Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-07-2015
Ran by Mustafa (administrator) on MUSTAFA-PC on 11-07-2015 07:14:36
Running from C:\Users\Mustafa\Desktop\Nouveau dossier
Loaded Profiles: Mustafa (Available Profiles: Mustafa)
Platform: Microsoft Windows 8.1 Professionnel N (X86) OS Language: Français (France)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Windows (R) Win 7 DDK provider) C:\Program Files\Dell Wireless\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\System32\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro\DiscSoftBusService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
(Qualcomm®Atheros®) C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe
() C:\Program Files\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files\DFX\DFX.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Program Files\DFX\Universal\Apps\DfxSharedApp32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Microsoft Corporation) C:\Windows\System32\dfrgui.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5088456 2014-09-22] (ESET)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [366904 2014-10-08] (Power Software Ltd)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [151824 2015-05-16] (IvoSoft)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2466544 2014-07-02] (Synaptics Incorporated)
HKLM\...\Run: [DFX] => C:\Program Files\DFX\DFX.exe [1282008 2015-03-03] ()
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [7536344 2015-07-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1015512 2015-05-24] (Realtek Semiconductor)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe [126592 2015-01-31] (Qualcomm®Atheros®)
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files\DAEMON Tools Pro\DTAgent.exe [3759376 2014-11-24] (Disc Soft Ltd)
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [28785792 2015-06-02] (Skype Technologies S.A.)
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3898960 2015-04-20] (Tonec Inc.)
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\MountPoints2: {d006b505-14e3-11e5-a457-645a046876e4} - "F:\autorun.exe" 
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\MountPoints2: {df3d3ec0-d6ce-11e4-a3a1-645a046876e4} - "H:\AutoRun.exe" 
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Users\Mustafa\Downloads\rstassociations-version-scr_1.3.scr [409449 2015-07-07] ()
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2014-04-21] (Tonec Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-05-16] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dz/
HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/ar-xl/?ocid=iehp
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-05-16] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-24] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-24] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-05-16] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-05-16] (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{9F511710-8FBA-42C2-BFF6-40661846AABB}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{DEFE68DF-7F7B-4DCE-805F-8FBFDCA4605D}: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Mustafa\AppData\Roaming\Mozilla\Firefox\Profiles\amlpmpbt.default
FF Homepage: https://www.google.dz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_194.dll [2015-07-03] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-24] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-24] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-09-05] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Mustafa\AppData\Roaming\Mozilla\Firefox\Profiles\amlpmpbt.default\user.js [2015-02-09]
FF Extension: Fireforce - C:\Users\Mustafa\AppData\Roaming\Mozilla\Firefox\Profiles\amlpmpbt.default\Extensions\fireforce@scrt.ch.xpi [2015-06-02]
FF Extension: DownThemAll! - C:\Users\Mustafa\AppData\Roaming\Mozilla\Firefox\Profiles\amlpmpbt.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2015-06-02]
FF HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Mustafa\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Mustafa\AppData\Roaming\IDM\idmmzcc5 [2015-07-11]
FF HKU\S-1-5-21-3460238500-2318020137-1904032488-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Mustafa\AppData\Roaming\IDM\idmmzcc5

Chrome: 
=======
CHR Profile: C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-24]
CHR Extension: (YouTube) - C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-24]
CHR Extension: (Google Search) - C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-24]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-24]
CHR Extension: (IDM Integration Module) - C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-05-11]
CHR Extension: (Google Wallet) - C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-24]
CHR Extension: (Gmail) - C:\Users\Mustafa\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-24]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2015-04-20]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 AtherosSvc; C:\Program Files\Dell Wireless\Bluetooth Suite\adminservice.exe [279168 2015-01-31] (Windows (R) Win 7 DDK provider) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [250880 2014-11-21] (Microsoft Corporation)
R3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [280680 2015-06-04] (Intel Corporation)
S3 DFServ; C:\Program Files\Faronics\Deep Freeze\Install C-0\DFServ.exe [1398136 2015-02-02] (Faronics Corporation) [File not signed]
R3 Disc Soft Bus Service; C:\Program Files\DAEMON Tools Pro\DiscSoftBusService.exe [2216208 2014-11-24] (Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1350112 2014-09-16] (ESET)
R3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2585376 2015-03-26] (IObit)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
S3 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [255192 2015-07-03] (Realtek Semiconductor)
S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [103936 2014-11-21] (Microsoft Corporation)
S3 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [966336 2014-12-04] (@ByELDI) [File not signed]
S3 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [284488 2015-02-04] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [20992 2014-11-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22200 2015-02-04] (Microsoft Corporation)
S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1269248 2014-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [25856 2012-07-03] (Google Inc)
R3 AthBTPort; C:\Windows\system32\DRIVERS\btath_flt.sys [80680 2015-01-31] (Qualcomm Atheros)
R3 athr; C:\Windows\system32\DRIVERS\athwb.sys [3247616 2015-01-11] (Qualcomm Atheros Communications, Inc.)
R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [25600 2014-11-21] (Microsoft Corporation)
R3 BTATH_A2DP; C:\Windows\system32\drivers\btath_a2dp.sys [295208 2015-01-31] (Qualcomm Atheros)
R3 btath_avdt; C:\Windows\system32\drivers\btath_avdt.sys [105256 2015-01-31] (Qualcomm Atheros)
R0 BTATH_BUS; C:\Windows\System32\drivers\btath_bus.sys [28456 2015-01-31] (Qualcomm Atheros)
R3 BTATH_HCRP; C:\Windows\System32\drivers\btath_hcrp.sys [158688 2015-01-31] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [66448 2015-01-31] (Qualcomm Atheros)
R3 BTATH_RCP; C:\Windows\System32\drivers\btath_rcp.sys [120616 2015-01-31] (Qualcomm Atheros)
R3 BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [510248 2015-01-31] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [186880 2014-11-21] (Microsoft Corporation)
S3 BthMtpEnum; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [53248 2013-08-22] (Microsoft Corporation)
R0 DeepFrz; C:\Windows\system32\Drivers\DeepFrz.sys [155024 2014-09-05] (Faronics Corporation)
R0 DfDiskLo; C:\Windows\system32\Drivers\DfDiskLo.sys [30736 2014-09-05] (Faronics Corporation)
R1 DFFilter; C:\Windows\system32\Drivers\DFFilter.sys [32400 2014-09-05] (Faronics Corporation)
R3 DFX11_1; C:\Windows\system32\drivers\dfx11_1.sys [24424 2012-12-13] (Windows (R) Win 7 DDK provider)
R3 dtscsibus; C:\Windows\system32\DRIVERS\dtscsibus.sys [25000 2015-03-26] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [191928 2014-08-18] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [190368 2014-08-18] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [135296 2014-08-18] (ESET)
R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [176448 2014-08-18] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [37928 2014-08-18] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [51288 2014-09-18] (ESET)
R0 FarDisk; C:\Windows\system32\Drivers\FarDisk.sys [25744 2014-09-05] (Faronics Corporation)
R0 FarSpace; C:\Windows\system32\Drivers\FarSpace.sys [82960 2014-09-05] (Faronics Corporation)
S3 GPIO; C:\Windows\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2015-01-01] (REALiX(tm))
R0 iaStorA; C:\Windows\System32\drivers\iaStorA.sys [489832 2013-11-21] (Intel Corporation)
R3 ICCWDT; C:\Windows\System32\drivers\ICCWDT.sys [22040 2012-05-17] (Intel Corporation)
S3 intaud_WaveExtensible; C:\Windows\system32\drivers\intelaud.sys [32152 2014-11-04] (Intel Corporation)
R3 iwdbus; C:\Windows\System32\drivers\iwdbus.sys [23448 2014-11-04] (Intel Corporation)
S3 kmloop; C:\Windows\system32\DRIVERS\loop.sys [11776 2013-08-22] (Microsoft Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [98520 2015-07-09] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\drivers\TeeDriverW8.sys [157472 2015-07-03] (Intel Corporation)
S3 NdisImPlatformMp; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [109568 2014-11-21] (Microsoft Corporation)
S3 netr28u; C:\Windows\system32\DRIVERS\netr28u.sys [1696528 2013-06-18] (Ralink Technology Corp.)
S3 RSUSBVSTOR; C:\Windows\System32\Drivers\RtsUVStor.sys [247000 2015-01-01] (Realtek Semiconductor Corp.)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [273624 2015-03-15] (Realsil Semiconductor Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [113904 2014-10-08] (Power Software Ltd)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [25328 2014-07-02] (Synaptics Incorporated)
R3 udsbus; C:\Windows\System32\drivers\udsbus.sys [13184 2009-10-15] (SysNucleus)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [84800 2015-02-04] (Microsoft Corporation)
R0 Wof; C:\Windows\system32\Drivers\Wof.sys [138584 2014-11-21] (Microsoft Corporation)
S3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\Windows\System32\drivers\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X]
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-11 07:14 - 2015-07-11 07:14 - 00000000 ____D C:\FRST
2015-07-11 07:00 - 2015-07-11 07:00 - 00000000 ___RD C:\Users\Mustafa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-07-11 06:52 - 2015-07-11 06:53 - 00000000 ____D C:\Windows\LastGood.Tmp
2015-07-11 04:22 - 2015-06-04 23:14 - 00003470 _____ C:\Users\Mustafa\Desktop\Font.xml
2015-07-11 04:05 - 2015-07-11 04:05 - 00001061 _____ C:\Users\Mustafa\Desktop\Notepad++.lnk
2015-07-11 03:59 - 2015-07-11 04:03 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\Notepad++
2015-07-11 03:59 - 2015-07-11 03:59 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-07-11 03:59 - 2015-07-11 03:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-07-11 03:59 - 2015-07-11 03:59 - 00000000 ____D C:\Program Files\Notepad++
2015-07-11 03:41 - 2015-07-11 07:14 - 00000000 ____D C:\Users\Mustafa\Desktop\Nouveau dossier
2015-07-09 08:48 - 2015-07-09 08:48 - 00001092 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-09 08:48 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-09 08:48 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-09 08:48 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-09 08:28 - 2015-07-09 08:28 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi
2015-07-08 18:22 - 2015-07-06 22:24 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-07-08 18:22 - 2015-07-06 22:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-07-08 17:58 - 2015-07-08 17:58 - 00000360 _____ C:\Windows\PFRO.log
2015-07-07 03:10 - 2015-07-09 09:15 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-07 03:09 - 2015-07-09 08:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-07-07 03:09 - 2015-07-09 08:48 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-07-07 03:09 - 2015-07-07 03:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-07 02:28 - 2015-07-07 02:28 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\www.shadowexplorer.com
2015-07-07 02:25 - 2015-07-07 02:25 - 00409449 _____ C:\Users\Mustafa\Downloads\rstassociations-version-scr_1.3.scr
2015-07-06 19:18 - 2015-07-06 19:20 - 00000000 ____D C:\Recovered
2015-07-06 19:16 - 2014-03-24 07:54 - 00000000 ____D C:\Users\Mustafa\Desktop\crack
2015-07-06 13:38 - 2015-07-11 06:59 - 00000000 ____D C:\Users\Mustafa\Desktop\123
2015-07-06 04:36 - 2015-07-11 07:15 - 00515231 _____ C:\Windows\WindowsUpdate.log
2015-07-06 04:08 - 2015-07-11 06:56 - 00001959 _____ C:\Windows\setupact.log
2015-07-06 04:08 - 2015-07-06 04:08 - 00000000 _____ C:\Windows\setuperr.log
2015-07-06 03:33 - 2015-07-06 03:33 - 00000000 ____D C:\Users\Mustafa\Downloads\Magix Sequoia 13.1.3.176 Full-32bits
2015-07-06 03:26 - 2015-07-06 03:26 - 00015085 _____ C:\Users\Mustafa\Downloads\MAGIX+Samplitude+Pro+X2+13.1.0.131+x32+x64+Multilingual+-+P2P+%5Bhelg420%5D.torrent
2015-07-06 03:20 - 2015-07-06 03:20 - 00019360 _____ C:\Users\Mustafa\Downloads\5BF2607AAC34A97A6C78DF9DD4743B8813C7CE24.torrent
2015-07-05 23:05 - 2015-06-15 17:47 - 04194320 _____ C:\Users\Mustafa\Desktop\8900HD HYPER-2325.bin
2015-07-05 23:04 - 2015-07-05 23:05 - 04603595 _____ C:\Users\Mustafa\Desktop\8900HD HYPER-2325.zip
2015-07-03 06:08 - 2015-07-11 07:10 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-03 06:08 - 2015-07-03 06:08 - 00157472 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverW8.sys
2015-07-03 06:08 - 2015-07-03 06:08 - 00000000 ____D C:\Program Files\Waves
2015-07-03 06:06 - 2015-07-03 06:06 - 11899824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 03522264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2015-07-03 06:06 - 2015-07-03 06:06 - 02862488 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-07-03 06:06 - 2015-07-03 06:06 - 02820120 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 02637528 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2015-07-03 06:06 - 2015-07-03 06:06 - 02585816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 02394328 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 01708248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 01160112 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 01010096 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 00973232 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2015-07-03 06:06 - 2015-07-03 06:06 - 00818096 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2015-06-29 02:45 - 2015-06-29 02:46 - 00000000 ____D C:\Program Files\DFX
2015-06-29 02:45 - 2015-06-29 02:45 - 00001668 _____ C:\Users\Public\Desktop\DFX.lnk
2015-06-29 02:45 - 2015-06-29 02:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DFX Audio Enhancer
2015-06-29 02:45 - 2015-06-29 02:45 - 00000000 ____D C:\Program Files\Common Files\DFX
2015-06-27 02:07 - 2015-06-27 02:07 - 00554328 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-06-27 02:07 - 2015-06-27 02:07 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-06-27 02:06 - 2015-06-27 02:06 - 19734960 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-06-27 02:06 - 2015-06-27 02:06 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-06-27 02:05 - 2015-06-27 02:05 - 05264384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2015-06-27 02:05 - 2015-06-27 02:05 - 00811008 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-06-27 02:05 - 2015-06-27 02:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-06-27 02:05 - 2015-06-27 02:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-06-27 02:05 - 2015-06-27 02:05 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-06-27 02:04 - 2015-06-27 02:04 - 05468136 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2015-06-27 02:04 - 2015-06-27 02:04 - 02471424 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-06-27 02:04 - 2015-06-27 02:04 - 01192576 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-06-27 02:04 - 2015-06-27 02:04 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-06-27 02:04 - 2015-06-27 02:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2015-06-27 02:04 - 2015-06-27 02:04 - 00227736 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2015-06-27 02:03 - 2015-06-27 02:03 - 00513480 _____ C:\Windows\system32\locale.nls
2015-06-27 02:03 - 2015-06-27 02:03 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-06-27 02:03 - 2015-06-27 02:03 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-06-27 02:01 - 2015-06-27 02:01 - 07147520 _____ C:\Windows\system32\config\DRIVERS.iobit
2015-06-27 02:01 - 2015-06-27 02:01 - 00360448 _____ C:\Windows\system32\config\DEFAULT.iobit
2015-06-27 02:00 - 2015-06-27 02:01 - 54296576 _____ C:\Windows\system32\config\SOFTWARE.iobit
2015-06-27 02:00 - 2015-06-27 02:00 - 00036864 _____ C:\Windows\system32\config\SAM.iobit
2015-06-27 02:00 - 2015-06-27 02:00 - 00028672 _____ C:\Windows\system32\config\SECURITY.iobit
2015-06-25 17:35 - 2015-06-25 17:35 - 00001021 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-06-23 04:24 - 2015-06-23 11:43 - 3914375168 _____ C:\Users\Mustafa\Downloads\Windows 8.1 AIO 32 Bits FR.iso
2015-06-23 04:22 - 2015-06-23 04:22 - 00019013 _____ C:\Users\Mustafa\Downloads\Windows 8.1 AIO 32 Bits FR.iso.torrent
2015-06-21 15:06 - 2015-06-23 04:48 - 3737774080 _____ C:\Users\Mustafa\Downloads\fr_windows_server_2012_x64_dvd_915480.iso
2015-06-21 15:06 - 2015-06-21 15:08 - 00000000 ____D C:\Users\Mustafa\Downloads\Naraku No Shiro [JPN][PS2DVD][WwW.GamesTorrents.CoM]
2015-06-21 15:05 - 2015-06-21 15:05 - 00032514 _____ C:\Users\Mustafa\Downloads\Naraku.No.Shiro.%5BJPN%5D%5BPS2DVD%5D%5BWwW.GamesTorrents.CoM%5D.t3893.torrent
2015-06-20 04:53 - 2015-06-20 04:53 - 03711896 _____ (ESET) C:\Windows\system32\%InstallDir%speclean.exe
2015-06-16 23:52 - 2015-06-16 23:52 - 00000000 ____D C:\Windows\12
2015-06-16 23:41 - 2015-06-16 23:43 - 00001360 _____ C:\Users\Mustafa\Desktop\shutdown.lnk
2015-06-13 13:55 - 2015-06-13 13:55 - 00377856 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2015-06-13 13:55 - 2015-06-13 13:55 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\dplayx.dll
2015-06-13 13:55 - 2015-06-13 13:55 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2015-06-13 13:55 - 2015-06-13 13:55 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\dpwsockx.dll
2015-06-13 13:55 - 2015-06-13 13:55 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2015-06-13 13:55 - 2015-06-13 13:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\dplaysvr.exe
2015-06-13 13:55 - 2015-06-13 13:55 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\dpmodemx.dll
2015-06-13 13:55 - 2015-06-13 13:55 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2015-06-13 13:55 - 2015-06-13 13:55 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2015-06-13 01:59 - 2015-06-22 04:28 - 00000000 ____D C:\Users\Mustafa\Downloads\hafid.cmtr

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-11 07:05 - 2015-06-08 23:59 - 00000000 ____D C:\Users\Mustafa\AppData\Local\ClassicShell
2015-07-11 07:00 - 2015-03-20 01:12 - 00000000 ____D C:\Users\Mustafa\AppData\Local\CrashDumps
2015-07-11 07:00 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\system32\sru
2015-07-11 06:59 - 2015-05-11 16:59 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\DMCache
2015-07-11 06:59 - 2015-01-01 22:21 - 00001082 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-11 06:57 - 2015-04-03 00:35 - 00015846 _____ C:\Windows\system32\results.xml
2015-07-11 06:56 - 2013-08-22 08:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-11 06:54 - 2015-04-03 00:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-07-11 06:54 - 2015-04-03 00:26 - 00000000 ____D C:\ProgramData\Intel
2015-07-11 06:54 - 2015-01-01 23:03 - 00000000 ____D C:\Program Files\Intel
2015-07-11 06:35 - 2015-01-01 22:22 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-11 06:08 - 2015-01-02 03:36 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\Kodi
2015-07-11 05:43 - 2015-01-01 22:18 - 00000000 ____D C:\Users\Mustafa\Downloads\Compressed
2015-07-11 04:52 - 2015-06-03 00:26 - 00002147 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-07-11 04:51 - 2015-01-01 21:56 - 00000000 ____D C:\Users\Mustafa
2015-07-11 04:39 - 2015-05-14 16:21 - 00000000 ____D C:\Program Files\Opera
2015-07-11 04:34 - 2013-08-22 08:22 - 00500744 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-11 02:48 - 2015-01-01 22:42 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\Skype
2015-07-11 02:26 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\tracing
2015-07-10 14:13 - 2015-01-01 22:43 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\vlc
2015-07-09 09:18 - 2013-08-22 07:13 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-07-09 08:42 - 2013-08-22 09:16 - 00000000 ____D C:\Windows\Microsoft.NET
2015-07-09 08:28 - 2015-01-02 03:05 - 00000000 ____D C:\Program Files\Kodi
2015-07-09 05:08 - 2015-01-01 22:22 - 00002147 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-08 18:22 - 2013-08-22 09:06 - 00000000 ____D C:\Windows\CbsTemp
2015-07-06 19:50 - 2015-01-02 00:02 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-07-06 13:55 - 2015-05-11 16:59 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\IDM
2015-07-06 03:54 - 2015-02-09 22:44 - 00000000 ____D C:\Users\Mustafa\AppData\Roaming\uTorrent
2015-07-06 03:26 - 2015-01-05 00:24 - 00000000 ____D C:\Users\Mustafa\Downloads\MAGIX Samplitude Pro X2 13.1.0.131 Multilingual - P2P [helg420]
2015-07-06 02:18 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\AppReadiness
2015-07-05 23:09 - 2014-11-21 02:25 - 01827432 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-05 01:08 - 2015-01-01 22:16 - 00000000 ____D C:\ProgramData\ProductData
2015-07-04 19:11 - 2015-06-03 00:26 - 00000256 _____ C:\Windows\Tasks\ASC8_SkipUac_Mustafa.job
2015-07-03 06:09 - 2015-03-31 04:39 - 00002116 _____ C:\Users\Public\Desktop\Driver Booster 2.lnk
2015-07-03 06:08 - 2015-01-01 22:51 - 00849474 _____ C:\Windows\system32\Drivers\rtwavesskdy.dat
2015-07-03 06:08 - 2015-01-01 22:51 - 00031095 _____ C:\Windows\system32\Drivers\rtwavesEFX.dat
2015-07-03 06:08 - 2015-01-01 22:51 - 00010945 _____ C:\Windows\system32\Drivers\rtwavesMFX.dat
2015-07-03 06:07 - 2015-01-01 22:51 - 00188557 _____ C:\Windows\system32\Drivers\RTWAVES40.dat
2015-07-03 06:07 - 2015-01-01 22:51 - 00000000 ____D C:\Windows\system32\RTCOM
2015-06-30 04:26 - 2015-01-02 03:58 - 00000000 ____D C:\sub
2015-06-29 02:54 - 2015-01-01 23:17 - 00000000 ____D C:\Program Files\USBDeviceShare-Client
2015-06-27 19:18 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\system32\NDF
2015-06-27 19:05 - 2015-01-02 00:03 - 00000000 ____D C:\Users\Mustafa\Documents\Bluetooth Folder
2015-06-27 17:04 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\rescache
2015-06-27 04:29 - 2013-08-22 09:17 - 00000000 ___RD C:\Windows\ToastData
2015-06-27 04:29 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\WinStore
2015-06-27 00:30 - 2015-01-01 22:41 - 00000000 ____D C:\ProgramData\Skype
2015-06-17 00:04 - 2015-01-08 14:17 - 00000000 ____D C:\Users\Mustafa\AppData\Local\Adobe
2015-06-16 22:18 - 2015-01-01 22:25 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-06-16 13:39 - 2015-01-01 22:25 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-06-16 12:23 - 2015-01-01 22:00 - 00000000 __SHD C:\Users\Mustafa\AppData\Local\EmieUserList
2015-06-16 12:23 - 2015-01-01 22:00 - 00000000 __SHD C:\Users\Mustafa\AppData\Local\EmieSiteList
2015-06-16 12:23 - 2015-01-01 22:00 - 00000000 __SHD C:\Users\Mustafa\AppData\Local\EmieBrowserModeList
2015-06-13 13:55 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\system32\fr-FR

==================== Files in the root of some directories =======

2015-04-25 03:05 - 2015-04-25 03:05 - 0004999 _____ () C:\ProgramData\auqrgqib.ttw
2015-04-25 03:46 - 2015-04-25 03:46 - 0004140 _____ () C:\ProgramData\cdggdqsx.jep
2015-01-01 22:51 - 2015-01-01 22:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Mustafa\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Mustafa\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Mustafa\AppData\Local\Temp\{A519841B-0E43-4057-80B9-2F08216168C4}-43.0.2357.132_43.0.2357.130_chrome_updater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!


LastRegBack: 2015-07-09 08:15

==================== End of log ============================