OTL logfile created on: 22/08/2016 12:25:22 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\boby\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18426)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
7,90 Gb Total Physical Memory | 6,16 Gb Available Physical Memory | 77,89% Memory free
15,80 Gb Paging File | 13,96 Gb Available in Paging File | 88,30% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 448,61 Gb Total Space | 224,56 Gb Free Space | 50,06% Space Free | Partition Type: NTFS
Drive D: | 7,80 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive F: | 7,45 Gb Total Space | 0,56 Gb Free Space | 7,54% Space Free | Partition Type: FAT32
 
Computer Name: BOBBY | User Name: boby | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2016/08/22 12:22:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\boby\Desktop\OTL.exe
PRC - [2016/08/22 11:53:55 | 000,017,920 | ---- | M] () -- C:\Windows\SysWOW64\rpcnetp.exe
PRC - [2016/06/24 23:45:12 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2016/03/10 14:07:30 | 001,136,608 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2016/03/10 14:07:28 | 001,514,464 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2016/03/10 14:07:20 | 009,926,112 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2015/06/25 11:07:08 | 000,377,664 | ---- | M] (AVerMedia) -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
PRC - [2015/06/25 11:07:00 | 000,412,480 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
PRC - [2015/06/25 11:06:26 | 000,168,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
PRC - [2015/06/25 11:06:20 | 000,684,864 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
PRC - [2014/12/12 15:24:50 | 000,454,360 | ---- | M] (Realtek) -- C:\Windows\SwUSB.exe
PRC - [2014/12/12 15:24:50 | 000,044,760 | ---- | M] () -- C:\Windows\runSW.exe
PRC - [2012/03/15 11:48:22 | 000,362,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2012/03/15 11:48:20 | 000,276,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2012/03/15 11:48:14 | 000,127,320 | ---- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
PRC - [2012/03/15 11:48:06 | 000,162,648 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
PRC - [2012/02/27 02:01:56 | 000,291,608 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2012/02/04 20:41:10 | 000,231,328 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosLeSrvUseMng.exe
PRC - [2012/02/04 20:40:56 | 000,219,048 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosLeSrvProvider.exe
PRC - [2012/02/04 12:47:54 | 000,251,808 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosLeBtMng.exe
PRC - [2012/02/04 12:16:54 | 002,824,104 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2011/11/21 14:12:48 | 000,253,312 | ---- | M] (TOSHIBA) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
PRC - [2011/08/08 12:43:00 | 000,690,072 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2011/08/08 12:36:00 | 000,087,960 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2010/09/06 15:18:00 | 000,746,384 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2010/05/20 19:00:00 | 000,275,984 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtAvAC.exe
PRC - [2010/02/01 22:15:44 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2010/02/01 22:15:40 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2016/06/25 15:53:58 | 000,970,752 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2015/06/25 11:06:26 | 000,168,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
MOD - [2012/01/25 09:57:12 | 000,172,032 | ---- | M] () -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosGatt.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2016/08/02 06:19:01 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2016/07/19 04:22:16 | 000,327,944 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.11.376\McCHSvc.exe -- (McComponentHostService)
SRV:[b]64bit:[/b] - [2013/05/27 05:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2012/02/02 21:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2011/12/15 22:16:48 | 000,583,088 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV:[b]64bit:[/b] - [2011/12/14 14:11:38 | 000,833,976 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe -- (TPCHSrv)
SRV:[b]64bit:[/b] - [2011/11/25 17:52:36 | 000,138,152 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
SRV:[b]64bit:[/b] - [2011/11/24 12:20:38 | 000,294,848 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
SRV:[b]64bit:[/b] - [2011/04/20 14:16:04 | 000,558,592 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
SRV:[b]64bit:[/b] - [2010/12/17 15:46:34 | 000,198,784 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg)
SRV:[b]64bit:[/b] - [2010/10/20 13:41:00 | 000,138,656 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
SRV - [2016/08/17 21:37:05 | 000,146,888 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2016/07/16 13:23:23 | 000,270,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2016/06/24 23:45:12 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2016/03/10 14:07:30 | 001,136,608 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2016/03/10 14:07:28 | 001,514,464 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2015/06/25 11:07:08 | 000,377,664 | ---- | M] (AVerMedia) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2015/06/25 11:07:00 | 000,412,480 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
SRV - [2015/06/19 23:14:56 | 000,104,120 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2014/12/12 15:24:50 | 000,044,760 | ---- | M] () [Auto | Running] -- C:\Windows\runSW.exe -- (RunSwUSB)
SRV - [2014/04/23 17:32:02 | 000,262,360 | ---- | M] (Realtek) [Auto | Stopped] -- C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe -- (RTLDHCPService)
SRV - [2014/03/20 22:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2012/05/10 14:20:46 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012/03/15 11:48:22 | 000,362,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012/03/15 11:48:20 | 000,276,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012/03/15 11:48:14 | 000,127,320 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
SRV - [2012/03/15 11:48:06 | 000,162,648 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2011/07/11 16:16:06 | 000,057,216 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
SRV - [2011/04/01 16:42:00 | 000,198,064 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Running] -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2011/02/10 07:25:36 | 000,112,080 | ---- | M] (Toshiba Europe GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2016/08/22 11:55:03 | 000,192,216 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:[b]64bit:[/b] - [2016/08/19 14:01:35 | 000,092,872 | ---- | M] (WinMount International Inc) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\KuaiZipDrive.sys -- (KuaiZipDrive)
DRV:[b]64bit:[/b] - [2016/08/02 06:39:10 | 000,081,792 | ---- | M] (Huorong Borui (Beijing) Technology Co., Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ucguard.sys -- (UCGuard)
DRV:[b]64bit:[/b] - [2016/03/10 14:09:06 | 000,064,896 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:[b]64bit:[/b] - [2016/03/10 14:08:54 | 000,027,008 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2015/05/27 01:14:34 | 000,198,528 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AVerIT13x_x64.sys -- (AVerIT13x)
DRV:[b]64bit:[/b] - [2014/12/16 10:09:22 | 003,141,848 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtwlanu_Vista.sys -- (RtlWlanu)
DRV:[b]64bit:[/b] - [2013/02/12 04:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2012/05/10 14:11:04 | 014,759,136 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2012/03/01 06:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012/02/27 02:01:00 | 000,788,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:[b]64bit:[/b] - [2012/02/27 02:01:00 | 000,356,120 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:[b]64bit:[/b] - [2012/02/27 02:01:00 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:[b]64bit:[/b] - [2012/01/30 13:14:00 | 000,304,696 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd)
DRV:[b]64bit:[/b] - [2012/01/16 14:49:16 | 000,103,536 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:[b]64bit:[/b] - [2012/01/10 20:38:28 | 002,801,664 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2011/12/22 18:22:12 | 000,412,432 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2011/12/22 18:22:10 | 000,021,264 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver.sys -- (SmbDrv)
DRV:[b]64bit:[/b] - [2011/12/16 16:24:00 | 000,079,040 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb)
DRV:[b]64bit:[/b] - [2011/12/06 03:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2011/11/29 18:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2011/11/10 01:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2011/08/08 16:53:28 | 000,045,168 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:[b]64bit:[/b] - [2011/07/07 14:02:00 | 001,576,576 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:[b]64bit:[/b] - [2011/03/23 16:10:28 | 000,036,992 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
DRV:[b]64bit:[/b] - [2011/03/11 06:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011/03/11 06:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011/02/08 18:07:00 | 000,038,096 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
DRV:[b]64bit:[/b] - [2010/11/29 10:47:00 | 000,082,224 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom)
DRV:[b]64bit:[/b] - [2010/11/21 03:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010/11/21 03:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010/11/21 03:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010/11/11 09:27:00 | 000,050,864 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV:[b]64bit:[/b] - [2010/08/30 09:48:00 | 000,094,528 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV:[b]64bit:[/b] - [2010/06/18 15:45:00 | 000,018,872 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
DRV:[b]64bit:[/b] - [2010/04/26 10:48:00 | 000,063,488 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV:[b]64bit:[/b] - [2009/10/02 08:58:38 | 000,514,144 | ---- | M] (ITETech                  ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AF15BDA.sys -- (AF9035BDA)
DRV:[b]64bit:[/b] - [2009/07/30 19:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV:[b]64bit:[/b] - [2009/07/24 10:33:00 | 000,026,472 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds)
DRV:[b]64bit:[/b] - [2009/07/14 15:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
DRV:[b]64bit:[/b] - [2009/07/14 01:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 01:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 01:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/06/29 15:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
DRV:[b]64bit:[/b] - [2009/06/24 14:36:48 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64)
DRV:[b]64bit:[/b] - [2009/06/19 18:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
DRV:[b]64bit:[/b] - [2009/06/17 11:01:00 | 000,054,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
DRV:[b]64bit:[/b] - [2009/06/15 11:58:50 | 000,012,800 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\QIOMem.sys -- (QIOMem)
DRV:[b]64bit:[/b] - [2009/06/10 20:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 20:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 20:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 20:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009/07/14 01:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{3DA276FA-592E-44D6-9A16-AD98F0F81832}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = EA 59 4A 2F 1D FA D1 01  [binary data]
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\..\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
IE - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.countryCode: "FR"
FF - prefs.js..browser.search.defaultenginename: "YHS"
FF - prefs.js..browser.search.region: "FR"
FF - prefs.js..browser.search.selectedEngine: "YHS"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:48.0
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll ()
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 48.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 48.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2016/02/03 21:35:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\boby\AppData\Roaming\mozilla\Extensions
[2016/08/19 12:03:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\boby\AppData\Roaming\mozilla\Firefox\Profiles\ya19wol4.default-1462561752544\extensions
[2016/08/19 13:43:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\boby\AppData\Roaming\mozilla\Firefox\Profiles\ya19wol4.default-1462561752544\extensions\staged
[2016/05/06 19:15:09 | 001,036,367 | ---- | M] () (No name found) -- C:\Users\boby\AppData\Roaming\mozilla\firefox\profiles\ya19wol4.default-1462561752544\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2016/08/16 16:38:03 | 000,006,351 | ---- | M] () (No name found) -- C:\Users\boby\AppData\Roaming\mozilla\firefox\profiles\ya19wol4.default-1462561752544\features\{bbe4d239-c49d-4b88-b1ee-ddd140c2feb1}\e10srollout@mozilla.org.xpi
[2016/08/16 16:38:03 | 000,781,661 | ---- | M] () (No name found) -- C:\Users\boby\AppData\Roaming\mozilla\firefox\profiles\ya19wol4.default-1462561752544\features\{bbe4d239-c49d-4b88-b1ee-ddd140c2feb1}\firefox@getpocket.com.xpi
[2016/08/16 16:38:07 | 002,034,437 | ---- | M] () (No name found) -- C:\Users\boby\AppData\Roaming\mozilla\firefox\profiles\ya19wol4.default-1462561752544\features\{bbe4d239-c49d-4b88-b1ee-ddd140c2feb1}\loop@mozilla.org.xpi
[2016/08/03 10:42:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2016/08/19 15:39:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
 
O1 HOSTS File: ([2016/08/22 11:46:38 | 000,000,035 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
O2 - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: []  File not found
O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [SRS Premium Sound HD] C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe (SRS Labs, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [ThpSrv] C:\windows\SysNative\thpsrv.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaReminder.exe (Toshiba Europe GmbH)
O4:[b]64bit:[/b] - HKLM..\Run: [Toshiba TEMPRO] C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (Toshiba Europe GmbH)
O4:[b]64bit:[/b] - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TosWaitSrv] C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE (TOSHIBA Corporation)
O4 - HKLM..\Run: [sw_updater] "C:\Program Files (x86)\sw_updater\updater.exe" File not found
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TSleepSrv] C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe (TOSHIBA)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKU\.DEFAULT..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - HKU\S-1-5-18..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - HKU\S-1-5-21-559087720-2161886632-4000143073-1000..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-559087720-2161886632-4000143073-1000..\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\boby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\boby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-21-559087720-2161886632-4000143073-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:[b]64bit:[/b] - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6C87BDCB-C4A8-45B2-BED0-BAFA808AF432}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{897F2DC3-E3C8-425C-86ED-DF19B57DAC4E}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A4EE34C4-59D5-4FA6-928E-937522025077}: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A4EE34C4-59D5-4FA6-928E-937522025077}: NameServer = 188.120.239.115,8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D653728F-6015-4D12-9E2A-525EC3723BB2}: DhcpNameServer = 192.168.42.129
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/03/26 23:58:53 | 000,000,058 | -H-- | M] () - D:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{235bbce0-caa7-11e5-a7f7-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{235bbce0-caa7-11e5-a7f7-806e6f6e6963}\Shell\AutoRun\command - "" = D:\ALFAINSTALL.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2016/08/22 12:24:40 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\boby\Desktop\OTL.exe
[2016/08/21 18:38:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
[2016/08/20 18:23:14 | 000,000,000 | ---D | C] -- C:\Users\boby\Desktop\FRST-OlderVersion
[2016/08/20 18:22:57 | 000,000,000 | ---D | C] -- C:\de05417c807120b8f4d27dc7df2c06
[2016/08/19 23:31:05 | 000,000,000 | ---D | C] -- C:\FRST
[2016/08/19 23:30:57 | 002,396,672 | ---- | C] (Farbar) -- C:\Users\boby\Desktop\FRST64.exe
[2016/08/19 18:56:29 | 000,000,000 | ---D | C] -- C:\windows\Prefetch
[2016/08/19 18:30:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
[2016/08/19 18:30:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZHPFix
[2016/08/19 16:01:07 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Roaming\ZHP
[2016/08/19 14:24:01 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
[2016/08/19 14:23:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2016/08/19 14:23:31 | 000,140,672 | ---- | C] (Malwarebytes) -- C:\windows\SysNative\drivers\mbamchameleon.sys
[2016/08/19 14:23:31 | 000,064,896 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mwac.sys
[2016/08/19 14:23:31 | 000,027,008 | ---- | C] (Malwarebytes) -- C:\windows\SysNative\drivers\mbam.sys
[2016/08/19 14:23:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2016/08/19 14:23:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2016/08/19 14:17:09 | 000,000,000 | ---D | C] -- C:\ProgramData\did
[2016/08/19 14:01:36 | 000,092,872 | ---- | C] (WinMount International Inc) -- C:\windows\SysNative\drivers\KuaiZipDrive.sys
[2016/08/19 14:01:35 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Roaming\Softlink
[2016/08/19 13:52:07 | 000,081,792 | ---- | C] (Huorong Borui (Beijing) Technology Co., Ltd.) -- C:\windows\SysNative\drivers\ucguard.sys
[2016/08/19 13:51:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UCBrowser
[2016/08/19 13:38:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Compress
[2016/08/19 12:05:02 | 000,000,000 | ---D | C] -- C:\windows\SysNative\riwf
[2016/08/19 12:03:55 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\UltimateSpeedTester
[2016/08/19 12:02:17 | 000,000,000 | ---D | C] -- C:\uninst
[2016/08/19 12:02:13 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\Tempfolder
[2016/08/19 12:02:13 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Roaming\Nuidereg
[2016/08/19 12:01:40 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\Profiles
[2016/08/19 12:01:05 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\Apps
[2016/08/19 11:59:57 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2016/08/19 11:59:14 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Roaming\Profiles
[2016/08/19 11:59:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Crecult
[2016/08/19 11:54:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\ms-drivers
[2016/08/19 11:54:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\icsxml
[2016/08/19 00:20:04 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acrylic Wi-Fi Home
[2016/08/19 00:20:03 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Roaming\Acrylic Wi-Fi Home
[2016/08/19 00:20:03 | 000,000,000 | ---D | C] -- C:\Program Files\Acrylic Wi-Fi Home
[2016/08/19 00:19:48 | 000,000,000 | -HSD | C] -- C:\Users\boby\AppData\Local\icsxml
[2016/08/19 00:19:48 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\MetaGeek,_LLC
[2016/08/19 00:19:35 | 000,000,000 | -HSD | C] -- C:\Users\boby\AppData\Local\ms-drivers
[2016/08/19 00:19:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\DIBsection
[2016/08/19 00:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaGeek
[2016/08/19 00:19:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MetaGeek
[2016/08/19 00:10:55 | 000,000,000 | ---D | C] -- C:\windows\Migration
[2016/08/18 23:45:57 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Users\boby\Desktop\cleanup_tool.exe
[2016/08/18 13:52:09 | 000,000,000 | ---D | C] -- C:\Users\boby\Desktop\lettre + CV portugal
[2016/08/15 10:52:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK USB Wireless LAN Utility
[2016/08/15 10:52:23 | 003,141,848 | R--- | C] (Realtek Semiconductor Corporation                           ) -- C:\windows\SysNative\drivers\rtwlanu_Vista.sys
[2016/08/15 10:51:17 | 000,454,360 | ---- | C] (Realtek) -- C:\windows\SwUSB.exe
[2016/08/15 10:51:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\REALTEK
[2016/08/14 20:09:40 | 000,380,928 | ---- | C] (Realtek) -- C:\windows\RtlUI2.exe
[2016/08/14 20:09:39 | 000,594,432 | ---- | C] (Realtek Semiconductor Corp. ) -- C:\windows\SysWow64\Rtlihvs.dll
[2016/08/14 20:07:01 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\CrashDumps
[2016/08/13 22:16:26 | 000,000,000 | ---D | C] -- C:\Users\boby\Desktop\Michel ONFRAY
[2016/08/12 12:30:36 | 000,000,000 | ---D | C] -- C:\Users\boby\Documents\AVerTV
[2016/08/12 12:29:35 | 000,000,000 | ---D | C] -- C:\ProgramData\AVerTV 3D
[2016/08/12 12:29:28 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\AVerMedia
[2016/08/12 12:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVerMedia
[2016/08/12 12:28:07 | 000,194,560 | ---- | C] (AVerMedia Technologies, Inc.) -- C:\windows\SysWow64\CardID.dll
[2016/08/12 12:28:05 | 001,622,787 | ---- | C] (x264 project) -- C:\windows\SysWow64\core.dll
[2016/08/12 12:28:05 | 000,205,824 | ---- | C] (AVerMedia Technologies Inc.) -- C:\windows\SysWow64\VideoEncoderPL.dll
[2016/08/12 12:28:05 | 000,045,056 | ---- | C] (Open Source Software community project) -- C:\windows\SysWow64\pthreadVC.dll
[2016/08/12 12:19:15 | 000,000,000 | ---D | C] -- C:\Users\boby\Desktop\TD110_AP6.9.1.10.16032501_Drv_2.3.x.29
[2016/08/12 12:06:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2016/08/12 12:06:24 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2016/08/12 11:28:01 | 000,198,528 | ---- | C] (AVerMedia TECHNOLOGIES, Inc.) -- C:\windows\SysNative\drivers\AVerIT13x_x64.sys
[2016/08/12 11:27:09 | 002,392,872 | ---- | C] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Users\boby\Desktop\Win7_x64_v2.3.64.29_Install.exe
[2016/08/12 11:27:09 | 001,991,448 | ---- | C] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Users\boby\Desktop\Win7_x86_v2.3.00.29_Install.exe
[2016/08/12 08:53:25 | 000,000,000 | ---D | C] -- C:\ProgramData\CMUV
[2016/08/12 01:58:53 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe
[2016/08/12 01:58:53 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inseng.dll
[2016/08/12 01:58:53 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll
[2016/08/12 01:58:53 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll
[2016/08/12 01:58:53 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll
[2016/08/12 01:58:53 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll
[2016/08/12 01:58:52 | 000,724,992 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe
[2016/08/12 01:58:52 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\occache.dll
[2016/08/12 01:58:52 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inseng.dll
[2016/08/12 01:58:52 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
[2016/08/12 01:58:52 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\MshtmlDac.dll
[2016/08/12 01:58:52 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll
[2016/08/12 01:58:51 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll
[2016/08/12 01:58:50 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll
[2016/08/12 01:58:50 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\occache.dll
[2016/08/12 01:58:50 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll
[2016/08/12 01:58:49 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
[2016/08/12 01:58:49 | 000,969,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe
[2016/08/12 01:58:49 | 000,806,400 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll
[2016/08/12 01:58:49 | 000,663,552 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll
[2016/08/12 01:58:49 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll
[2016/08/12 01:58:49 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2016/08/12 01:58:49 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll
[2016/08/12 01:58:49 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll
[2016/08/12 01:58:48 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll
[2016/08/12 01:58:47 | 002,131,456 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
[2016/08/12 01:58:47 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll
[2016/08/12 01:58:46 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll
[2016/08/12 01:58:46 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll
[2016/08/12 01:58:46 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe
[2016/08/12 01:58:44 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2016/08/12 01:58:44 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll
[2016/08/12 01:58:44 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\html.iec
[2016/08/12 01:58:44 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll
[2016/08/12 01:58:43 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
[2016/08/12 01:58:42 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll
[2016/08/12 01:58:42 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll
[2016/08/12 01:58:42 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe
[2016/08/12 01:58:41 | 006,047,744 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2016/08/12 01:58:41 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll
[2016/08/12 01:58:40 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\html.iec
[2016/08/12 01:58:40 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll
[2016/08/12 01:58:40 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MshtmlDac.dll
[2016/08/11 23:47:22 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\lsasrv.dll
[2016/08/11 23:47:21 | 001,212,928 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rpcrt4.dll
[2016/08/11 23:47:21 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\certcli.dll
[2016/08/11 23:47:21 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\certcli.dll
[2016/08/11 23:47:20 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\adtschema.dll
[2016/08/11 23:47:20 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\adtschema.dll
[2016/08/11 23:47:20 | 000,312,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ncrypt.dll
[2016/08/11 23:47:20 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rpchttp.dll
[2016/08/11 23:47:20 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msaudite.dll
[2016/08/11 23:47:20 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msaudite.dll
[2016/08/11 23:47:20 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\rpchttp.dll
[2016/08/11 23:47:20 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspicli.dll
[2016/08/11 23:47:20 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\auditpol.exe
[2016/08/11 23:47:20 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msobjs.dll
[2016/08/11 23:47:20 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msobjs.dll
[2016/08/11 23:47:20 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\auditpol.exe
[2016/08/11 23:47:20 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\cryptbase.dll
[2016/08/11 23:47:20 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspisrv.dll
[2016/08/11 23:47:20 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\secur32.dll
[2016/08/11 21:52:46 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\ElevatedDiagnostics
[2016/08/11 19:29:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVerMedia
[2016/08/08 11:06:22 | 000,000,000 | ---D | C] -- C:\Users\boby\Desktop\Zoufris Maracas. prison doré
[2016/08/07 08:40:44 | 000,000,000 | ---D | C] -- C:\windows\Driver Cache
[2016/08/07 08:05:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVerMedia
[2016/08/03 10:42:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2016/08/03 08:19:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2016/08/02 20:59:49 | 000,970,240 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\localspl.dll
[2016/08/02 20:59:49 | 000,756,736 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\win32spl.dll
[2016/08/02 20:59:49 | 000,497,152 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\win32spl.dll
[2016/08/02 20:59:49 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntprint.dll
[2016/08/02 20:59:49 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntprint.dll
[2016/08/02 20:59:49 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetpp.dll
[2016/08/02 20:59:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntprint.exe
[2016/08/02 20:59:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntprint.exe
[2016/08/02 20:59:49 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wpnpinst.exe
[2016/08/02 20:59:49 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetppui.dll
[2016/08/02 12:48:07 | 000,000,000 | ---D | C] -- C:\Users\boby\Desktop\Cinergy T Stick MKII
[2016/08/02 09:52:35 | 000,000,000 | ---D | C] -- C:\Users\boby\Documents\StarCraft II
[2016/08/02 09:52:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\StarCraft II
[2016/08/02 09:39:06 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\Blizzard Entertainment
[2016/08/02 09:39:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
[2016/08/02 09:39:04 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Local\Battle.net
[2016/08/02 09:13:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battle.net
[2016/08/02 09:12:44 | 000,000,000 | ---D | C] -- C:\Users\boby\AppData\Roaming\Battle.net
[2016/08/02 08:57:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net
[2010/08/28 20:43:46 | 000,096,256 | ---- | C] (Google, inc) -- C:\Users\boby\AppData\Roaming\AdbWinApi.dll
[2010/08/28 20:43:46 | 000,060,928 | ---- | C] (Google, inc) -- C:\Users\boby\AppData\Roaming\AdbWinUsbApi.dll
[1 C:\windows\SysNative\*.tmp files -> C:\windows\SysNative\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2016/08/22 12:25:47 | 000,001,162 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2016/08/22 12:22:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\boby\Desktop\OTL.exe
[2016/08/22 12:21:00 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2016/08/22 12:18:50 | 000,008,579 | ---- | M] () -- C:\Users\boby\Desktop\judge.jpeg
[2016/08/22 12:03:01 | 000,024,608 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016/08/22 12:03:01 | 000,024,608 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016/08/22 12:00:30 | 001,669,420 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2016/08/22 12:00:30 | 000,747,512 | ---- | M] () -- C:\windows\SysNative\perfh00C.dat
[2016/08/22 12:00:30 | 000,654,082 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2016/08/22 12:00:30 | 000,150,004 | ---- | M] () -- C:\windows\SysNative\perfc00C.dat
[2016/08/22 12:00:30 | 000,121,954 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2016/08/22 11:55:03 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
[2016/08/22 11:54:14 | 000,000,830 | ---- | M] () -- C:\windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
[2016/08/22 11:54:13 | 000,017,920 | ---- | M] () -- C:\windows\SysWow64\rpcnetp.dll
[2016/08/22 11:54:02 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2016/08/22 11:54:00 | 2069,123,071 | -HS- | M] () -- C:\hiberfil.sys
[2016/08/22 11:53:55 | 000,017,920 | ---- | M] () -- C:\windows\SysWow64\rpcnetp.exe
[2016/08/22 11:53:55 | 000,017,920 | ---- | M] () -- C:\windows\SysNative\rpcnetp.exe
[2016/08/22 11:51:00 | 000,000,832 | ---- | M] () -- C:\windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
[2016/08/22 11:46:38 | 000,000,035 | ---- | M] () -- C:\windows\SysNative\drivers\etc\hosts
[2016/08/22 09:01:27 | 002,396,672 | ---- | M] (Farbar) -- C:\Users\boby\Desktop\FRST64.exe
[2016/08/21 18:38:46 | 000,001,989 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2016/08/21 18:38:46 | 000,001,987 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2016/08/21 05:15:57 | 000,000,008 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2016/08/20 18:21:58 | 001,643,952 | ---- | M] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2016/08/19 18:30:36 | 000,001,820 | ---- | M] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2016/08/19 16:48:02 | 000,007,501 | ---- | M] () -- C:\Users\boby\Desktop\igor.jpeg
[2016/08/19 16:42:48 | 000,010,932 | ---- | M] () -- C:\Users\boby\Desktop\partir en couille.jpeg
[2016/08/19 16:01:29 | 000,000,828 | ---- | M] () -- C:\Users\boby\Desktop\ZHPDiag.lnk
[2016/08/19 15:18:02 | 000,001,262 | ---- | M] () -- C:\Users\boby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
[2016/08/19 15:18:02 | 000,001,212 | ---- | M] () -- C:\Users\boby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
[2016/08/19 15:17:37 | 000,001,006 | ---- | M] () -- C:\Users\Public\Desktop\TerraTec Home Cinema.lnk
[2016/08/19 15:17:36 | 000,001,076 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2016/08/19 15:17:35 | 000,002,179 | ---- | M] () -- C:\Users\Public\Desktop\REALTEK USB Wireless LAN Utility.lnk
[2016/08/19 15:17:35 | 000,001,101 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller.lnk
[2016/08/19 15:17:34 | 000,001,132 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.2.lnk
[2016/08/19 15:17:33 | 000,002,527 | ---- | M] () -- C:\Users\Public\Desktop\inSSIDer Office.lnk
[2016/08/19 15:17:33 | 000,001,089 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016/08/19 15:17:32 | 000,002,007 | ---- | M] () -- C:\Users\Public\Desktop\AVerTV 3D.lnk
[2016/08/19 15:17:32 | 000,001,990 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2016/08/19 15:17:24 | 000,000,272 | ---- | M] () -- C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2016/08/19 15:17:23 | 000,000,290 | ---- | M] () -- C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2016/08/19 15:17:22 | 000,001,161 | ---- | M] () -- C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\MaohaWiFi.lnk
[2016/08/19 15:17:21 | 000,000,939 | ---- | M] () -- C:\Users\boby\Desktop\host.lnk
[2016/08/19 15:17:20 | 000,001,046 | ---- | M] () -- C:\Users\boby\Desktop\Format Factory.lnk
[2016/08/19 15:17:20 | 000,000,940 | ---- | M] () -- C:\Users\boby\Desktop\Acrylic Wi-Fi Home.lnk
[2016/08/19 15:15:51 | 000,000,000 | ---- | M] () -- C:\ProgramData\Ｍozilla Ｆireｆox.lnk.bat
[2016/08/19 14:01:35 | 000,092,872 | ---- | M] (WinMount International Inc) -- C:\windows\SysNative\drivers\KuaiZipDrive.sys
[2016/08/19 13:51:30 | 007,616,340 | ---- | M] () -- C:\Users\boby\AppData\Roaming\setup.apk
[2016/08/19 13:51:30 | 000,732,869 | ---- | M] () -- C:\Users\boby\AppData\Roaming\xdo.zip
[2016/08/19 12:34:36 | 000,138,240 | ---- | M] () -- C:\Users\boby\AppData\Roaming\Installer.dat
[2016/08/19 12:24:07 | 000,000,517 | ---- | M] () -- C:\coldsearch.xml
[2016/08/19 12:23:39 | 000,002,027 | ---- | M] () -- C:\windows\SysNative\drivers\etc\hp.bak
[2016/08/19 11:25:41 | 002,281,880 | ---- | M] () -- C:\Users\boby\Desktop\IMG_20160819_112541.jpg
[2016/08/18 17:56:37 | 000,007,104 | ---- | M] () -- C:\Users\boby\Desktop\neo.jpeg
[2016/08/18 14:44:04 | 000,142,498 | ---- | M] () -- C:\windows\4112c94052e31b7627fd20e004fb4ea6.exe
[2016/08/15 11:59:30 | 516,661,732 | ---- | M] () -- C:\windows\MEMORY.DMP
[2016/08/12 12:29:21 | 000,002,281 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
[2016/08/12 12:29:21 | 000,002,233 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
[2016/08/12 01:30:14 | 000,293,552 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2016/08/10 23:39:41 | 000,000,956 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
[2016/08/05 19:06:53 | 000,018,655 | ---- | M] () -- C:\Users\boby\Desktop\pompe-manuelle-dq-a-essence-carburant-liquide.jpg
[2016/08/05 18:37:50 | 000,086,930 | ---- | M] () -- C:\Users\boby\Desktop\pompe110.jpg
[2016/08/05 08:32:46 | 000,356,290 | ---- | M] () -- C:\Users\boby\Desktop\attestation pole emploi bachelet.pdf
[2016/08/03 18:16:21 | 000,688,328 | ---- | M] () -- C:\Users\boby\Desktop\IMG_20160803_201620.jpg
[2016/08/02 06:47:27 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll
[2016/08/02 06:39:10 | 000,081,792 | ---- | M] (Huorong Borui (Beijing) Technology Co., Ltd.) -- C:\windows\SysNative\drivers\ucguard.sys
[2016/08/02 06:32:37 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll
[2016/08/02 06:31:55 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll
[2016/08/02 06:31:49 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\html.iec
[2016/08/02 06:31:32 | 000,572,416 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll
[2016/08/02 06:31:14 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\MshtmlDac.dll
[2016/08/02 06:23:07 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll
[2016/08/02 06:20:06 | 000,615,936 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2016/08/02 06:19:01 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe
[2016/08/02 06:19:01 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe
[2016/08/02 06:18:44 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll
[2016/08/02 06:18:36 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll
[2016/08/02 06:18:32 | 006,047,744 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2016/08/02 06:11:45 | 000,969,216 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe
[2016/08/02 06:08:12 | 000,489,984 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll
[2016/08/02 06:00:28 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll
[2016/08/02 05:59:19 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\inseng.dll
[2016/08/02 05:56:27 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll
[2016/08/02 05:55:46 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
[2016/08/02 05:53:17 | 000,315,392 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll
[2016/08/02 05:51:49 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll
[2016/08/02 05:51:42 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\occache.dll
[2016/08/02 05:51:12 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll
[2016/08/02 05:51:03 | 000,341,504 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\html.iec
[2016/08/02 05:50:11 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\MshtmlDac.dll
[2016/08/02 05:44:48 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll
[2016/08/02 05:42:41 | 000,476,160 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2016/08/02 05:41:43 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe
[2016/08/02 05:41:42 | 000,663,552 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll
[2016/08/02 05:41:24 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll
[2016/08/02 05:38:38 | 000,724,992 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe
[2016/08/02 05:38:08 | 000,806,400 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll
[2016/08/02 05:37:29 | 001,359,360 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll
[2016/08/02 05:36:40 | 002,131,456 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
[2016/08/02 05:29:16 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll
[2016/08/02 05:28:25 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\inseng.dll
[2016/08/02 05:26:20 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll
[2016/08/02 05:25:06 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
[2016/08/02 05:22:54 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\occache.dll
[2016/08/02 05:14:32 | 002,055,680 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
[2016/08/02 05:14:02 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll
[2016/08/02 04:59:19 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll
[2016/08/02 04:51:20 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll
[1 C:\windows\SysNative\*.tmp files -> C:\windows\SysNative\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2016/08/22 12:18:50 | 000,008,579 | ---- | C] () -- C:\Users\boby\Desktop\judge.jpeg
[2016/08/19 18:30:36 | 000,001,820 | ---- | C] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2016/08/19 16:48:02 | 000,007,501 | ---- | C] () -- C:\Users\boby\Desktop\igor.jpeg
[2016/08/19 16:42:47 | 000,010,932 | ---- | C] () -- C:\Users\boby\Desktop\partir en couille.jpeg
[2016/08/19 16:01:07 | 000,000,828 | ---- | C] () -- C:\Users\boby\Desktop\ZHPDiag.lnk
[2016/08/19 15:40:12 | 000,001,162 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2016/08/19 15:18:11 | 000,001,174 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2016/08/19 14:23:36 | 000,001,089 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016/08/19 13:17:23 | 007,616,340 | ---- | C] () -- C:\Users\boby\AppData\Roaming\setup.apk
[2016/08/19 13:17:23 | 000,732,869 | ---- | C] () -- C:\Users\boby\AppData\Roaming\xdo.zip
[2016/08/19 13:16:15 | 000,001,161 | ---- | C] () -- C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\MaohaWiFi.lnk
[2016/08/19 12:34:36 | 000,138,240 | ---- | C] () -- C:\Users\boby\AppData\Roaming\Installer.dat
[2016/08/19 12:24:07 | 000,000,517 | ---- | C] () -- C:\coldsearch.xml
[2016/08/19 12:23:43 | 000,000,939 | ---- | C] () -- C:\Users\boby\Desktop\host.lnk
[2016/08/19 11:59:49 | 000,001,665 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ｍozilla Ｆireｆox.lnk
[2016/08/19 11:59:49 | 000,000,000 | ---- | C] () -- C:\ProgramData\Ｍozilla Ｆireｆox.lnk.bat
[2016/08/19 10:31:44 | 002,281,880 | ---- | C] () -- C:\Users\boby\Desktop\IMG_20160819_112541.jpg
[2016/08/19 00:20:04 | 000,000,940 | ---- | C] () -- C:\Users\boby\Desktop\Acrylic Wi-Fi Home.lnk
[2016/08/19 00:19:02 | 000,002,527 | ---- | C] () -- C:\Users\Public\Desktop\inSSIDer Office.lnk
[2016/08/19 00:03:27 | 001,643,952 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2016/08/18 17:56:36 | 000,007,104 | ---- | C] () -- C:\Users\boby\Desktop\neo.jpeg
[2016/08/18 14:44:04 | 000,142,498 | ---- | C] () -- C:\windows\4112c94052e31b7627fd20e004fb4ea6.exe
[2016/08/17 13:37:02 | 1497,447,860 | ---- | C] () -- C:\Users\boby\Desktop\[ www.Cpasbien.pw ] Interstellar.2014.TRUEFRENCH.BRRip.XviD-Slay3R.avi
[2016/08/15 11:59:30 | 516,661,732 | ---- | C] () -- C:\windows\MEMORY.DMP
[2016/08/15 10:52:32 | 000,002,179 | ---- | C] () -- C:\Users\Public\Desktop\REALTEK USB Wireless LAN Utility.lnk
[2016/08/15 10:51:17 | 000,044,760 | ---- | C] () -- C:\windows\runSW.exe
[2016/08/14 20:09:40 | 000,100,000 | ---- | C] () -- C:\windows\SysWow64\EAPPkt9x.VXD
[2016/08/14 20:09:40 | 000,012,981 | ---- | C] () -- C:\windows\SysWow64\REALPKT.VXD
[2016/08/14 20:09:39 | 000,451,072 | ---- | C] () -- C:\windows\SysWow64\ISSRemoveSP.exe
[2016/08/14 20:09:39 | 000,003,086 | ---- | C] () -- C:\windows\SysWow64\EAPPkt.inf
[2016/08/12 12:29:21 | 000,002,281 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
[2016/08/12 12:29:21 | 000,002,233 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
[2016/08/12 12:29:21 | 000,002,007 | ---- | C] () -- C:\Users\Public\Desktop\AVerTV 3D.lnk
[2016/08/12 12:28:05 | 000,651,264 | ---- | C] () -- C:\windows\SysWow64\sptlib21.dll
[2016/08/12 12:28:05 | 000,462,848 | ---- | C] () -- C:\windows\SysWow64\sptlib12.dll
[2016/08/12 12:28:05 | 000,421,888 | ---- | C] () -- C:\windows\SysWow64\sptlib02.dll
[2016/08/12 12:28:05 | 000,311,296 | ---- | C] () -- C:\windows\SysWow64\sptlib01.dll
[2016/08/12 12:28:05 | 000,307,200 | ---- | C] () -- C:\windows\SysWow64\sptlib22.dll
[2016/08/12 12:28:05 | 000,307,200 | ---- | C] () -- C:\windows\SysWow64\sptlib03.dll
[2016/08/12 12:28:05 | 000,294,912 | ---- | C] () -- C:\windows\SysWow64\sptlib11.dll
[2016/08/12 12:28:05 | 000,151,552 | ---- | C] () -- C:\windows\SysWow64\sptlib26.dll
[2016/08/12 12:06:27 | 000,001,101 | ---- | C] () -- C:\Users\Public\Desktop\Revo Uninstaller.lnk
[2016/08/11 19:29:56 | 000,364,032 | ---- | C] () -- C:\windows\SysWow64\amalib25.dll
[2016/08/11 19:29:56 | 000,327,680 | ---- | C] () -- C:\windows\SysWow64\libde265.dll
[2016/08/05 19:06:52 | 000,018,655 | ---- | C] () -- C:\Users\boby\Desktop\pompe-manuelle-dq-a-essence-carburant-liquide.jpg
[2016/08/05 18:37:50 | 000,086,930 | ---- | C] () -- C:\Users\boby\Desktop\pompe110.jpg
[2016/08/05 08:32:39 | 000,356,290 | ---- | C] () -- C:\Users\boby\Desktop\attestation pole emploi bachelet.pdf
[2016/08/03 19:30:16 | 000,688,328 | ---- | C] () -- C:\Users\boby\Desktop\IMG_20160803_201620.jpg
[2016/08/03 08:19:27 | 000,001,076 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2016/06/05 17:13:46 | 000,112,640 | ---- | C] () -- C:\windows\SysWow64\ff_vfw.dll
[2016/05/21 13:26:43 | 000,017,920 | ---- | C] () -- C:\windows\SysWow64\rpcnetp.dll
[2016/05/21 13:26:26 | 000,017,920 | ---- | C] () -- C:\windows\SysWow64\rpcnetp.exe
[2016/05/04 22:24:04 | 000,000,187 | ---- | C] () -- C:\Users\boby\AppData\Roaming\WB.CFG
[2016/05/04 08:24:37 | 000,000,008 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2016/04/26 12:24:48 | 000,000,009 | ---- | C] () -- C:\Users\boby\AppData\Roaming\a.bat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009/07/14 04:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015/08/06 18:04:07 | 014,176,768 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/08/06 17:44:51 | 012,875,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 01:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 03:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 01:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2016/08/19 15:33:59 | 000,001,507 | ---- | M] ()(C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\UC???.lnk) -- C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\UC浏览器.lnk
[2016/08/19 13:51:59 | 000,001,512 | ---- | C] ()(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC???.lnk) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC浏览器.lnk
[2016/08/19 13:51:59 | 000,001,507 | ---- | C] ()(C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\UC???.lnk) -- C:\Users\boby\Application Data\Microsoft\Internet Explorer\Quick Launch\UC浏览器.lnk

< End of report >