~ ZHPDiag v2015.7.17.92 By Nicolas Coolman (2015/07/17)
~ Run by HP (Administrator)  (2015/07/17 14:16:02)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version:  Version OK
~ Mode: Scan
~ Report: C:\Users\HP\Desktop\ZHPDiag.txt
~ Report: C:\Users\HP\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ System startup: Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)

---\\ Internet Browsers (2) - 0s
MFIE: Mozilla Firefox 39.0 (x86 ar) v39.0
MSIE: Internet Explorer v11.0.9600.17914

---\\ Windows Product Information (3) - 2s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Activation Technologies : OK

---\\ System protection software (2) - 1s
Avast Free Antivirus v10.2.2218
Malwarebytes Anti-Malware ÇáäÓÎÉ 2.1.8.1057

---\\ Surveillance software (2) - 1s
Adobe Flash Player 18 NPAPI
Adobe Acrobat Reader DC

---\\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System:  64-bit 
~ Boot mode: Normal (Normal boot)
~ Total physical RAM (KB): 4087148
~ System Restore: Activé (Enable)
~ System drive C: has 45 GB free of 124 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: HP-PC
~ User Name: HP
~ Logged in as Administrator

---\\ Enumeration of the disk units (4) - 0s
~ Drive C: has 45 GB free of 124 GB  (System)
~ Drive D: has 5 GB free of 124 GB
~ Drive F: has 30 GB free of 124 GB
~ Drive H: has 29 GB free of 101 GB

---\\ Search Generic System Files (24) - 0s
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - ãÓÊßÔÝ Windows.) () -- C:\Windows\Explorer.exe [2871808]
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - ÚãáíÉ ãÖíÝ Windows (Rundll32)ý.) () -- C:\Windows\System32\rundll32.exe [45568]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - ýýÊØÈíÞ ÈÏÁ ÊÔÛíá Windows.) () -- C:\Windows\System32\Wininit.exe [129024]
[MD5.E066FDC3A2074D926903B8C31EF3B347] - (.Microsoft Corporation - ãáÍÞÇÊ ÇáÅäÊÑäÊ áÜ Win32.) () -- C:\Windows\System32\wininet.dll [2427392]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - ÊØÈíÞ ÊÓÌíá ÏÎæá Windows.) () -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - ãßÊÈÉ ÊÑÇÎíÕ ÇáÈÑÇãÌ.) () -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - ÈÑäÇãÌ ÊÔÛíá ãäÝÐ i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224]
[MD5.1877EB1495CFBDAB27D6A32F6DDF3818] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [159232]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - NT File System Driver.) () -- C:\Windows\System32\drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - ÈÑäÇãÌ ÊÔÛíá ÇáãäÝÐ ÇáãÊæÇÒí.) () -- C:\Windows\System32\drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - ÈÑäÇãÌ ÊÔÛíá ÎÏãÉ ãáÝÇÊ ÇáÙá ÇáÇÍÊíÇØíÉ áæÍ.) () -- C:\Windows\System32\drivers\volsnap.sys [295808]

---\\ Process running (7) - 1s
[MD5.2870CE9BFD6BA66FB0FFC6D11C9E41A7] - (.Arcai.com - Arp Intelligent Protection Service.) -- C:\Program Files (x86)\netcut\services\aips.exe [262144] [PID.1144]
[MD5.54236E79A44F909612391C8A2D70D512] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1368]
[MD5.D1A8631ADA1E71178D3DBF5AA2BC1E85] - (.Foxit Software Inc. - Foxit Cloud Safe Update Service.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392] [PID.1664]
[MD5.ADE3D7AD36CA238C6D58E5E93392D2F8] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3903056] [PID.3644]
[MD5.65C6AA484AD2287D20541C7735989437] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5515496] [PID.3856]
[MD5.1C7C9F16762BB5D75B4E43B0BD9AC78D] - (.Internet Download Manager, Tonec Inc. - IDM Integration module.) -- C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe [67608] [PID.3916]
[MD5.E9C6EF9437ECB30911488F9313AD821A] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe [269848] [PID.4660]

---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2) (14) - 1s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbcdn-photos-b-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbcdn-photos-c-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbcdn-photos-f-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbcdn-photos-h-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbcdn-profile-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbcdn-sphotos-a-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbcdn-sphotos-h-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fbstatic-a.akamaihd.net/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.facebook.com/
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com/
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.com/
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] avast! Online Security
G2 - GCE: Preference [User Data\Default] [ngpampappnmepgilojfohadhhmbhlaek] IDM Integration Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest  =>.Google Inc.

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) (25) - 1s
M0 - MFSP: prefs.js [HP - ibw3uq79.default] https://www.google.ps/ 
M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\afurladvisor@anchorfree.com
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazondotcom.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-ar.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited.) -- C:\Users\HP\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS.) -- C:\Users\HP\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf] - (.Foxit Corporation.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf] - (.Foxit Corporation.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp] - (.Foxit Corporation.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf] - (.Foxit Corporation.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.45.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.45.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=15.0.4.53] - (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=15.0.4.53] - (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprpchromebrowserrecordext;version=15.0.4.53] - (.RealNetworks.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=15.0.4.53] - (.RealNetworks.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
P2 - FPN: [HKLM] [@real.com/nprpplugin;version=15.0.4.53] - (.RealPlayer.) -- C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN.) -- C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) (13) - 1s
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean  =>.Microsoft Internet Explorer
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

---\\ Internet Explorer, Proxy Management (R5) (3) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (1)

---\\ Browser Helper Object (BHO) (O2) (5) - 0s
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
O2 - BHO: (no name) [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA}  (Orphean)
O2 - BHO: (no name) [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}  (Orphean)
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Avast Software s.r.o. - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
O2 - BHO: (no name) [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9}  (Orphean)

---\\ Internet Explorer Toolbars (O3) (1) - 0s
O3 - Toolbar: 0x2D4D4C4350536A0076A77A786E7484D7 - [HKCU]{434C4D2D-5350-006A-76A7-7A786E7484D7} . (...) --  (.not file.)

---\\ Auto loading programs from Registry and folders (O4) (7) - 1s
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - ýýÇáÃÏæÇÊ ÇáÐßíÉ Úáì ÓØÍ ÇáãßÊÈ áÜ Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe
O4 - HKUS\S-1-5-21-394019014-2004055912-1379791936-1000\..\Run: [Sidebar] . (.Microsoft Corporation - ýýÇáÃÏæÇÊ ÇáÐßíÉ Úáì ÓØÍ ÇáãßÊÈ áÜ Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-394019014-2004055912-1379791936-1000\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
O4 - HKUS\S-1-5-21-394019014-2004055912-1379791936-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

---\\ Lop.com/Domain Hijackers (O17) (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23) (10) - 1s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Arp Intelligent Protection Service (AIPS) . (.Arcai.com - Arp Intelligent Protection Service.) - C:\Program Files (x86)\netcut\services\aips.exe
O23 - Service: Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o. - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) . (.Foxit Software Inc. - Foxit Cloud Safe Update Service.) - C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: ÎÏãÉ Google Update (gupdate) (gupdate) . (.Google Inc. - ãËÈøöÊ Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: hpHotkeyMonitor (hpHotkeyMonitor) . (.Hewlett-Packard Company - hpHotkeyMonitor Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe

---\\ Task Planned Automatically (O39) (29) - 4s
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\Tasks\Adobe Flash Player Updater.job   [830]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-394019014-2004055912-1379791936-1000Core.job   [894]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-394019014-2004055912-1379791936-1000UA.job   [916]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job   [830]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job   [834]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task   [3886]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater   [3768]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-HP-PC-HP   [3490]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\avast! Emergency Update   [4182]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\AviatorUpdateTask   [3628]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-394019014-2004055912-1379791936-1000Core   [3518]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-394019014-2004055912-1379791936-1000UA   [3886]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore   [3578]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA   [3830]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-394019014-2004055912-1379791936-1000   [3188]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-394019014-2004055912-1379791936-1000   [3328]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{02FCBD12-CF6F-4E94-9BE1-5020430C0866}   [3184]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{0A893B1A-0B85-44AD-9D91-494D0D5F3BCF}   [3130]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{0F34A881-FA66-4A69-AAB1-A1D6D43D50BD}   [3138]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{11EAAED0-8BB3-4352-9813-1E5D53F657F6}   [2958]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{3895A373-EB4F-45B9-AB17-621CBA20DC50}   [3142]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{3E808B52-8940-4BA2-9AF4-F02D0BF1C416}   [2958]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{40F80C3A-591B-4110-86B0-70114C390E3C}   [2958]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{4386A86F-2DAA-46A1-8F9A-8D23AA03D702}   [3108]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{77BCE670-88C3-4620-96D0-078EF5D9F2F8}   [3082]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{7B116C78-BE3C-4B6B-BD44-81FCB8A978C9}   [3170]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{8333479A-6A3C-4BC3-855A-C859E939306A}   [3216]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{91E47A3F-CF16-466F-96EC-5605490D8196}   [2958]
O39 - APT: Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{BD09399E-823C-4573-9C54-26BFFD214362}   [3090]

---\\ Software installed (O42) (38) - 14s
O42 - Logiciel: ÍÒãÉ ÈÑÇãÌ ÊÔÛíá Windows - Intel (MEIx64) System  (08/19/2013 9.5.14.1724) - (.Intel.) [HKLM][64Bits] -- 4A5E2889C118B9A8A2D5D2C55C5A13FDDF7BF784
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM][64Bits] -- {3BFC9CAE-091D-11E4-886A-F04DA23A5C58}
O42 - Logiciel: 7-Zip 9.22beta - (...) [HKLM][64Bits] -- 7-Zip
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: Beyluxe Messenger - (.Hichatters Srl.) [HKLM][64Bits] -- Beyluxe Messenger1
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: FormatFactory 3.6.0.0 - (.Format Factory.) [HKLM][64Bits] -- FormatFactory
O42 - Logiciel: Foxit Reader - (.Foxit Software Inc..) [HKLM][64Bits] -- Foxit Reader_is1
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM][64Bits] -- Internet Download Manager
O42 - Logiciel: K-Lite Codec Pack 10.6.0 Full - (...) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: Malwarebytes Anti-Malware ÇáäÓÎÉ 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Mozilla Firefox 39.0 (x86 ar) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 39.0 (x86 ar)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Microsoft Text-to-Speech Engine 4.0 (English) - (...) [HKLM][64Bits] -- MSTTS
O42 - Logiciel: NirSoft Wireless Network Watcher - (...) [HKLM][64Bits] -- NirSoft Wireless Network Watcher
O42 - Logiciel: Paltalk Messenger  11.6 - (.AVM Software Inc..) [HKLM][64Bits] -- Paltalk Messenger
O42 - Logiciel: PES 2013  Arabic Commentary_ Essam El Shawaly and Abdullah Mubarak Al-Harby - (.vipelshaer@yahoo.com.) [HKLM][64Bits] -- PES 2013  Arabic Commentary_ Essam El Shawaly and Abdullah Mubarak Al-Harby 1.00
O42 - Logiciel: Pro Evolution Soccer 2013 - (.Repack by Fenixx (19.09.2012).) [HKLM][64Bits] -- Pro Evolution Soccer 2013_is1
O42 - Logiciel: recALL version 15.01 - (...) [HKLM][64Bits] -- recALL_is1
O42 - Logiciel: TechPowerUp GPU-Z - (.TechPowerUp.) [HKLM][64Bits] -- TechPowerUp GPU-Z
O42 - Logiciel: Pro Evolution Soccer 2015 Update v1.01.01 - (...) [HKLM][64Bits] -- UHJvRXZvbHV0aW9uU29jY2VyMjAxNQ==_is1
O42 - Logiciel: WebcamMax - (.COOLWAREMAX.) [HKLM][64Bits] -- WebcamMax
O42 - Logiciel: Your Uninstaller! 7 - (.URSoft, Inc..) [HKLM][64Bits] -- YU2010_is1
O42 - Logiciel: Skype™ 7.6 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Java 8 Update 31 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218031F0}
O42 - Logiciel: Java 8 Update 40 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218040F0}
O42 - Logiciel: Foxit Cloud - (.Foxit Software Inc..) [HKLM][64Bits] -- {41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215}
O42 - Logiciel: Adobe Acrobat Reader DC - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1033-7B44-AC0F074E4100}
O42 - Logiciel: Aviator - (.WhiteHat Security, Inc..) [HKLM][64Bits] -- {B0E4AA1D-76A7-48B5-AAA1-D68BDBB1FF99}
O42 - Logiciel: Windows ARP Spoofer - (...) [HKLM][64Bits] -- {FB90085B-59E4-40FA-81CA-CBE0E70A7183}
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer

---\\ HKCU & HKLM Software Keys (190) - 14s
HKLM\SOFTWARE\Wow6432Node\4Media
HKLM\SOFTWARE\Wow6432Node\7-Zip
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\Arcai
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\AviSynth
HKLM\SOFTWARE\Wow6432Node\C07ft5Y
HKLM\SOFTWARE\Wow6432Node\CDDB
HKLM\SOFTWARE\Wow6432Node\Chromium
HKLM\SOFTWARE\Wow6432Node\CID
HKLM\SOFTWARE\Wow6432Node\CoreCodec
HKLM\SOFTWARE\Wow6432Node\COWON
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\DivX
HKLM\SOFTWARE\Wow6432Node\DivXNetworks
HKLM\SOFTWARE\Wow6432Node\Documents Expert
HKLM\SOFTWARE\Wow6432Node\DT Soft
HKLM\SOFTWARE\Wow6432Node\EasyBoot Systems
HKLM\SOFTWARE\Wow6432Node\Foxit Software
HKLM\SOFTWARE\Wow6432Node\GameHouse
HKLM\SOFTWARE\Wow6432Node\GN2
HKLM\SOFTWARE\Wow6432Node\GNU
HKLM\SOFTWARE\Wow6432Node\Golden Al-Wafi Translator
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\GRETECH
HKLM\SOFTWARE\Wow6432Node\HaaliMkx
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\Hexacto
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\Internet Download Manager
HKLM\SOFTWARE\Wow6432Node\InterVideo
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JLC's Software
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\KENWOOD Corporation
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\KLCodecPack
HKLM\SOFTWARE\Wow6432Node\KONAMI
HKLM\SOFTWARE\Wow6432Node\Lake
HKLM\SOFTWARE\Wow6432Node\LAV
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\ManyCam
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\MyLanViewer
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\Netscape
HKLM\SOFTWARE\Wow6432Node\NextSecurity.NET
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\PopCap
HKLM\SOFTWARE\Wow6432Node\PureCodec
HKLM\SOFTWARE\Wow6432Node\RealNetworks
HKLM\SOFTWARE\Wow6432Node\Reflexive Entertainment
HKLM\SOFTWARE\Wow6432Node\ReflexiveArcade
HKLM\SOFTWARE\Wow6432Node\Repack by Fenixx
HKLM\SOFTWARE\Wow6432Node\Rewaya-EgyCom
HKLM\SOFTWARE\Wow6432Node\S3R521
HKLM\SOFTWARE\Wow6432Node\Sachs
HKLM\SOFTWARE\Wow6432Node\Skunkstudios
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Sonic
HKLM\SOFTWARE\Wow6432Node\Sony Creative Software
HKLM\SOFTWARE\Wow6432Node\Sony Pictures Games
HKLM\SOFTWARE\Wow6432Node\Swearware
HKLM\SOFTWARE\Wow6432Node\Tencent  =>PUP.Optional.TencentAddressBar
HKLM\SOFTWARE\Wow6432Node\TuneUp
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Voice
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WebcamMax
HKLM\SOFTWARE\Wow6432Node\WhiteHat
HKLM\SOFTWARE\Wow6432Node\WinRAR
HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp.
HKLM\SOFTWARE\Wow6432Node\zbshareware
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\4Media
HKCU\SOFTWARE\4shared
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\AC3Filter
HKCU\SOFTWARE\Ada99
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AL-Software
HKCU\SOFTWARE\AnchorFree
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Arcai.com
HKCU\SOFTWARE\ASProtect
HKCU\SOFTWARE\Avast Software
HKCU\SOFTWARE\Aviator
HKCU\SOFTWARE\b7thy
HKCU\SOFTWARE\Beyluxe Messenger
HKCU\SOFTWARE\BitComet
HKCU\SOFTWARE\Camfrog
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\CoreAAC
HKCU\SOFTWARE\COWON
HKCU\SOFTWARE\Crystal Reality
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\DAUM
HKCU\SOFTWARE\DirectShow
HKCU\SOFTWARE\DivX
HKCU\SOFTWARE\DivXNetworks
HKCU\SOFTWARE\DownloadAstro
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\Dropbox
HKCU\SOFTWARE\drpsu
HKCU\SOFTWARE\DScaler5
HKCU\SOFTWARE\DSP-worx
HKCU\SOFTWARE\DT Soft
HKCU\SOFTWARE\EasyBoot Systems
HKCU\SOFTWARE\EgyCom
HKCU\SOFTWARE\Elaborate Bytes
HKCU\SOFTWARE\Elecard
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\Foxit Software
HKCU\SOFTWARE\FreeTime
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GameHouse
HKCU\SOFTWARE\GetData
HKCU\SOFTWARE\GN2
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\GRETECH
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\Icaros
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Indigo Rose
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\JEDI-VCL
HKCU\SOFTWARE\KENWOOD
HKCU\SOFTWARE\KMPlayer
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\madshi
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\ManyCam
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\Moonlight Cordless
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MPC-HC
HKCU\SOFTWARE\MyLanViewer
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NextSecurity
HKCU\SOFTWARE\OB
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Paltalk
HKCU\SOFTWARE\pixelStorm
HKCU\SOFTWARE\pth264
HKCU\SOFTWARE\PureCodec
HKCU\SOFTWARE\Pyrogon
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\Raimasoft
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\SGW
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\SkypeRS
HKCU\SOFTWARE\SoftPerfect
HKCU\SOFTWARE\Sony Creative Software
HKCU\SOFTWARE\SwitchSniffer
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\techPowerUp
HKCU\SOFTWARE\Tencent  =>PUP.Optional.TencentAddressBar
HKCU\SOFTWARE\Toybox
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\URSoft
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\VPN Master Free
HKCU\SOFTWARE\WebApp
HKCU\SOFTWARE\Wget
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\WPI
HKCU\SOFTWARE\yahoo
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft
HKCU\SOFTWARE\AppDataLow\Software\Smartbar  =>PUP.Optional.SmartBar
HKCU\SOFTWARE\AppDataLow\Software\Unity

---\\ Contents of the Common Files folders (O43) (302) - 16s
O43 - CFD: 2014/12/23 22:02:29 - [] D -- C:\Program Files (x86)\4Media
O43 - CFD: 2014/11/20 00:59:56 - [] D -- C:\Program Files (x86)\7-Zip
O43 - CFD: 2015/07/14 22:30:14 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2015/01/19 18:03:55 - [] D -- C:\Program Files (x86)\Adobe Media Player
O43 - CFD: 2015/03/31 19:53:36 - [0] D -- C:\Program Files (x86)\AimMonitor
O43 - CFD: 2014/10/04 00:57:39 - [] D -- C:\Program Files (x86)\AIMP3
O43 - CFD: 2015/01/22 13:54:48 - [] D -- C:\Program Files (x86)\AL-Software
O43 - CFD: 2014/06/22 12:32:03 - [] D -- C:\Program Files (x86)\AZZA3EEM GAMES
O43 - CFD: 2015/04/14 21:29:19 - [] D -- C:\Program Files (x86)\Beyluxe Messenger
O43 - CFD: 2015/07/07 17:08:04 - [0] D -- C:\Program Files (x86)\Butterfly Escape
O43 - CFD: 2015/07/17 13:38:32 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2014/11/20 16:09:33 - [] D -- C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 2014/04/12 09:28:51 - [] D -- C:\Program Files (x86)\Documents Expert
O43 - CFD: 2015/02/08 17:30:55 - [0] D -- C:\Program Files (x86)\DriverDoc
O43 - CFD: 2014/11/17 06:54:48 - [0] D -- C:\Program Files (x86)\dumps
O43 - CFD: 2014/10/07 13:44:01 - [] D -- C:\Program Files (x86)\Elaborate Bytes
O43 - CFD: 2014/12/12 10:21:58 - [] D -- C:\Program Files (x86)\Foxit Software
O43 - CFD: 2015/03/15 17:50:36 - [0] D -- C:\Program Files (x86)\Free Video Cutter
O43 - CFD: 2014/03/17 12:21:29 - [] D -- C:\Program Files (x86)\FreeTime
O43 - CFD: 2014/11/03 22:06:57 - [] D -- C:\Program Files (x86)\GetData
O43 - CFD: 2014/11/29 20:35:16 - [0] D -- C:\Program Files (x86)\GoForFilesUpdater
O43 - CFD: 2014/03/17 14:44:34 - [] D -- C:\Program Files (x86)\Golden Al-Wafi Translator
O43 - CFD: 2014/07/17 01:31:40 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/02/15 14:13:52 - [] D -- C:\Program Files (x86)\GPU-Z
O43 - CFD: 2015/03/29 17:08:09 - [0] D -- C:\Program Files (x86)\GRETECH
O43 - CFD: 2014/03/17 12:24:52 - [] D -- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 2015/03/28 23:10:42 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2014/03/17 14:30:39 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/07/17 08:14:12 - [] D -- C:\Program Files (x86)\Internet Download Manager
O43 - CFD: 2015/07/16 10:44:22 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/04/28 16:54:25 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2015/01/27 03:43:06 - [] D -- C:\Program Files (x86)\JLC's Software
O43 - CFD: 2015/02/15 18:48:08 - [] D -- C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 2014/07/25 13:33:30 - [] D -- C:\Program Files (x86)\Kenwood Fpu
O43 - CFD: 2015/07/14 22:20:01 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2014/03/17 14:45:31 - [] D -- C:\Program Files (x86)\ManyCam
O43 - CFD: 2014/10/19 14:04:24 - [0] D -- C:\Program Files (x86)\McAfee Security Scan
O43 - CFD: 2015/01/15 01:09:01 - [0] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 2014/03/17 14:33:23 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 2014/03/17 14:37:48 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2014/03/17 14:37:45 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2014/03/17 14:37:45 - [] D -- C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 2014/03/17 14:38:25 - [] D -- C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 2014/03/17 14:35:14 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 2014/05/17 15:29:33 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2014/03/17 12:24:58 - [] D -- C:\Program Files (x86)\moysar3
O43 - CFD: 2015/07/15 12:16:39 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/07/15 23:29:40 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2014/03/17 14:38:54 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2015/01/22 14:01:40 - [0] D -- C:\Program Files (x86)\My Total TV
O43 - CFD: 2014/12/01 21:25:16 - [0] D -- C:\Program Files (x86)\MyLanViewer
O43 - CFD: 2014/03/17 12:22:47 - [] D -- C:\Program Files (x86)\Nero
O43 - CFD: 2015/03/31 19:51:01 - [] D -- C:\Program Files (x86)\netcut
O43 - CFD: 2015/03/28 23:10:42 - [] D -- C:\Program Files (x86)\NextSecurity.NET
O43 - CFD: 2015/03/25 23:19:57 - [] D -- C:\Program Files (x86)\NirSoft
O43 - CFD: 2014/07/17 02:05:09 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2015/04/14 23:43:19 - [] D -- C:\Program Files (x86)\Paltalk Messenger
O43 - CFD: 2015/07/11 14:35:14 - [] D -- C:\Program Files (x86)\Pro Evolution Soccer 2013
O43 - CFD: 2014/12/10 13:00:44 - [] D -- C:\Program Files (x86)\Pro Evolution Soccer 2015
O43 - CFD: 2015/02/10 15:01:21 - [0] D -- C:\Program Files (x86)\RarmaRadio
O43 - CFD: 2014/03/17 12:19:40 - [] D -- C:\Program Files (x86)\Real
O43 - CFD: 2009/07/14 08:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2014/04/14 19:08:41 - [] D -- C:\Program Files (x86)\ReflexiveArcade
O43 - CFD: 2015/07/14 19:00:59 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2015/01/21 14:53:23 - [] D -- C:\Program Files (x86)\Steam
O43 - CFD: 2014/03/17 12:22:17 - [] D -- C:\Program Files (x86)\TeamViewer
O43 - CFD: 2015/07/07 17:14:26 - [0] D -- C:\Program Files (x86)\Toptv
O43 - CFD: 2014/03/17 12:22:22 - [] D -- C:\Program Files (x86)\UltraISO
O43 - CFD: 2009/07/14 07:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2014/03/17 14:48:44 - [] D -- C:\Program Files (x86)\USB Disk Security
O43 - CFD: 2015/04/01 21:07:34 - [0] D -- C:\Program Files (x86)\uTorrent
O43 - CFD: 2014/04/27 18:14:56 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2014/11/20 14:31:28 - [] D -- C:\Program Files (x86)\vipelshaer@yahoo.com
O43 - CFD: 2015/04/27 00:38:34 - [0] D -- C:\Program Files (x86)\Vistumbler
O43 - CFD: 2015/02/15 18:51:27 - [] D -- C:\Program Files (x86)\WebcamMax
O43 - CFD: 2014/12/01 20:52:24 - [] D -- C:\Program Files (x86)\Whitehat
O43 - CFD: 2014/05/17 06:34:05 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2011/02/07 16:39:59 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/06/10 17:57:01 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2009/07/14 08:32:38 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2011/02/07 16:39:59 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2010/11/21 06:31:38 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2011/02/07 16:39:59 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2014/10/04 00:57:39 - [] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 2014/03/17 12:21:46 - [] D -- C:\Program Files (x86)\WMZHE
O43 - CFD: 2014/10/14 19:54:28 - [] D -- C:\Program Files (x86)\Your Uninstaller! 7
O43 - CFD: 2014/12/23 22:02:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4Media
O43 - CFD: 2014/11/20 00:59:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 2014/11/29 21:21:39 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2014/11/29 21:21:40 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/08/15 11:39:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
O43 - CFD: 2014/03/17 12:24:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 ME
O43 - CFD: 2014/11/29 21:21:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
O43 - CFD: 2014/03/17 12:22:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COWON Media Center - jetAudio
O43 - CFD: 2014/11/20 16:10:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
O43 - CFD: 2014/04/12 09:19:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Documents Expert
O43 - CFD: 2015/05/03 18:00:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
O43 - CFD: 2014/05/11 21:34:06 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2014/03/17 14:44:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Golden Al-Wafi Translator
O43 - CFD: 2014/03/17 14:47:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2014/07/27 11:58:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP2000_E
O43 - CFD: 2015/03/31 19:53:34 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IMDetect AIM Sniffer
O43 - CFD: 2014/03/17 14:30:40 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 2015/04/30 14:16:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 2014/11/20 15:50:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2015/02/08 17:29:10 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JLC's Software
O43 - CFD: 2015/02/15 18:48:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
O43 - CFD: 2015/01/06 14:50:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\keit.co
O43 - CFD: 2014/07/25 13:33:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kenwood Fpu
O43 - CFD: 2014/11/29 21:21:40 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/07/14 22:20:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2014/03/17 14:45:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam
O43 - CFD: 2014/11/18 09:05:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2014/11/29 21:21:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 11
O43 - CFD: 2014/06/22 16:12:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PE Builder
O43 - CFD: 2014/11/19 13:31:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2013 Patch
O43 - CFD: 2014/11/29 21:21:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pure Codec
O43 - CFD: 2014/03/17 12:19:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
O43 - CFD: 2014/11/19 19:26:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Repack by Fenixx
O43 - CFD: 2014/11/29 21:21:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rewaya EgyCom
O43 - CFD: 2014/03/17 14:39:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 2014/10/12 16:36:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2014/10/19 14:04:24 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/03/28 23:10:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SwitchSniffer
O43 - CFD: 2010/11/21 10:16:46 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2014/03/17 12:22:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
O43 - CFD: 2014/03/17 12:25:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB Disk Security
O43 - CFD: 2015/05/18 13:35:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/05/20 13:15:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebcamMax
O43 - CFD: 2015/03/27 17:50:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinArp Spoofer
O43 - CFD: 2014/03/17 12:19:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2014/10/14 19:54:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7
O43 - CFD: 2014/11/29 21:21:40 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ÇáãæÇÑíË
O43 - CFD: 2014/12/23 22:02:29 - [] D -- C:\ProgramData\4Media
O43 - CFD: 2015/07/14 22:30:04 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2009/07/14 08:08:56 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/05/02 10:18:21 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2015/06/22 10:51:31 - [] D -- C:\ProgramData\Baidu
O43 - CFD: 2015/01/06 15:35:53 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2014/11/20 18:59:15 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2014/11/22 13:33:19 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 2009/07/14 08:08:56 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2009/07/14 08:08:56 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2009/07/14 08:08:56 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 2014/04/13 13:22:25 - [] D -- C:\ProgramData\GameBlend
O43 - CFD: 2015/04/07 09:56:48 - [] D -- C:\ProgramData\Genimo
O43 - CFD: 2014/03/17 14:43:49 - [] D -- C:\ProgramData\Hewlett-Packard
O43 - CFD: 2014/03/17 12:25:39 - [0] D -- C:\ProgramData\IDM
O43 - CFD: 2015/06/22 11:30:42 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 2014/03/17 14:48:27 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2012/09/19 04:32:56 - [] D -- C:\ProgramData\KONAMI
O43 - CFD: 2014/04/18 00:03:39 - [] D -- C:\ProgramData\LightC
O43 - CFD: 2014/09/25 12:22:21 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2014/03/17 14:45:26 - [] D -- C:\ProgramData\ManyCam
O43 - CFD: 2014/10/07 14:34:03 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2015/04/17 12:21:12 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/01/20 20:33:04 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2014/03/17 14:46:52 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/03/27 14:58:42 - [] D -- C:\ProgramData\Net Monitor for Employees Pro
O43 - CFD: 2015/01/25 21:48:33 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/01/18 19:51:59 - [] D -- C:\ProgramData\Real
O43 - CFD: 2014/03/17 14:39:37 - [] D -- C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 2015/07/17 09:06:42 - [] D -- C:\ProgramData\RogueKiller
O43 - CFD: 2014/04/13 13:19:54 - [] D -- C:\ProgramData\Sandlot Games
O43 - CFD: 2015/07/14 19:01:03 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2009/07/14 08:08:56 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2014/11/16 19:32:27 - [] D -- C:\ProgramData\Steam
O43 - CFD: 2014/11/20 15:50:31 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2015/06/22 11:34:43 - [0] D -- C:\ProgramData\SUPPORTDIR
O43 - CFD: 2014/03/17 14:48:29 - [] D -- C:\ProgramData\Synaptics
O43 - CFD: 2015/07/12 02:55:02 - [0] AD -- C:\ProgramData\TEMP
O43 - CFD: 2009/07/14 08:08:56 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/01/06 15:36:09 - [] D -- C:\ProgramData\TuneUp Software
O43 - CFD: 2015/02/15 18:57:36 - [] D -- C:\ProgramData\WebcamMax
O43 - CFD: 2014/03/17 14:48:39 - [0] D -- C:\ProgramData\Zbshareware Lab
O43 - CFD: 2014/03/17 14:37:18 - [] D -- C:\ProgramData\{A5CCDB92-FA53-47D1-89E6-32B82D86621A}
O43 - CFD: 2015/01/06 15:35:58 - [] SHD -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 2014/03/17 12:15:06 - [0] SHD -- C:\ProgramData\ÓØÍ ÇáãßÊÈ
O43 - CFD: 2014/03/17 12:15:06 - [0] SHD -- C:\ProgramData\ÞÇÆãÉ ÇÈÏÃ
O43 - CFD: 2015/07/14 22:30:29 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2014/09/25 22:55:05 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2014/03/17 12:22:44 - [] D -- C:\Program Files (x86)\Common Files\COWON
O43 - CFD: 2014/03/17 14:38:24 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2014/03/17 12:22:22 - [] D -- C:\Program Files (x86)\Common Files\EZB Systems
O43 - CFD: 2015/03/27 17:49:38 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2014/03/17 14:28:26 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2014/03/17 14:45:53 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 2015/04/01 22:20:37 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2014/03/17 14:45:59 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2014/03/17 12:23:19 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 2014/04/13 13:19:55 - [] D -- C:\Program Files (x86)\Common Files\Sandlot Shared
O43 - CFD: 2009/07/14 06:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2014/10/12 16:36:50 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2009/07/14 06:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2014/11/16 19:42:09 - [] D -- C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 2014/05/17 06:34:24 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2014/03/17 12:19:35 - [] D -- C:\Program Files (x86)\Common Files\xing shared
O43 - CFD: 2014/12/23 22:02:56 - [] D -- C:\Users\HP\AppData\Roaming\4Media
O43 - CFD: 2014/09/06 15:21:38 - [] D -- C:\Users\HP\AppData\Roaming\Adobe
O43 - CFD: 2014/12/09 21:00:03 - [] D -- C:\Users\HP\AppData\Roaming\AIMP3
O43 - CFD: 2014/05/02 11:17:24 - [] D -- C:\Users\HP\AppData\Roaming\AVAST Software
O43 - CFD: 2014/06/18 19:47:22 - [] D -- C:\Users\HP\AppData\Roaming\Beyluxe
O43 - CFD: 2015/01/14 20:18:37 - [] D -- C:\Users\HP\AppData\Roaming\BitComet
O43 - CFD: 2014/05/09 19:45:24 - [] D -- C:\Users\HP\AppData\Roaming\ChessGenius Classic
O43 - CFD: 2014/10/10 01:59:01 - [] D -- C:\Users\HP\AppData\Roaming\COWON
O43 - CFD: 2014/11/22 13:33:19 - [] D -- C:\Users\HP\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 2014/04/11 02:01:17 - [] D -- C:\Users\HP\AppData\Roaming\DivX
O43 - CFD: 2015/07/17 13:28:26 - [] D -- C:\Users\HP\AppData\Roaming\DMCache
O43 - CFD: 2014/07/06 18:04:07 - [] D -- C:\Users\HP\AppData\Roaming\Dropbox
O43 - CFD: 2014/07/06 18:04:07 - [] D -- C:\Users\HP\AppData\Roaming\DropboxMaster
O43 - CFD: 2015/03/20 00:43:35 - [] D -- C:\Users\HP\AppData\Roaming\Foxit Software
O43 - CFD: 2014/04/13 13:22:25 - [] D -- C:\Users\HP\AppData\Roaming\GameBlend
O43 - CFD: 2015/04/07 09:50:00 - [] D -- C:\Users\HP\AppData\Roaming\Genimo
O43 - CFD: 2015/05/21 20:32:35 - [] D -- C:\Users\HP\AppData\Roaming\HaiYuInst
O43 - CFD: 2014/03/17 14:36:28 - [] D -- C:\Users\HP\AppData\Roaming\hpqLog
O43 - CFD: 2014/03/17 12:15:58 - [] D -- C:\Users\HP\AppData\Roaming\Identities
O43 - CFD: 2015/07/10 22:50:42 - [] D -- C:\Users\HP\AppData\Roaming\IDM
O43 - CFD: 2014/03/17 14:48:46 - [] D -- C:\Users\HP\AppData\Roaming\Intel Corporation
O43 - CFD: 2015/01/27 03:43:17 - [] D -- C:\Users\HP\AppData\Roaming\JLC's Software
O43 - CFD: 2015/01/06 14:50:04 - [] D -- C:\Users\HP\AppData\Roaming\keit.co
O43 - CFD: 2014/04/21 18:15:48 - [] D -- C:\Users\HP\AppData\Roaming\Macromedia
O43 - CFD: 2014/03/17 14:45:40 - [] D -- C:\Users\HP\AppData\Roaming\ManyCam
O43 - CFD: 2010/11/21 10:16:46 - [0] D -- C:\Users\HP\AppData\Roaming\Media Center Programs
O43 - CFD: 2015/03/31 16:44:25 - [] SD -- C:\Users\HP\AppData\Roaming\Microsoft
O43 - CFD: 2014/03/17 14:49:40 - [] D -- C:\Users\HP\AppData\Roaming\Mozilla
O43 - CFD: 2015/02/15 18:58:43 - [] D -- C:\Users\HP\AppData\Roaming\MPC-HC
O43 - CFD: 2015/01/22 13:28:19 - [] D -- C:\Users\HP\AppData\Roaming\MyTotalTV
O43 - CFD: 2014/07/17 02:05:09 - [0] D -- C:\Users\HP\AppData\Roaming\Opera
O43 - CFD: 2014/05/05 18:36:35 - [] D -- C:\Users\HP\AppData\Roaming\Opera Software
O43 - CFD: 2015/04/14 23:44:52 - [] D -- C:\Users\HP\AppData\Roaming\Paltalk
O43 - CFD: 2014/04/13 13:25:10 - [] D -- C:\Users\HP\AppData\Roaming\pixelStorm
O43 - CFD: 2015/02/15 15:24:58 - [0] D -- C:\Users\HP\AppData\Roaming\Publish Providers
O43 - CFD: 2015/01/18 19:51:43 - [] D -- C:\Users\HP\AppData\Roaming\Real
O43 - CFD: 2014/04/11 13:20:55 - [] D -- C:\Users\HP\AppData\Roaming\RealNetworks
O43 - CFD: 2015/07/07 13:18:14 - [] D -- C:\Users\HP\AppData\Roaming\shamela
O43 - CFD: 2014/11/01 23:00:15 - [] D -- C:\Users\HP\AppData\Roaming\SimpleTV V03
O43 - CFD: 2015/07/16 12:01:18 - [] D -- C:\Users\HP\AppData\Roaming\Skype
O43 - CFD: 2015/02/15 15:24:55 - [] D -- C:\Users\HP\AppData\Roaming\Sony
O43 - CFD: 2014/03/17 14:48:28 - [] D -- C:\Users\HP\AppData\Roaming\Synaptics
O43 - CFD: 2014/06/22 17:00:47 - [] D -- C:\Users\HP\AppData\Roaming\Thinstall
O43 - CFD: 2015/01/25 18:30:15 - [] D -- C:\Users\HP\AppData\Roaming\Unity
O43 - CFD: 2014/10/14 19:53:31 - [] D -- C:\Users\HP\AppData\Roaming\URSoft
O43 - CFD: 2015/06/16 21:11:30 - [] D -- C:\Users\HP\AppData\Roaming\vlc
O43 - CFD: 2015/02/15 18:56:05 - [] D -- C:\Users\HP\AppData\Roaming\WebcamMax
O43 - CFD: 2015/06/04 18:48:16 - [] D -- C:\Users\HP\AppData\Roaming\Wildfire
O43 - CFD: 2014/03/17 12:19:56 - [] D -- C:\Users\HP\AppData\Roaming\WinRAR
O43 - CFD: 2014/06/30 14:09:13 - [] D -- C:\Users\HP\AppData\Roaming\XBMC
O43 - CFD: 2014/03/17 14:48:39 - [] D -- C:\Users\HP\AppData\Roaming\Zbshareware Lab
O43 - CFD: 2015/07/17 14:16:16 - [] D -- C:\Users\HP\AppData\Roaming\ZHP
O43 - CFD: 2015/07/14 22:32:12 - [] D -- C:\Users\HP\AppData\Local\Adobe
O43 - CFD: 2014/03/17 12:15:39 - [0] SHD -- C:\Users\HP\AppData\Local\Application Data
O43 - CFD: 2014/12/01 20:52:40 - [] D -- C:\Users\HP\AppData\Local\Aviator
O43 - CFD: 2014/12/01 20:52:09 - [] D -- C:\Users\HP\AppData\Local\Downloaded Installations
O43 - CFD: 2015/05/21 22:24:30 - [] D -- C:\Users\HP\AppData\Local\Droid4X
O43 - CFD: 2015/05/17 21:16:24 - [] D -- C:\Users\HP\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/06/14 11:03:28 - [0] SHD -- C:\Users\HP\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/06/14 11:03:28 - [0] SHD -- C:\Users\HP\AppData\Local\EmieSiteList
O43 - CFD: 2015/06/14 11:03:28 - [0] SHD -- C:\Users\HP\AppData\Local\EmieUserList
O43 - CFD: 2014/06/25 13:16:52 - [] D -- C:\Users\HP\AppData\Local\Facebook
O43 - CFD: 2015/04/25 22:56:58 - [] D -- C:\Users\HP\AppData\Local\Foxit Reader
O43 - CFD: 2015/05/17 23:13:13 - [] D -- C:\Users\HP\AppData\Local\Geckofx
O43 - CFD: 2014/07/17 01:31:49 - [] D -- C:\Users\HP\AppData\Local\Google
O43 - CFD: 2015/06/01 18:22:32 - [] D -- C:\Users\HP\AppData\Local\GWX
O43 - CFD: 2014/03/17 12:15:39 - [0] SHD -- C:\Users\HP\AppData\Local\History
O43 - CFD: 2014/12/11 18:39:58 - [] D -- C:\Users\HP\AppData\Local\Intel_Corporation
O43 - CFD: 2014/05/02 11:34:11 - [] D -- C:\Users\HP\AppData\Local\Macromedia
O43 - CFD: 2014/03/17 14:45:40 - [] D -- C:\Users\HP\AppData\Local\ManyCam
O43 - CFD: 2014/12/19 19:21:06 - [] D -- C:\Users\HP\AppData\Local\Microsoft
O43 - CFD: 2014/10/13 21:55:08 - [] D -- C:\Users\HP\AppData\Local\Microsoft Games
O43 - CFD: 2014/03/17 14:32:45 - [0] D -- C:\Users\HP\AppData\Local\Microsoft Help
O43 - CFD: 2015/07/13 13:18:57 - [] D -- C:\Users\HP\AppData\Local\MiniService
O43 - CFD: 2014/04/10 13:39:26 - [] D -- C:\Users\HP\AppData\Local\Mozilla
O43 - CFD: 2014/12/01 21:22:33 - [] D -- C:\Users\HP\AppData\Local\MyLanViewer
O43 - CFD: 2014/03/17 14:48:04 - [] D -- C:\Users\HP\AppData\Local\Opera
O43 - CFD: 2014/05/05 18:36:35 - [] D -- C:\Users\HP\AppData\Local\Opera Software
O43 - CFD: 2014/06/30 20:44:38 - [] D -- C:\Users\HP\AppData\Local\Packages
O43 - CFD: 2014/06/09 10:51:32 - [] D -- C:\Users\HP\AppData\Local\Programs
O43 - CFD: 2014/05/21 00:55:45 - [] D -- C:\Users\HP\AppData\Local\Skype
O43 - CFD: 2015/03/15 17:49:18 - [] D -- C:\Users\HP\AppData\Local\Sony
O43 - CFD: 2015/07/17 14:15:58 - [] D -- C:\Users\HP\AppData\Local\Temp
O43 - CFD: 2014/03/17 12:15:39 - [0] SHD -- C:\Users\HP\AppData\Local\Temporary Internet Files
O43 - CFD: 2014/05/27 15:11:33 - [] D -- C:\Users\HP\AppData\Local\Unity
O43 - CFD: 2014/03/17 12:15:51 - [0] D -- C:\Users\HP\AppData\Local\VirtualStore
O43 - CFD: 2014/04/12 09:44:57 - [] D -- C:\Users\HP\AppData\Local\Western Digital
O43 - CFD: 2015/06/05 14:45:19 - [] D -- C:\Users\HP\AppData\Local\WiFi Guard
O43 - CFD: 2009/07/14 07:54:32 - [] RD -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/03/12 02:52:56 - [] RD -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/04/14 21:29:20 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Beyluxe Messenger
O43 - CFD: 2014/07/06 18:03:51 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 2015/06/22 10:50:15 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
O43 - CFD: 2014/10/07 15:01:41 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/07/12 02:10:13 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 2015/01/27 03:43:07 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JLC's Software
O43 - CFD: 2009/07/14 07:49:38 - [] RD -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/05/04 18:28:31 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft Wireless Network Watcher
O43 - CFD: 2015/04/14 23:43:22 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk Messenger
O43 - CFD: 2015/04/30 10:17:42 - [] RD -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/02/15 14:13:52 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
O43 - CFD: 2014/03/17 12:19:54 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2014/03/17 12:25:00 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ÇáãÕÍÝ ÇáãíÓÑ
O43 - CFD: 2014/08/07 00:04:28 - [0] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ÇáãæÇÑíË
O43 - CFD: 2015/03/27 10:50:47 - [] D -- C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????

---\\ ShareTools MSconfig StartupReg (SMSR) (O53) (28) - 1s
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher  [Key] . (...) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0  [Key] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O53 - SMSR:HKLM\...\startupreg\AdobeCS5ServiceManager  [Key] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
O53 - SMSR:HKLM\...\startupreg\BCSSync  [Key] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
O53 - SMSR:HKLM\...\startupreg\BeyluxeMessenger  [Key] . (...) -- C:\Program Files (x86)\Beyluxe Messenger\Beyluxe Messenger.exe
O53 - SMSR:HKLM\...\startupreg\BitComet  [Key] . (...) -- C:\Program Files\BitComet\BitComet.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite  [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O53 - SMSR:HKLM\...\startupreg\Facebook Update  [Key] . (.Facebook Inc. - ãËÈøöÊ Facebook.) -- C:\Users\HP\AppData\Local\Facebook\Update\FacebookUpdate.exe
O53 - SMSR:HKLM\...\startupreg\GenieoSystemTray  [Key] . (...) -- C:\Users\HP\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe (.not file.)  =>PUP.Optional.Genieo
O53 - SMSR:HKLM\...\startupreg\GenieoUpdaterService  [Key] . (...) -- C:\Users\HP\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe (.not file.)  =>PUP.Optional.Genieo
O53 - SMSR:HKLM\...\startupreg\HotKeysCmds  [Key] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O53 - SMSR:HKLM\...\startupreg\IAStorIcon  [Key] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O53 - SMSR:HKLM\...\startupreg\IDMan  [Key] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
O53 - SMSR:HKLM\...\startupreg\IgfxTray  [Key] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O53 - SMSR:HKLM\...\startupreg\ManyCam  [Key] . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
O53 - SMSR:HKLM\...\startupreg\Messenger (Yahoo!)  [Key] . (...) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Persistence  [Key] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O53 - SMSR:HKLM\...\startupreg\QLBController  [Key] . (.Hewlett-Packard Company - QLBController.) -- C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
O53 - SMSR:HKLM\...\startupreg\Sidebar  [Key] . (.Microsoft Corporation - ýýÇáÃÏæÇÊ ÇáÐßíÉ Úáì ÓØÍ ÇáãßÊÈ áÜ Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O53 - SMSR:HKLM\...\startupreg\Skype  [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O53 - SMSR:HKLM\...\startupreg\SoftonicAssistant  [Key] . (...) -- C:\Users\HP\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe (.not file.)  =>PUP.Optional.Softonic
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched  [Key] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O53 - SMSR:HKLM\...\startupreg\SwitchBoard  [Key] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O53 - SMSR:HKLM\...\startupreg\SynTPEnh  [Key] . (...) -- %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\TkBellExe  [Key] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
O53 - SMSR:HKLM\...\startupreg\USB Security  [Key] . (.Dr.BMA - ÈÑäÇãÌ ÇáÍãÇíÉ ãä ÝíÑæÓÇÊ ÇáÝáÇÔÇÊ æÇáÃæÊæÑ.) -- C:\Program Files (x86)\USB Disk Security\USBGuard.exe
O53 - SMSR:HKLM\...\startupreg\WebcamMaxAutoRun  [Key] . (...) -- C:\Program Files (x86)\WebcamMax\wcmmon.exe

---\\ System Drivers List (SDL) (O58) (75) - 6s
O58 - SDL:2009/07/14 04:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys   [491088]
O58 - SDL:2009/07/14 04:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys   [339536]
O58 - SDL:2009/07/14 04:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys   [182864]
O58 - SDL:2009/07/14 04:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys   [15440]
O58 - SDL:2011/03/11 09:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys   [107904]
O58 - SDL:2009/07/14 04:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys   [194128]
O58 - SDL:2011/03/11 09:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys   [27008]
O58 - SDL:2009/07/14 04:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys   [87632]
O58 - SDL:2009/07/14 04:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys   [97856]
O58 - SDL:2015/04/28 09:51:58 A . (...) -- C:\Windows\System32\drivers\aswHwid.sys   [29168]
O58 - SDL:2015/04/28 09:51:58 A . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys   [89944]
O58 - SDL:2015/04/28 09:51:57 A . (.Avast Software s.r.o. - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys   [93528]
O58 - SDL:2015/04/28 09:51:58 A . (...) -- C:\Windows\System32\drivers\aswRvrt.sys   [65736]
O58 - SDL:2015/04/28 09:51:14 A . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys   [1047320]
O58 - SDL:2015/06/28 00:33:18 A . (.Avast Software s.r.o. - avast! self protection module.) -- C:\Windows\System32\drivers\aswsp.sys   [442264]
O58 - SDL:2015/04/28 09:51:59 A . (.Avast Software s.r.o. - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys   [137288]
O58 - SDL:2015/04/28 09:51:58 A . (...) -- C:\Windows\System32\drivers\aswVmm.sys   [272248]
O58 - SDL:2009/06/10 23:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys   [270848]
O58 - SDL:2009/06/10 23:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys   [18432]
O58 - SDL:2009/06/10 23:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys   [8704]
O58 - SDL:2009/07/14 04:19:07 A . (.Brother Industries Ltd. - ÈÑäÇãÌ ÊÔÛíá I/F ÇáÊÓáÓáí áÜ Brotehr (WDM)ý.) -- C:\Windows\System32\drivers\BrSerId.sys   [286720]
O58 - SDL:2009/06/10 23:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys   [47104]
O58 - SDL:2009/06/10 23:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys   [14976]
O58 - SDL:2009/06/10 23:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys   [14720]
O58 - SDL:2009/06/10 23:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys   [468480]
O58 - SDL:2009/07/14 04:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys   [17488]
O58 - SDL:2014/11/20 16:09:33 A . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\drivers\dtsoftbus01.sys   [283200]
O58 - SDL:2009/07/14 04:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys   [530496]
O58 - SDL:2009/06/10 23:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys   [3286016]
O58 - SDL:2009/06/10 23:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys   [31232]
O58 - SDL:2013/06/25 18:09:54 A . (.Hewlett-Packard Company - Keyboard Filter Driver.) -- C:\Windows\System32\drivers\HpqKbFiltr.sys   [25912]
O58 - SDL:2010/11/21 06:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys   [78720]
O58 - SDL:2011/11/29 20:40:32 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys   [568600]
O58 - SDL:2011/03/11 09:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys   [410496]
O58 - SDL:2015/06/12 05:00:58 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys   [197616]
O58 - SDL:2014/01/22 15:51:28 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys   [4221440]
O58 - SDL:2009/07/14 04:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys   [44112]
O58 - SDL:2014/01/22 15:57:36 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys   [450520]
O58 - SDL:2013/07/18 00:43:40 A . (.Intel Corporation - Intel(R) USB 3.0 Host Controller Switch Dri.) -- C:\Windows\System32\drivers\iusb3hcs.sys   [20464]
O58 - SDL:2013/03/25 10:03:44 A . (.Ralink Corporation - Bluetooth Filter Driver.) -- C:\Windows\System32\drivers\IvtUrbBtFlt.sys   [49584]
O58 - SDL:2009/07/14 04:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys   [114752]
O58 - SDL:2009/07/14 04:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys   [106560]
O58 - SDL:2009/07/14 04:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys   [65600]
O58 - SDL:2009/07/14 04:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys   [115776]
O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys   [25816]
O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys   [109272]
O58 - SDL:2015/07/17 13:59:12 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys   [113880]
O58 - SDL:2012/01/11 09:11:20 A . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Windows\System32\drivers\mcvidrv_x64.sys   [34304]
O58 - SDL:2009/07/14 04:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys   [35392]
O58 - SDL:2009/07/14 04:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys   [284736]
O58 - SDL:2015/06/18 08:41:56 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys   [63704]
O58 - SDL:2013/09/23 10:01:46 A . (.Ralink Technology, Corp. - Ralink 802.11 Wireless Adapter Driver.) -- C:\Windows\System32\drivers\netr28x.sys   [2556616]
O58 - SDL:2009/07/14 04:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys   [51264]
O58 - SDL:2011/03/11 09:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys   [148352]
O58 - SDL:2011/03/11 09:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys   [166272]
O58 - SDL:2009/07/14 04:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys   [1524816]
O58 - SDL:2009/07/14 04:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys   [128592]
O58 - SDL:2013/08/27 13:08:42 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys   [883928]
O58 - SDL:2013/10/19 09:38:06 A . (.Ralink Technology, Corp. - Ralink Bluetooth Adapter.) -- C:\Windows\System32\drivers\rtbth.sys   [1202888]
O58 - SDL:2013/10/24 07:03:16 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\Windows\System32\drivers\RtsP2Stor.sys   [290520]
O58 - SDL:2009/06/10 23:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys   [23040]
O58 - SDL:2009/07/14 04:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys   [43584]
O58 - SDL:2009/07/14 04:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys   [80464]
O58 - SDL:2012/02/24 04:33:16 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver.sys   [21264]
O58 - SDL:2009/07/14 04:45:55 A . (.Promise Technology - Promise  SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys   [24656]
O58 - SDL:2012/02/24 04:33:18 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys   [425232]
O58 - SDL:2012/01/05 02:01:54 A . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\drivers\taphss.sys   [37888]
O58 - SDL:2014/05/17 03:42:38 A . (.Anchorfree Inc. - Anchorfree HSS VPN Adapter.) -- C:\Windows\System32\drivers\taphss6.sys   [42184]
O58 - SDL:2013/08/27 21:02:56 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverx64.sys   [99288]
O58 - SDL:2015/07/17 13:25:43 A . (...) -- C:\Windows\System32\drivers\TrueSight.sys   [35064]
O58 - SDL:2014/05/16 14:04:46 A . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\drivers\VBoxDrv.sys   [254240]
O58 - SDL:2013/07/24 18:02:55 A . (.Elaborate Bytes AG - Virtual CloneDrive storage miniport.) -- C:\Windows\System32\drivers\VClone.sys   [34816]
O58 - SDL:2009/07/14 04:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys   [17488]
O58 - SDL:2009/07/14 04:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys   [161872]
O58 - SDL:2012/04/16 00:32:14 A . (.Windows (R) Win 7 DDK provider - WebcamMax Capture.) -- C:\Windows\System32\drivers\wcmvcam64.sys   [1071032]

---\\ Last modified or created user files (O61) (18) - 87s
O61 - LFC: 2015/07/11 14:32:23 A . (..) -- C:\Users\HP\Documents\KONAMI\Pro Evolution Soccer 2015\save\ML 01.bin   [14917327]
O61 - LFC: 2015/07/11 14:32:24 A . (..) -- C:\Users\HP\Documents\KONAMI\Pro Evolution Soccer 2015\save\SYSTEM.bin   [136577]
O61 - LFC: 2015/07/11 14:39:04 A . (..) -- C:\Users\HP\Documents\KONAMI\Pro Evolution Soccer 2013\save\CL01.bin   [5243688]
O61 - LFC: 2015/07/11 14:36:54 A . (..) -- C:\Users\HP\Documents\KONAMI\Pro Evolution Soccer 2013\save\OPTION.bin   [402008]
O61 - LFC: 2015/07/17 06:26:09 A . (.AVAST Software.) -- C:\Users\HP\Desktop\avastclear  ÃÏÇÉ ÇÒÇáÉ ÇÝÇÓÊ.exe   [5961024]
O61 - LFC: 2015/07/17 03:55:41 A . (.Swearware.) -- C:\Users\HP\Desktop\ComboFix ÃÏÇÉ.exe   [5634275]
O61 - LFC: 2015/07/17 13:27:06 R . (.Swearware.) -- C:\Users\HP\Desktop\ComboFix.exe   [5634275]
O61 - LFC: 2015/07/17 09:05:29 A . (..) -- C:\Users\HP\Desktop\RogueKiller.exe   [18070088]
O61 - LFC: 2015/07/10 22:46:11 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmupdt.exe   [6638272]
O61 - LFC: 2015/07/17 13:59:33 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2.dll   [332824]
O61 - LFC: 2015/07/17 13:59:33 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2_64.dll   [460824]
O61 - LFC: 2015/07/17 13:59:33 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc.dll   [34216]
O61 - LFC: 2015/07/17 13:59:33 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc64.dll   [28512]
O61 - LFC: 2015/07/17 13:59:33 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc.dll   [26648]
O61 - LFC: 2015/07/17 13:59:33 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmmzcc5\components12\idmmzcc64.dll   [31768]
O61 - LFC: 2015/07/17 13:59:33 A . (.Tonec Inc..) -- C:\Users\HP\AppData\Roaming\IDM\idmmzcc5\components\idmmzcc.dll   [34216]
O61 - LFC: 2015/07/17 06:28:15 A . (..) -- C:\Users\HP\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin   [1113849]
O61 - LFC: 2015/07/13 10:14:22 A . (..) -- C:\Users\HP\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll   [16307888]

---\\ File Associations Shell Spawning (O67) (10) - 1s
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - ýýãÍÑÑ ÇáÊÓÌíá.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

---\\ Start Menu Internet (SMI) (O68) (20) - 1s
O68 - StartMenuInternet: <Aviator> <Aviator>[HKLM\..\Shell\open\Command] (.The Aviator Authors - WhiteHat Aviator.) -- C:\Program Files (x86)\Whitehat\Aviator\Application\Aviator.exe 
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Opera\Opera.exe 
O68 - StartMenuInternet: <Aviator> <Aviator>[HKLM\..\InstallInfo\ShowIconsCommand] (.The Aviator Authors - WhiteHat Aviator.) -- C:\Program Files (x86)\Whitehat\Aviator\Application\Aviator.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - ýýÇáÃÏÇÉ ÇáãÓÇÚÏÉ ááÊåíÆÉ áßá ãÓÊÎÏã áÜ IE.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Opera\Opera.exe (.not file.)
O68 - StartMenuInternet: <Aviator> <Aviator>[HKLM\..\InstallInfo\ReinstallCommand] (.The Aviator Authors - WhiteHat Aviator.) -- C:\Program Files (x86)\Whitehat\Aviator\Application\Aviator.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - ýýÇáÃÏÇÉ ÇáãÓÇÚÏÉ ááÊåíÆÉ áßá ãÓÊÎÏã áÜ IE.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Opera\Opera.exe (.not file.)
O68 - StartMenuInternet: <Aviator> <Aviator>[HKLM\..\InstallInfo\HideIconsCommand] (.The Aviator Authors - WhiteHat Aviator.) -- C:\Program Files (x86)\Whitehat\Aviator\Application\Aviator.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - ýýÇáÃÏÇÉ ÇáãÓÇÚÏÉ ááÊåíÆÉ áßá ãÓÊÎÏã áÜ IE.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Opera\Opera.exe (.not file.)

---\\ Search Browser Infection (SBI) (O69) (34) - 12s
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.FF19Solved", "true");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.UserID", "UN23887791991196717");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.dum", "2");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.fullUserID", "UN23887791991196717.IN.20140910004043");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.installDate", "10/09/2014 00:40:46");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.installSessionId", "-1");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.installSp", "FALSE");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.installUsage", "26/01/2015 00:44:24");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.installUsageEarly", "26/01/2015 00:44:24");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.installerVersion", "1.11.0.11");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.searchRevert", "false");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.searchUninstallUserMode", "8");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.searchUserMode", "8");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.toolbarInstallDate", "10-09-2014 00:40:44");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.versionFromInstaller", "10.35.0.3");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("CT1561552.xpeMode", "1");  =>PUP.Optional.Conduit
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.AppEnable.asul", "1418722594066");  =>PUP.AppEnable
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.AppEnable.aul", "1418722553112");  =>PUP.AppEnable
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.AppEnable.irl", true);  =>PUP.AppEnable
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.AppEnable.is", "isgiwhPS");  =>PUP.AppEnable
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.AppEnable.ug", "89D1ED71-1C78-470C-9353-812A51E351D9");  =>PUP.AppEnable
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.PlurPush.asul", "1411609288130");  =>PUP.PlurPush
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.PlurPush.aul", "1411609306042");  =>PUP.PlurPush
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.PlurPush.irl", true);  =>PUP.PlurPush
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.PlurPush.is", "ob3022ppPS");  =>PUP.PlurPush
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.PlurPush.ug", "501CB54D-C308-4958-A06B-2C758851594A");  =>PUP.PlurPush
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.faststartff@gmail.com.install-event-fired", true);  =>PUP.Optional.FastStart
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);  =>PUP.Optional.QuickStart
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("extensions.{746505DC-0E21-4667-97F8-72EA6BCF5EEF}.install-event-fired", true);  =>PUP.Optional.ShopperPro
O69 - SBI: prefs.js [HP - ibw3uq79.default] user_pref("smartbar.machineId", "+UQKE3DJPS27SQQKUXGTATV4MJRVBELNLLHKYHL9LC9JVD1O0N7GO+L1PNDFHXNKGGL8LKDWBHYKYP4IIA20UQ");  =>PUP.Optional.SmartBar
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {AFF5DBA4-25A9-4DA3-B90C-1AF5AE56AE40} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - (Google) - http://www.google.com/

---\\ Search Svchost Services (SSS) (O83) (33) - 3s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Application Experience Service.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - ÎÏãÉ äÔÑ ÔåÇÏÉ ÇáÈØÇÞÉ ÇáÐßíÉ áÜ Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - ÎÏãÉ äÔÑ ÔåÇÏÉ ÇáÈØÇÞÉ ÇáÐßíÉ áÜ Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - ãßÊÈÉ ÇáÇÑÊÈÇØ ÇáÏíäÇãíßí áÎÏãÉ ÇáÎÇÏã.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Úãíá äåÌ ÇáãÌãæÚÉ.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\ikeext.dll   [859648]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - ÎÏãÉ ÕæÊ Windows.) -- C:\Windows\System32\Audiosrv.dll   [680960]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - ÅÏÇÑÉ ÇáØáÈ ÇáÊáÞÇÆí ááæÕæá Úä ÈõÚÏ.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - ÎÏãÉ ÇáÅÚáÇã ÈÃÍÏÇË ÇáäÙÇã (SENS).) -- C:\Windows\System32\Sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Remote Desktop Session Host Server Remote C.) -- C:\Windows\System32\termsrv.dll   [683520]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - ÚÇãá Windows Update.) -- C:\Windows\system32\wuaueng.dll   [2603008]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - ÎÏãÉ ÇáäÞá ÇáÐßí Ýí ÇáÎáÝíÉ.) -- C:\Windows\system32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - ãßÊÈÉ ÇáÇÑÊÈÇØ ÇáÏíäÇãíßí áÎÏãÇÊ Windows Sh.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - ãßÊÈÉ ÇáÇÑÊÈÇØ ÇáÏíäÇãíßí ÇáÎÇÕÉ ÈÎÏãÉ ÊÓÌí.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - ÎÏãÉ ãÚáæãÇÊ ÇáÊØÈíÞÇÊ.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - ÎÏãÉ ÇßÊÔÇÝ iSCSI.) -- C:\Windows\system32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - ÎÏãÉ ÌÏæáÉ ÝÆÇÊ ÊÚÏÏ ÇáæÓÇÆØ.) -- C:\Windows\system32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - ÎÏãÉ Êßæíä ÓØÍ ÇáãßÊÈ ÇáÈÚíÏ.) -- C:\Windows\System32\SessEnv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - ãßÊÈÉ ÇáÇÑÊÈÇØ ÇáÏíäÇãíßí áÎÏãÉ ãÓÊÚÑÖ Çáßã.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - ÎÏãÉ ÌÏæáÉ ÇáãåÇã.) -- C:\Windows\system32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\Windows\system32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - ÊÞÇÑíÑ ÇáãÔÇßá æÍáæáåÇ.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll   [210432]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - ãßÊÈÉ ÇáÇÑÊÈÇØ ÇáÏíäÇãíßí áÎÏãÇÊ äõÓÞ Windo.) -- C:\Windows\system32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - ÎÏãÉ BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - ÎÏãÉ ÊËÈÊ ÇáÈÑÇãÌ.) -- C:\Windows\System32\appmgmts.dll   [193536]

---\\ Firewall Active Exception List (FirewallRules) (O87) (25) - 3s
O87 - FAEL: "TCP Query User{6B25DB10-B7A8-4E11-B6FE-D3C4E4502806}C:\program files (x86)\paltalk messenger\paltalk.exe" [In-None-P6-TRUE] .(.AVM Software Inc. - Paltalk Messenger.) -- C:\program files (x86)\paltalk messenger\paltalk.exe
O87 - FAEL: "UDP Query User{90CE1BFD-A649-4956-8073-AEE0009D8498}C:\program files (x86)\paltalk messenger\paltalk.exe" [In-None-P17-TRUE] .(.AVM Software Inc. - Paltalk Messenger.) -- C:\program files (x86)\paltalk messenger\paltalk.exe
O87 - FAEL: "{98F7F51C-4D2F-4526-9D78-9D26651B91B7}" [In-None-P17-TRUE] .(.Skype Limited - Facebook Video Calling.) -- C:\Users\HP\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
O87 - FAEL: "TCP Query User{F495084A-78E3-4D3A-9C52-A5E3AE2F16ED}C:\Program Files (x86)\azza3eem games\call of duty\CoDMP.exe" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\azza3eem games\call of duty\CoDMP.exe
O87 - FAEL: "UDP Query User{C1FB51E5-2BA7-4A06-9AD2-4F8A86A68948}C:\Program Files (x86)\azza3eem games\call of duty\CoDMP.exe" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\azza3eem games\call of duty\CoDMP.exe
O87 - FAEL: "{7E0365D7-8057-4E8A-A241-1F3F8D3B8955}" [In-None-P6-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2013.) -- C:\Program Files (x86)\Pro Evolution Soccer 2013\pes2013.exe
O87 - FAEL: "{D9CCC076-37D6-44B9-ACDF-07BB8E5B5B82}" [In-None-P17-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2013.) -- C:\Program Files (x86)\Pro Evolution Soccer 2013\pes2013.exe
O87 - FAEL: "TCP Query User{83BC8A54-9759-4823-8C9A-8EDE668A073A}C:\program files (x86)\pro evolution soccer 2015\pes2015.exe" [In-None-P6-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2015.) -- C:\program files (x86)\pro evolution soccer 2015\pes2015.exe
O87 - FAEL: "UDP Query User{E1006536-08E7-403C-A4AB-B6FB7C5D7EAE}C:\program files (x86)\pro evolution soccer 2015\pes2015.exe" [In-None-P17-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2015.) -- C:\program files (x86)\pro evolution soccer 2015\pes2015.exe
O87 - FAEL: "TCP Query User{3E8770FE-6F64-4AEE-91A2-03D2ACE55654}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
O87 - FAEL: "UDP Query User{03C150C1-1DC2-4210-A720-60DD6C58C99C}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
O87 - FAEL: "TCP Query User{0C82B45E-286E-49A2-83B0-6ED99FE03962}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
O87 - FAEL: "UDP Query User{E4A3D009-F84B-4F52-B1D1-B3DECDEB9BFA}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
O87 - FAEL: "TCP Query User{E05A083F-EB85-4375-B4AF-AF3B8D6D47C7}C:\program files (x86)\pro evolution soccer 2015\pes2015.exe" [In-None-P6-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2015.) -- C:\program files (x86)\pro evolution soccer 2015\pes2015.exe
O87 - FAEL: "UDP Query User{FD04B7AD-375C-4816-9448-1E3703DE7984}C:\program files (x86)\pro evolution soccer 2015\pes2015.exe" [In-None-P17-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2015.) -- C:\program files (x86)\pro evolution soccer 2015\pes2015.exe
O87 - FAEL: "{1544BE13-8196-42E7-BDF7-1CCAF7478163}" [In-None-P6-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2013.) -- C:\Program Files (x86)\Pro Evolution Soccer 2013\pes2013.exe
O87 - FAEL: "{D7D9DA35-243C-4EA5-B13E-BBB885B4F599}" [In-None-P17-TRUE] .(.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2013.) -- C:\Program Files (x86)\Pro Evolution Soccer 2013\pes2013.exe
O87 - FAEL: "TCP Query User{C7DEFCB1-A24F-4071-A775-0B0B168DF899}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
O87 - FAEL: "UDP Query User{3A615429-BABC-4416-8554-09E2E0DA45D4}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
O87 - FAEL: "TCP Query User{D01D8675-4114-4516-83C0-34EAABB08268}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
O87 - FAEL: "UDP Query User{110670AF-3BBD-40C1-8E65-D13E6F221332}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
O87 - FAEL: "TCP Query User{A00DC26C-2C92-4626-8AF8-32061DD24BC0}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
O87 - FAEL: "UDP Query User{202A07B1-ECF4-4DFC-8248-A56F6F95A1CB}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
O87 - FAEL: "TCP Query User{E65E7067-8784-455F-8BDC-E92D8C9E0ACF}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
O87 - FAEL: "UDP Query User{F464E51A-574A-430B-B9DD-32A2B6224143}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe

---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped) (17) - 40s
SR - Auto   [2015/07/07 20:12:28] [   82128]  Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - Demand [2015/07/16 00:32:22] [  268976]  Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - Auto   [2011/07/28 18:35:44] [  262144]  Arp Intelligent Protection Service (AIPS) . (.Arcai.com.) - C:\Program Files (x86)\netcut\services\aips.exe
SR - Auto   [2015/04/28 09:51:32] [  343336]  Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SS - Demand [2014/02/14 18:01:52] [  279024]  Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe
SR - Auto   [2015/06/02 16:24:26] [  244392]  Foxit Cloud Safe Update Service (FoxitCloudUpdateService) . (.Foxit Software Inc..) - C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
SS - Auto   [2015/02/07 22:24:35] [  107848]  ÎÏãÉ Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - Demand [2015/02/07 22:24:35] [  107848]  ÎÏãÉ Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - Auto   [2013/07/31 17:25:40] [  681760]  hpHotkeyMonitor (hpHotkeyMonitor) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
SR - Demand [2013/01/23 22:42:18] [ 1006424]  HP Software Framework Service (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
SR - Auto   [2011/11/29 21:04:56] [   13592]  Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SS - Demand [2012/04/24 15:37:56] [  169752]  Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
SR - Auto   [2015/06/18 08:39:46] [ 1871160]   (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - Auto   [2015/06/18 08:39:50] [ 1133880]   (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
SS - Demand [2015/07/01 05:30:36] [  148136]  Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - Auto   [2015/06/03 16:42:38] [  327296]  Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - Demand [2010/02/19 13:37:14] [  517096]   (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

---\\ Additional Scan (O88) (3) - 0s
HKLM\SOFTWARE\Wow6432Node\Tencent  =>PUP.Optional.TencentAddressBar
HKCU\SOFTWARE\Tencent  =>PUP.Optional.TencentAddressBar
HKCU\SOFTWARE\AppDataLow\Software\Smartbar  =>PUP.Optional.SmartBar  =>PUP.Optional.SmartBar

---\\ Summary of the elements found on your workstation (10) - 0s
http://www.nicolascoolman.fr/adware-tencentaddressbar/  =>PUP.Optional.TencentAddressBar
http://www.nicolascoolman.fr/hijacker-smartbar/  =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Genieo
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Softonic
http://www.nicolascoolman.fr/toolbar-conduit/  =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/blog  =>PUP.AppEnable
http://www.nicolascoolman.fr/blog  =>PUP.PlurPush
http://www.nicolascoolman.fr/blog  =>PUP.Optional.FastStart
http://www.nicolascoolman.fr/pup-quickstart/  =>PUP.Optional.QuickStart
http://www.nicolascoolman.fr/pup-shopperpro/  =>PUP.Optional.ShopperPro

~ End of the scan, 48119 items in 218 seconds (1005)(0)()