start
CreateRestorePoint:
CloseProcesses:
RemoveProxy:


HKU\S-1-5-21-2196797711-3197828652-2754627983-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
HKU\S-1-5-21-2196797711-3197828652-2754627983-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-02-18] (AO Kaspersky Lab)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
FF ProfilePath: C:\Users\chakiche mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\zw165ivc.default-1466456771736 [2017-05-04]
FF Extension: (No Name) - C:\Users\chakiche mohamed\AppData\Roaming\Mozilla\Firefox\Profiles\zw165ivc.default-1466456771736
S3 catchme; \??\C:\Users\CHAKIC~1\AppData\Local\Temp\catchme.sys [X] <==== ATTENTION
U2 ERSvc; no ImagePath
U2 IAStorDataMgrsvc; no ImagePath
U2 NIHardwareService; no ImagePath
U2 srService; no ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

Task: {0A1DDCB1-7D56-4AAE-AEA0-457361A9AFB5} - \{D199F0EA-C7BE-47D3-B5D8-0BF0F48EF724} -> No File <==== ATTENTION
Task: {1022CF2F-23A2-4397-A32B-B79F19CEA78E} - \NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {4AC2D0B3-DDFC-4CF0-972A-E5E1B5689224} - \{B4FF7BA1-DD19-416F-9810-3871F3B9A6A8} -> No File <==== ATTENTION
Task: {85CA2040-0416-4629-84F6-D8782E02A57B} - \NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {AC4B05C6-CF48-4E53-9DA7-E30DC0A660F0} - \NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {BA6F761D-B235-4143-84A4-49312BD87EF8} - \NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {D443E965-E3C5-4E4F-8A94-982F4A1B0749} - \{426E2FBB-D54D-449A-9082-025DEDEECA82} -> No File <==== ATTENTION
Task: {F36CCC13-DD34-4917-81B4-891DDA059D70} - \{F399B2C0-79D5-4A2F-848C-8DD73EC953BF} -> No File <==== ATTENTION
Task: {F42EC359-AB31-4D72-997E-F4E35B67E3A8} - \NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {FA1BA7A6-7541-4AE9-A271-9DEAFE1D1C30} - \NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {FEDDEAC9-58BA-4BB3-833E-02B5FAA55F1E} - \AdobeAAMUpdater-1.0-chakichemohamed-chakiche mohamed -> No File <==== ATTENTION



CMD: netsh winsock reset all
CMD: ipconfig /flushdns
hosts:
EmptyTemp:
Reboot:
end