBC1935D5294A594B4F32707B0A0AB9} =>.Apple Inc.
SR - Auto [21/12/2010] [ 325656] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
SS - Demand [15/12/2016] [ 172488] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Auto [01/08/2016] [ 1365048] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe =>.NVIDIA Corporation
SR - Auto [21/12/2010] [ 2656280] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®
SS - Demand [30/04/2015] [ 252816] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe =>.Shenzhen Wondershare Information Technology Co., Ltd.®

---\\ Task Planned Automatically (17) - 4s
[MD5.A0747D9A94EDFD251ED8E6556E70BA37] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408] =>.Adobe Systems, Incorporated®
[MD5.CA363F172E1978FD155764F2840B0BE8] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [270936] =>.Adobe Systems Incorporated®
[MD5.51B634D617073986FA73417318F7C121] [APT] [AdobeAAMUpdater-1.0-I-PC-I] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936] =>.Adobe Systems Incorporated®
[MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
[MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
[MD5.F2D040BCE807D6BEA5C7789FFB5237AD] [APT] [iToolsDaemon] (.Copyright (C) 2015.) -- C:\Program Files (x86)\ThinkSky\iTools 3\iToolsDaemon.exe [525176] =>.Shenzhen Thinksky Technology Co.,Ltd®
[MD5.00000000000000000000000000000000] [APT] [OneDrive Standalone Update Task] (...) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe (.not file.) [0]
[MD5.441B7106522E7962BC4ECC6A19B218B4] [APT] [Opera scheduled Autoupdate 1483470935] (.Opera Software.) -- C:\Program Files (x86)\Opera\launcher.exe [826456] {0FDE84F0D55D8D3368325DC0CDC4A979} =>.Opera Software
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [830] =>.Adobe Systems Incorporated
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task [4562] =>.Adobe Systems Incorporated
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater [3816] =>.Adobe Systems Incorporated
O39 - APT: AdobeAAMUpdater-1.0-I-PC-I - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-I-PC-I [3574] =>.Adobe Systems Incorporated
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3292] =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [3416] =>.Google Inc.
O39 - APT: iToolsDaemon - (.Copyright (C) 2015.) -- C:\WINDOWS\System32\Tasks\iToolsDaemon [3388]
O39 - APT: OneDrive Standalone Update Task - (...) -- C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task [2816] (.Orphean.)
O39 - APT: Opera scheduled Autoupdate 1483470935 - (.Opera Software.) -- C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1483470935 [3948] =>.Opera Software

---\\ Process running (37) - 5s
[MD5.85397430F424516BF8300FAAEF929366] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 369.0.) -- C:\Windows\System32\nvvsvc.exe [1365048] [PID.1400] =>.NVIDIA Corporation®
[MD5.DBCE443A6717506435B2923CCAD1460E] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1289784] [PID.1476] =>.NVIDIA Corporation®
[MD5.B932E0EE190778D840F1442DFC0F9612] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82640] [PID.2348] =>.Adobe Systems, Incorporated®
[MD5.6FACA9C62024E14251C7ED33A8E8B660] - (.WIBU-SYSTEMS AG - CodeMeter Runtime Server.) -- C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [2571704] [PID.2708] =>.WIBU-SYSTEMS AG®
[MD5.9CEA55C62D576B462571C590476F682C] - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Internet Security\egui.exe [7091840] [PID.2704] {1DE10DED541D51E73BC486F492498836} =>.ESET
[MD5.F2D040BCE807D6BEA5C7789FFB5237AD] - (.Copyright (C) 2015 - iTools Assist.) -- C:\Program Files (x86)\ThinkSky\iTools 3\iToolsDaemon.exe [525176] [PID.528] =>.Shenzhen Thinksky Technology Co.,Ltd®
[MD5.0C3154D0620F974AD5C4E8D87626C8CF] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [183216] [PID.4976] =>.Intel Corporation - pGFX®
[MD5.E4AA3D28753EF9DB333FE40079993B09] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [411056] [PID.4344] =>.Intel Corporation - pGFX®
[MD5.CF40080765D6F66FA93318C0DB6C7D1F] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [453552] [PID.5124] =>.Intel Corporation - pGFX®
[MD5.49250EC8E64916CF40A78AC6CD916F40] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe [708952] [PID.5376] =>.Alps Electric Co., LTD.®
[MD5.747CEF68DA0B3BABD64B74C0E06C050E] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [176952] [PID.5420] {0EBC1935D5294A594B4F32707B0A0AB9} =>.Apple Inc.
[MD5.ADE3D7AD36CA238C6D58E5E93392D2F8] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3903056] [PID.5592] =>.Tonec Inc.
[MD5.2BFF13AC46A5850161317D0F924B5B42] - (.Apple Inc. - iPodService Module (64-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [651576] [PID.5720] {0EBC1935D5294A594B4F32707B0A0AB9} =>.Apple Inc.
[MD5.D7B191577D466FEC2FC62EC31F85E498] - (.Alps Electric Co., Ltd. - ApMsgFwd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe [70960] [PID.5772] =>.Alps Electric Co., LTD.®
[MD5.1B0E5412AB8F30B8ED2AEAC2C530EB90] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\hidfind.exe [98672] [PID.6096] =>.Alps Electric Co., LTD.®
[MD5.FD97807051658AE27799BE3A557D3776] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver for Windows NT/.) -- C:\Program Files\DellTPad\ApntEx.exe [29552] [PID.6104] =>.Alps Electric Co., LTD.®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.5516] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.5616] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.5752] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.5000] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.E9C6EF9437ECB30911488F9313AD821A] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe [269848] [PID.5008] =>.Tonec Inc.®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.6228] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.7F32D4C47A50E7223491E8FB9359907D] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.6768] =>.Intel Corporation®
[MD5.2C16648A12999AE69A9EBF41974B0BA2] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656280] [PID.4168] =>.Intel Corporation®
[MD5.D5A2D371E4704137CD41A912232B0BBA] - (...) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe [72192] [PID.6740]
[MD5.23345F9256FFB4C68A75F2127DD6C21D] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [510920] [PID.344] =>.Mozilla Corporation®
[MD5.23345F9256FFB4C68A75F2127DD6C21D] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [510920] [PID.2876] =>.Mozilla Corporation®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.8832] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.9084] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.694E03CC829E971B7C2587399F005229] - (...) -- C:\Program Files\RogueKiller\RogueKiller64.exe [25947720] [PID.4980] =>.Adlice®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.2664] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.3868] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.6880] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.6888] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.3B3774C868868257533EC7E715BB6D53] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768] [PID.212] {0EBC1935D5294A594B4F32707B0A0AB9} =>.Apple Inc.
[MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\I\Desktop\ZHPDiag3.exe [2105344] [PID.828] =>.Nicolas Coolman
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.7056] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.

---\\ Google Chrome, Start,Search,Extensions (13) - 1s
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [efaidnbmnnnibpcajpcglclefindmkaj] __MSG_web2pdfExtnName__
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [mjbepbhonbojpoaenhckjocchgfiaofo] Ace Stream Web Extension
G2 - GCE: Preference [User Data\Default] [ngpampappnmepgilojfohadhhmbhlaek] IDM Integration Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (4) - 0s
P2 - FPN: [HKCU] [@acestream.net/acestreamplugin,version=3.1.1] - (.Innovative Digital Technologies.) -- C:\Users\I\AppData\Roaming\ACEStream\player\npace_plugin.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.
P2 - FPN: [HKLM] [@itools.hk/npiTools, version=1.0.0] - (.itools.hk Copyright (C) 2012.) -- C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\npiTools.dll

---\\ Internet Explorer Extensions, Start, Search (16) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (0)

---\\ Browser Helper Object (BHO) (3) - 1s
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.®
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation®
O2 - BHO: iToolsBHO [64Bits] - {E1499FE7-129D-4B6E-B681-DDF21E14172C} . (.iTools.hk - .) -- C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\iToolsBHO.dll

---\\ Auto loading programs from Registry and folders (16) - 0s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation - pGFX®
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation - pGFX®
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation - pGFX®
O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe =>.Alps Electric Co., LTD.®
O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation®
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe {0EBC1935D5294A594B4F32707B0A0AB9} =>.Apple Inc.
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\OneDrive.exe {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - HKCU\..\Run: [Zoom] (Orphean)
O4 - HKLM\..\Wow6432Node\Run: [UnlockerAssistant] . (...) -- C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-1713304671-2554689163-3342802706-1000\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\OneDrive.exe {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1713304671-2554689163-3342802706-1000\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc.
O4 - HKUS\S-1-5-21-1713304671-2554689163-3342802706-1000\..\Run: [Zoom] (Orphean)

---\\ Global shortcuts Startup (46) - 7s
O4 - GS\Desktop [Administrator]: mobilego-b_setup_full1871.exe.lnk . (.Copyright 2015 Wondershare Corporation - mobilego-b_setup_full1871.exe.) C:\Users\I\Downloads\Programs\mobilego-b_setup_full1871.exe {1F8663313222FF9957A7D5EDD27A3346}
O4 - GS\Desktop [Administrator]: Ninja Blaster.lnk . (...) C:\Users\I\AppData\Roaming\Microsoft\Installer\{7789DDA6-C790-4B7E-9E49-732236536333}\_13EA1FA36EB9C419D6E839.exe
O4 - GS\Desktop [Administrator]: Nox.lnk . (.Duodian Technology Co. Ltd. - NoxAppPlayer.) C:\Program Files (x86)\Nox\bin\Nox.exe {49C2C379B09EF22D4301FFFC5FC8354A}
O4 - GS\Desktop [Administrator]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleane.) C:\Users\I\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\I\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Quicklaunch [Administrator]: Recover My Files v5.lnk . (.GetData Pty Ltd - SOS Fichiers Perdus.) C:\Program Files (x86)\GetData\Recover My Files v5\RecoverMyFiles.exe =>.GetData Pty Ltd
O4 - GS\TaskBar [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\TaskBar [Administrator]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Administrator]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Program Files (x86)\Opera\launcher.exe {0FDE84F0D55D8D3368325DC0CDC4A979} =>.Opera Software
O4 - GS\Desktop [Guest]: mobilego-b_setup_full1871.exe.lnk . (.Copyright 2015 Wondershare Corporation - mobilego-b_setup_full1871.exe.) C:\Users\I\Downloads\Programs\mobilego-b_setup_full1871.exe {1F8663313222FF9957A7D5EDD27A3346}
O4 - GS\Desktop [Guest]: Ninja Blaster.lnk . (...) C:\Users\I\AppData\Roaming\Microsoft\Installer\{7789DDA6-C790-4B7E-9E49-732236536333}\_13EA1FA36EB9C419D6E839.exe
O4 - GS\Desktop [Guest]: Nox.lnk . (.Duodian Technology Co. Ltd. - NoxAppPlayer.) C:\Program Files (x86)\Nox\bin\Nox.exe {49C2C379B09EF22D4301FFFC5FC8354A}
O4 - GS\Desktop [Guest]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleane.) C:\Users\I\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [Guest]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\I\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Quicklaunch [Guest]: Recover My Files v5.lnk . (.GetData Pty Ltd - SOS Fichiers Perdus.) C:\Program Files (x86)\GetData\Recover My Files v5\RecoverMyFiles.exe =>.GetData Pty Ltd
O4 - GS\TaskBar [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\TaskBar [Guest]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Guest]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Program Files (x86)\Opera\launcher.exe {0FDE84F0D55D8D3368325DC0CDC4A979} =>.Opera Software
O4 - GS\Desktop [I]: mobilego-b_setup_full1871.exe.lnk . (.Copyright 2015 Wondershare Corporation - mobilego-b_setup_full1871.exe.) C:\Users\I\Downloads\Programs\mobilego-b_setup_full1871.exe {1F8663313222FF9957A7D5EDD27A3346}
O4 - GS\Desktop [I]: Ninja Blaster.lnk . (...) C:\Users\I\AppData\Roaming\Microsoft\Installer\{7789DDA6-C790-4B7E-9E49-732236536333}\_13EA1FA36EB9C419D6E839.exe
O4 - GS\Desktop [I]: Nox.lnk . (.Duodian Technology Co. Ltd. - NoxAppPlayer.) C:\Program Files (x86)\Nox\bin\Nox.exe {49C2C379B09EF22D4301FFFC5FC8354A}
O4 - GS\Desktop [I]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleane.) C:\Users\I\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [I]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\I\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [I]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Quicklaunch [I]: Recover My Files v5.lnk . (.GetData Pty Ltd - SOS Fichiers Perdus.) C:\Program Files (x86)\GetData\Recover My Files v5\RecoverMyFiles.exe =>.GetData Pty Ltd
O4 - GS\TaskBar [I]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\TaskBar [I]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [I]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Program Files (x86)\Opera\launcher.exe {0FDE84F0D55D8D3368325DC0CDC4A979} =>.Opera Software
O4 - GS\Desktop [Invited]: mobilego-b_setup_full1871.exe.lnk . (.Copyright 2015 Wondershare Corporation - mobilego-b_setup_full1871.exe.) C:\Users\I\Downloads\Programs\mobilego-b_setup_full1871.exe {1F8663313222FF9957A7D5EDD27A3346}
O4 - GS\Desktop [Invited]: Ninja Blaster.lnk . (...) C:\Users\I\AppData\Roaming\Microsoft\Installer\{7789DDA6-C790-4B7E-9E49-732236536333}\_13EA1FA36EB9C419D6E839.exe
O4 - GS\Desktop [Invited]: Nox.lnk . (.Duodian Technology Co. Ltd. - NoxAppPlayer.) C:\Program Files (x86)\Nox\bin\Nox.exe {49C2C379B09EF22D4301FFFC5FC8354A}
O4 - GS\Desktop [Invited]: ZHPCleaner.lnk . (.Nicolas Coolman - ZHPCleane.) C:\Users\I\AppData\Roaming\ZHP\ZHPCleaner.exe =>.Nicolas Coolman
O4 - GS\Desktop [Invited]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\I\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Invited]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Quicklaunch [Invited]: Recover My Files v5.lnk . (.GetData Pty Ltd - SOS Fichiers Perdus.) C:\Program Files (x86)\GetData\Recover My Files v5\RecoverMyFiles.exe =>.GetData Pty Ltd
O4 - GS\TaskBar [Invited]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\TaskBar [Invited]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Invited]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Program Files (x86)\Opera\launcher.exe {0FDE84F0D55D8D3368325DC0CDC4A979} =>.Opera Software
O4 - GS\CommonDesktop [Public]: IQ Option.lnk . (...) C:\Program Files (x86)\IQ Option\IQ Option.exe {05DB2C101259D0B4EA2AF96B0376F7E0}
O4 - GS\CommonDesktop [Public]: MetaTrader 4 Terminal.lnk . (.MetaQuotes Software Corp. - MetaTrader.) C:\Program Files (x86)\MetaTrader 4 Terminal\terminal.exe {7DE9798EC91AB947541B1FB544DCDE28} =>.MetaQuotes Software Corp.
O4 - GS\CommonDesktop [Public]: RogueKiller.lnk . (...) C:\Program Files\RogueKiller\RogueKiller64.exe =>.Adlice®
O4 - GS\CommonDesktop [Public]: WWM - MetaTrader 4.lnk . (.MetaQuotes Software Corp. - MetaTrader.) C:\Program Files (x86)\WWM - MetaTrader 4\terminal.exe {7DE9798EC91AB947541B1FB544DCDE28} =>.MetaQuotes Software Corp.
O4 - GS\Startup [Public]: Adobe Gamma Loader.lnk . (.Adobe Systems, Inc. - Adobe Gamma Loader.) C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe =>.Adobe Systems, Inc.
O4 - GS\Programs [Public]: Ninja Blaster.lnk . (...) C:\Users\I\AppData\Roaming\Microsoft\Installer\{7789DDA6-C790-4B7E-9E49-732236536333}\_A7EBFCFD5A6D07BAC57E42.exe

---\\ Lop.com/Domain Hijackers (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 5.196.39.62 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{e5dd1a3d-185b-45bc-b46a-65c83e37b52d}: DhcpNameServer = 5.196.39.62 8.8.4.4

---\\ Extra protocols (23) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ AppInit_DLLs Registry value Autorun (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\WINDOWS\system32\nvinitx.dll (.not file.)

---\\ List of key exploring StartupApproved (4) - 0s
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan
[HKEY_USERS\S-1-5-21-1713304671-2554689163-3342802706-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive
[HKEY_USERS\S-1-5-21-1713304671-2554689163-3342802706-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:IDMan

---\\ Software installed (57) - 7s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent {0CF35369A9710762C36F6805FC9E45D6}
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 24 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Photoshop CS - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {EFB21DE7-8C19-4A88-BB28-A766E16493BC} =>.Adobe Systems, Inc.
O42 - Logiciel: Adobe Premiere Pro CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {38C72D42-0672-43B1-9E05-E7631684F9A1} =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824211354} =>.Adobe Systems Incorporated
O42 - Logiciel: Apple Application Support (32-bit) - (.Apple Inc..) [HKLM][64Bits] -- {26356515-5821-40FA-9C3D-9785052A1062} =>.Apple Inc.
O42 - Logiciel: Apple Application Support (64-bit) - (.Apple Inc..) [HKLM][64Bits] -- {C2651553-6CA3-4822-B2E6-BC4ACA6E0EA2} =>.Apple Inc.
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2E4AF2A6-50EA-4260-9BA4-5E582D11879A} =>.Apple Inc.
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {56EC47AA-5813-4FF6-8E75-544026FBEA83} =>.Apple Inc.
O42 - Logiciel: Compiled Driver Disk (Android) 1.0 - (.COMPELSON Labs.) [HKLM][64Bits] -- {759A91E8-0024-45F3-A8F3-CDC5E13B4425}_is1 {0BCE38E7AE9C548B654359DF87EF2BC4} =>.COMPELSON Labs
O42 - Logiciel: Compiled Driver Disk (MediaTek) 1.0 - (.COMPELSON Labs.) [HKLM][64Bits] -- {3DCF00F5-04A5-4543-A088-705480811207}_is1 =>.COMPELSON Trade®
O42 - Logiciel: Compiled Driver Disk (Samsung) 1.0 - (.COMPELSON Labs.) [HKLM][64Bits] -- {3DCF00F5-04A5-4543-A088-705480811206}_is1 =>.COMPELSON Labs
O42 - Logiciel: Compiled Driver Disk (SONY) 1.0 - (.COMPELSON Labs.) [HKLM][64Bits] -- {3DCF00F5-04A5-4543-A088-705480811215}_is1 {0BCE38E7AE9C548B654359DF87EF2BC4} =>.COMPELSON Labs
O42 - Logiciel: Dell DataSafe Local Backup - (.Dell Inc..) [HKLM][64Bits] -- {0ED7EE95-6A97-47AA-AD73-152C08A15B04} =>.Dell Inc.
O42 - Logiciel: Dell DataSafe Local Backup - Support Software - (.Dell Inc..) [HKLM][64Bits] -- {A9668246-FB70-4103-A1E3-66C9BC2EFB49} =>.Dell Inc.
O42 - Logiciel: Dell Support Center - (.Dell Inc..) [HKLM][64Bits] -- Dell Support Center =>.Dell Inc®
O42 - Logiciel: Dell Support Center - (.PC-Doctor, Inc..) [HKLM][64Bits] -- {0090A87C-3E0E-43D4-AA71-A71B06563A4A} =>.PC-Doctor, Inc.
O42 - Logiciel: Dell Touchpad - (.ALPS ELECTRIC CO., LTD..) [HKLM][64Bits] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD} =>.Alps Electric Co., LTD.®
O42 - Logiciel: EASEUS Data Recovery Wizard Professional 5.5.1 - (.EASEUS.) [HKLM][64Bits] -- EASEUS Data Recovery Wizard Professional 5.5.1_is1 =>.EaseUS
O42 - Logiciel: ESET Internet Security - (.ESET, spol. s r.o..) [HKLM][64Bits] -- {78044E82-0B61-42DA-A4E6-9BD0BD28797F} =>.ESET, spol. s r.o.
O42 - Logiciel: GiliSoft Video Editor 7.5.0 - (.GiliSoft International LLC..) [HKLM][64Bits] -- {3908B421-EF03-4389-A38C-DBAF6252E312}_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: GreedyTorrent v1.01 beta build 170 - (.Alex N J (www.alexnj.com).) [HKLM][64Bits] -- GreedyTorrent_is1
O42 - Logiciel: HD Tune Pro 5.60 - (.EFD Software.) [HKLM][64Bits] -- HD Tune Pro_is1 =>.EFD Software
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - pGFX®
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM][64Bits] -- Internet Download Manager =>.Tonec Inc.®
O42 - Logiciel: IQ Option - (.IQOption.) [HKLM][64Bits] -- IQ Option {05DB2C101259D0B4EA2AF96B0376F7E0}
O42 - Logiciel: iTools 3 - (.Shenzhen Thinksky Technology Co., Ltd..) [HKLM][64Bits] -- ThinkSky
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {9F4BF859-C3A4-4AB6-BDD1-9C5D58188598} =>.Apple Inc.
O42 - Logiciel: K-Lite Mega Codec Pack 11.5.5 - (...) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: MetaTrader 4 Terminal - (.MetaQuotes Software Corp..) [HKLM][64Bits] -- MetaTrader 4 Terminal {7DE9798EC91AB947541B1FB544DCDE28} =>.MetaQuotes Software Corp.
O42 - Logiciel: Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.13291. - (.Microsoft Corporation.) [HKLM][64Bits] -- {25E80DAA-FD87-DCE5-202C-CC02F6673002} =>.Microsoft Corporation
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation
O42 - Logiciel: MOBILedit ver. 8.7.1.21224 - (.COMPELSON Labs.) [HKLM][64Bits] -- {47DA7D2E-408C-4050-B75F-95F6D2E6A332}_is1 {0BCE38E7AE9C548B654359DF87EF2BC4} =>.COMPELSON Labs
O42 - Logiciel: MOBILedit! Support Libraries - (.COMPELSON Labs.) [HKLM][64Bits] -- {9DF587A2-054C-46A2-9B1A-4A230F389E4B} =>.COMPELSON Labs
O42 - Logiciel: Mozilla Firefox 50.1.0 (x86 en-US) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 50.1.0 (x86 en-US) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: Ninja Blaster - (.Ninja Blaster.) [HKLM][64Bits] -- {7789DDA6-C790-4B7E-9E49-732236536333} =>.Ninja Blaster
O42 - Logiciel: Nox APP Player - (.Duodian Technology Co. Ltd..) [HKLM][64Bits] -- Nox {49C2C379B09EF22D4301FFFC5FC8354A}
O42 - Logiciel: NVIDIA Control Panel 369.09 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation
O42 - Logiciel: Opera Stable 42.0.2393.137 - (.Opera Software.) [HKLM][64Bits] -- Opera 42.0.2393.137 {0FDE84F0D55D8D3368325DC0CDC4A979} =>.Opera Software
O42 - Logiciel: Phone Drivers Downloader 1.1 - (.COMPELSON Labs.) [HKLM][64Bits] -- {BDDB58A5-F98E-4D3C-B554-4A4D31C6D405}_is1 {0BCE38E7AE9C548B654359DF87EF2BC4} =>.COMPELSON Labs
O42 - Logiciel: Recover My Files - (.GetData Pty Ltd.) [HKLM][64Bits] -- Recover My Files v5_is1 =>.GetData Pty Ltd
O42 - Logiciel: RogueKiller version 12.9.4.0 - (.Adlice Software.) [HKLM][64Bits] -- 8B3D7924-ED89-486B-8322-E8594065D5CB_is1 =>.Adlice®
O42 - Logiciel: SopCast 4.0.0 - (.www.sopcast.com.) [HKLM][64Bits] -- SopCast =>.www.sopcast.com
O42 - Logiciel: Unlocker 1.9.1 - (.Cedrick Collomb.) [HKLM][64Bits] -- Unlocker =>.Cedrick Collomb
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Windows Driver Package - BigNox Corporation YSDrv System (12/26/2016 4.3.1 - (.BigNox Corporation.) [HKLM][64Bits] -- F2B0D5BB68B49599C93223B0816974DBDFAA2B0A =>.Microsoft Windows®
O42 - Logiciel: Windows Password Key Standard - (.PasswordSeeker, Inc..) [HKLM][64Bits] -- Windows Password Key Standard
O42 - Logiciel: WinRAR 4.11 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH
O42 - Logiciel: Wondershare PDFelement(Build 5.7.3) - (.Wondershare Software Co.,Ltd..) [HKLM][64Bits] -- {5CA0183F-6D90-4615-91A5-F1A8A2014E83}_is1 =>.Wondershare Software Co.,Ltd.
O42 - Logiciel: WWM - MetaTrader 4 - (.MetaQuotes Software Corp..) [HKLM][64Bits] -- WWM - MetaTrader 4 {7DE9798EC91AB947541B1FB544DCDE28} =>.MetaQuotes Software Corp.
O42 - Logiciel: Zoom - (.Zoom Video Communications, Inc..) [HKCU][64Bits] -- ZoomUMX {0AC4DC3910D4E5299274E23905EA4CBD} =>.Zoom Video Communications, Inc.

---\\ HKCU & HKLM Software Keys (87) - 7s
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\Asunsoft
HKLM\SOFTWARE\Wow6432Node\CheckPoint
HKLM\SOFTWARE\Wow6432Node\Compelson
HKLM\SOFTWARE\Wow6432Node\Cygnus Solutions
HKLM\SOFTWARE\Wow6432Node\Dell
HKLM\SOFTWARE\Wow6432Node\Dell Inc.
HKLM\SOFTWARE\Wow6432Node\drpsu
HKLM\SOFTWARE\Wow6432Node\DuoDianOnline
HKLM\SOFTWARE\Wow6432Node\EASEUS
HKLM\SOFTWARE\Wow6432Node\ESET
HKLM\SOFTWARE\Wow6432Node\GiliSoft
HKLM\SOFTWARE\Wow6432Node\GNU
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\GuidGuid13
HKLM\SOFTWARE\Wow6432Node\HaaliMkx
HKLM\SOFTWARE\Wow6432Node\Icaros
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\Internet Download Manager
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\KLCodecPack
HKLM\SOFTWARE\Wow6432Node\LAV
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Macrovision
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\SoftThinks
HKLM\SOFTWARE\Wow6432Node\SopCast
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WafCX
HKLM\SOFTWARE\Wow6432Node\WIBU-SYSTEMS
HKLM\SOFTWARE\Wow6432Node\Wondershare
HKLM\SOFTWARE\Wow6432Node\WOW6432Node
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Akeo Consulting
HKCU\SOFTWARE\Alps
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Citrix
HKCU\SOFTWARE\Compelson
HKCU\SOFTWARE\Cygnus Solutions
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\drpsu
HKCU\SOFTWARE\EFD Software
HKCU\SOFTWARE\ESET
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GetData
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\GreedyTorrent
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\Icaros
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\madshi
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\MetaQuotes Software
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MPC-HC
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Spoon
HKCU\SOFTWARE\ThinkSky
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wondershare
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\ZHP
HKCU\SOFTWARE\ZoomUMX
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contents of the Common Files folders (191) - 18s
O43 - CFD: 13/01/2016 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 26/06/2016 - [] AD -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.®
O43 - CFD: 27/06/2016 - [] D -- C:\Program Files (x86)\Asunsoft iTunes Backup Password Geeker
O43 - CFD: 13/01/2017 - [] D -- C:\Program Files (x86)\Bignox
O43 - CFD: 03/04/2016 - [] D -- C:\Program Files (x86)\CodeMeter =>.WIBU-SYSTEMS AG®
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 22/01/2017 - [] D -- C:\Program Files (x86)\COMPELSON Labs
O43 - CFD: 10/01/2017 - [] AD -- C:\Program Files (x86)\Dell Datasafe Local Backup =>.Dell Inc®
O43 - CFD: 03/11/2015 - [] D -- C:\Program Files (x86)\EASEUS
O43 - CFD: 03/04/2016 - [] D -- C:\Program Files (x86)\GetData {51A134464FFDA01A0B6625E9350D4D}
O43 - CFD: 25/11/2016 - [] D -- C:\Program Files (x86)\Gilisoft {39DF2C4756EF0BB3A40DE9654C6F34FA}
O43 - CFD: 06/11/2015 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 08/10/2016 - [] AD -- C:\Program Files (x86)\GreedyTorrent
O43 - CFD: 07/03/2016 - [] AD -- C:\Program Files (x86)\HD Tune Pro
O43 - CFD: 13/01/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 27/10/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation - pGFX®
O43 - CFD: 22/01/2016 - [] D -- C:\Program Files (x86)\Internet Download Manager
O43 - CFD: 13/01/2017 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 21/01/2017 - [] D -- C:\Program Files (x86)\iPhone Backup Unlocker Standard
O43 - CFD: 14/11/2016 - [] D -- C:\Program Files (x86)\IQ Option {05DB2C101259D0B4EA2AF96B0376F7E0}
O43 - CFD: 26/06/2016 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 07/11/2015 - [] AD -- C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 16/09/2016 - [] AD -- C:\Program Files (x86)\MetaTrader 4 Terminal {7DE9798EC91AB947541B1FB544DCDE28}
O43 - CFD: 17/12/2015 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 17/12/2015 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 22/01/2017 - [] D -- C:\Program Files (x86)\MOBILedit {0BCE38E7AE9C548B654359DF87EF2BC4}
O43 - CFD: 21/01/2017 - [] AD -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla Corporation®
O43 - CFD: 08/01/2017 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla Corporation®
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 10/01/2017 - [] D -- C:\Program Files (x86)\Ninja Blaster
O43 - CFD: 13/01/2017 - [] D -- C:\Program Files (x86)\Nox {49C2C379B09EF22D4301FFFC5FC8354A}
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 20/01/2017 - [] AD -- C:\Program Files (x86)\Opera {0FDE84F0D55D8D3368325DC0CDC4A979}
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 16/11/2015 - [] D -- C:\Program Files (x86)\SopCast
O43 - CFD: 04/07/2016 - [] D -- C:\Program Files (x86)\ThinkSky =>.Shenzhen Thinksky Technology Co.,Ltd®
O43 - CFD: 30/09/2016 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 18/11/2015 - [] D -- C:\Program Files (x86)\Unlocker
O43 - CFD: 05/10/2016 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 28/10/2016 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 20/11/2016 - [] D -- C:\Program Files (x86)\Windows Password Key Standard
O43 - CFD: 12/10/2016 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation®
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 30/09/2016 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 06/10/2016 - [] D -- C:\Program Files (x86)\Wondershare =>.Shenzhen Wondershare Information Technology Co., Ltd.®
O43 - CFD: 17/10/2016 - [] AD -- C:\Program Files (x86)\WWM - MetaTrader 4 {7DE9798EC91AB947541B1FB544DCDE28}
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 13/01/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 09/11/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe
O43 - CFD: 30/09/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Support Center
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EASEUS Data Recovery Wizard Professional 5.5.1
O43 - CFD: 20/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
O43 - CFD: 30/09/2011 - [0] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 25/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gilisoft
O43 - CFD: 08/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GreedyTorrent
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IQ Option
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTools 3
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 16/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaTrader 4 Terminal
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 22/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MOBILedit
O43 - CFD: 22/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
O43 - CFD: 30/09/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 06/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
O43 - CFD: 17/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WWM - MetaTrader 4
O43 - CFD: 19/01/2017 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 26/06/2016 - [] D -- C:\ProgramData\Apple
O43 - CFD: 26/06/2016 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 30/09/2016 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 27/10/2015 - [] D -- C:\ProgramData\CheckPoint
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\Comms
O43 - CFD: 27/10/2015 - [] D -- C:\ProgramData\Dell
O43 - CFD: 30/09/2016 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 30/09/2016 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 20/01/2017 - [] D -- C:\ProgramData\ESET
O43 - CFD: 30/09/2016 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 29/12/2015 - [] D -- C:\ProgramData\FLEXnet
O43 - CFD: 22/01/2016 - [0] D -- C:\ProgramData\IDM
O43 - CFD: 16/09/2016 - [] D -- C:\ProgramData\MetaQuotes
O43 - CFD: 13/01/2017 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 17/12/2015 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 09/01/2017 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 27/10/2015 - [] D -- C:\ProgramData\PCDr
O43 - CFD: 06/10/2016 - [] D -- C:\ProgramData\PDFelement
O43 - CFD: 09/01/2017 - [] D -- C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 21/01/2017 - [] D -- C:\ProgramData\RogueKiller
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\SoftwareDistribution
O43 - CFD: 30/09/2016 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 30/09/2016 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 04/07/2016 - [] D -- C:\ProgramData\ThinkSky
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\USOPrivate
O43 - CFD: 30/09/2016 - [] D -- C:\ProgramData\USOShared
O43 - CFD: 06/10/2016 - [] D -- C:\ProgramData\wondershare
O43 - CFD: 09/01/2017 - [] AD -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 12/01/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 26/06/2016 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 13/01/2016 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 30/09/2016 - [] AD -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 27/10/2015 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 30/09/2016 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 19/01/2017 - [] D -- C:\Users\I\AppData\Roaming\Adobe
O43 - CFD: 27/06/2016 - [] D -- C:\Users\I\AppData\Roaming\Apple Computer
O43 - CFD: 22/01/2017 - [] D -- C:\Users\I\AppData\Roaming\DMCache
O43 - CFD: 07/07/2016 - [] D -- C:\Users\I\AppData\Roaming\DRPSu
O43 - CFD: 25/11/2016 - [] D -- C:\Users\I\AppData\Roaming\GiliSoft
O43 - CFD: 07/03/2016 - [] D -- C:\Users\I\AppData\Roaming\HD Tune Pro
O43 - CFD: 27/10/2015 - [] D -- C:\Users\I\AppData\Roaming\Identities
O43 - CFD: 16/08/2016 - [] D -- C:\Users\I\AppData\Roaming\IDM
O43 - CFD: 20/09/2016 - [] D -- C:\Users\I\AppData\Roaming\IQ Option
O43 - CFD: 13/11/2015 - [] D -- C:\Users\I\AppData\Roaming\Macromedia
O43 - CFD: 21/11/2010 - [0] D -- C:\Users\I\AppData\Roaming\Media Center Programs
O43 - CFD: 16/09/2016 - [] D -- C:\Users\I\AppData\Roaming\MetaQuotes
O43 - CFD: 19/12/2016 - [] SD -- C:\Users\I\AppData\Roaming\Microsoft
O43 - CFD: 22/01/2017 - [] D -- C:\Users\I\AppData\Roaming\MOBILedit
O43 - CFD: 12/11/2015 - [] D -- C:\Users\I\AppData\Roaming\Mozilla
O43 - CFD: 09/11/2015 - [] D -- C:\Users\I\AppData\Roaming\MPC-HC
O43 - CFD: 09/01/2017 - [] D -- C:\Users\I\AppData\Roaming\NVIDIA
O43 - CFD: 03/01/2017 - [] D -- C:\Users\I\AppData\Roaming\Opera Software
O43 - CFD: 24/08/2016 - [] D -- C:\Users\I\AppData\Roaming\Skype
O43 - CFD: 21/01/2017 - [] D -- C:\Users\I\AppData\Roaming\uTorrent
O43 - CFD: 03/12/2016 - [] D -- C:\Users\I\AppData\Roaming\vlc
O43 - CFD: 12/11/2015 - [] D -- C:\Users\I\AppData\Roaming\WinRAR
O43 - CFD: 06/10/2016 - [] D -- C:\Users\I\AppData\Roaming\Wondershare
O43 - CFD: 22/01/2017 - [] D -- C:\Users\I\AppData\Roaming\ZHP
O43 - CFD: 28/07/2016 - [] D -- C:\Users\I\AppData\Roaming\Zoom
O43 - CFD: 05/01/2016 - [0] D -- C:\Users\I\AppData\Local\ActiveSync
O43 - CFD: 22/01/2017 - [] D -- C:\Users\I\AppData\Local\Adobe
O43 - CFD: 26/06/2016 - [] D -- C:\Users\I\AppData\Local\Apple
O43 - CFD: 26/06/2016 - [] D -- C:\Users\I\AppData\Local\Apple Computer
O43 - CFD: 30/09/2016 - [0] SHD -- C:\Users\I\AppData\Local\Application Data
O43 - CFD: 04/11/2015 - [] D -- C:\Users\I\AppData\Local\Apps
O43 - CFD: 18/12/2015 - [] D -- C:\Users\I\AppData\Local\CEF
O43 - CFD: 21/01/2017 - [] D -- C:\Users\I\AppData\Local\Citrix
O43 - CFD: 02/11/2015 - [] D -- C:\Users\I\AppData\Local\Comms
O43 - CFD: 02/10/2016 - [] D -- C:\Users\I\AppData\Local\ConnectedDevicesPlatform
O43 - CFD: 22/01/2017 - [] D -- C:\Users\I\AppData\Local\CrashDumps
O43 - CFD: 10/01/2017 - [] D -- C:\Users\I\AppData\Local\Diagnostics
O43 - CFD: 20/01/2017 - [] D -- C:\Users\I\AppData\Local\ESET
O43 - CFD: 02/11/2016 - [] D -- C:\Users\I\AppData\Local\Google
O43 - CFD: 30/09/2016 - [0] SHD -- C:\Users\I\AppData\Local\History
O43 - CFD: 13/11/2015 - [] D -- C:\Users\I\AppData\Local\Macromedia
O43 - CFD: 13/01/2017 - [] D -- C:\Users\I\AppData\Local\Microsoft
O43 - CFD: 15/01/2016 - [] D -- C:\Users\I\AppData\Local\Microsoft Help
O43 - CFD: 06/11/2015 - [] D -- C:\Users\I\AppData\Local\MicrosoftEdge
O43 - CFD: 12/11/2015 - [] D -- C:\Users\I\AppData\Local\Mozilla
O43 - CFD: 13/01/2017 - [] D -- C:\Users\I\AppData\Local\MultiPlayerManager
O43 - CFD: 19/01/2017 - [] D -- C:\Users\I\AppData\Local\Nox
O43 - CFD: 13/01/2017 - [] D -- C:\Users\I\AppData\Local\nox_video_tool
O43 - CFD: 03/01/2017 - [] D -- C:\Users\I\AppData\Local\Opera Software
O43 - CFD: 23/11/2016 - [] D -- C:\Users\I\AppData\Local\Packages
O43 - CFD: 06/11/2015 - [] D -- C:\Users\I\AppData\Local\Programs
O43 - CFD: 27/10/2015 - [] D -- C:\Users\I\AppData\Local\Publishers
O43 - CFD: 27/10/2015 - [] D -- C:\Users\I\AppData\Local\SoftThinks
O43 - CFD: 02/11/2015 - [] D -- C:\Users\I\AppData\Local\speech
O43 - CFD: 22/01/2017 - [] D -- C:\Users\I\AppData\Local\Temp
O43 - CFD: 30/09/2016 - [0] SHD -- C:\Users\I\AppData\Local\Temporary Internet Files
O43 - CFD: 27/10/2015 - [] D -- C:\Users\I\AppData\Local\TileDataLayer
O43 - CFD: 19/11/2015 - [] D -- C:\Users\I\AppData\Local\VirtualStore
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 30/09/2016 - [] RD -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 13/01/2017 - [] RD -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 30/09/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Asunsoft iTunes Backup Password Geeker
O43 - CFD: 30/09/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 16/07/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 30/09/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recover My Files v5
O43 - CFD: 30/09/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast
O43 - CFD: 13/01/2017 - [] RD -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 30/09/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
O43 - CFD: 20/11/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Password Key Standard
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
O43 - CFD: 30/09/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 30/09/2016 - [] D -- C:\Users\I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom

---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 1s
O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation
O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation
O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation
O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation
O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\I\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll {330000013FBFE82DC1EE0D270500010000013F} =>.Microsoft Corporation

---\\ System Drivers List (71) - 14s
O58 - SDL:2016/07/16 11:41:53 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows®
O58 - SDL:2008/06/27 07:51:10 A . (.Adobe Systems, Inc. - Adobe Drive File System Driver.) -- C:\WINDOWS\System32\drivers\adfs.sys [88632] =>.Adobe Systems Incorporated®
O58 - SDL:2016/07/16 11:41:53 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows®
O58 - SDL:2013/07/05 05:59:58 A . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\WINDOWS\System32\drivers\Apfiltr.sys [497968] =>.Alps Electric Co., LTD.®
O58 - SDL:2016/07/16 11:41:53 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2016/07/16 11:41:53 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2016/07/16 11:41:52 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533856] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [102752] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [346976] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T4 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [2104160] =>.Microsoft Windows®
O58 - SDL:2016/12/05 06:58:56 A . (.ESET - Amon monitor.) -- C:\WINDOWS\System32\drivers\eamonm.sys [132272] {1DE10DED541D51E73BC486F492498836} =>.ESET
O58 - SDL:2016/12/05 06:58:56 A . (.ESET - Devmon monitor.) -- C:\WINDOWS\System32\drivers\edevmon.sys [106768] {1DE10DED541D51E73BC486F492498836} =>.ESET
O58 - SDL:2016/12/09 08:33:20 A . (.ESET - ESET ELAM driver.) -- C:\WINDOWS\System32\drivers\eelam.sys [15488] {3300000010F23603FA1A57DFAB000000000010} =>.ESET
O58 - SDL:2016/12/05 06:58:56 A . (.ESET - ESET Helper driver.) -- C:\WINDOWS\System32\drivers\ehdrv.sys [180544] {1DE10DED541D51E73BC486F492498836} =>.ESET
O58 - SDL:2016/12/05 06:58:56 A . (.ESET - ESET OPP Keyboard Filter.) -- C:\WINDOWS\System32\drivers\ekbdflt.sys [49672] {1DE10DED541D51E73BC486F492498836} =>.ESET
O58 - SDL:2016/12/05 06:58:56 A . (.ESET - ESET Personal Firewall driver.) -- C:\WINDOWS\System32\drivers\epfw.sys [77616] {1DE10DED541D51E73BC486F492498836} =>.ESET
O58 - SDL:2016/12/05 06:58:56 A . (.ESET - ESET Personal Firewall driver.) -- C:\WINDOWS\System32\drivers\epfwwfp.sys [96856] {1DE10DED541D51E73BC486F492498836} =>.ESET
O58 - SDL:2016/07/16 11:41:52 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3418976] =>.Microsoft Windows®
O58 - SDL:2010/10/19 23:34:26 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys [56344] =>.Intel Corporation®
O58 - SDL:2016/07/16 11:41:53 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:54 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [33280] =>.Intel(R) Corporation
O58 - SDL:2016/07/16 11:41:54 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation
O58 - SDL:2016/07/16 11:41:54 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [64512] =>.Intel Corporation
O58 - SDL:2016/07/16 11:41:54 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [176384] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O58 - SDL:2016/07/16 11:41:52 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2016/07/16 11:41:50 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2016/07/16 11:41:53 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [526176] =>.Microsoft Windows®
O58 - SDL:2016/04/01 19:52:58 A . (.Intel Corporation - Intel(R) Centrino(R) Wireless (Bluetooth Ad.) -- C:\WINDOWS\System32\drivers\ibtfltcoex.sys [77808] =>.Intel Corporation-Mobile Wireless Group®
O58 - SDL:2015/05/20 12:55:54 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\WINDOWS\System32\drivers\idmwfp.sys [197616] =>.Tonec Inc.®
O58 - SDL:2015/06/01 21:00:18 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [5384176] =>.Intel Corporation - pGFX®
O58 - SDL:2016/07/16 11:41:53 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108896] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [105824] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [101216] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82776] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.Microsoft Windows®
O58 - SDL:2016/10/05 10:09:07 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [64352] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [842584] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [108896] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:42:03 A . (...) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624]
O58 - SDL:2016/07/16 11:41:50 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\WINDOWS\System32\drivers\Netwsw00.sys [11518976] =>.Intel Corporation
O58 - SDL:2010/09/30 19:00:06 A . (.Renesas Electronics Corporation - USB 3.0 Hub Driver.) -- C:\WINDOWS\System32\drivers\nusb3hub.sys [80384] =>.Renesas Electronics Corporation
O58 - SDL:2010/09/30 19:00:06 A . (.Renesas Electronics Corporation - USB 3.0 Host Controller Driver.) -- C:\WINDOWS\System32\drivers\nusb3xhc.sys [180736] =>.Renesas Electronics Corporation
O58 - SDL:2016/09/12 20:15:20 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\WINDOWS\System32\drivers\nvhda64v.sys [240712] =>.NVIDIA Corporation®
O58 - SDL:2016/09/12 20:15:22 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvpciflt.sys [57400] =>.NVIDIA Corporation®
O58 - SDL:2016/07/16 11:41:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58720] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [61792] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.40 64-bit Dri.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [589824] =>.Realtek
O58 - SDL:2016/07/16 11:41:53 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows®
O58 - SDL:2016/09/05 04:47:06 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [131712] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/09/05 04:47:12 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [165504] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/07/16 11:41:53 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows®
O58 - SDL:2016/08/19 23:07:12 A . (.Texas Instruments, Inc. - Lower Filter Driver for TI TUSB73x0 USB3.0.) -- C:\WINDOWS\System32\drivers\TIxHCIlfilter.sys [34424] {67CF0B01CCC274123087C8DD99EE603C}
O58 - SDL:2016/08/19 23:07:12 A . (.Texas Instruments, Inc. - Upper Filter Driver for TI TUSB73x0 USB3.0.) -- C:\WINDOWS\System32\drivers\TIxHCIufilter.sys [39032] {67CF0B01CCC274123087C8DD99EE603C}
O58 - SDL:2017/01/22 14:48:54 A . (...) -- C:\WINDOWS\System32\drivers\TrueSight.sys [28272] =>.Adlice®
O58 - SDL:2015/11/05 15:23:52 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys [54784] =>.Apple, Inc.
O58 - SDL:2016/07/16 11:41:53 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [32096] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:41:53 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [64864] =>.Microsoft Windows®
O58 - SDL:2017/01/13 06:39:14 A . (.BigNox Corporation - VirtualBox Support Driver.) -- C:\WINDOWS\System32\drivers\YSDrv.sys [261864] {49C2C379B09EF22D4301FFFC5FC8354A}

---\\ Last modified or created user files (10) - 73s
O61 - LFC: 2017/01/22 15:29:50 A . (.Copyright 2015 Wondershare Corporation.) -- C:\Users\I\Downloads\Programs\mobilego-b_setup_full1871.exe [936592] {1F8663313222FF9957A7D5EDD27A3346}
O61 - LFC: 2017/01/22 15:30:01 A . (.COMPELSON Laboratories.) -- C:\Users\I\Downloads\Programs\setup_ME_STANDARD_8_7_1_21224.exe [38745048] {0BCE38E7AE9C548B654359DF87EF2BC4}
O61 - LFC: 2017/01/20 12:18:54 RA . (..) -- C:\Users\I\Downloads\ESET NOD32 Antivirus_Smart Security 8.0.319.1 RePack by KpoJIuK\EAV - Silent installation.cmd [30]
O61 - LFC: 2017/01/20 12:18:54 RA . (..) -- C:\Users\I\Downloads\ESET NOD32 Antivirus_Smart Security 8.0.319.1 RePack by KpoJIuK\EAV - Тихая установка.cmd [30]
O61 - LFC: 2017/01/20 12:18:54 RA . (..) -- C:\Users\I\Downloads\ESET NOD32 Antivirus_Smart Security 8.0.319.1 RePack by KpoJIuK\ESS - Silent installation.cmd [30]
O61 - LFC: 2017/01/20 12:18:54 RA . (..) -- C:\Users\I\Downloads\ESET NOD32 Antivirus_Smart Security 8.0.319.1 RePack by KpoJIuK\ESS - Тихая установка.cmd [30]
O61 - LFC: 2017/01/18 11:00:26 A . (.BitTorrent Inc..) -- C:\Users\I\AppData\Roaming\uTorrent\uTorrent.exe [1979072] {0CF35369A9710762C36F6805FC9E45D6}
O61 - LFC: 2017/01/18 11:00:26 A . (.BitTorrent Inc..) -- C:\Users\I\AppData\Roaming\uTorrent\updates\3.4.9_43085.exe [1979072] {0CF35369A9710762C36F6805FC9E45D6}
O61 - LFC: 2017/01/21 14:55:07 A . (..) -- C:\Users\I\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_636206032365171881.bin [230069]
O61 - LFC: 2017/01/22 15:44:30 A . (..) -- C:\Users\I\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148]

---\\ File Associations Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Start Menu Internet (16) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe {0FDE84F0D55D8D3368325DC0CDC4A979} =>.Opera Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe =>.Opera Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe =>.Opera Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe =>.Opera Software

---\\ Search Browser Infection (2) - 3s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/

---\\ Search Svchost Services (45) - 1s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [193536] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\WINDOWS\System32\certprop.dll [193536] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [305152] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\WINDOWS\System32\gpsvc.dll [1227264] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\WINDOWS\System32\ikeext.dll [932352] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\WINDOWS\System32\iphlpsvc.dll [945664] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\WINDOWS\System32\appinfo.dll [125952] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\WINDOWS\system32\iscsiexe.dll [151552] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\WINDOWS\System32\eapsvc.dll [112128] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\WINDOWS\system32\schedsvc.dll [948224] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [222720] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [134656] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [387072] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\WINDOWS\System32\wercplsupport.dll [94208] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll [161792] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\WINDOWS\system32\themeservice.dll [70656] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation Service.) -- C:\WINDOWS\System32\lfsvc.dll [37376] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows Managent Service DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [407552] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infrared Monitor.) -- C:\WINDOWS\System32\irmon.dll [25088] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [105472] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [657920] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [496128] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\System32\sens.dll [70656] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\System32\ipnathlp.dll [541696] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [309248] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll [2317824] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\System32\qmgr.dll [1054208] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [617472] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [57344] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) -- C:\WINDOWS\system32\WpnService.dll [234496] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1025536] =>.Microsoft Corporation
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll [183808] =>.Microsoft Corporation
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll [650752] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\WINDOWS\System32\bdesvc.dll [361472] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [197632] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\WINDOWS\System32\ncasvc.dll [167936] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [1013248] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [539648] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [358400] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [1020928] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1159680] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Flight Settings.) -- C:\WINDOWS\system32\flightsettings.dll [635904] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\WINDOWS\system32\wlidsvc.dll [2104320] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Network Setup Service.) -- C:\WINDOWS\System32\NetSetupSvc.dll [265728] =>.Microsoft Corporation

---\\ Firewall Active Exception List (15) - 2s
O87 - FAEL: "{2B7E21ED-E093-48A9-BDE1-1D7A77ACC600}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe (.not file.)
O87 - FAEL: "{9534FAE5-5AED-4BE6-97B4-2825DB7DA457}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe (.not file.)
O87 - FAEL: "{65C75B58-3894-40ED-84D5-48FBB26DF36B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Bonjour\mDNSResponder.exe (.not file.)
O87 - FAEL: "{DDFD3DA6-A3B8-4BCE-BE12-604579D6934B}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Bonjour\mDNSResponder.exe (.not file.)
O87 - FAEL: "{AD8DFFB8-5A52-4C0F-9DEC-782284038003}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (.not file.)
O87 - FAEL: "{76AD8499-1D3D-4EE6-AC62-783DA2C890D1}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (.not file.)
O87 - FAEL: "{0A91E08F-32B1-4649-B8E8-0A5857C5A248}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (.not file.)
O87 - FAEL: "{DD05830A-DA1E-49D5-AAB2-21D2D14C0D9B}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (.not file.)
O87 - FAEL: "{C1CAD647-9483-4BF4-AB6F-7F1394DB8F0A}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\I\AppData\Roaming\uTorrent\uTorrent.exe {0CF35369A9710762C36F6805FC9E45D6}
O87 - FAEL: "{B12BF205-441A-40CB-B69B-6739FDB1ED28}" [Out-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\I\AppData\Roaming\uTorrent\uTorrent.exe {0CF35369A9710762C36F6805FC9E45D6}
O87 - FAEL: "{0E68A88E-1EBD-4F9B-BA00-9EC5A799DA92}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\I\AppData\Roaming\uTorrent\uTorrent.exe {0CF35369A9710762C36F6805FC9E45D6}
O87 - FAEL: "{F3C3DD0A-83C7-489E-8C56-FAC3031337E9}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\I\AppData\Roaming\uTorrent\uTorrent.exe {0CF35369A9710762C36F6805FC9E45D6}
O87 - FAEL: "{E8CFDDE0-8310-48C1-853C-5A4EE1422E66}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\I\AppData\Roaming\uTorrent\uTorrent.exe {0CF35369A9710762C36F6805FC9E45D6}
O87 - FAEL: "{AB5D3B02-8897-4DA2-B7B4-372AC92B3F71}" [Out-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\I\AppData\Roaming\uTorrent\uTorrent.exe {0CF35369A9710762C36F6805FC9E45D6}
O87 - FAEL: "TCP Query User{507D8FB6-8177-4735-8696-4936B091502D}C:\program files (x86)\greedytorrent\gtor.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\greedytorrent\gtor.exe

---\\ Additional Scan (O88) (1) - 0s
~ No malicious or unnecessary items found.

---\\ Summary of the elements found (1) - 0s
~ No malicious or unnecessary items found.

~ End of the scan, 42632 items in 00h03mn01s (817)(0)