~ ZHPDiag v2015.7.29.105 By Nicolas Coolman (2015/07/29) ~ Run by Win7 (Administrator) (2015/07/31 15:33:37) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ State version: Version OK ~ Mode: Scan ~ Report: C:\Users\Win7\Desktop\ZHPDiag.txt ~ Report: C:\Users\Win7\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ System startup: Normal (Normal boot) ~ Windows 7, 32-bit (Build 7600) ---\\ Internet Browsers (1) - 0s MSIE: Internet Explorer v8.0.7600.16385 ---\\ Windows Product Information (4) - 1s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK (Auto) Windows Activation Technologies : OK ---\\ System protection software (1) - 1s Malwarebytes Anti-Malware ÇáäÓÎÉ 2.1.8.1057 ---\\ System protection software (Superfluous) (1) - 1s ESET Online Scanner v3 ---\\ System optimization software (1) - 1s CCleaner v5.04 ---\\ Surveillance software (2) - 1s Adobe Flash Player 18 NPAPI Adobe Reader 9.1 ---\\ Information on the system (6) - 0s ~ Operating System: x86 Family 6 Model 15 Stepping 11, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 2060.792 MB (56% free) ~ System Restore: Activé (Enable) ~ System drive C: has 20 GB free of 68 GB ---\\ Connection to the system mode (3) - 0s ~ Computer Name: WIN7-PC ~ User Name: Win7 ~ Logged in as Administrator ---\\ Enumeration of the disk units (6) - 0s ~ Drive C: has 20 GB free of 68 GB (System) ~ Drive D: has 47 GB free of 80 GB ~ Drive E: has 47 GB free of 89 GB ~ Drive F: has 17 GB free of 88 GB ~ Drive G: has 22 GB free of 88 GB ~ Drive H: has 59 GB free of 60 GB ---\\ State of the Windows Security Center (13) - 0s [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Search Generic System Files (23) - 1s [MD5.15BC38A7492BEFE831966ADB477CF76F] - (.Microsoft Corporation - Windows Explorer.) () -- C:\Windows\Explorer.exe [2613248] [MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Windows host process (Rundll32).) () -- C:\Windows\System32\rundll32.exe [44544] [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Windows Start-Up Application.) () -- C:\Windows\System32\Wininit.exe [96256] [MD5.0D874F3BC751CC2198AF2E6783FB8B35] - (.Microsoft Corporation - Internet Extensions for Win32.) () -- C:\Windows\System32\wininet.dll [977920] [MD5.8EC6A4AB12B8F3759E21F8E3A388F2CF] - (.Microsoft Corporation - Windows Logon Application.) () -- C:\Windows\System32\Winlogon.exe [285696] [MD5.58C94EAE54BF0C5E2B80B2E5E7744D4C] - (.Microsoft Corporation - Software Licensing Library.) () -- C:\Windows\System32\sppcomapi.dll [193024] [MD5.DDC040FDB01EF1712A6B13E52AFB104C] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [338944] [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [21584] [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [70656] [MD5.BA6E70AA0E6091BC39DE29477D866A77] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [108544] [MD5.8E09E52EE2E3CEB199EF3DD99CF9E3FB] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [78336] [MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [108544] [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - i8042 Port Driver.) () -- C:\Windows\System32\drivers\i8042prt.sys [80896] [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [101888] [MD5.F4A054BE78AF7F410129C4B64B07DC9B] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [123392] [MD5.DD52A733BF4CA5AF84562A5E2F963B91] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [187904] [MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - NT File System Driver.) () -- C:\Windows\System32\drivers\ntfs.sys [1210432] [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Parallel Port Driver.) () -- C:\Windows\System32\drivers\Parport.sys [79360] [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] [MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [133120] [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [71168] [MD5.CB39E896A2A83702D1737BFD402B3542] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [74240] [MD5.58DF9D2481A56EDDE167E51B334D44FD] - (.Microsoft Corporation - Volume Shadow Copy Driver.) () -- C:\Windows\System32\drivers\volsnap.sys [245328] ---\\ Process running (12) - 1s [MD5.FB51E8E39E3FDB6757874653B743BE72] - (.ESET - ESET Service.) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1349576] [PID.1728] [MD5.9C7AF5E1C7EE3BC595E97EE7CB4634FD] - (.OpenVPN Technologies, Inc - PrivateTunnel Service.) -- C:\Program Files\OpenVPN Technologies\PrivateTunnel\ptservice.exe [17816] [PID.1228] [MD5.2002194586426E0AAB90B560673364CA] - (.OpenVPN Technologies, Inc - PrivateTunnel Core Daemon.) -- C:\Program Files\OpenVPN Technologies\PrivateTunnel\ptcore.exe [792984] [PID.1240] [MD5.E32CB001450D917D040E830483DA043C] - (.Greatis Software - Detects Rootkits in background.) -- C:\Program Files\UnHackMe\hackmon.exe [594192] [PID.1512] [MD5.0EE209370FAA94C2267B3B201D31E412] - (.Zbshareware Lab - USB Disk Security.) -- C:\Program Files\USB Disk Security\USBGuard.exe [687336] [PID.1948] [MD5.107AFCBC31E25314E56B69EEC25885BD] - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe [5088456] [PID.2164] [MD5.B4EE64488B0A47F3B9598DA6C8913CC7] - (...) -- C:\Program Files\Etisalat USB modem\UIExec.exe [139088] [PID.2188] [MD5.7E161EC1118BB3AD29C1F46FFD26CC36] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3898960] [PID.2248] [MD5.6CA83C69643E7BF144A428B7BDC7D630] - (.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer_Service.exe [5448976] [PID.2500] [MD5.B2A8FD2EB26F5616BF102FFE7436C2AF] - (...) -- C:\Program Files\Etisalat USB modem\AssistantServices.exe [269648] [PID.2664] [MD5.D6CFBEDBDECB1145C28CB18BA8476FB0] - (.VIA Technologies, Inc. - Service binary.) -- C:\Windows\System32\viakaraokesrv.exe [27768] [PID.2828] [MD5.E9C6EF9437ECB30911488F9313AD821A] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [269848] [PID.3112] ---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2) (20) - 1s G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://accounts.google.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients4.google.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://lh4.googleusercontent.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://localhost:26143/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com.eg/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com/ G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call G2 - GCE: Preference [User Data\Default] [ngpampappnmepgilojfohadhhmbhlaek] IDM Integration Module G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) (8) - 1s M0 - MFSP: prefs.js [Win7 - ehnkcsts.default] https://www.google.com.eg/ P2 - EXT FILE: (...) -- C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\ehnkcsts.default\extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi P2 - EXT FILE: (...) -- C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\ehnkcsts.default\extensions\jsdeobfuscator@adblockplus.org.xpi P2 - EXT FILE: (...) -- C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\ehnkcsts.default\extensions\support@platinumhideip.com.xpi P2 - EXT FILE: (...) -- C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\ehnkcsts.default\extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi =>PUP.Optional.Sambreel P2 - EXT: (.Internet Download Manager, Tonec Inc. - IDM CC.) -- C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\ehnkcsts.default\extensions\mozilla_cc@internetdownloadmanager.com P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_18_0_0_209.dll P2 - FPN: [HKLM] [@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6] - (.Yahoo.) -- C:\Program Files\Yahoo!\Shared\npYState.dll ---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) (14) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ---\\ Internet Explorer, Proxy Management (R5) (3) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ---\\ Hosts file redirection (O1) (1) - 1s ~ Le fichier hôte est sain (The hosts file is clean) (1) ---\\ Browser Helper Object (BHO) (O2) (1) - 0s O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll ---\\ Internet Explorer Toolbars (O3) (1) - 0s O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) ---\\ Auto loading programs from Registry and folders (O4) (11) - 0s O4 - HKLM\..\Run: [USB Security] . (.Zbshareware Lab - USB Disk Security.) -- C:\Program Files\USB Disk Security\USBGuard.exe O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe O4 - HKLM\..\Run: [BlueStacks Agent] . (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files\BlueStacks\HD-Agent.exe O4 - HKLM\..\Run: [egui] . (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe O4 - HKLM\..\Run: [UIExec] . (...) -- C:\Program Files\Etisalat USB modem\UIExec.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe O4 - HKUS\S-1-5-21-1163517497-134154996-3967426762-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe O4 - HKUS\S-1-5-21-1163517497-134154996-3967426762-1000\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe ---\\ Lop.com/Domain Hijackers (O17) (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23) (11) - 1s O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) . (.BlueStack Systems, Inc. - BlueStacks Service.) - C:\Program Files\BlueStacks\HD-Service.exe O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc. - BlueStacks Log Rotator Service.) - C:\Program Files\BlueStacks\HD-LogRotatorService.exe O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: ÎÏãÉ Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: (HomeGuard AMC) . (...) - C:\Program Files\HomeGuard\vglset.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Private Tunnel Core Service (ptservice) . (.OpenVPN Technologies, Inc - PrivateTunnel Service.) - C:\Program Files\OpenVPN Technologies\PrivateTunnel\ptservice.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: TeamViewer 10 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 10.) - C:\Program Files\TeamViewer\TeamViewer_Service.exe O23 - Service: UI Assistant Service (UI Assistant Service) . (...) - C:\Program Files\Etisalat USB modem\AssistantServices.exe O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) . (.VIA Technologies, Inc. - Service binary.) - C:\Windows\System32\viakaraokesrv.exe ---\\ Task Planned Automatically (O39) (25) - 4s [MD5.9B3355B29942AF67F014EA90CE1EA960] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [268976] [MD5.A75228DE9117A017BC7A3B44953B2648] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [5529880] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore1d093cb697691ec] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA1d093cb6a3a59fa] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648] [MD5.00000000000000000000000000000000] [APT] [{7CD3DF20-A2F0-4EAA-822F-93054E52DE18}] (...) -- c:\program files\mozilla firefox\firefox.exe (.not file.) [0] O39 - APT: Adobe Flash Player Updater - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [830] O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [826] O39 - APT: GoogleUpdateTaskMachineCore1d093cb697691ec - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d093cb697691ec.job [826] O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [830] O39 - APT: GoogleUpdateTaskMachineUA1d093cb6a3a59fa - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d093cb6a3a59fa.job [830] O39 - APT: Adobe Flash Player Updater - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3768] O39 - APT: CCleanerSkipUAC - (...) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2770] O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3574] O39 - APT: GoogleUpdateTaskMachineCore1d093cb697691ec - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d093cb697691ec [3574] O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3826] O39 - APT: GoogleUpdateTaskMachineUA1d093cb6a3a59fa - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d093cb6a3a59fa [3826] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\UnHackMe Task Scheduler [3308] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{28E48E93-150E-4DA0-85C6-56ABDEE4C99D} [3152] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{53CDEC58-B3F2-4E4A-ACFC-3F8A9F3F7CCB} [3086] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{5A7DEB45-9ED9-4B09-938E-E0F21A55F7BD} [3372] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{61F2C3D1-36BC-4C65-898F-342D28C29D65} [3120] O39 - APT: {7CD3DF20-A2F0-4EAA-822F-93054E52DE18} - (...) -- C:\Windows\System32\Tasks\{7CD3DF20-A2F0-4EAA-822F-93054E52DE18} [3130] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{BC91D16C-8FEC-4EEA-8FEB-52FE54191EE6} [3132] ---\\ Software installed (O42) (58) - 12s O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI O42 - Logiciel: BlueStacks App Player - (.BlueStack Systems, Inc..) [HKLM] -- BlueStacks App Player O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: DVBViewer Pro - (.Takki & Ahmad.) [HKLM] -- DVBViewer Pro_is1 O42 - Logiciel: EaseUS Partition Master 10.1 - (.EaseUS.) [HKLM] -- EaseUS Partition Master_is1 O42 - Logiciel: EaseUS Todo Backup Free 7.0 - (.CHENGDU YIWO Tech Development Co., Ltd.) [HKLM] -- EaseUS Todo Backup_is1 O42 - Logiciel: ESET Online Scanner v3 - (...) [HKLM] -- ESET Online Scanner O42 - Logiciel: Fausto - (...) [HKLM] -- Fausto O42 - Logiciel: ffdshow v1.3.4531 [2014-06-28] - (...) [HKLM] -- ffdshow_is1 O42 - Logiciel: FormatFactory 2.20 - (.Free Time.) [HKLM] -- FormatFactory O42 - Logiciel: HyperTerminal Private Edition v6.3 - (...) [HKLM] -- HTPE3 O42 - Logiciel: CyberLink YouCam 5 - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager O42 - Logiciel: LAV Filters 0.65 - (.Hendrik Leppkes.) [HKLM] -- lavfilters_is1 O42 - Logiciel: LINE - (.LINE Corporation.) [HKLM] -- LINE O42 - Logiciel: Malwarebytes Anti-Malware ÇáäÓÎÉ 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: MPEG2 Decoders - (...) [HKLM] -- MPEG2_Decoders O42 - Logiciel: PrivateTunnel - (.OpenVPN Technologies.) [HKLM] -- PrivateTunnel O42 - Logiciel: ProgDVB - (.Prog.) [HKLM] -- ProgDVB O42 - Logiciel: Strong Package Pre By JovianiJ - (...) [HKLM] -- Strong Package Pre By JovianiJV1.0 O42 - Logiciel: TeamViewer 10 - (.TeamViewer.) [HKLM] -- TeamViewer O42 - Logiciel: TMPGEnc Plus 2.524.63.181 - (...) [HKLM] -- TMPGEncPlus_is1 O42 - Logiciel: UnHackMe 7.76 - (.Greatis Software, LLC..) [HKLM] -- UnHackMe_is1 O42 - Logiciel: USB Disk Security - (.Zbshareware Lab.) [HKLM] -- USB Disk Security_is1 O42 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: WinWatermark 2.4.8 - (...) [HKLM] -- WinWatermark 2.4.8 O42 - Logiciel: CyberLink YouCam 5 - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: DVB Dream Stardvb Edition V2.6.0 - (.Stardvb, Inc..) [HKLM] -- {077BDA88-1E1A-4177-AC0B-68216E5971A4}_is1 O42 - Logiciel: TV 3L PC version 1.3.1.0 - (.Smart PC Soft, Ltd..) [HKLM] -- {0BBD0F9C-12E5-456A-A6FC-372324F3D082}_is1 O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79} O42 - Logiciel: HP USB Disk Storage Format Tool - (...) [HKLM] -- {0E0DF90C-D0BA-4C89-9262-AD78D1A3DE51} O42 - Logiciel: SDFormatter - (.SD Association.) [HKLM] -- {179324FF-7B16-4BA8-9836-055CAAEE4F08} O42 - Logiciel: Watermark Factory 2 - (.WatermarkFactory.com.) [HKLM] -- {208B53C3-FA83-40EF-BC07-ED61E78CC12A}}_is1 O42 - Logiciel: Skype™ 7.6 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} O42 - Logiciel: Java 7 Update 72 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F03217072FF} O42 - Logiciel: Snagit 10 - (.TechSmith Corporation.) [HKLM] -- {5BCC634A-58AD-42F9-B3C6-2EA52F81CF85} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} O42 - Logiciel: BlueStacks Notification Center - (.BlueStack Systems, Inc..) [HKLM] -- {87D0541E-7EB4-44AD-8A0D-D951152020C1} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} O42 - Logiciel: Etisalat USB modem - (.ZTE.) [HKLM] -- {93D34EE3-99B3-4DB1-8B0A-0A657466F90D} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} O42 - Logiciel: Hex Workshop v6.8 - (.BreakPoint Software.) [HKLM] -- {A36AC685-4435-4C16-861F-221231DE165D} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Adobe Reader 9.1 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A91000000001} O42 - Logiciel: Star(dvb) Codecs V3.6.0 - (.Stardvb, Inc..) [HKLM] -- {CA1B9ABE-0C40-43E0-8965-0DA206D56EBD}_is1 O42 - Logiciel: ãÚÑÖ ÇáÕæÑ - (.Microsoft Corporation.) [HKLM] -- {CF15F988-98D4-479F-9750-85A495BF8233} O42 - Logiciel: RawCodecs V3.4.0 - (.Stardvb, Inc..) [HKLM] -- {D22B2B49-D37A-4B35-A74C-97E889F8ED37}_is1 O42 - Logiciel: ESET Smart Security - (.ESET, spol s r. o..) [HKLM] -- {D66C9F03-5F7C-4A4F-A4D0-7D04FCD426AE} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: ALT DVB V2.2B 4115 R3 PowerVu Ready by ahmad - (.www.dvbsapplicationrepack.blogspot.com.) [HKLM] -- {EC9FA4E7-BE16-4B61-AB4B-1CB68C1ED38B}_is1 O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU] -- OneDriveSetup.exe ---\\ HKCU & HKLM Software Keys (154) - 12s HKLM\SOFTWARE\AC3_looker HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\AdsFix HKLM\SOFTWARE\AdwCleaner HKLM\SOFTWARE\Apple Inc. HKLM\SOFTWARE\ATI Technologies HKLM\SOFTWARE\BenVista HKLM\SOFTWARE\BlueStacks HKLM\SOFTWARE\BreakPoint HKLM\SOFTWARE\C+W_Mini HKLM\SOFTWARE\Caphyon HKLM\SOFTWARE\CM&V HKLM\SOFTWARE\CoreCodec HKLM\SOFTWARE\CyberLink HKLM\SOFTWARE\Debug HKLM\SOFTWARE\EASEUS HKLM\SOFTWARE\EaseUS Todo Backup HKLM\SOFTWARE\Elecard HKLM\SOFTWARE\Eset HKLM\SOFTWARE\g3n-h@ckm@n HKLM\SOFTWARE\GNU HKLM\SOFTWARE\Google HKLM\SOFTWARE\Greatis HKLM\SOFTWARE\Hewlett-Packard Company HKLM\SOFTWARE\HitmanPro HKLM\SOFTWARE\IM Providers HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Internet Download Manager HKLM\SOFTWARE\InterVideo HKLM\SOFTWARE\IObit HKLM\SOFTWARE\JavaSoft HKLM\SOFTWARE\JreMetrics HKLM\SOFTWARE\KasperskyLab HKLM\SOFTWARE\Lake HKLM\SOFTWARE\LINE Corporation HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Malwarebytes' Anti-Malware (Trial) HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\MPEG2_Decoders HKLM\SOFTWARE\Naver HKLM\SOFTWARE\NHN Corporation HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\OldTimer Tools HKLM\SOFTWARE\Panda Security HKLM\SOFTWARE\Panda Software HKLM\SOFTWARE\Pegasys Inc. HKLM\SOFTWARE\Piriform HKLM\SOFTWARE\PrivateTunnel HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\S3R521 HKLM\SOFTWARE\Shortcut HKLM\SOFTWARE\SIV HKLM\SOFTWARE\Skype HKLM\SOFTWARE\Sonic HKLM\SOFTWARE\SOSVirus HKLM\SOFTWARE\Stardvb HKLM\SOFTWARE\Swearware HKLM\SOFTWARE\Sysinternals HKLM\SOFTWARE\TeamViewer HKLM\SOFTWARE\TechSmith HKLM\SOFTWARE\The Silicon Realms Toolworks HKLM\SOFTWARE\TrendMicro HKLM\SOFTWARE\TuneUp HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\Volatile HKLM\SOFTWARE\VSO HKLM\SOFTWARE\WinRAR HKLM\SOFTWARE\yahoo HKLM\SOFTWARE\ZTE HKLM\SOFTWARE\ZTEUSBDriverFlag HKCU\SOFTWARE\AC3Filter HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AdsFix HKCU\SOFTWARE\AEK_KM2004@Yahoo.fr HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\ASProtect HKCU\SOFTWARE\BenVista HKCU\SOFTWARE\BreakPoint HKCU\SOFTWARE\BreakPoint License Manager HKCU\SOFTWARE\CoreAAC HKCU\SOFTWARE\CYBERLINK HKCU\SOFTWARE\Daum HKCU\SOFTWARE\DivX HKCU\SOFTWARE\DownloadManager HKCU\SOFTWARE\drpsu HKCU\SOFTWARE\DScaler5 HKCU\SOFTWARE\DSR Studio HKCU\SOFTWARE\EaseUS HKCU\SOFTWARE\ej-technologies HKCU\SOFTWARE\Elecard HKCU\SOFTWARE\EpmNewsInfo HKCU\SOFTWARE\ESET HKCU\SOFTWARE\Foxit Software HKCU\SOFTWARE\FreeTime HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\Greatis HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\Hilgraeve Inc HKCU\SOFTWARE\HubTech HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\iWisoft HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\KasperskyLab HKCU\SOFTWARE\kde.org HKCU\SOFTWARE\Lake HKCU\SOFTWARE\LAV HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\Malwarebytes' Anti-Malware HKCU\SOFTWARE\MCAFEE HKCU\SOFTWARE\MediaInfo HKCU\SOFTWARE\Moonlight HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\NewSoftware's HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Pegasys Inc. HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\Regrun HKCU\SOFTWARE\Shortcut HKCU\SOFTWARE\SIV HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SoftDawn HKCU\SOFTWARE\SoftVTU HKCU\SOFTWARE\Symantec HKCU\SOFTWARE\Sysinternals HKCU\SOFTWARE\TeamViewer HKCU\SOFTWARE\TechSmith HKCU\SOFTWARE\TeVii HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\TuneUp HKCU\SOFTWARE\UsbFix HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\VFPlugin HKCU\SOFTWARE\Viber HKCU\SOFTWARE\VSO HKCU\SOFTWARE\WebApp HKCU\SOFTWARE\Wget HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Xenocode HKCU\SOFTWARE\yahoo HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\JavaSoft ---\\ Contents of the Common Files folders (O43) (233) - 11s O43 - CFD: 2015/04/02 14:28:12 - [] D -- C:\Program Files\Adobe O43 - CFD: 2015/04/17 10:14:56 - [] D -- C:\Program Files\BlueStacks O43 - CFD: 2015/06/15 19:17:45 - [] D -- C:\Program Files\BreakPoint Software O43 - CFD: 2015/04/02 14:05:46 - [] D -- C:\Program Files\CCleaner O43 - CFD: 2015/07/10 19:54:47 - [] D -- C:\Program Files\Common Files O43 - CFD: 2015/02/11 00:08:34 - [] D -- C:\Program Files\CyberLink O43 - CFD: 2015/01/24 20:57:40 - [] D -- C:\Program Files\DriverUninstall O43 - CFD: 2015/04/28 14:46:52 - [] D -- C:\Program Files\DVBViewer O43 - CFD: 2009/07/14 10:50:29 - [] D -- C:\Program Files\DVD Maker O43 - CFD: 2014/10/20 15:15:45 - [] D -- C:\Program Files\EaseUS O43 - CFD: 2015/05/21 21:30:33 - [] D -- C:\Program Files\ESET O43 - CFD: 2015/06/20 16:17:53 - [] D -- C:\Program Files\Etisalat USB modem O43 - CFD: 2014/02/01 09:57:52 - [] D -- C:\Program Files\Fausto O43 - CFD: 2014/11/11 18:16:40 - [] D -- C:\Program Files\ffdshow O43 - CFD: 2013/12/12 00:43:17 - [] D -- C:\Program Files\FreeTime O43 - CFD: 2015/04/23 15:43:52 - [] D -- C:\Program Files\Google O43 - CFD: 2014/04/07 23:18:07 - [] D -- C:\Program Files\Growl for Windows O43 - CFD: 2014/09/24 02:45:39 - [] D -- C:\Program Files\HomeGuard O43 - CFD: 2015/06/18 12:38:05 - [] HD -- C:\Program Files\InstallShield Installation Information O43 - CFD: 2013/12/09 18:51:46 - [] D -- C:\Program Files\Intel O43 - CFD: 2015/05/04 16:36:19 - [] D -- C:\Program Files\Internet Download Manager O43 - CFD: 2009/07/14 07:56:49 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 2014/11/10 21:56:25 - [] D -- C:\Program Files\IObit O43 - CFD: 2014/06/18 08:55:42 - [] D -- C:\Program Files\Java O43 - CFD: 2015/05/02 15:57:54 - [] D -- C:\Program Files\LAV Filters O43 - CFD: 2015/06/30 18:39:32 - [] D -- C:\Program Files\LINE O43 - CFD: 2015/07/06 19:19:47 - [] D -- C:\Program Files\Malwarebytes Anti-Malware O43 - CFD: 2009/07/14 10:50:24 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 2014/01/20 13:22:34 - [] D -- C:\Program Files\Microsoft Office O43 - CFD: 2014/11/26 10:51:08 - [] D -- C:\Program Files\Microsoft OneDrive O43 - CFD: 2014/11/26 10:54:14 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 2014/04/04 15:41:50 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 2015/07/04 20:12:59 - [] D -- C:\Program Files\Mozilla Firefox O43 - CFD: 2015/04/24 15:38:43 - [] D -- C:\Program Files\MPEG2_Decoders O43 - CFD: 2009/07/14 07:52:30 - [] D -- C:\Program Files\MSBuild O43 - CFD: 2014/10/28 11:40:21 - [] D -- C:\Program Files\OpenVPN Technologies O43 - CFD: 2015/07/17 21:17:56 - [] D -- C:\Program Files\Panda Security O43 - CFD: 2013/12/09 18:25:20 - [] D -- C:\Program Files\PDF Reader O43 - CFD: 2015/04/01 19:31:02 - [] D -- C:\Program Files\ProgDVB O43 - CFD: 2009/07/14 07:52:30 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 2014/07/29 21:38:24 - [] D -- C:\Program Files\SDA O43 - CFD: 2013/12/17 17:25:13 - [] D -- C:\Program Files\Shortcut O43 - CFD: 2015/07/03 17:24:27 - [] RD -- C:\Program Files\Skype O43 - CFD: 2014/11/11 18:10:18 - [] D -- C:\Program Files\Stardvb O43 - CFD: 2015/05/02 15:33:19 - [] D -- C:\Program Files\TeamViewer O43 - CFD: 2013/12/17 13:40:16 - [] D -- C:\Program Files\TechSmith O43 - CFD: 2015/07/25 11:26:31 - [] D -- C:\Program Files\TMPGEnc Plus O43 - CFD: 2015/07/17 22:12:53 - [] D -- C:\Program Files\TV 3L PC O43 - CFD: 2015/07/19 18:31:41 - [] D -- C:\Program Files\UnHackMe O43 - CFD: 2009/07/14 07:53:23 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 2014/04/05 17:10:37 - [] D -- C:\Program Files\USB Disk Security O43 - CFD: 2014/11/10 23:50:47 - [] D -- C:\Program Files\VIA O43 - CFD: 2014/04/25 23:35:15 - [] D -- C:\Program Files\Video Watermark O43 - CFD: 2013/12/12 01:21:46 - [] D -- C:\Program Files\VideoLAN O43 - CFD: 2014/04/25 09:29:10 - [] D -- C:\Program Files\Watermark Factory 2 O43 - CFD: 2009/07/14 07:56:49 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 2009/07/14 10:50:04 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 2015/03/16 09:09:01 - [] D -- C:\Program Files\Windows Live O43 - CFD: 2009/07/14 07:56:49 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 2009/07/14 07:56:49 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 2015/03/31 14:23:03 - [] D -- C:\Program Files\Windows NT O43 - CFD: 2009/07/14 07:56:49 - [] D -- C:\Program Files\Windows Photo Viewer O43 - CFD: 2009/07/14 07:52:32 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 2009/07/14 07:56:49 - [] D -- C:\Program Files\Windows Sidebar O43 - CFD: 2013/12/09 19:41:45 - [] D -- C:\Program Files\WinRAR O43 - CFD: 2014/04/25 23:35:15 - [] D -- C:\Program Files\WinWatermark O43 - CFD: 2015/04/02 14:29:52 - [] D -- C:\Program Files\ZHPDiag O43 - CFD: 2015/07/20 13:57:52 - [] D -- C:\Program Files\ZHPFix O43 - CFD: 2013/12/09 17:54:49 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2013/12/09 17:54:53 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2015/05/01 12:15:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALT DVB V 2.2 B O43 - CFD: 2015/04/17 10:14:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks O43 - CFD: 2015/04/02 14:05:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 2015/02/11 00:08:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 5 O43 - CFD: 2015/04/28 14:43:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer O43 - CFD: 2014/10/20 14:58:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.1 O43 - CFD: 2014/10/20 15:18:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup Free 7.0 O43 - CFD: 2015/05/21 21:30:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET O43 - CFD: 2015/06/18 12:38:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Etisalat USB modem O43 - CFD: 2014/02/01 09:56:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fausto O43 - CFD: 2014/11/11 18:16:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow O43 - CFD: 2013/12/09 17:54:48 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2015/03/02 16:02:08 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2014/07/29 21:25:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hewlett-Packard Company O43 - CFD: 2014/02/07 22:54:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex Workshop 4.2 O43 - CFD: 2015/06/15 19:17:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex Workshop v6.8 O43 - CFD: 2014/12/31 17:14:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HyperTerminal Private Edition O43 - CFD: 2015/05/04 15:59:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 2014/11/10 23:53:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 2015/05/02 15:57:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters O43 - CFD: 2015/06/30 18:39:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LINE O43 - CFD: 2009/07/14 07:42:30 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/07/06 19:19:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 2014/01/20 13:23:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 2015/04/23 01:42:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPEG2 Decoders O43 - CFD: 2014/10/28 11:40:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN Technologies O43 - CFD: 2014/04/04 23:49:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProgDVB O43 - CFD: 2014/07/29 21:38:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SDFormatter O43 - CFD: 2013/12/17 17:25:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shortcut O43 - CFD: 2014/09/15 20:10:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 2013/12/17 13:40:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Snagit 10 O43 - CFD: 2014/11/11 18:10:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardvb O43 - CFD: 2015/07/04 18:24:05 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2015/07/25 14:29:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strong Package Pre By JovianiJ O43 - CFD: 2009/07/14 10:48:45 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 2015/07/25 11:23:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TMPGEnc Plus O43 - CFD: 2015/07/17 22:12:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TV 3L PC O43 - CFD: 2015/07/19 18:31:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe O43 - CFD: 2014/04/05 17:10:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB Disk Security O43 - CFD: 2014/10/21 11:12:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 2014/04/25 09:29:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Watermark Factory 2 O43 - CFD: 2014/11/26 10:58:15 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 2013/12/09 19:11:44 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2015/04/16 14:56:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger O43 - CFD: 2014/01/20 18:57:39 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2009/07/14 07:53:55 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2014/10/20 13:11:32 - [] D -- C:\ProgramData\ArcSoft O43 - CFD: 2015/04/17 10:15:05 - [] D -- C:\ProgramData\BlueStacks O43 - CFD: 2015/04/24 13:56:51 - [] D -- C:\ProgramData\CMUV O43 - CFD: 2014/10/20 15:17:48 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 2015/02/11 00:12:18 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 2009/07/14 07:53:55 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 2009/07/14 07:53:55 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2015/05/21 21:30:33 - [] D -- C:\ProgramData\ESET O43 - CFD: 2009/07/14 07:53:55 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 2014/03/21 07:52:17 - [] D -- C:\ProgramData\Growl O43 - CFD: 2015/07/14 19:31:02 - [] D -- C:\ProgramData\HitmanPro O43 - CFD: 2014/12/31 17:14:11 - [] D -- C:\ProgramData\HyperTerminal O43 - CFD: 2015/07/21 12:20:13 - [0] D -- C:\ProgramData\IDM O43 - CFD: 2015/02/11 00:04:13 - [] D -- C:\ProgramData\install_clap O43 - CFD: 2014/11/10 21:56:28 - [] D -- C:\ProgramData\IObit O43 - CFD: 2014/07/18 03:53:19 - [] D -- C:\ProgramData\Kaspersky Lab O43 - CFD: 2014/04/05 17:01:49 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 2014/06/23 08:41:56 - [] D -- C:\ProgramData\McAfee O43 - CFD: 2014/11/26 10:52:40 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2014/11/26 10:50:31 - [] D -- C:\ProgramData\Microsoft OneDrive O43 - CFD: 2013/12/09 19:14:41 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 2014/05/29 20:36:49 - [] D -- C:\ProgramData\PlatinumHideIP O43 - CFD: 2014/06/24 09:44:56 - [] D -- C:\ProgramData\ProgDVB O43 - CFD: 2015/07/09 19:47:09 - [] D -- C:\ProgramData\RogueKiller O43 - CFD: 2015/07/03 17:24:41 - [] D -- C:\ProgramData\Skype O43 - CFD: 2009/07/14 07:53:55 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 2014/01/08 00:17:21 - [] D -- C:\ProgramData\Sun O43 - CFD: 2013/12/17 13:40:26 - [] D -- C:\ProgramData\TechSmith O43 - CFD: 2009/07/14 07:53:55 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 2014/05/01 13:07:48 - [] D -- C:\ProgramData\Watermark Factory O43 - CFD: 2014/10/20 15:17:53 - [] SHD -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} O43 - CFD: 2014/01/20 13:11:53 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 2014/01/20 18:57:38 - [] D -- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 2014/10/20 13:11:32 - [] D -- C:\Program Files\Common Files\ArcSoft O43 - CFD: 2014/01/20 13:22:32 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 2015/04/28 14:43:08 - [] D -- C:\Program Files\Common Files\DVBViewer Shared O43 - CFD: 2014/10/20 13:11:36 - [] D -- C:\Program Files\Common Files\Elecard O43 - CFD: 2014/07/29 21:25:05 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 2013/12/10 17:04:38 - [] D -- C:\Program Files\Common Files\Intel O43 - CFD: 2014/06/18 08:55:50 - [] D -- C:\Program Files\Common Files\Java O43 - CFD: 2015/02/14 15:04:18 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 2009/07/14 05:37:05 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 2014/09/15 20:10:21 - [] D -- C:\Program Files\Common Files\Skype O43 - CFD: 2009/07/14 05:37:05 - [] D -- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 2014/01/20 13:22:12 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 2014/11/26 10:47:14 - [] D -- C:\Program Files\Common Files\Windows Live O43 - CFD: 2014/10/19 15:27:11 - [] D -- C:\Users\Win7\AppData\Roaming\AC3Filter O43 - CFD: 2014/07/27 11:27:16 - [] D -- C:\Users\Win7\AppData\Roaming\Adobe O43 - CFD: 2015/06/15 19:17:53 - [] D -- C:\Users\Win7\AppData\Roaming\BreakPoint Software O43 - CFD: 2015/02/11 00:10:26 - [] D -- C:\Users\Win7\AppData\Roaming\CyberLink O43 - CFD: 2015/07/31 12:52:56 - [] D -- C:\Users\Win7\AppData\Roaming\DMCache O43 - CFD: 2014/10/10 14:36:28 - [] D -- C:\Users\Win7\AppData\Roaming\dvdcss O43 - CFD: 2015/04/02 02:09:05 - [] D -- C:\Users\Win7\AppData\Roaming\ESET O43 - CFD: 2013/12/09 18:02:42 - [] D -- C:\Users\Win7\AppData\Roaming\Identities O43 - CFD: 2015/07/06 19:14:26 - [] D -- C:\Users\Win7\AppData\Roaming\IDM O43 - CFD: 2015/07/01 11:45:38 - [] D -- C:\Users\Win7\AppData\Roaming\imo.im O43 - CFD: 2014/11/10 21:56:27 - [] D -- C:\Users\Win7\AppData\Roaming\IObit O43 - CFD: 2013/12/09 19:38:07 - [] D -- C:\Users\Win7\AppData\Roaming\Macromedia O43 - CFD: 2013/12/11 21:43:24 - [] D -- C:\Users\Win7\AppData\Roaming\Malwarebytes O43 - CFD: 2009/07/14 10:48:45 - [0] D -- C:\Users\Win7\AppData\Roaming\Media Center Programs O43 - CFD: 2014/11/27 17:58:58 - [] SD -- C:\Users\Win7\AppData\Roaming\Microsoft O43 - CFD: 2013/12/16 21:56:24 - [] D -- C:\Users\Win7\AppData\Roaming\Mozilla O43 - CFD: 2013/12/10 01:04:14 - [] D -- C:\Users\Win7\AppData\Roaming\MPC-HC O43 - CFD: 2014/03/23 07:48:56 - [] D -- C:\Users\Win7\AppData\Roaming\Oracle O43 - CFD: 2014/05/29 20:36:49 - [] D -- C:\Users\Win7\AppData\Roaming\PlatinumHideIP O43 - CFD: 2014/11/11 20:46:09 - [] D -- C:\Users\Win7\AppData\Roaming\PotPlayerMini O43 - CFD: 2015/03/29 00:43:13 - [] D -- C:\Users\Win7\AppData\Roaming\rmi O43 - CFD: 2015/07/30 18:15:40 - [] D -- C:\Users\Win7\AppData\Roaming\Skype O43 - CFD: 2015/05/01 14:13:31 - [] D -- C:\Users\Win7\AppData\Roaming\TeamViewer O43 - CFD: 2015/07/30 18:22:11 - [] D -- C:\Users\Win7\AppData\Roaming\vlc O43 - CFD: 2014/04/24 23:19:19 - [] D -- C:\Users\Win7\AppData\Roaming\VSO O43 - CFD: 2013/12/09 18:04:55 - [] D -- C:\Users\Win7\AppData\Roaming\WinRAR O43 - CFD: 2014/04/05 17:10:41 - [] D -- C:\Users\Win7\AppData\Roaming\Zbshareware Lab O43 - CFD: 2015/07/31 15:33:44 - [] D -- C:\Users\Win7\AppData\Roaming\ZHP O43 - CFD: 2015/06/08 10:28:34 - [] D -- C:\Users\Win7\AppData\Local\Adobe O43 - CFD: 2013/12/09 18:02:27 - [0] SHD -- C:\Users\Win7\AppData\Local\Application Data O43 - CFD: 2015/04/02 14:30:06 - [] D -- C:\Users\Win7\AppData\Local\Apps O43 - CFD: 2014/10/20 13:11:32 - [] D -- C:\Users\Win7\AppData\Local\ArcSoft O43 - CFD: 2015/07/10 19:57:04 - [] D -- C:\Users\Win7\AppData\Local\assembly O43 - CFD: 2015/07/25 10:49:48 - [] D -- C:\Users\Win7\AppData\Local\CrashDumps O43 - CFD: 2015/02/11 00:09:46 - [] D -- C:\Users\Win7\AppData\Local\CyberLink O43 - CFD: 2015/04/02 14:30:06 - [0] D -- C:\Users\Win7\AppData\Local\Deployment O43 - CFD: 2015/07/19 02:44:33 - [] D -- C:\Users\Win7\AppData\Local\Diagnostics O43 - CFD: 2014/07/29 21:33:51 - [] D -- C:\Users\Win7\AppData\Local\Downloaded Installations O43 - CFD: 2015/07/19 02:44:34 - [0] D -- C:\Users\Win7\AppData\Local\ElevatedDiagnostics O43 - CFD: 2015/04/02 02:09:05 - [] D -- C:\Users\Win7\AppData\Local\ESET O43 - CFD: 2015/04/23 14:44:12 - [] D -- C:\Users\Win7\AppData\Local\Google O43 - CFD: 2014/03/21 07:52:17 - [] D -- C:\Users\Win7\AppData\Local\Growl O43 - CFD: 2013/12/09 18:02:27 - [0] SHD -- C:\Users\Win7\AppData\Local\History O43 - CFD: 2015/06/30 18:42:08 - [] D -- C:\Users\Win7\AppData\Local\LINE O43 - CFD: 2013/12/09 19:38:07 - [] D -- C:\Users\Win7\AppData\Local\Macromedia O43 - CFD: 2014/11/27 23:10:10 - [] D -- C:\Users\Win7\AppData\Local\Microsoft O43 - CFD: 2014/10/05 14:56:46 - [] D -- C:\Users\Win7\AppData\Local\Microsoft Games O43 - CFD: 2013/12/10 18:28:45 - [] D -- C:\Users\Win7\AppData\Local\Mozilla O43 - CFD: 2013/12/09 20:01:42 - [] D -- C:\Users\Win7\AppData\Local\Programs O43 - CFD: 2014/07/31 14:15:22 - [] D -- C:\Users\Win7\AppData\Local\Skype O43 - CFD: 2013/12/17 13:40:16 - [] D -- C:\Users\Win7\AppData\Local\TechSmith O43 - CFD: 2015/07/31 15:34:03 - [] D -- C:\Users\Win7\AppData\Local\Temp O43 - CFD: 2013/12/09 18:02:27 - [0] SHD -- C:\Users\Win7\AppData\Local\Temporary Internet Files O43 - CFD: 2015/02/28 16:56:37 - [] D -- C:\Users\Win7\AppData\Local\Viber O43 - CFD: 2014/10/20 21:46:29 - [] D -- C:\Users\Win7\AppData\Local\VirtualStore O43 - CFD: 2014/11/27 23:10:11 - [] D -- C:\Users\Win7\AppData\Local\Windows Live O43 - CFD: 2014/11/27 23:39:33 - [] D -- C:\Users\Win7\AppData\Local\Windows Live Writer O43 - CFD: 2015/04/16 14:55:57 - [] RD -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2013/12/09 18:02:50 - [] RD -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2015/04/24 15:47:54 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ALTDVB StarEdition III O43 - CFD: 2013/12/12 00:43:42 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory O43 - CFD: 2014/12/15 20:19:37 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2013/12/09 18:28:42 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2014/09/09 08:39:43 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomeGuard O43 - CFD: 2014/12/31 17:17:14 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperTerminal Private Edition O43 - CFD: 2015/05/04 15:59:55 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 2009/07/14 07:37:42 - [] RD -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/04/23 01:42:47 - [0] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MPEG2 Decoders O43 - CFD: 2015/04/30 13:01:00 - [] RD -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2015/07/25 11:23:40 - [0] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TMPGEnc Plus O43 - CFD: 2013/12/09 18:04:34 - [] D -- C:\Users\Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ System Drivers List (SDL) (O58) (91) - 77s O58 - SDL:2014/04/17 23:11:54 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\48230029.sys [107736] O58 - SDL:2015/07/11 16:41:50 A . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\System32\drivers\578812CF.sys [135264] O58 - SDL:2009/07/14 04:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] O58 - SDL:2009/07/14 04:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] O58 - SDL:2009/07/14 04:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] O58 - SDL:2009/07/14 04:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] O58 - SDL:2009/07/14 04:26:15 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79952] O58 - SDL:2009/07/14 04:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] O58 - SDL:2009/07/14 04:26:15 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [23616] O58 - SDL:2009/07/14 04:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] O58 - SDL:2009/07/14 04:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] O58 - SDL:2009/07/14 01:02:49 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] O58 - SDL:2009/07/14 01:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] O58 - SDL:2009/07/14 01:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] O58 - SDL:2009/07/14 03:57:25 A . (.Brother Industries Ltd. - Brotehr Serial I/F Driver (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] O58 - SDL:2009/07/14 01:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] O58 - SDL:2009/07/14 01:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] O58 - SDL:2009/07/14 01:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] O58 - SDL:2009/07/14 01:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] O58 - SDL:2011/04/14 06:47:40 A . (.CyberLink Corporation - CyberLink WebCam Virtual Driver.) -- C:\Windows\System32\drivers\clwvd.sys [27760] O58 - SDL:2009/07/14 04:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] O58 - SDL:2009/07/14 04:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] O58 - SDL:2015/01/30 16:13:30 A . (.ESET - Amon monitor.) -- C:\Windows\System32\drivers\eamonm.sys [193464] O58 - SDL:2015/01/30 16:13:30 A . (.ESET - ESET Helper driver.) -- C:\Windows\System32\drivers\ehdrv.sys [135808] O58 - SDL:2009/07/14 04:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] O58 - SDL:2015/01/30 16:13:30 A . (.ESET - ESET Personal Firewall driver.) -- C:\Windows\System32\drivers\epfw.sys [176448] O58 - SDL:2015/01/30 16:13:30 A . (.ESET - Epfw NDIS LightWeight Filter.) -- C:\Windows\System32\drivers\EpfwLWF.sys [37928] O58 - SDL:2015/01/30 16:13:30 A . (.ESET - ESET Personal Firewall driver.) -- C:\Windows\System32\drivers\epfwwfp.sys [51824] O58 - SDL:2015/03/30 15:36:01 A . (...) -- C:\Windows\System32\drivers\EsgScanner.sys [19984] O58 - SDL:2014/08/14 01:51:36 A . (.CHENGDU YIWO Tech Development Co., Ltd - Disk Backup Driver.) -- C:\Windows\System32\drivers\eubakup.sys [51784] O58 - SDL:2014/08/14 01:51:36 A . (...) -- C:\Windows\System32\drivers\EUBKMON.sys [41544] O58 - SDL:2014/08/14 01:51:36 A . (.CHENGDU YIWO Tech Development Co., Ltd - Disk Access Driver.) -- C:\Windows\System32\drivers\eudskacs.sys [15944] O58 - SDL:2014/08/14 01:51:36 A . (.CHENGDU YIWO Tech Development Co., Ltd - Disk Backup Image Preview Driver.) -- C:\Windows\System32\drivers\EuFdDisk.sys [186952] O58 - SDL:2009/07/14 01:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] O58 - SDL:2009/07/14 01:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] O58 - SDL:2009/07/14 04:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] O58 - SDL:2014/12/29 13:27:11 A . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\Windows\System32\drivers\HWiNFO32.SYS [23840] O58 - SDL:2009/07/14 04:20:36 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332352] O58 - SDL:2015/04/18 04:06:24 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys [122432] O58 - SDL:2014/11/10 23:51:01 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [9037312] O58 - SDL:2009/07/14 04:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] O58 - SDL:2014/11/10 23:46:10 A . (.Qualcomm Atheros Co., Ltd. - Qualcomm Atheros Ar81xx series PCI-E Gigabi.) -- C:\Windows\System32\drivers\L1C62x86.sys [109256] O58 - SDL:2009/07/14 04:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] O58 - SDL:2009/07/14 04:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] O58 - SDL:2009/07/14 04:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] O58 - SDL:2009/07/14 04:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] O58 - SDL:2011/07/12 10:44:48 A . (.MBB Incorporated - CDROM Filter.) -- C:\Windows\System32\drivers\massfilter.sys [9216] O58 - SDL:2015/06/18 08:41:36 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256] O58 - SDL:2015/06/18 08:41:42 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936] O58 - SDL:2015/07/07 16:39:48 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [98520] O58 - SDL:2009/07/14 04:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] O58 - SDL:2009/07/14 04:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] O58 - SDL:2015/06/18 08:41:54 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928] O58 - SDL:2009/07/14 04:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] O58 - SDL:2009/07/14 04:20:44 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117312] O58 - SDL:2009/07/14 04:20:44 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [142416] O58 - SDL:2015/07/19 18:31:41 A . (.Greatis Software - Partizan - Rootkit detector.) -- C:\Windows\System32\drivers\Partizan.sys [40304] O58 - SDL:2014/08/08 19:31:10 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\Windows\System32\drivers\ptun0901.sys [23552] O58 - SDL:2009/07/14 04:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] O58 - SDL:2009/07/14 04:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] O58 - SDL:2009/07/13 23:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] O58 - SDL:2009/07/14 04:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] O58 - SDL:2009/07/14 04:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] O58 - SDL:2009/07/14 04:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] O58 - SDL:2013/10/29 00:55:04 A . (.TeVii Technology Ltd. - .) -- C:\Windows\System32\drivers\TeViiS2.sys [166480] O58 - SDL:2015/07/09 11:22:19 A . (...) -- C:\Windows\System32\drivers\TrueSight.sys [35064] O58 - SDL:2015/06/16 16:40:00 A . (.Greatis Software, LLC. - UnHackMe Kernel Driver.) -- C:\Windows\System32\drivers\UnHackMeDrv.sys [12800] O58 - SDL:2014/11/10 23:50:29 A . (.VIA Technologies, Inc. - VIA High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\viahduaa.sys [564912] O58 - SDL:2009/07/14 04:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] O58 - SDL:2014/11/10 23:50:29 A . (.Creative Technology Ltd. - Creative Audio Driver.) -- C:\Windows\System32\drivers\VMfilt32.sys [25776] O58 - SDL:2009/07/14 04:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] O58 - SDL:2011/11/05 13:19:20 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys [107776] O58 - SDL:2011/11/05 13:19:20 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbnmea.sys [107776] O58 - SDL:2011/11/05 13:19:20 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbser6k.sys [107776] O58 - SDL:2009/07/14 00:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:2009/07/14 00:40:44 A . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:2013/03/07 10:49:20 A . (...) -- C:\Windows\System32\epmntdrv.sys [14920] O58 - SDL:2013/03/07 10:49:20 A . (...) -- C:\Windows\System32\EuGdiDrv.sys [9160] O58 - SDL:2009/07/14 00:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:2009/07/14 00:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:2009/07/14 00:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:2009/07/14 00:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:2009/07/14 00:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:2009/07/14 00:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:2009/07/14 00:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:2009/07/14 00:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:2009/07/14 00:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:2009/07/14 00:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:2009/07/14 00:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:2009/07/14 00:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:2009/07/14 00:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ---\\ Last modified or created user files (O61) (20) - 25s O61 - LFC: 2015/07/24 15:52:34 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\1.bin [524288] O61 - LFC: 2015/07/24 15:54:20 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\10.bin [1048576] O61 - LFC: 2015/07/24 15:54:09 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\11.bin [1048576] O61 - LFC: 2015/07/24 15:52:45 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\2.bin [524288] O61 - LFC: 2015/07/24 15:52:56 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\3.bin [524288] O61 - LFC: 2015/07/24 15:53:08 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\4.bin [524288] O61 - LFC: 2015/07/24 15:53:22 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\5.bin [524288] O61 - LFC: 2015/07/24 15:55:14 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\6.bin [851968] O61 - LFC: 2015/07/24 15:54:59 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\7.bin [1048576] O61 - LFC: 2015/07/24 15:54:42 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\8.bin [1048576] O61 - LFC: 2015/07/24 15:54:31 A . (..) -- C:\Users\Win7\Downloads\Compressed\4950\Snapshots(osd)\Õíäì 1\Õíäì 1\9.bin [1048576] O61 - LFC: 2107/12/31 21:01:36 A . (..) -- C:\Users\Win7\Desktop\atef tiger g20 okokfor qmax h2 mini 4.bin\atef tiger g20 okokG20_V4.10.05.bin [4194304] O61 - LFC: 2015/07/31 15:09:36 A . (.Tonec Inc..) -- C:\Users\Win7\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2.dll [332824] O61 - LFC: 2015/07/31 15:09:36 A . (.Tonec Inc..) -- C:\Users\Win7\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2_64.dll [460824] O61 - LFC: 2015/07/31 15:09:36 A . (.Tonec Inc..) -- C:\Users\Win7\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc.dll [34216] O61 - LFC: 2015/07/31 15:09:36 A . (.Tonec Inc..) -- C:\Users\Win7\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc64.dll [28512] O61 - LFC: 2015/07/31 15:09:36 A . (.Tonec Inc..) -- C:\Users\Win7\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc.dll [26648] O61 - LFC: 2015/07/31 15:09:36 A . (.Tonec Inc..) -- C:\Users\Win7\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc64.dll [31768] O61 - LFC: 2015/07/31 15:09:36 A . (.Tonec Inc..) -- C:\Users\Win7\AppData\Roaming\IDM\idmmzcc5\components\idmmzcc.dll [34216] O61 - LFC: 2015/07/31 15:14:51 A . (..) -- C:\Users\Win7\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849] ---\\ File Associations Shell Spawning (O67) (1) - 0s O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe ---\\ Start Menu Internet (SMI) (O68) (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\Windows\System32\ie4uinit.exe ---\\ Search Browser Infection (SBI) (O69) (3) - 5s O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {F23C6E6E-81CC-41D1-A814-91C8B3D509CE} - (google.com) - http://www.google.com/ ---\\ Search Svchost Services (SSS) (O83) (33) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Application Experience Service.) -- C:\Windows\System32\aelupsvc.dll [62464] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\System32\srvsvc.dll [168448] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\Windows\System32\gpsvc.dll [591360] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\IKEEXT.DLL [667136] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\Windows\System32\audiosrv.dll [473088] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [285184] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [75264] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\Sens.dll [49664] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [300544] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [241664] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Remote Desktop Session Host Server Remote C.) -- C:\Windows\System32\termsrv.dll [543232] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [1933848] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [589312] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [328192] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [497152] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\Windows\System32\seclogon.dll [21504] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [46592] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\System32\iscsiexe.dll [114688] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Multimedia Class Scheduler Service.) -- C:\Windows\System32\mmcss.dll [49664] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\Windows\System32\wercplsupport.dll [61440] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [98304] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [162816] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\Windows\System32\schedsvc.dll [743424] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\Windows\System32\KMSVC.DLL [71168] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [99328] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\Windows\System32\browser.dll [102400] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\System32\themeservice.dll [37376] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [76800] O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Software installation Service.) -- C:\Windows\System32\appmgmts.dll [149504] ---\\ Firewall Active Exception List (FirewallRules) (O87) (25) - 2s O87 - FAEL: "{13D32C28-722C-489E-86FC-443C7F8000BF}" [In-None-P6-TRUE] .(.CHENGDU YIWO Tech Development Co., Ltd - EaseUS Todo Backup Application.) -- C:\Program Files\EaseUS\Todo Backup\bin\TbService.exe O87 - FAEL: "{E49B21D5-9169-4A57-85C4-19217CED705D}" [In-None-P17-TRUE] .(.CHENGDU YIWO Tech Development Co., Ltd - EaseUS Todo Backup Application.) -- C:\Program Files\EaseUS\Todo Backup\bin\TbService.exe O87 - FAEL: "{E10D6838-4E02-4C2E-A17F-C190F301F11C}" [In-None-P6-TRUE] .(.CHENGDU YIWO Tech Development Co., Ltd - EaseUS Todo Backup Application.) -- C:\Program Files\EaseUS\Todo Backup\bin\TBConsoleUI.exe O87 - FAEL: "{8F8B6598-0CCE-46BE-BDE6-1F34C47C9707}" [In-None-P17-TRUE] .(.CHENGDU YIWO Tech Development Co., Ltd - EaseUS Todo Backup Application.) -- C:\Program Files\EaseUS\Todo Backup\bin\TBConsoleUI.exe O87 - FAEL: "{EC970047-5B94-4F03-96DC-39533073038C}" [In-None-P6-TRUE] .(...) -- C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe O87 - FAEL: "{B7C1C645-F37F-4080-BE4E-ADECA5202CE7}" [In-None-P17-TRUE] .(...) -- C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe O87 - FAEL: "{BE990539-1E95-4A48-BE7E-78AE4F485DB9}" [In-None-P6-TRUE] .(...) -- C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe O87 - FAEL: "{F8760E2B-6F51-47FC-9AC0-5E9FAAEDA253}" [In-None-P17-TRUE] .(...) -- C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe O87 - FAEL: "TCP Query User{05789E29-27B9-4B4E-96C9-07D670E51924}C:\program files\tv 3l pc\tv3lpcex.exe" [In-None-P6-TRUE] .(...) -- C:\program files\tv 3l pc\tv3lpcex.exe O87 - FAEL: "UDP Query User{C6C1A0C1-06F8-44E7-B108-5D570D3F053C}C:\program files\tv 3l pc\tv3lpcex.exe" [In-None-P17-TRUE] .(...) -- C:\program files\tv 3l pc\tv3lpcex.exe O87 - FAEL: "{E84B8253-F0E9-487E-A268-F56163A84177}" [In-None-P6-FALSE] .(.Daum Communications - PotPlayer.) -- C:\Program Files\Stardvb\RawCodecs\PotPlayer\PotPlayerMini.exe O87 - FAEL: "{7039F593-DACC-4D2B-8346-C0DD9F5C580A}" [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer.exe O87 - FAEL: "{9E1B74A5-B313-430B-8DDF-6B065501188A}" [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer.exe O87 - FAEL: "TCP Query User{F482308B-9C74-42DC-85EE-1D2F35D95119}C:\program files\progdvb\progtv.exe" [In-None-P6-TRUE] .(.Prog - ProgTV.) -- C:\program files\progdvb\progtv.exe O87 - FAEL: "UDP Query User{4C49624E-78BA-4BE6-AD60-CEBEFBF2CDCE}C:\program files\progdvb\progtv.exe" [In-None-P17-TRUE] .(.Prog - ProgTV.) -- C:\program files\progdvb\progtv.exe O87 - FAEL: "{4F88D45F-1A72-435D-8861-54E9A94CD3E0}" [In-None-P6-TRUE] .(.CM&V Hackbart - DVBViewer Pro.) -- C:\Program Files\DVBViewer\dvbviewer.exe O87 - FAEL: "{89B9B7CF-9220-4497-8DC8-0BAE519E3680}" [In-None-P17-TRUE] .(.CM&V Hackbart - DVBViewer Pro.) -- C:\Program Files\DVBViewer\dvbviewer.exe O87 - FAEL: "{19EC5A39-7D3A-4998-8715-ED63FDD1352F}" [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer.exe O87 - FAEL: "{7D78BC3D-7005-4BEF-A8D3-4D4CC3B2D24F}" [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer.exe O87 - FAEL: "{06B30860-5B4B-4C30-BD1F-B8F7DCEE9EF8}" [In-None-P6-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer_Service.exe O87 - FAEL: "{4DD4E9F6-E2F1-4B37-BDDC-3A493AF63A07}" [In-None-P17-TRUE] .(.TeamViewer GmbH - TeamViewer 10.) -- C:\Program Files\TeamViewer\TeamViewer_Service.exe O87 - FAEL: "{12948519-B4A8-4D5E-A63F-C7D245C9FEC7}" [In-None-P6-FALSE] .(.LINE Corporation - LINE.) -- C:\Program Files\LINE\LINE.exe O87 - FAEL: "{8A8D8BC1-1708-413B-84D3-2640A6FD591B}" [In-None-P17-FALSE] .(.LINE Corporation - LINE.) -- C:\Program Files\LINE\LINE.exe O87 - FAEL: "{4640D59B-879C-48E9-8BF7-248C1FBC10FB}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Tango\Tango.exe O87 - FAEL: "{7D1E564B-33FF-4C42-8088-81AB5983CBBA}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Tango\Tango.exe ---\\ Additional Scan (O88) (1) - 0s C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\ehnkcsts.default\extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi =>PUP.Optional.Sambreel ---\\ Summary of the elements found on your workstation (1) - 0s http://www.nicolascoolman.fr/blog =>PUP.Optional.Sambreel ~ End of the scan, 23841 items in 220 seconds (838)(0)()