~ ZHPDiag v2017.5.1.75 By Nicolas Coolman (2017/05/01)
~ Run by PC (Administrator) (2017/05/02 14:23:16)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: Version OK
~ Mode: Scan
~ Report: C:\Users\PC\Desktop\ZHPDiag.txt
~ Report: C:\Users\PC\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
Windows 10 Home, 32-bit (Build 14393) =>.Microsoft Corporation

---\\ Internet Browsers (2) - 1s
~ GCIE: Google Chrome v58.0.3029.81
~ MSIE: Internet Explorer v11.1066.14393.0

---\\ Windows Product Information (3) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ System protection software (1) - 2s
Windows Defender (Activate) (Protection)

---\\ System optimization software (1) - 2s
~ CCleaner v5.28 (Optimize)

---\\ Surveillance software (2) - 2s
~ Adobe Flash Player 25 PPAPI (Surveillance)
~ Adobe Acrobat Reader DC (Surveillance)

---\\ Information on the system (6) - 0s
~ Operating System: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3105.664 MB (64% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 23 GB (25%) free of 91 GB : OK =>.Disk Space

---\\ Connection to the system mode (3) - 0s
~ Computer Name: OK
~ User Name: PC
~ Logged in as Administrator

---\\ Enumeration of the disk units (2) - 0s
~ Drive C: has 23 GB free of 91 GB (System)
~ Drive D: has 24 GB free of 73 GB

---\\ State of the Windows Security Center (7) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Search Generic System Files (23) - 4s
[MD5.805E293E2A440F7464B10D58988818F2] - 04/03/2017 - (.Microsoft Corporation - مستكشف Windows.) -- C:\WINDOWS\Explorer.exe [4312248] =>.Microsoft Windows®
[MD5.111474C61232202B5B588D2B512CBB25] - 16/07/2016 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [61952] =>.Microsoft Corporation
[MD5.B315D888C2AC5007D0F87880CE92102A] - 16/07/2016 - (.Microsoft Corporation - ‎‎تطبيق بدء تشغيل Windows.) -- C:\WINDOWS\System32\Wininit.exe [205112] =>.Microsoft Windows Publisher®
[MD5.3B0C16C02AD9A6C70240280FC03AC60A] - 28/03/2017 - (.Microsoft Corporation - ملحقات الإنترنت لـ Win32.) -- C:\WINDOWS\System32\wininet.dll [2483200] =>.Microsoft Corporation
[MD5.A06A990AFF3DE17AAE7E7312EBAE90DF] - 14/12/2016 - (.Microsoft Corporation - تطبيق تسجيل دخول Windows.) -- C:\WINDOWS\System32\Winlogon.exe [578560] =>.Microsoft Corporation
[MD5.7C880AA65587F2B274D2633E69CB19C8] - 16/07/2016 - (.Microsoft Corporation - مكتبة تراخيص البرامج.) -- C:\WINDOWS\System32\sppcomapi.dll [390144] =>.Microsoft Corporation
[MD5.AA86DC342B4ED1C1F839C3BC8AEA64B1] - 04/03/2017 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [497416] =>.Microsoft Windows®
[MD5.3B5BE5B3D3CE8D9834C2C9B325AC6A29] - 15/10/2016 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [482656] =>.Microsoft Windows®
[MD5.1D8B6976EC75698485A195A06B2DEBAC] - 16/07/2016 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [23392] =>.Microsoft Windows®
[MD5.9577B2171AD8DBC6A8BAAD75232CBF38] - 16/07/2016 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [74752] =>.Microsoft Corporation
[MD5.67B188419B7018D7956A38C89EFCC70A] - 16/07/2016 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [130560] =>.Microsoft Corporation
[MD5.06F26151E364693421427F145571CDCC] - 04/03/2017 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [113152] =>.Microsoft Corporation
[MD5.E67AAF24F03D9D1B7616C0F5663556CA] - 16/07/2016 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [67072] =>.Microsoft Corporation
[MD5.7D889F2D2464940C2DA8A218F5282F21] - 16/07/2016 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [90624] =>.Microsoft Corporation
[MD5.3FDB0E7AC49A78D21B470863CDA5E342] - 16/07/2016 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [188416] =>.Microsoft Corporation
[MD5.B8272E9A229A86973D6213E5E84DB968] - 04/03/2017 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [399712] =>.Microsoft Windows®
[MD5.19B3776EE853B95924BAEDEF14702135] - 16/07/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [217088] =>.Microsoft Corporation
[MD5.EAC054072A90CEAA2213B1FAA44E6131] - 04/03/2017 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [1956704] =>.Microsoft Windows®
[MD5.102319D1AB9C8AE57ABF4542C15E46E5] - 16/07/2016 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\Parport.sys [81920] =>.Microsoft Corporation
[MD5.26F09741A8FF5EE03C66B33EB5C2A7D2] - 16/07/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [80896] =>.Microsoft Corporation
[MD5.F064A9E33658E8A73280AE8AA5723C59] - 16/07/2016 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [131072] =>.Microsoft Corporation
[MD5.1CD4B4D747348FAA7205D80E7BDAFD36] - 04/03/2017 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [95584] =>.Microsoft Windows®
[MD5.8FC38A2B3D7A58A69065F43479E848FA] - 16/07/2016 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [353120] =>.Microsoft Windows®

---\\ Non Microsoft non disabled Windows Services (8) - 3s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
O23 - Service: Bonjour Service (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET Internet Security\ekrn.exe =>.ESET, spol. s r.o.®
O23 - Service: gupdate (gupdate) . (.Google Inc. - مثبِّت Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.Samsung Electronics CO., LTD.®
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated - 32-bit Synaptics Pointing Enhance Service.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated®
O23 - Service: Wondershare Application Framework Service (WsAppService) . (.Wondershare - Wondershare AppService.) - C:\Program Files\Wondershare\WAF\2.3.1.204\WsAppService.exe =>.Wondershare software CO., LIMITED®

---\\ Services not Microsoft (SR=Run, SS=Stop) (12) - 72s
SS - Auto [02/02/2017] [ 82640] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [11/04/2017] [ 271448] AdobeFlashPlayerUpdateSvc (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [22/09/2016] [ 67384] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
SR - Auto [12/08/2015] [ 390416] Bonjour Service (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SR - Auto [14/12/2016] [ 2241992] ESET Service (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET Internet Security\ekrn.exe =>.ESET, spol. s r.o.®
SS - Auto [22/04/2016] [ 107848] gupdate (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [22/04/2016] [ 107848] gupdatem (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [01/03/2013] [ 118520] rpcapd (rpcapd) . (.Riverbed Technology, Inc..) - C:\Program Files\WinPcap\rpcapd.exe =>.Riverbed Technology, Inc.®
SS - Demand [19/12/2012] [ 732648] ServiceLayer (ServiceLayer) . (.Nokia.) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe =>.Nokia®
SR - Auto [16/01/2017] [ 752224] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.Samsung Electronics CO., LTD.®
SR - Auto [07/01/2016] [ 217264] SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated®
SR - Auto [16/11/2016] [ 437392] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files\Wondershare\WAF\2.3.1.204\WsAppService.exe =>.Wondershare software CO., LIMITED®

---\\ Task Planned Automatically (23) - 26s
[MD5.ABC53D0C55FBF9C78AAD3583EFF4E3A9] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408] (.Activate.) =>.Adobe Systems, Incorporated®
[MD5.73395776872F0EE6DA11F92BF6A7A874] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_25_0_0_148_pepper.exe [1277016] (.Activate.) =>.Adobe Systems Incorporated®
[MD5.95FF82767D666AC11CF644FDA976270D] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [271448] (.Activate.) =>.Adobe Systems Incorporated®
[MD5.5BCE955CF12AF3417F055DADC0212920] [APT] [Browser Updater Task(Core)] (.Tencent.) -- C:\Program Files\QQBrowser\Update\B31B5778DB9DA52DA4D7604BCFE7E67D\Update\BrowserUpdate.exe [690144] (.Activate.) =>.Superfluous.Tencent
[MD5.00000000000000000000000000000000] [APT] [Coewother Reports] (...) -- C:\Program Files\Coewother\coewotherrprtsk.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] (.Activate.) =>.Google Inc®
[MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] (.Activate.) =>.Google Inc®
[MD5.1544F15069886CF53252776851D74C1B] [APT] [RunUninstallTool_SkipUac] (.CrystalIDEA Software.) -- C:\Program Files\Uninstall Tool\UninstallTool.exe [4153856] (.Activate.) =>.CrystalIdea Software
[MD5.00000000000000000000000000000000] [APT] [SlimCleaner Plus (Scheduled Scan - PC)] (...) -- C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.00000000000000000000000000000000] [APT] [{987777EE-87CD-4712-8046-8ABACAE88B8C}] (...) -- C:\Users\PC\Downloads\Programs\Samsung Mobile Phones USB Driver 1.5.6.0.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
O39 - APT: Unknown - (.Legitimate.) -- C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job [214]
O39 - APT: SlimCleaner Plus (Scheduled Scan - PC) - (...) -- C:\WINDOWS\Tasks\SlimCleaner Plus (Scheduled Scan - PC).job [360] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task [4550] =>.Adobe Systems, Incorporated®
O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier [4520] =>.Adobe Systems Incorporated®
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater [4374] =>.Adobe Systems Incorporated®
O39 - APT: Browser Updater Task(Core) - (.Tencent.) -- C:\WINDOWS\System32\Tasks\Browser Updater Task(Core) [7928] =>.Superfluous.Tencent
O39 - APT: Unknown - (.IObit.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2778] =>.IObit
O39 - APT: Coewother Reports - (...) -- C:\WINDOWS\System32\Tasks\Coewother Reports [7450] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3224] =>.Google Inc®
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [3348] =>.Google Inc®
O39 - APT: RunUninstallTool_SkipUac - (.CrystalIDEA Software.) -- C:\WINDOWS\System32\Tasks\RunUninstallTool_SkipUac [3040] =>.CrystalIdea Software
O39 - APT: SlimCleaner Plus (Scheduled Scan - PC) - (...) -- C:\WINDOWS\System32\Tasks\SlimCleaner Plus (Scheduled Scan - PC) [3108] (.Orphan.) =>.Superfluous.Orphan
O39 - APT: {987777EE-87CD-4712-8046-8ABACAE88B8C} - (...) -- C:\WINDOWS\System32\Tasks\{987777EE-87CD-4712-8046-8ABACAE88B8C} [3352] (.Orphan.) =>.Superfluous.Orphan

---\\ Auto loading programs from Registry and folders (3) - 0s
O4 - HKLM\..\Run: [WindowsDefender] . (.Microsoft Corporation - Windows Defender notification icon.) -- C:\Program Files\Windows Defender\MSASCuiL.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation®

---\\ Process running (8) - 3s
[MD5.5EA9C80F18CBC393EA7D9A2991DED4B5] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390416] [PID.2856] =>.Apple Inc.®
[MD5.82812A27B150D765D03B0074A8257259] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [67384] [PID.2864] =>.Apple Inc.®
[MD5.C9571741D8F21FDBC3C1543D89503697] - (.Wondershare - Wondershare AppService.) -- C:\Program Files\Wondershare\WAF\2.3.1.204\WsAppService.exe [437392] [PID.3128] =>.Wondershare software CO., LIMITED®
[MD5.46826B02C346D48A62FF11882AF662BB] - (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) -- C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224] [PID.3248] =>.Samsung Electronics CO., LTD.®
[MD5.1401B3F4900EC84B0B559E7BEA3C4C26] - (.Synaptics Incorporated - 32-bit Synaptics Pointing Enhance Service.) -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [217264] [PID.3256] =>.Synaptics Incorporated®
[MD5.9F31441FA3413C426EBFE732B1AECA0A] - (.Synaptics Incorporated - Synaptics TouchPad 32-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3531952] [PID.3416] =>.Synaptics Incorporated®
[MD5.196F20A03EB3881786BB13DE6A5AA69D] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [193712] [PID.5084] =>.Synaptics Incorporated®
[MD5.3A6A224B65E44D6F440452F38FA79D63] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\PC\Downloads\Programs\ZHPDiag3.exe [2721280] [PID.7928] =>.Nicolas Coolman

---\\ Google Chrome, Start,Search,Extensions (6) - 0s
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [cjpalhdlnbpafiamejdnhcphjbkeiagm] uBlock Origin =>.Raymond Hill
G2 - GCE: Preference [User Data\Default] [mlomiejdfkolichcflejclcbmpeaniij] Ghostery =>.Ghostery Inc.
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Internet Explorer Extensions, Start, Search (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/ =>.Yahoo! Inc.
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 0

---\\ Internet Explorer, Proxy Management (5) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object (BHO) (1) - 1s
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.®

---\\ Global shortcuts Startup (91) - 7s
O4 - GS\Desktop [Administrator]: osk.lnk . (.Microsoft Corporation - ‎‎الوصول إلى لوحة المفاتيح على الشاشة.) C:\Windows\System32\osk.exe =>.Microsoft Corporation
O4 - GS\Desktop [Administrator]: Uninstall Tool.lnk . (.CrystalIDEA Software - Uninstall Tool.) C:\Program Files\Uninstall Tool\UninstallToolExec.exe {50C7A8BB13DE14B488FE7CFCEE2FC268} =>.CrystalIdea Software
O4 - GS\Desktop [Administrator]: Windows Doctor.lnk . (.WindowsDoctor.com - Windows Doctor.) C:\Program Files\Windows Doctor\WindowsDoctor.exe
O4 - GS\Desktop [Administrator]: WinX MediaTrans.lnk . (.Digiarty - MediaTrans.) C:\Program Files\Digiarty\WinX MediaTrans\MediaTrans.exe =>.Digiarty, Inc.®
O4 - GS\Desktop [Administrator]: Your Unin-staller!.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe =>.URSoft, Inc.®
O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\PC\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrator]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrator]: Smart Switch.lnk . (.Samsung - Smart Switch PC.) C:\Program Files\Samsung\Smart Switch PC\SmartSwitchPC.exe {084CE11D0AEB94BF0EAEEC32A755A013} =>.Samsung
O4 - GS\Quicklaunch [Administrator]: WinX MediaTrans.lnk . (.Digiarty - MediaTrans.) C:\Program Files\Digiarty\WinX MediaTrans\MediaTrans.exe =>.Digiarty, Inc.®
O4 - GS\sendTo [Administrator]: Add to archive.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -add2archive =>.Giorgio Tani
O4 - GS\sendTo [Administrator]: Browse path with PeaZip.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2browsepath =>.Giorgio Tani
O4 - GS\sendTo [Administrator]: Extract here (in new folder).lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2folder =>.Giorgio Tani
O4 - GS\sendTo [Administrator]: Extract here.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2here =>.Giorgio Tani
O4 - GS\sendTo [Administrator]: Extract....lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2main =>.Giorgio Tani
O4 - GS\sendTo [Administrator]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: Open as archive.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2openasarchive =>.Giorgio Tani
O4 - GS\sendTo [Administrator]: Test archive(s).lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2test =>.Giorgio Tani
O4 - GS\sendTo [Administrator]: مستلم الفاكس.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: نقل الملفات عبر Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Guest]: osk.lnk . (.Microsoft Corporation - ‎‎الوصول إلى لوحة المفاتيح على الشاشة.) C:\Windows\System32\osk.exe =>.Microsoft Corporation
O4 - GS\Desktop [Guest]: Uninstall Tool.lnk . (.CrystalIDEA Software - Uninstall Tool.) C:\Program Files\Uninstall Tool\UninstallToolExec.exe {50C7A8BB13DE14B488FE7CFCEE2FC268} =>.CrystalIdea Software
O4 - GS\Desktop [Guest]: Windows Doctor.lnk . (.WindowsDoctor.com - Windows Doctor.) C:\Program Files\Windows Doctor\WindowsDoctor.exe
O4 - GS\Desktop [Guest]: WinX MediaTrans.lnk . (.Digiarty - MediaTrans.) C:\Program Files\Digiarty\WinX MediaTrans\MediaTrans.exe =>.Digiarty, Inc.®
O4 - GS\Desktop [Guest]: Your Unin-staller!.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe =>.URSoft, Inc.®
O4 - GS\Desktop [Guest]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\PC\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Guest]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Guest]: Smart Switch.lnk . (.Samsung - Smart Switch PC.) C:\Program Files\Samsung\Smart Switch PC\SmartSwitchPC.exe {084CE11D0AEB94BF0EAEEC32A755A013} =>.Samsung
O4 - GS\Quicklaunch [Guest]: WinX MediaTrans.lnk . (.Digiarty - MediaTrans.) C:\Program Files\Digiarty\WinX MediaTrans\MediaTrans.exe =>.Digiarty, Inc.®
O4 - GS\sendTo [Guest]: Add to archive.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -add2archive =>.Giorgio Tani
O4 - GS\sendTo [Guest]: Browse path with PeaZip.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2browsepath =>.Giorgio Tani
O4 - GS\sendTo [Guest]: Extract here (in new folder).lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2folder =>.Giorgio Tani
O4 - GS\sendTo [Guest]: Extract here.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2here =>.Giorgio Tani
O4 - GS\sendTo [Guest]: Extract....lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2main =>.Giorgio Tani
O4 - GS\sendTo [Guest]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Guest]: Open as archive.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2openasarchive =>.Giorgio Tani
O4 - GS\sendTo [Guest]: Test archive(s).lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2test =>.Giorgio Tani
O4 - GS\sendTo [Guest]: مستلم الفاكس.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Guest]: نقل الملفات عبر Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [PC]: osk.lnk . (.Microsoft Corporation - ‎‎الوصول إلى لوحة المفاتيح على الشاشة.) C:\Windows\System32\osk.exe =>.Microsoft Corporation
O4 - GS\Desktop [PC]: Uninstall Tool.lnk . (.CrystalIDEA Software - Uninstall Tool.) C:\Program Files\Uninstall Tool\UninstallToolExec.exe {50C7A8BB13DE14B488FE7CFCEE2FC268} =>.CrystalIdea Software
O4 - GS\Desktop [PC]: Windows Doctor.lnk . (.WindowsDoctor.com - Windows Doctor.) C:\Program Files\Windows Doctor\WindowsDoctor.exe
O4 - GS\Desktop [PC]: WinX MediaTrans.lnk . (.Digiarty - MediaTrans.) C:\Program Files\Digiarty\WinX MediaTrans\MediaTrans.exe =>.Digiarty, Inc.®
O4 - GS\Desktop [PC]: Your Unin-staller!.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe =>.URSoft, Inc.®
O4 - GS\Desktop [PC]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\PC\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [PC]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [PC]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [PC]: Smart Switch.lnk . (.Samsung - Smart Switch PC.) C:\Program Files\Samsung\Smart Switch PC\SmartSwitchPC.exe {084CE11D0AEB94BF0EAEEC32A755A013} =>.Samsung
O4 - GS\Quicklaunch [PC]: WinX MediaTrans.lnk . (.Digiarty - MediaTrans.) C:\Program Files\Digiarty\WinX MediaTrans\MediaTrans.exe =>.Digiarty, Inc.®
O4 - GS\sendTo [PC]: Add to archive.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -add2archive =>.Giorgio Tani
O4 - GS\sendTo [PC]: Browse path with PeaZip.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2browsepath =>.Giorgio Tani
O4 - GS\sendTo [PC]: Extract here (in new folder).lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2folder =>.Giorgio Tani
O4 - GS\sendTo [PC]: Extract here.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2here =>.Giorgio Tani
O4 - GS\sendTo [PC]: Extract....lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2main =>.Giorgio Tani
O4 - GS\sendTo [PC]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [PC]: Open as archive.lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2openasarchive =>.Giorgio Tani
O4 - GS\sendTo [PC]: Test archive(s).lnk . (.Giorgio Tani - PeaZip, file and archive manager.) C:\Program Files\PeaZip\peazip.exe -ext2test =>.Giorgio Tani
O4 - GS\sendTo [PC]: مستلم الفاكس.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [PC]: نقل الملفات عبر Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [PC]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: iMazing.lnk . (.DigiDNA - iMazing.) C:\Program Files\DigiDNA\iMazing\iMazing.exe {5EC0D2A5BE94409D6063378AE31D3C49} =>.DigiDNA
O4 - GS\CommonDesktop [Public]: Smart Switch.lnk . (.Samsung - Smart Switch PC.) C:\Program Files\Samsung\Smart Switch PC\SmartSwitchPC.exe {084CE11D0AEB94BF0EAEEC32A755A013} =>.Samsung
O4 - GS\CommonDesktop [Public]: Windows Device Recovery Tool.lnk . (...) C:\WINDOWS\Installer\{D25B153B-5F43-47BB-B812-C7B99F1147BA}\DefaultApplicationIcon.ico
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - ‎‎المفكرة.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Private Character Editor.) C:\WINDOWS\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - ‎‎ملحق لوحة إدخال العمليات الرياضية.) C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - ‎‎‫مركز إعدادات الكمبيوتر الشخصي المحمول لـ.) C:\WINDOWS\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - ‎‎الرسام.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - ‎‎الاتصال بسطح المكتب البعيد.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - ‎‎أداة القطع.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - ‎‎مسجل الخطوات.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - ‎‎Windows Media Player.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - ‎‎تطبيق المفكرة لـ Windows.) C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - ‎‎عارض XPS.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - ‎‎مخطط توزيع الأحرف.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: MiracastView.lnk . (.Microsoft Corporation - MiracastView.) C:\WINDOWS\MiracastView\MiracastView.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: PrintDialog.lnk . (.Microsoft Corporation - Print Dialog.) C:\WINDOWS\PrintDialog\PrintDialog.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: Windows Device Recovery Tool.lnk . (...) C:\WINDOWS\Installer\{D25B153B-5F43-47BB-B812-C7B99F1147BA}\DefaultApplicationIcon.ico
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - ‎‎Windows Media Player.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation

---\\ Lop.com/Domain Hijackers (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{73e58caa-49dc-40c9-ad80-9781d024c3e7}: DhcpNameServer = 192.168.1.1 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{f2ff961a-424d-44bc-895f-87a2cf39b6f1}: DhcpNameServer = 192.168.1.1 192.168.1.1 =>.Local IP Adress

---\\ Extra protocols (22) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - عارض Microsoft (R) HTML.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - ملحقات OLE32 لـ Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - ملحقات OLE32 لـ Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - ملحقات OLE32 لـ Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - ملحقات OLE32 لـ Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - ملحقات OLE32 لـ Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - عارض Microsoft (R) HTML.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - ملحقات OLE32 لـ Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - عارض Microsoft (R) HTML.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - ملحقات OLE32 لـ Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - عارض Microsoft (R) HTML.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - عارض Microsoft (R) HTML.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation

---\\ Software installed (44) - 28s
O42 - Logiciel: Adobe Acrobat Reader DC - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 25 PPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824214663} =>.Adobe Systems Incorporated
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {D9F3D66A-9885-4DDD-A800-9DDF488359A1} =>.Apple Inc.
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {D168AAD0-6686-47C1-B599-CDD4888B9D1A} =>.Apple Inc.
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Emergency Download Driver - (.Microsoft.) [HKLM] -- {3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D} =>.Microsoft
O42 - Logiciel: ESET Internet Security - (.ESET, spol. s r.o..) [HKLM] -- {943A2533-992B-478F-9603-246C9352B045} =>.ESET, spol. s r.o.
O42 - Logiciel: FFU Loader Driver 1.0.0 - (.Microsoft.) [HKLM] -- {7209d085-ed88-4a08-beb2-c49db2b9e838} =>.Microsoft Corporation®
O42 - Logiciel: FFU Loader Driver 1.0.0 - (.Microsoft.) [HKLM] -- {80FA650C-6157-4959-9E2B-977CADCBFC3C} =>.Microsoft
O42 - Logiciel: Google Chrome - (.Google Inc‎.‎.) [HKLM] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: iMazing 2.1.9.0 - (.DigiDNA.) [HKLM] -- iMazing_is1 =>.DigiDNA
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager =>.Tonec Inc.®
O42 - Logiciel: Lumia UEFI Blue Driver - (.Microsoft.) [HKLM] -- {9D2A75FE-8CE1-4297-AEC1-A097D47BACE9} =>.Microsoft
O42 - Logiciel: Media Feature Pack for Windows 10 N and KN - (.Microsoft.) [HKLM] -- {ef11e192-acd9-485d-8860-ee2102cc2a69} =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.13291. - (.Microsoft Corporation.) [HKLM] -- {25E80DAA-FD87-DCE5-202C-CC02F6673002} =>.Microsoft Corporation
O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D} =>.Nokia
O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {D4BF151C-70A8-4CE2-906F-4173A575BAD9} =>.Nokia
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {6B722793-E77B-41F5-BAB3-6C9832274E75} =>.Nokia
O42 - Logiciel: PeaZip 5.9.1 - (.Giorgio Tani.) [HKLM] -- {5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1 =>.Giorgio Tani
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek
O42 - Logiciel: Samsung USB Driver for Mobile Phones - (.Samsung Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} =>.Samsung Electronics CO., LTD.®
O42 - Logiciel: SharewareOnSale Notifier - (.SharewareOnSale.) [HKCU] -- SharewareOnSale Notifier =>.Azadi Network LLC®
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM] -- {74FA5314-85C8-4E2A-907D-D9ECCCB770A7} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey =>.Synaptics Incorporated®
O42 - Logiciel: Uninstall Tool - (.CrystalIDEA Software, Inc..) [HKLM] -- Uninstall Tool_is1 {50C7A8BB13DE14B488FE7CFCEE2FC268} =>.CrystalIDEA Software, Inc.
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: Windows Device Recovery Tool 3.11.34101 - (.Microsoft.) [HKLM] -- {c4570e47-39e0-450b-a02c-d64965cbf0f0} =>.Microsoft Corporation®
O42 - Logiciel: Windows Device Recovery Tool 3.11.34101 - (.Microsoft.) [HKLM] -- {D25B153B-5F43-47BB-B812-C7B99F1147BA} =>.Microsoft
O42 - Logiciel: Windows Doctor 2.9.0.0 - (.WindowsDoctor International LLC.) [HKLM] -- Windows Doctor 2.9.0.0_is1
O42 - Logiciel: Windows IP Over USB - (.Microsoft Corporation.) [HKLM] -- {FF0EA481-42DB-A8AE-8356-48C09F7D953D} =>.Microsoft Corporation
O42 - Logiciel: WinPcap 4.1.3 - (.Riverbed Technology, Inc..) [HKLM] -- WinPcapInst =>.Riverbed Technology, Inc.
O42 - Logiciel: WinUsb CoInstallers - (.Microsoft.) [HKLM] -- {9755918A-CDF8-4F1E-8453-6359CF1A330A} =>.Microsoft
O42 - Logiciel: WinUsb CoInstallers - (.Nokia.) [HKLM] -- {B7D4B08A-9D89-4369-B51C-92CF8C03D2F8} =>.Nokia
O42 - Logiciel: WinUSB Compatible ID Drivers - (.Microsoft.) [HKLM] -- {A4A0B236-6046-4CAB-8177-1EAF61112C75} =>.Microsoft
O42 - Logiciel: WinUSB Drivers ext - (.Microsoft.) [HKLM] -- {29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC} =>.Microsoft
O42 - Logiciel: WinX MediaTrans - (.Digiarty Software, Inc..) [HKLM] -- WinX MediaTrans =>.Digiarty, Inc.®
O42 - Logiciel: Your Uninstaller! 7 - (.URSoft, Inc..) [HKLM] -- YU2010_is1 =>.URSoft, Inc.®
O42 - Logiciel: حزمة برامج تشغيل Windows - Microsoft USBDevice (02/19/2016 1.0.0.0) - (.Microsoft.) [HKLM] -- 01D4AA89568B59E5941907D403E3B682EE413AB7 =>.Microsoft Windows®
O42 - Logiciel: حزمة برامج تشغيل Windows - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2 - (.Nokia.) [HKLM] -- 17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382 =>.Microsoft Windows®
O42 - Logiciel: دعم تطبيقات Apple‏ (32 بت) - (.Apple Inc..) [HKLM] -- {9BA1A894-B42F-4805-BC8C-349C905A3930} =>.Apple Inc.

---\\ HKCU & HKLM Software Keys (76) - 28s
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\ATI Technologies =>.ATI Technologies
HKLM\SOFTWARE\Auslogics =>.Auslogics
HKLM\SOFTWARE\Baidu Security =>.Baidu Technology
HKLM\SOFTWARE\CBSTEST =>.CBS Test
HKLM\SOFTWARE\ESET =>.ESET
HKLM\SOFTWARE\FixCleaner
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\InstalledOptions =>.Installed Options
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\Internet Download Manager =>.Tonec Inc
HKLM\SOFTWARE\Licenses =>.Microsoft Corporation
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\Motorola =>.Motorola
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Nokia =>.Nokia
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OEM =>.OEM
HKLM\SOFTWARE\PC Connectivity Solution =>.PC Connectivity Solution
HKLM\SOFTWARE\PCSuite =>.Nokia Inc.
HKLM\SOFTWARE\PeaZip
HKLM\SOFTWARE\PeaZip_additional
HKLM\SOFTWARE\Piriform =>.Piriform
HKLM\SOFTWARE\qksee =>.Superfluous.TaiwanShuiMu
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\RTLSetup =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\SAMSUNG =>.Samsung Electronics
HKLM\SOFTWARE\Skype =>.Skype
HKLM\SOFTWARE\SlimWare Utilities Inc =>.Superfluous.SlimWareUtilities
HKLM\SOFTWARE\SlimWare Utilities, Inc. =>.Superfluous.SlimWareUtilities
HKLM\SOFTWARE\Software =>.Unknow
HKLM\SOFTWARE\Sonic =>.Sonic
HKLM\SOFTWARE\Synaptics =>.Synaptics
HKLM\SOFTWARE\VideoLAN =>.VideoLAN
HKLM\SOFTWARE\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\WafCX =>.WafCX
HKLM\SOFTWARE\windowsdoctor
HKLM\SOFTWARE\WinPcap =>.Riverbed Technology
HKLM\SOFTWARE\Wondershare =>.Wondershare
HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\Baidu =>.Baidu
HKCU\SOFTWARE\Baidu Security =>.Baidu Technology
HKCU\SOFTWARE\CrystalIdea Software =>.CrystalIdea Software
HKCU\SOFTWARE\Digiarty =>.Digiarty
HKCU\SOFTWARE\DownloadManager =>.DownloadManager
HKCU\SOFTWARE\ESET =>.ESET
HKCU\SOFTWARE\FixCleaner
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\IM =>Adware.InstallCore
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\iMazing
HKCU\SOFTWARE\KasperskyLab =>.Kaspersky Labs
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\MediaTrans =>.MediaTrans
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\O&O =>.O&O Software GmbH
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Samsung =>.Samsung Electronics
HKCU\SOFTWARE\SharewareOnSale =>.SharewareOnSale
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\SlimWare Utilities Inc =>.Superfluous.SlimWareUtilities
HKCU\SOFTWARE\Synaptics =>.Synaptics
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\URSoft =>.URSoft
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wondershare =>.Wondershare
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Yandex =>.Yandex

---\\ Contents of the Common Files folders (185) - 18s
O43 - CFD: 25/02/2017 - [] D -- C:\Program Files\0127223086 =>.ESET, spol. s r.o.®
O43 - CFD: 21/03/2017 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 02/12/2016 - [] D -- C:\Program Files\Auslogics =>.Auslogics
O43 - CFD: 14/02/2017 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.
O43 - CFD: 10/05/2016 - [] AD -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 21/03/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files\DIFX =>.Microsoft Corporation
O43 - CFD: 09/01/2017 - [] D -- C:\Program Files\Digiarty =>.Digiarty, Inc.®
O43 - CFD: 14/02/2017 - [] D -- C:\Program Files\DigiDNA {5EC0D2A5BE94409D6063378AE31D3C49} =>.DigiDNA
O43 - CFD: 26/11/2016 - [0] D -- C:\Program Files\DriverUpdate
O43 - CFD: 08/06/2016 - [] D -- C:\Program Files\DVD Maker =>.Aone Software
O43 - CFD: 25/02/2017 - [] D -- C:\Program Files\ESET =>.ESET, spol. s r.o.®
O43 - CFD: 22/04/2016 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 10/06/2016 - [] D -- C:\Program Files\hohobnd =>.Superfluous.HohoSearch
O43 - CFD: 25/11/2016 - [] HD -- C:\Program Files\InstallShield Installation Information =>.InstallShield Software
O43 - CFD: 25/02/2017 - [] D -- C:\Program Files\Internet Download Manager =>.Tonec Inc
O43 - CFD: 16/03/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 12/03/2017 - [] D -- C:\Program Files\Kaspersky Lab =>.Kaspersky Lab
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files\Microsoft Care Suite =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 29/04/2016 - [] D -- C:\Program Files\NirSoft =>.NirSoft
O43 - CFD: 24/12/2016 - [] D -- C:\Program Files\Nokia =>.Nokia
O43 - CFD: 24/12/2016 - [] AD -- C:\Program Files\PC Connectivity Solution =>.Nokia Inc.
O43 - CFD: 22/04/2016 - [] AD -- C:\Program Files\PeaZip =>.Giorgio Tani
O43 - CFD: 25/04/2016 - [] D -- C:\Program Files\QQBrowser =>.Superfluous.Tencent
O43 - CFD: 25/11/2016 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 29/09/2016 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 13/12/2016 - [0] D -- C:\Program Files\SafeIP =>.SafeIP
O43 - CFD: 07/10/2016 - [] D -- C:\Program Files\Samsung =>.Samsung Electronics
O43 - CFD: 25/11/2016 - [0] D -- C:\Program Files\SlimCleaner Plus
O43 - CFD: 29/09/2016 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated®
O43 - CFD: 29/09/2016 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 25/02/2017 - [] D -- C:\Program Files\Uninstall Tool {50C7A8BB13DE14B488FE7CFCEE2FC268}
O43 - CFD: 22/04/2016 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 12/06/2016 - [] D -- C:\Program Files\VS Revo Group =>.VS Revo Group
O43 - CFD: 13/04/2017 - [] RD -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 29/04/2017 - [] AD -- C:\Program Files\Windows Doctor
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files\Windows Kits =>.Microsoft Corporation
O43 - CFD: 16/03/2017 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 28/10/2016 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 13/04/2017 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 25/02/2017 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 21/09/2016 - [] D -- C:\Program Files\WinPcap =>.Riverbed Technology
O43 - CFD: 10/03/2017 - [] D -- C:\Program Files\Wondershare =>.Wondershare
O43 - CFD: 22/04/2016 - [] AD -- C:\Program Files\Your Uninstaller! 7 =>.Ursoftware
O43 - CFD: 16/03/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 13/04/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 28/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 02/12/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics =>.Auslogics
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 25/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET =>.ESET
O43 - CFD: 22/04/2016 - [0] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMazing
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc
O43 - CFD: 16/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip =>.Giorgio Tani
O43 - CFD: 10/05/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qksee =>.Superfluous.TaiwanShuiMu
O43 - CFD: 13/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung =>.Samsung Electronics
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 25/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Tool
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 29/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Doctor
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap =>.Riverbed Technology
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7 =>.Ursoftware
O43 - CFD: 03/05/2016 - [] D -- C:\ProgramData\6winp6
O43 - CFD: 21/03/2017 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 08/06/2016 - [] D -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 02/12/2016 - [] D -- C:\ProgramData\Auslogics =>.Auslogics
O43 - CFD: 09/08/2016 - [0] D -- C:\ProgramData\Baidu Security =>.Baidu Technology
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\Comms =>.Microsoft Corporation
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\DigiDNA =>.DigiDNA
O43 - CFD: 25/02/2017 - [] D -- C:\ProgramData\ESET =>.ESET
O43 - CFD: 12/12/2016 - [] D -- C:\ProgramData\HTC =>.HTC
O43 - CFD: 22/04/2016 - [0] D -- C:\ProgramData\IDM =>.IDM
O43 - CFD: 27/08/2016 - [] D -- C:\ProgramData\Installations =>.Unknow
O43 - CFD: 12/03/2017 - [0] D -- C:\ProgramData\Kaspersky Lab =>.Kaspersky Lab
O43 - CFD: 12/03/2017 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files =>.Kaspersky Lab
O43 - CFD: 12/12/2016 - [] D -- C:\ProgramData\LGE =>.LGE
O43 - CFD: 24/12/2016 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 24/12/2016 - [] D -- C:\ProgramData\Nokia =>.Nokia
O43 - CFD: 21/12/2016 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 09/06/2016 - [] D -- C:\ProgramData\PC Suite =>.Nokia Inc.
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 29/07/2016 - [] D -- C:\ProgramData\Samsung =>.Samsung Electronics
O43 - CFD: 09/01/2017 - [] D -- C:\ProgramData\SharewareOnSale Notifier
O43 - CFD: 24/12/2016 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 25/11/2016 - [] D -- C:\ProgramData\SlimWare Utilities, Inc =>.Superfluous.SlimWareUtilities
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 01/05/2017 - [0] AD -- C:\ProgramData\TEMP =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 10/03/2017 - [] D -- C:\ProgramData\wondershare =>.Wondershare
O43 - CFD: 22/04/2016 - [0] SHD -- C:\ProgramData\سطح المكتب
O43 - CFD: 22/04/2016 - [0] SHD -- C:\ProgramData\قائمة ابدأ
O43 - CFD: 21/03/2017 - [] D -- C:\Program Files\Common Files\Adobe =>.Adobe
O43 - CFD: 14/02/2017 - [] D -- C:\Program Files\Common Files\Apple =>.Apple Inc.
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files\Common Files\EagleGet =>.EagleGet
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files\Common Files\Microsoft =>.Microsoft Corporation
O43 - CFD: 24/12/2016 - [] D -- C:\Program Files\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 24/12/2016 - [] D -- C:\Program Files\Common Files\Nokia =>.Nokia
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\Program Files\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\Program Files\Common Files\System =>.Microsoft Corporation
O43 - CFD: 10/03/2017 - [] D -- C:\Program Files\Common Files\Wondershare =>.Wondershare
O43 - CFD: 21/03/2017 - [] D -- C:\Users\PC\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 14/02/2017 - [] D -- C:\Users\PC\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 25/02/2017 - [] D -- C:\Users\PC\AppData\Roaming\CrystalIdea Software =>.CrystalIdea Software
O43 - CFD: 09/01/2017 - [] D -- C:\Users\PC\AppData\Roaming\DearMob
O43 - CFD: 09/01/2017 - [] D -- C:\Users\PC\AppData\Roaming\Digiarty =>.Digiarty
O43 - CFD: 02/05/2017 - [] D -- C:\Users\PC\AppData\Roaming\DMCache =>.DMCache
O43 - CFD: 05/03/2017 - [] D -- C:\Users\PC\AppData\Roaming\ESET =>.ESET
O43 - CFD: 01/05/2017 - [] D -- C:\Users\PC\AppData\Roaming\Google =>.Google
O43 - CFD: 01/05/2017 - [] D -- C:\Users\PC\AppData\Roaming\IDM =>.IDM
O43 - CFD: 14/02/2017 - [] D -- C:\Users\PC\AppData\Roaming\iMazing
O43 - CFD: 29/09/2016 - [] SD -- C:\Users\PC\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 25/02/2017 - [] D -- C:\Users\PC\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 24/12/2016 - [] D -- C:\Users\PC\AppData\Roaming\PC Suite =>.Nokia Inc.
O43 - CFD: 12/01/2017 - [] D -- C:\Users\PC\AppData\Roaming\PeaZip =>.Giorgio Tani
O43 - CFD: 07/10/2016 - [] D -- C:\Users\PC\AppData\Roaming\Samsung =>.Samsung Electronics
O43 - CFD: 24/12/2016 - [] D -- C:\Users\PC\AppData\Roaming\Skype =>.Skype
O43 - CFD: 01/08/2016 - [] D -- C:\Users\PC\AppData\Roaming\Subhra Das Gupta
O43 - CFD: 30/07/2016 - [] D -- C:\Users\PC\AppData\Roaming\URSoft =>.URSoft
O43 - CFD: 01/05/2017 - [] D -- C:\Users\PC\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 19/03/2017 - [] D -- C:\Users\PC\AppData\Roaming\Wondershare =>.Wondershare
O43 - CFD: 17/11/2016 - [] D -- C:\Users\PC\AppData\Roaming\Yandex =>.Yandex
O43 - CFD: 02/05/2017 - [] D -- C:\Users\PC\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 22/04/2016 - [] D -- C:\Users\PC\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
O43 - CFD: 08/06/2016 - [0] D -- C:\Users\PC\AppData\Local\ActiveSync =>.Microsoft Corporation
O43 - CFD: 21/03/2017 - [] D -- C:\Users\PC\AppData\Local\Adobe =>.Adobe
O43 - CFD: 12/03/2017 - [] D -- C:\Users\PC\AppData\Local\CEF =>.CEF
O43 - CFD: 08/06/2016 - [] D -- C:\Users\PC\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\Users\PC\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 18/09/2016 - [0] D -- C:\Users\PC\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 19/04/2017 - [] D -- C:\Users\PC\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 14/02/2017 - [] D -- C:\Users\PC\AppData\Local\DigiDNA =>.DigiDNA
O43 - CFD: 08/06/2016 - [] D -- C:\Users\PC\AppData\Local\ESET =>.ESET
O43 - CFD: 29/10/2016 - [] D -- C:\Users\PC\AppData\Local\Google =>.Google
O43 - CFD: 03/05/2016 - [] D -- C:\Users\PC\AppData\Local\GWX =>.GWX
O43 - CFD: 29/09/2016 - [] D -- C:\Users\PC\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 13/06/2016 - [] D -- C:\Users\PC\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 09/06/2016 - [] D -- C:\Users\PC\AppData\Local\Nokia =>.Nokia
O43 - CFD: 25/02/2017 - [] D -- C:\Users\PC\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 22/04/2016 - [] D -- C:\Users\PC\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 08/06/2016 - [] D -- C:\Users\PC\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 25/11/2016 - [] D -- C:\Users\PC\AppData\Local\SlimWare Utilities Inc =>.Superfluous.SlimWareUtilities
O43 - CFD: 02/05/2017 - [] D -- C:\Users\PC\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 08/06/2016 - [] D -- C:\Users\PC\AppData\Local\TileDataLayer =>.Microsoft Corporation
O43 - CFD: 29/04/2016 - [] D -- C:\Users\PC\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 10/03/2017 - [] D -- C:\Users\PC\AppData\Local\Wondershare =>.Wondershare
O43 - CFD: 17/11/2016 - [] D -- C:\Users\PC\AppData\Local\Yandex =>.Yandex
O43 - CFD: 02/05/2017 - [] D -- C:\Users\PC\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 22/04/2016 - [0] D -- C:\Users\PC\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] RD -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 13/04/2017 - [] RD -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 09/01/2017 - [] D -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Digiarty =>.Digiarty
O43 - CFD: 29/09/2016 - [] D -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc
O43 - CFD: 16/07/2016 - [] D -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 13/04/2017 - [] RD -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 29/09/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 30/09/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DataSharing =>.DataSharing
O43 - CFD: 25/02/2017 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\ESET =>.ESET
O43 - CFD: 29/09/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/02/2017 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 13/12/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\SafeIPS =>.Safe IPS
O43 - CFD: 29/09/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 14/02/2017 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 07/03/2017 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\ESET =>.ESET
O43 - CFD: 11/03/2017 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
O106 - SIOI: IDM Shell Extension [ IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.®
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - مكتبة DLL الخاصة بملحق Shell للتخزين المحسّ.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation

---\\ Image File Execution Options (19) - 5s
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows®
O50 - IFEO:C:\Windows\System32\drvinst.exe - (.Microsoft Corporation - Driver Installation Module.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\FlashPlayerApp.exe - (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) [DisableExceptionChainValidation\\0] =>.Microsoft Windows Third Party Application Component®
O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - ‎‎الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - ‎‎أداة التثبيت المساعدة غير المراقبة لـ IE.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - ‎‎Microsoft Management Console.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\MRT.exe - (.Microsoft Corporation - أداة إزالة البرامج الضارة لـ Microsoft Wind.) [CFGOptions\\1] =>.Microsoft Corporation®
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - ‎‎مضيف تطبيق Microsoft (R) HTML.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - مضيف Windows Presentation Foundation.) [MitigationOptions\\1118481] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Windows host process (Rundll32).) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Windows®
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Spooler SubSystem App.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Spooler SubSystem App.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - ‎‎عملية مضيفة لخدمات Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation

---\\ ShareTools MSconfig StartupReg (1) - 0s
O53 - SMSR:HKLM\...\startupreg\CCleaner Monitoring [Key] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd

---\\ System Drivers List (57) - 21s
O58 - SDL:2016/07/16 11:24:54 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [85856] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1038176] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [75104] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [215392] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [22880] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [116576] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:52 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athwn.sys [3228672] =>.Qualcomm Atheros Communications, Inc.
O58 - SDL:2016/07/16 11:24:54 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [8192] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2016/07/16 11:24:54 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [8192] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2016/01/06 22:37:26 A . (.eagleGet - eagleGet Network Filter.) -- C:\WINDOWS\System32\drivers\eagleGet.sys [61752] {5EAA8EA6DE5A4AE14D8CEF6B69520D27} =>.EagleGet
O58 - SDL:2017/01/17 09:15:38 A . (.ESET - Amon monitor.) -- C:\WINDOWS\System32\drivers\eamonm.sys [113544] =>.ESET, spol. s r.o.®
O58 - SDL:2017/01/17 09:15:38 A . (.ESET - Devmon monitor.) -- C:\WINDOWS\System32\drivers\edevmon.sys [91104] =>.ESET, spol. s r.o.®
O58 - SDL:2017/01/17 09:15:38 A . (.ESET - ESET ELAM driver.) -- C:\WINDOWS\System32\drivers\eelam.sys [14976] =>.Microsoft Windows Early Launch Anti-malware Publisher®
O58 - SDL:2017/01/17 09:15:38 A . (.ESET - ESET Helper driver.) -- C:\WINDOWS\System32\drivers\ehdrv.sys [140984] =>.ESET, spol. s r.o.®
O58 - SDL:2017/01/17 09:15:38 A . (.ESET - ESET OPP Keyboard Filter.) -- C:\WINDOWS\System32\drivers\ekbdflt.sys [43920] =>.ESET, spol. s r.o.®
O58 - SDL:2017/01/17 09:15:38 A . (.ESET - ESET Personal Firewall driver.) -- C:\WINDOWS\System32\drivers\epfw.sys [69304] =>.ESET, spol. s r.o.®
O58 - SDL:2016/11/15 23:21:35 A . (.ESET - Epfw NDIS LightWeight Filter.) -- C:\WINDOWS\System32\drivers\epfwlwf.sys [52872] =>.ESET, spol. s r.o.®
O58 - SDL:2017/01/17 09:15:38 A . (.ESET - ESET Personal Firewall driver.) -- C:\WINDOWS\System32\drivers\epfwwfp.sys [81264] =>.ESET, spol. s r.o.®
O58 - SDL:2017/04/30 03:15:20 A . (.ESET - ESET Cleaners Driver.) -- C:\WINDOWS\System32\drivers\ESETCleanersDriver.sys [91320] =>.ESET, spol. s r.o.®
O58 - SDL:2016/07/16 11:24:54 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [56672] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:57 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [25600] =>.Intel(R) Corporation
O58 - SDL:2016/07/16 11:24:57 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [66560] =>.Intel(R) Corporation
O58 - SDL:2016/07/16 11:24:55 A . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\WINDOWS\System32\drivers\iaiogpio.sys [22016] =>.Intel Corporation
O58 - SDL:2016/07/16 11:24:54 A . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\WINDOWS\System32\drivers\iaioi2c.sys [61936] =>.Intel Corporation
O58 - SDL:2016/07/16 11:24:54 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [524640] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [333664] =>.Microsoft Windows®
O58 - SDL:2016/10/17 18:35:48 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\WINDOWS\System32\drivers\idmwfp.sys [147120] =>.Tonec Inc.®
O58 - SDL:2012/03/23 18:09:38 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd32.sys [9036288] =>.Intel Corporation
O58 - SDL:2016/07/16 11:24:54 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [94048] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [89952] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [85856] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [69472] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [52064] =>.Microsoft Windows®
O58 - SDL:2016/10/05 12:46:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [56672] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [464736] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [58208] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:25:01 A . (...) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976] =>.Microsoft Corporation
O58 - SDL:2013/03/01 04:48:42 A . (.Riverbed Technology, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\WINDOWS\System32\drivers\npf.sys [36600] =>.Riverbed Technology, Inc.®
O58 - SDL:2016/07/16 11:24:54 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [119136] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [142176] =>.Microsoft Windows®
O58 - SDL:2012/10/17 13:53:46 A . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys [19072] =>.Nokia
O58 - SDL:2016/07/16 11:24:54 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [51552] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [54624] =>.Microsoft Windows®
O58 - SDL:2000/01/01 03:00:00 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 32-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x86.sys [745728] =>.Realtek Semiconductor Corp®
O58 - SDL:2016/07/16 11:24:54 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [41312] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:54 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [79200] =>.Microsoft Windows®
O58 - SDL:2016/01/07 23:15:24 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_AMDASF_Aux.sys [34480] =>.Synaptics Incorporated®
O58 - SDL:2016/01/07 23:15:24 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [35504] =>.Synaptics Incorporated®
O58 - SDL:2016/01/07 23:15:24 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel_Aux.sys [35504] =>.Synaptics Incorporated®
O58 - SDL:2016/07/16 11:24:55 A . (.Motorola Inc. - Motorola SM56 Modem WDM Driver.) -- C:\WINDOWS\System32\drivers\smserial.sys [1068032] =>.Motorola Inc.
O58 - SDL:2017/01/16 09:26:40 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [109184] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2017/01/16 09:26:40 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [147072] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/07/16 11:24:55 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [26976] =>.Microsoft Windows®
O58 - SDL:2016/11/26 06:01:26 A . (...) -- C:\WINDOWS\System32\drivers\SWDUMon.sys [11232] =>.SlimWare Utilities Inc.®
O58 - SDL:2016/01/07 23:15:24 A . (.Synaptics Incorporated - Synaptics Touchpad Win32 Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [473776] =>.Synaptics Incorporated®
O58 - SDL:2016/07/16 11:24:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [149856] =>.Microsoft Windows®
O58 - SDL:2016/07/16 11:24:55 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [276832] =>.Microsoft Windows®

---\\ Last modified or created user files (1) - 12s
O61 - LFC: 2017/05/02 14:12:07 A . (..) -- C:\Users\PC\Downloads\Programs\ServicesRepair.exe [4009167]

---\\ File Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Start Menu Internet (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - ‎‎الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - ‎‎الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - ‎‎الأداة المساعدة للتهيئة لكل مستخدم لـ IE.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Search Browser Infection (3) - 0s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] {76DEFAE6-09B2-40B2-8F8A-5A6A5D5CE4EB} - (Yahoo!) - http://search.yahoo.com/ =>.Yahoo! Inc.
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ Search Svchost Services (45) - 1s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - خدمة نشر شهادة البطاقة الذكية لـ Microsoft.) -- C:\Windows\System32\certprop.dll [161792] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - خدمة نشر شهادة البطاقة الذكية لـ Microsoft.) -- C:\Windows\System32\certprop.dll [161792] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\System32\srvsvc.dll [234496] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - عميل نهج المجموعة.) -- C:\Windows\System32\gpsvc.dll [1098752] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\IKEEXT.DLL [740864] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [827392] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - مكتبة الارتباط الديناميكي الخاصة بخدمة تسجي.) -- C:\Windows\System32\seclogon.dll [24576] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [102912] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\System32\iscsiexe.dll [117760] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [96768] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - خدمة جدولة المهام.) -- C:\Windows\System32\schedsvc.dll [733184] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [184832] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\Windows\System32\browser.dll [108032] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [331776] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - تقارير المشاكل وحلولها.) -- C:\Windows\System32\wercplsupport.dll [68608] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [120320] =>.Microsoft Corporation
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\Windows\System32\dcpsvc.dll [155648] =>.Microsoft Corporation
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\Windows\System32\RDXService.dll [473600] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [47104] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [310272] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows Managent Service DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [298496] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\Windows\System32\DeviceSetupManager.dll [159232] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\Windows\System32\NcaSvc.dll [144384] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\System32\themeservice.dll [55296] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [828928] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation Service.) -- C:\Windows\System32\lfsvc.dll [30208] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) -- C:\Windows\System32\WpnService.dll [195584] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infrared Monitor.) -- C:\Windows\System32\irmon.dll [20992] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [93184] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [561664] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [431104] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\Sens.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [482304] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [254976] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - عامل Windows Update.) -- C:\Windows\System32\wuaueng.dll [1887232] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [797696] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - مكتبة الارتباط الديناميكي لخدمات Windows Sh.) -- C:\Windows\System32\shsvcs.dll [566784] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Core.) -- C:\Windows\System32\usocore.dll [425472] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [579072] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [268800] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [822272] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - إعدادات الطيران.) -- C:\Windows\System32\flightsettings.dll [517632] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - خدمة إعداد الشبكة.) -- C:\Windows\System32\NetSetupSvc.dll [182784] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\Windows\System32\wlidsvc.dll [1584128] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [704512] =>.Microsoft Corporation

---\\ Additional Scan (O88) (4) - 2s
C:\Program Files\hohobnd =>.Superfluous.HohoSearch
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qksee =>.Superfluous.TaiwanShuiMu
C:\ProgramData\SlimWare Utilities, Inc =>.Superfluous.SlimWareUtilities
C:\Users\PC\AppData\Local\SlimWare Utilities Inc =>.Superfluous.SlimWareUtilities

---\\ Summary of the elements found (5) - 0s
https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.Superfluous.Tencent
https://www.anti-malware.top/2016/05/05/superfluous-taiwanshuimu/ =>.Superfluous.TaiwanShuiMu
https://nicolascoolman.eu/2017/03/03/superfluous-slimwareutilities/ =>.Superfluous.SlimWareUtilities
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.HohoSearch

~ Unselected Options: O82,
~ End of the scan, 12103 items in 04mn56s (797)(0)