Advertisement
Guest User

Untitled

a guest
Apr 1st, 2015
259
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 97.81 KB | None | 0 0
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
  2. Ran by asus (administrator) on ASUS-PC on 01-04-2015 16:22:28
  3. Running from C:\Users\asus\Downloads
  4. Loaded Profiles: asus (Available profiles: UpdatusUser & asus & Administrateur)
  5. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  16. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  17. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  18. (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
  19. (Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
  20. (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
  21. (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
  22. (Company) C:\Program Files (x86)\Popcorn Time\Updater.exe
  23. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
  24. (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
  25. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
  26. (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
  27. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  28. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  29. () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
  30. (ASUS) C:\Program Files\P4G\BatteryLife.exe
  31. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  32. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  33. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
  34. (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
  35. (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
  36. (Intel Corporation) C:\Windows\System32\igfxtray.exe
  37. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  38. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  39. (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
  40. (Google Inc.) C:\Users\asus\AppData\Local\Google\Update\GoogleUpdate.exe
  41. () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  42. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  43. (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
  44. (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
  45. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  46. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  47. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  48. (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
  49. (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe
  50. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  51. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  52. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  53. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  54. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  55. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  56. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  57. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  58. (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
  59. (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\conathst.exe
  60. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  61. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  62. () C:\Users\asus\Downloads\delfix_10.9.exe
  63. (Google Inc.) C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  64. (Microsoft Corporation) C:\Windows\System32\cmd.exe
  65.  
  66.  
  67. ==================== Registry (Whitelisted) ==================
  68.  
  69. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  70.  
  71. HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2000-01-01] (Realtek Semiconductor)
  72. HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212560 2000-01-01] (Realtek Semiconductor)
  73. HKLM\...\Run: [IntelliType Pro] => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1464944 2000-01-01] (Microsoft Corporation)
  74. HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2076272 2000-01-01] (Microsoft Corporation)
  75. HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
  76. HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
  77. HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
  78. HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
  79. HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
  80. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  81. Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
  82. HKU\S-1-5-19\...\RunOnce: [] => [X]
  83. HKU\S-1-5-20\...\RunOnce: [] => [X]
  84. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Run: [Google Update] => C:\Users\asus\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-21] (Google Inc.)
  85. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3478336 2012-01-24] (DT Soft Ltd)
  86. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
  87. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31346784 2015-02-26] (Skype Technologies S.A.)
  88. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Policies\system: [EnableLUA] 1
  89. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Policies\Explorer: [NofolderOptions] 0
  90. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\MountPoints2: {dff5a6f1-85ce-11e1-819a-20cf30752a24} - H:\picasa36-setup.exe
  91. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\MountPoints2: {f3b4424f-3ee3-11e1-873d-20cf30752a24} - F:\SETUP.EXE
  92. HKU\S-1-5-18\...\RunOnce: [] => [X]
  93. AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [250504 2000-01-01] (NVIDIA Corporation)
  94. AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [205184 2000-01-01] (NVIDIA Corporation)
  95. BootExecute: autocheck autochk * sdnclean64.exe
  96. CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  97.  
  98. ==================== Internet (Whitelisted) ====================
  99.  
  100. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  101.  
  102. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=20.4.0.40
  103. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
  104. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://securityresponse.symantec.com/avcenter/fix_homepage/
  105. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=20.4.0.40
  106. HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=20.4.0.40
  107. HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=20.4.0.40
  108. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com/
  109. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
  110. SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
  111. SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  112. SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  113. SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  114. SearchScopes: HKU\S-1-5-21-3640462671-3525918540-2347106381-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
  115. SearchScopes: HKU\S-1-5-21-3640462671-3525918540-2347106381-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
  116. SearchScopes: HKU\S-1-5-21-3640462671-3525918540-2347106381-1001 -> {B99E1684-C3D4-4C79-BA51-AAC717EF6C79} URL = http://www.google.fr/search?hl=fr&q={searchTerms}+&meta=
  117. BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
  118. BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  119. BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
  120. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
  121. BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
  122. BHO-x32: ContributeBHO Class -> {074C1DC5-9320-4A9A-947D-C042949C6216} -> C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27] (Adobe Systems, Inc.)
  123. BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
  124. BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  125. BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL [2015-03-05] (Symantec Corporation)
  126. BHO-x32: Programme d’aide de l’Assistant de connexion au compte Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
  127. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
  128. BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
  129. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18] (Sun Microsystems, Inc.)
  130. Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  131. Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27] (Adobe Systems, Inc.)
  132. Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
  133. Toolbar: HKU\S-1-5-21-3640462671-3525918540-2347106381-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
  134. DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  135. Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-03-12] (Microsoft Corporation)
  136. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  137. Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
  138.  
  139. FireFox:
  140. ========
  141. FF ProfilePath: C:\Users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\d36aeqer.default-1406983032341
  142. FF NetworkProxy: "type", 0
  143. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-05] ()
  144. FF Plugin: @ma-config.com/HardwareDetection -> C:\Program Files\ma-config.com\nphardwaredetection.dll [2011-08-08] (Cybelsoft)
  145. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  146. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
  147. FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
  148. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
  149. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()
  150. FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.)
  151. FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-10-01] ()
  152. FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
  153. FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2011-10-03] (Sun Microsystems, Inc.)
  154. FF Plugin-x32: @ma-config.com/HardwareDetection -> C:\Program Files\ma-config.com\nphardwaredetection.dll [2011-08-08] (Cybelsoft)
  155. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  156. FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-05-21] (Microsoft Corporation)
  157. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
  158. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
  159. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
  160. FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
  161. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-03-14] (NVIDIA Corporation)
  162. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-03-14] (NVIDIA Corporation)
  163. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)
  164. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)
  165. FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
  166. FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
  167. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
  168. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
  169. FF Plugin HKU\S-1-5-21-3640462671-3525918540-2347106381-1001: @tools.google.com/Google Update;version=3 -> C:\Users\asus\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)
  170. FF Plugin HKU\S-1-5-21-3640462671-3525918540-2347106381-1001: @tools.google.com/Google Update;version=9 -> C:\Users\asus\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)
  171. FF Plugin HKU\S-1-5-21-3640462671-3525918540-2347106381-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\asus\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2011-09-13] (Unity Technologies ApS)
  172. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-05-21] (Microsoft Corporation)
  173. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
  174. FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
  175. FF Extension: Adobe Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011-09-21]
  176. FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
  177. FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2015-04-01]
  178. FF HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\asus\AppData\Roaming\IDM\idmmzcc5
  179.  
  180. Chrome:
  181. =======
  182. CHR HomePage: Default -> https://www.google.fr/
  183. CHR StartupUrls: Default -> "https://www.google.fr/", "hxxp://start.iminent.com/?appId=54C08C11-068D-4C4B-80B3-CEA881DF8DB7"
  184. CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
  185. CHR Profile: C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default
  186. CHR Extension: (TV) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh [2012-01-29]
  187. CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08]
  188. CHR Extension: (YouTube) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-19]
  189. CHR Extension: (Google Cast) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-10-08]
  190. CHR Extension: (BioSim) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocjoacfojcnkckdclkegofegjodpknm [2014-03-19]
  191. CHR Extension: (Adblock Plus) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-03-04]
  192. CHR Extension: (Google Search) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-19]
  193. CHR Extension: (Google Play Music) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\icppfcnhkcmnfdhfhphakoifcfokfdhg [2014-03-19]
  194. CHR Extension: (Battlestar Galactica Online) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihbmdfdhanakpfoiaomnelodiejioflb [2011-10-21]
  195. CHR Extension: (WordPress.com) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\khjnjifipfkgglficmipimgjpbmlbemd [2012-01-29]
  196. CHR Extension: (Little Alchemy) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2014-03-19]
  197. CHR Extension: (Norton Security Toolbar) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2015-04-01]
  198. CHR Extension: (The Settlers Online) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmapnhgbanipillmolcbaidjboadhngn [2012-04-12]
  199. CHR Extension: (Google Play Books) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmimngoggfoobjdlefbcabngfnmieonb [2012-01-27]
  200. CHR Extension: (Google Wallet) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
  201. CHR Extension: (Adblock Pro) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2014-03-19]
  202. CHR Extension: (Bastion) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\oohphhdkahjlioohbalmicpokoefkgid [2012-01-29]
  203. CHR Extension: (Gmail) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-19]
  204. CHR Extension: (Canvas Rider) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk [2012-01-29]
  205. CHR Extension: (iReader) - C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppelffpjgkifjfgnbaaldcehkpajlmbc [2012-04-08]
  206. CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
  207. CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-04-01]
  208. CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
  209. CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-04-01]
  210. StartMenuInternet: Google Chrome - C:\Users\asus\AppData\Local\Google\Chrome\Application\chrome.exe
  211.  
  212. ==================== Services (Whitelisted) =================
  213.  
  214. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  215.  
  216. S3 maconfservice; C:\Program Files\ma-config.com\x64\maconfservice.exe [421376 2011-08-08] (CybelSoft) [File not signed]
  217. R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [88720 2014-05-05] (Microsoft Corporation)
  218. R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\NIS.exe [276336 2015-03-07] (Symantec Corporation)
  219. R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
  220. R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
  221. R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
  222. S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
  223. R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [179200 2014-10-09] (Company) [File not signed]
  224. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  225.  
  226. ==================== Drivers (Whitelisted) ====================
  227.  
  228. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  229.  
  230. R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20150321.001\BHDrvx64.sys [1622744 2015-02-03] (Symantec Corporation)
  231. R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1507000.00B\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
  232. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-01-28] (DT Soft Ltd)
  233. R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-02-17] (Symantec Corporation)
  234. R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2015-02-17] (Symantec Corporation)
  235. R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20150331.001\IDSvia64.sys [671448 2015-04-01] (Symantec Corporation)
  236. R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
  237. R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150331.034\ENG64.SYS [129752 2015-03-31] (Symantec Corporation)
  238. R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20150331.034\EX64.SYS [2137304 2015-03-31] (Symantec Corporation)
  239. S3 NETw5s64; C:\Windows\System32\DRIVERS\NETw5s64.sys [7680512 2010-03-18] (Intel Corporation) [File not signed]
  240. R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
  241. R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1507000.00B\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
  242. R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1507000.00B\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
  243. S2 STEC3; C:\Windows\SysWOW64\STEC3.sys [2368 2012-01-28] (AntiCracking) [File not signed]
  244. R0 SymDS; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
  245. R0 SymEFA; C:\Windows\System32\drivers\NISx64\1507000.00B\SYMEFA64.SYS [1148120 2014-08-26] (Symantec Corporation)
  246. R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2015-02-17] (Symantec Corporation)
  247. R1 SymIRON; C:\Windows\system32\drivers\NISx64\1507000.00B\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
  248. R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1507000.00B\SYMNETS.SYS [593112 2014-08-26] (Symantec Corporation)
  249. R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
  250. S2 {09BB444F-B2E2-4009-BAF2-7B727681223E}; C:\Program Files (x86)\VMLaunch\BuddyVM.sys [15872 2004-10-05] (Interlex Inc.) [File not signed]
  251.  
  252. ==================== NetSvcs (Whitelisted) ===================
  253.  
  254. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  255.  
  256.  
  257. ==================== One Month Created Files and Folders ========
  258.  
  259. (If an entry is included in the fixlist, the file\folder will be moved.)
  260.  
  261. 2015-04-01 16:22 - 2015-04-01 16:22 - 00027730 _____ () C:\Users\asus\Downloads\FRST.txt
  262. 2015-04-01 16:22 - 2015-04-01 16:22 - 00000000 ____D () C:\FRST
  263. 2015-04-01 16:21 - 2015-04-01 16:22 - 02095616 _____ (Farbar) C:\Users\asus\Downloads\FRST64.exe
  264. 2015-04-01 16:20 - 2015-04-01 16:20 - 00000395 _____ () C:\DelFix.txt
  265. 2015-04-01 16:18 - 2015-04-01 16:18 - 00781312 _____ () C:\Users\asus\Downloads\delfix_10.9.exe
  266. 2015-04-01 16:04 - 2015-04-01 16:19 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
  267. 2015-04-01 16:02 - 2015-04-01 16:03 - 16502728 _____ (Malwarebytes Corp.) C:\Users\asus\Downloads\mbar-1.09.1.1004.exe
  268. 2015-04-01 11:21 - 2015-04-01 11:21 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
  269. 2015-04-01 10:58 - 2015-04-01 10:59 - 23315064 _____ (Popcorn Official) C:\Users\asus\Downloads\Popcorn-Time-0.3.7.2-Setup.exe
  270. 2015-03-30 03:32 - 2015-03-30 03:58 - 26148864 _____ () C:\Users\asus\Downloads\Beth (Release 1).rag
  271. 2015-03-14 19:19 - 2015-03-14 19:19 - 00000000 ___RD () C:\Program Files (x86)\Skype
  272. 2015-03-14 19:19 - 2015-03-14 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  273. 2015-03-14 19:12 - 2015-03-14 19:12 - 00000000 ____D () C:\Users\asus\AppData\Local\Skype
  274. 2015-03-13 05:03 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
  275. 2015-03-13 05:03 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
  276. 2015-03-13 05:03 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
  277. 2015-03-13 05:03 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
  278. 2015-03-13 05:03 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
  279. 2015-03-13 05:03 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
  280. 2015-03-13 05:03 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
  281. 2015-03-13 05:03 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
  282. 2015-03-13 05:03 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
  283. 2015-03-13 05:03 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
  284. 2015-03-13 05:03 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  285. 2015-03-13 05:03 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
  286. 2015-03-13 05:03 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
  287. 2015-03-13 05:03 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
  288. 2015-03-13 05:03 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
  289. 2015-03-13 05:03 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
  290. 2015-03-13 05:03 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
  291. 2015-03-13 05:03 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
  292. 2015-03-13 05:03 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
  293. 2015-03-13 05:03 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
  294. 2015-03-13 05:03 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
  295. 2015-03-13 05:03 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
  296. 2015-03-13 05:03 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
  297. 2015-03-13 05:03 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
  298. 2015-03-13 05:03 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
  299. 2015-03-13 05:03 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
  300. 2015-03-13 05:03 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
  301. 2015-03-13 05:03 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
  302. 2015-03-13 05:03 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
  303. 2015-03-13 05:03 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
  304. 2015-03-13 05:03 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
  305. 2015-03-13 05:03 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  306. 2015-03-13 05:03 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  307. 2015-03-13 05:03 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
  308. 2015-03-13 05:03 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
  309. 2015-03-13 05:03 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
  310. 2015-03-13 05:03 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
  311. 2015-03-13 05:03 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
  312. 2015-03-13 05:03 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
  313. 2015-03-13 05:03 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
  314. 2015-03-13 05:03 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
  315. 2015-03-13 05:03 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
  316. 2015-03-13 05:03 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
  317. 2015-03-13 05:03 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
  318. 2015-03-13 05:03 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
  319. 2015-03-13 05:03 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
  320. 2015-03-13 05:03 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
  321. 2015-03-13 05:03 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
  322. 2015-03-13 05:03 - 2014-06-28 02:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
  323. 2015-03-13 05:02 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
  324. 2015-03-13 05:02 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
  325. 2015-03-13 05:02 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
  326. 2015-03-13 05:02 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
  327. 2015-03-13 05:02 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
  328. 2015-03-13 05:02 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
  329. 2015-03-13 05:02 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
  330. 2015-03-13 05:02 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
  331. 2015-03-13 05:02 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
  332. 2015-03-13 05:02 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
  333. 2015-03-13 05:02 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
  334. 2015-03-13 05:02 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
  335. 2015-03-13 05:02 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
  336. 2015-03-13 05:02 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
  337. 2015-03-13 05:02 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
  338. 2015-03-13 05:02 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
  339. 2015-03-13 05:02 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
  340. 2015-03-13 05:02 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
  341. 2015-03-13 05:02 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
  342. 2015-03-13 05:02 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
  343. 2015-03-13 05:02 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
  344. 2015-03-13 05:02 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
  345. 2015-03-13 05:02 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
  346. 2015-03-13 05:02 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
  347. 2015-03-13 05:02 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
  348. 2015-03-13 05:02 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  349. 2015-03-13 05:02 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
  350. 2015-03-13 05:02 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
  351. 2015-03-13 05:02 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  352. 2015-03-13 05:02 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
  353. 2015-03-13 05:02 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
  354. 2015-03-13 05:02 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
  355. 2015-03-13 05:02 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
  356. 2015-03-13 05:02 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
  357. 2015-03-13 05:02 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
  358. 2015-03-13 05:02 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  359. 2015-03-13 05:02 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
  360. 2015-03-13 05:02 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
  361. 2015-03-13 05:02 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
  362. 2015-03-13 05:02 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
  363. 2015-03-13 05:02 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
  364. 2015-03-13 05:02 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
  365. 2015-03-13 05:02 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
  366. 2015-03-13 05:02 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
  367. 2015-03-13 05:02 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
  368. 2015-03-13 05:02 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
  369. 2015-03-13 05:02 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
  370. 2015-03-13 05:02 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
  371. 2015-03-13 05:02 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
  372. 2015-03-13 05:02 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
  373. 2015-03-13 05:02 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
  374. 2015-03-13 05:02 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
  375. 2015-03-13 05:02 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
  376. 2015-03-13 05:02 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
  377. 2015-03-13 05:02 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
  378. 2015-03-13 05:02 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
  379. 2015-03-13 05:02 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  380. 2015-03-13 05:02 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
  381. 2015-03-13 05:02 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
  382. 2015-03-13 05:01 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  383. 2015-03-13 05:01 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  384. 2015-03-13 05:01 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  385. 2015-03-13 05:01 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  386. 2015-03-13 05:01 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  387. 2015-03-13 05:01 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  388. 2015-03-13 05:01 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  389. 2015-03-13 05:01 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  390. 2015-03-13 05:01 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  391. 2015-03-13 05:01 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  392. 2015-03-13 05:01 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  393. 2015-03-13 05:01 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  394. 2015-03-13 05:01 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  395. 2015-03-13 05:01 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  396. 2015-03-13 05:01 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  397. 2015-03-13 05:01 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  398. 2015-03-13 05:01 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  399. 2015-03-13 05:01 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  400. 2015-03-13 05:01 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  401. 2015-03-13 05:01 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  402. 2015-03-13 05:01 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  403. 2015-03-13 05:01 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  404. 2015-03-13 05:01 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  405. 2015-03-13 05:01 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  406. 2015-03-13 05:01 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  407. 2015-03-13 05:01 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  408. 2015-03-13 05:01 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  409. 2015-03-13 05:01 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  410. 2015-03-13 05:01 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  411. 2015-03-13 05:01 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  412. 2015-03-13 05:01 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  413. 2015-03-13 05:01 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  414. 2015-03-13 05:01 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  415. 2015-03-13 05:01 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  416. 2015-03-13 05:01 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  417. 2015-03-13 05:01 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  418. 2015-03-13 05:01 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  419. 2015-03-13 05:01 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  420. 2015-03-13 05:01 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  421. 2015-03-13 05:01 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  422. 2015-03-13 05:01 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  423. 2015-03-13 05:01 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  424. 2015-03-13 05:01 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  425. 2015-03-13 05:01 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  426. 2015-03-13 05:01 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  427. 2015-03-13 05:01 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  428. 2015-03-13 05:01 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  429. 2015-03-13 05:01 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  430. 2015-03-13 05:01 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  431. 2015-03-13 05:01 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  432. 2015-03-13 05:01 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  433. 2015-03-13 05:01 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  434. 2015-03-13 05:01 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  435. 2015-03-13 05:01 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  436. 2015-03-13 05:01 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  437. 2015-03-13 05:01 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  438. 2015-03-13 05:01 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  439. 2015-03-13 05:01 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  440. 2015-03-13 05:01 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  441. 2015-03-13 05:01 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  442. 2015-03-13 05:01 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  443. 2015-03-13 05:01 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  444. 2015-03-13 05:01 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  445. 2015-03-13 05:01 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  446. 2015-03-13 05:01 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  447. 2015-03-13 05:01 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  448. 2015-03-13 05:01 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  449. 2015-03-13 05:01 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  450. 2015-03-13 05:01 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  451. 2015-03-13 05:01 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  452. 2015-03-13 05:01 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  453. 2015-03-13 05:01 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  454. 2015-03-13 05:01 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  455. 2015-03-13 05:01 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  456. 2015-03-13 05:01 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  457. 2015-03-13 05:01 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  458. 2015-03-13 05:01 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  459. 2015-03-13 05:01 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  460. 2015-03-13 05:01 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  461. 2015-03-13 05:01 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  462. 2015-03-13 05:01 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  463. 2015-03-13 05:01 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  464. 2015-03-13 05:01 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  465. 2015-03-13 05:01 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  466. 2015-03-13 05:01 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  467. 2015-03-13 05:01 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  468. 2015-03-13 05:01 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  469. 2015-03-13 05:01 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  470. 2015-03-13 05:01 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
  471. 2015-03-13 05:01 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
  472. 2015-03-13 05:01 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
  473. 2015-03-13 04:59 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
  474. 2015-03-13 04:59 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
  475.  
  476. ==================== One Month Modified Files and Folders =======
  477.  
  478. (If an entry is included in the fixlist, the file\folder will be moved.)
  479.  
  480. 2015-04-01 16:15 - 2012-04-14 03:14 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
  481. 2015-04-01 16:04 - 2015-02-17 15:09 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  482. 2015-04-01 16:04 - 2015-02-17 15:07 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
  483. 2015-04-01 15:59 - 2011-09-16 03:52 - 00000000 ____D () C:\Users\asus\AppData\Local\CrashDumps
  484. 2015-04-01 15:50 - 2010-11-16 07:27 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  485. 2015-04-01 15:38 - 2011-10-21 13:06 - 00001074 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3640462671-3525918540-2347106381-1001UA.job
  486. 2015-04-01 15:38 - 2011-10-21 13:06 - 00001022 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3640462671-3525918540-2347106381-1001Core.job
  487. 2015-04-01 15:12 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
  488. 2015-04-01 15:08 - 2010-11-16 07:02 - 00843463 ____N () C:\Windows\WindowsUpdate.log
  489. 2015-04-01 11:26 - 2013-05-30 16:07 - 00000000 ____D () C:\Users\asus\AppData\Roaming\Skype
  490. 2015-04-01 11:21 - 2009-08-04 12:03 - 00759322 _____ () C:\Windows\system32\perfh00C.dat
  491. 2015-04-01 11:21 - 2009-08-04 12:03 - 00154154 _____ () C:\Windows\system32\perfc00C.dat
  492. 2015-04-01 11:21 - 2009-07-14 07:13 - 01700416 _____ () C:\Windows\system32\PerfStringBackup.INI
  493. 2015-04-01 11:21 - 2009-07-14 06:45 - 00019056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  494. 2015-04-01 11:21 - 2009-07-14 06:45 - 00019056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  495. 2015-04-01 11:17 - 2010-11-16 07:51 - 00000000 ____D () C:\Program Files\P4G
  496. 2015-04-01 11:17 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
  497. 2015-04-01 11:16 - 2015-02-17 21:17 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
  498. 2015-04-01 11:16 - 2015-02-17 21:15 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
  499. 2015-04-01 11:16 - 2010-11-16 07:27 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  500. 2015-04-01 11:16 - 2009-07-14 06:45 - 05074144 _____ () C:\Windows\system32\FNTCACHE.DAT
  501. 2015-04-01 11:15 - 2015-02-17 21:17 - 00002463 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
  502. 2015-04-01 11:15 - 2015-02-17 21:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
  503. 2015-04-01 11:14 - 2010-11-16 07:43 - 00000000 ____D () C:\ProgramData\NVIDIA
  504. 2015-04-01 11:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  505. 2015-04-01 11:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
  506. 2015-04-01 11:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
  507. 2015-04-01 10:46 - 2011-09-18 00:10 - 00000000 ____D () C:\Users\asus\AppData\Local\Adobe
  508. 2015-03-30 02:29 - 2014-12-26 02:16 - 39727104 _____ () C:\Users\asus\Downloads\foreign university update 1.0-2.rag
  509. 2015-03-30 01:56 - 2014-07-24 09:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
  510. 2015-03-30 01:56 - 2011-09-18 00:09 - 00000000 ____D () C:\ProgramData\Microsoft Help
  511. 2015-03-30 01:39 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
  512. 2015-03-29 22:32 - 2013-07-25 03:04 - 00000000 ____D () C:\Windows\system32\MRT
  513. 2015-03-29 22:16 - 2011-09-10 07:41 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  514. 2015-03-23 13:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
  515. 2015-03-23 12:49 - 2013-10-22 02:43 - 00000000 ____D () C:\Users\asus\AppData\Local\Wide Angle Software
  516. 2015-03-14 19:19 - 2013-05-30 16:07 - 00000000 ____D () C:\ProgramData\Skype
  517. 2015-03-05 07:42 - 2014-12-23 12:53 - 00000004 _____ () C:\Users\asus\AppData\Roaming\appdataFr2.bin
  518.  
  519. ==================== Files in the root of some directories =======
  520.  
  521. 2014-12-23 12:53 - 2015-03-05 07:42 - 0000004 _____ () C:\Users\asus\AppData\Roaming\appdataFr2.bin
  522. 2011-09-02 21:52 - 2011-09-02 21:52 - 0001265 _____ () C:\Users\asus\AppData\Local\PDLSetup.20110902.215249.txt
  523. 2014-03-21 05:41 - 2014-03-21 05:41 - 0007605 _____ () C:\Users\asus\AppData\Local\Resmon.ResmonCfg
  524. 2006-06-26 07:33 - 2006-06-26 07:33 - 0163840 ____N (アリスソフト) C:\Users\asus\AppData\Local\Tempals_inst.exe
  525. 2011-09-02 21:33 - 2011-09-02 21:33 - 0024576 _____ () C:\Users\asus\AppData\Local\uninst.tmp
  526. 2010-11-16 07:28 - 2010-07-07 02:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe
  527. 2014-03-24 02:34 - 2014-03-24 02:34 - 0000123 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
  528. 2010-11-16 07:16 - 2010-11-16 07:16 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
  529. 2010-11-16 07:17 - 2010-11-16 07:18 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
  530. 2010-11-16 07:15 - 2010-11-16 07:16 - 0000106 _____ () C:\ProgramData\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}.log
  531. 2010-11-16 07:17 - 2010-11-16 07:17 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
  532. 2010-11-16 07:12 - 2010-11-16 07:15 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
  533. 2010-11-16 07:16 - 2010-11-16 07:16 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
  534. 2010-11-16 07:11 - 2010-11-16 07:12 - 0000115 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log
  535.  
  536. ==================== Bamital & volsnap Check =================
  537.  
  538. (There is no automatic fix for files that do not pass verification.)
  539.  
  540. C:\Windows\System32\winlogon.exe => File is digitally signed
  541. C:\Windows\System32\wininit.exe => File is digitally signed
  542. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  543. C:\Windows\explorer.exe => File is digitally signed
  544. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  545. C:\Windows\System32\svchost.exe => File is digitally signed
  546. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  547. C:\Windows\System32\services.exe => File is digitally signed
  548. C:\Windows\System32\User32.dll => File is digitally signed
  549. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  550. C:\Windows\System32\userinit.exe => File is digitally signed
  551. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  552. C:\Windows\System32\rpcss.dll => File is digitally signed
  553. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  554.  
  555.  
  556. LastRegBack: 2015-04-01 15:04
  557.  
  558. ==================== End Of Log ============================
  559.  
  560. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
  561. Ran by asus at 2015-04-01 16:23:22
  562. Running from C:\Users\asus\Downloads
  563. Boot Mode: Normal
  564. ==========================================================
  565.  
  566.  
  567. ==================== Security Center ========================
  568.  
  569. (If an entry is included in the fixlist, it will be removed.)
  570.  
  571. AV: Norton Internet Security (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
  572. AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  573. AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
  574. AS: Norton Internet Security (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
  575. FW: Norton Internet Security (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
  576.  
  577. ==================== Installed Programs ======================
  578.  
  579. (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  580.  
  581. 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
  582. Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
  583. Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
  584. Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
  585. Adobe Creative Suite 5 Master Collection (HKLM-x32\...\{1BBD8D70-721A-41AD-AC8F-7308A0C8FA92}) (Version: 5.0 - Adobe Systems Incorporated)
  586. Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
  587. Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
  588. Adobe InDesign CC 2014 (HKLM-x32\...\{CCDCB9C4-72BA-1014-A3F8-D123F2F18BC2}) (Version: 10.0 - Adobe Systems Incorporated)
  589. Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
  590. Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
  591. ADRIFT (HKLM-x32\...\ST6UNST #1) (Version: - )
  592. ADRIFT 5 (HKLM-x32\...\{11978B01-779C-43AB-8609-BAA7B81B47FE}) (Version: 5.0.32.1 - Campbell Wild)
  593. Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{1F7424F8-F992-48BC-90EF-7C4DB0405E3F}) (Version: 1.7.17.25416 - Alcor Micro Corp.)
  594. Alcor Micro USB Card Reader (x32 Version: 1.7.17.25416 - Alcor Micro Corp.) Hidden
  595. Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
  596. Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
  597. Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
  598. ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS)
  599. ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
  600. ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.40 - ASUS)
  601. Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
  602. Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
  603. calibre (HKLM-x32\...\{D9D5A07A-F299-4741-BFE6-302324CC0BD7}) (Version: 0.9.7 - Kovid Goyal)
  604. CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
  605. ChromecastApp (HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1383.0 - Google Inc.)
  606. Curse Client (HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
  607. D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
  608. DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.2.0287 - DT Soft Ltd)
  609. Delete Virtual-Mate Launcher (HKLM-x32\...\{56C64E81-FC93-4cb9-9EBF-953662950D3B}_is1) (Version: 1.0.0 - Interlex Inc.)
  610. EPSON Logiciel imprimante (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
  611. ETDWare PS/2-x64 7.0.5.13_WHQL (HKLM\...\Elantech) (Version: 7.0.5.13 - ELAN Microelectronics Corp.)
  612. Europa Universalis IV (HKLM-x32\...\Steam App 236850) (Version: - Paradox Development Studio)
  613. Galerie de photos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
  614. Gargoyle (HKLM-x32\...\Gargoyle) (Version: - )
  615. Google Chrome (HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
  616. Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
  617. Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
  618. Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
  619. HTML TADS Player Kit (HKLM-x32\...\htmltads.exe) (Version: - )
  620. iBackup Extractor (HKLM-x32\...\{6D61B6E6-176F-429A-828B-5A9A4589A156}) (Version: 2.11 - Wide Angle Software)
  621. IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
  622. IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
  623. IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
  624. Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
  625. Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
  626. Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2827 - Intel Corporation)
  627. Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)
  628. Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.400.4 - Intel)
  629. iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.)
  630. Java(TM) 6 Update 29 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216027FF}) (Version: 6.0.290 - Oracle)
  631. Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
  632. K-Lite Codec Pack 10.6.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.5 - )
  633. Last Man (HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\Last Man) (Version: - )
  634. Ma-Config.com (64 bits) (HKLM\...\{8298746D-C536-4155-A418-42FD6C42218C}) (Version: 5.1.077 - Cybelsoft)
  635. Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
  636. Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
  637. Microsoft AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
  638. Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.0.162.0 - Microsoft Corporation)
  639. Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
  640. Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
  641. Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
  642. Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
  643. Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
  644. Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
  645. Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
  646. Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{BECA0B13-6542-4D6B-AB50-C06AD0E3C7A9}) (Version: 11.0.2100.60 - Microsoft Corporation)
  647. Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
  648. Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
  649. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
  650. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
  651. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
  652. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
  653. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
  654. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
  655. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
  656. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
  657. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
  658. Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
  659. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  660. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{cb41fc68-4442-4f7f-b22f-8f31c74897ac}) (Version: 11.0.51106.1 - Microsoft Corporation)
  661. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
  662. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
  663. Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
  664. Microsoft Web Deploy 3.5 (HKLM\...\{69A998C5-00A9-42CA-AB4E-C31CFFCD9251}) (Version: 3.1237.1763 - Microsoft Corporation)
  665. Microsoft Web Platform Installer 5.0 (HKLM\...\{4D84C195-86F0-4B34-8FDE-4A17EB41306A}) (Version: 5.0.50430.0 - Microsoft Corporation)
  666. Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - )
  667. Mises à jour NVIDIA 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation)
  668. Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
  669. Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
  670. Mozilla Firefox 30.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 fr)) (Version: 30.0 - Mozilla)
  671. Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
  672. MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
  673. MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
  674. MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
  675. Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.7.0.11 - Symantec Corporation)
  676. NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5964 - NVIDIA Corporation)
  677. NVIDIA Logiciel système PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
  678. NVIDIA Pilote 3D Vision 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
  679. NVIDIA Pilote audio HD : 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
  680. NVIDIA Pilote du contrôleur 3D Vision 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
  681. NVIDIA Pilote graphique 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
  682. OpenOffice.org 3.4.1 (HKLM-x32\...\{7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}) (Version: 3.41.9593 - Apache Software Foundation)
  683. Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
  684. Panneau de configuration NVIDIA 314.22 (Version: 314.22 - NVIDIA Corporation) Hidden
  685. PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
  686. Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: Beta 4.3 - Popcorn Time)
  687. PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
  688. QuickTime (HKLM-x32\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
  689. Rags Suite (HKLM-x32\...\{7C60776C-C6EA-4C59-926B-BA76703D2608}) (Version: 2.4.16 - RagsGame)
  690. Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
  691. Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)
  692. SlimDrivers (HKLM-x32\...\{E1D00057-82F0-4EA1-91C2-270682EB9C98}) (Version: 2.2.30423 - SlimWare Utilities, Inc.)
  693. Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
  694. Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
  695. swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
  696. TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
  697. Unity Web Player (HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
  698. USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.206 - Sonix)
  699. VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
  700. Wakfu (HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\...\wakfu) (Version: - Ankama Games)
  701. WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.5.500 - Broadcom Corporation)
  702. Windows Driver Package - Broadcom Bluetooth (07/17/2009 6.2.0.9403) (HKLM\...\F9FD5BBF579A4BFD40D38BE291F731666B27DC28) (Version: 07/17/2009 6.2.0.9403 - Broadcom)
  703. Windows Driver Package - Broadcom Bluetooth (07/29/2009 6.1.7100.0) (HKLM\...\2AA10AB519DC7432D599A0E860206A7DDCC27764) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
  704. Windows Driver Package - Broadcom HIDClass (06/11/2009 6.2.0.9500) (HKLM\...\0E74EB10C05C955C24243E6D3120CDC972FC5B1D) (Version: 06/11/2009 6.2.0.9500 - Broadcom)
  705. Windows Driver Package - Palm (WinUSB) Palm Devices (10/09/2009 1.0.1) (HKLM\...\332CCC08910F1AE2E4D90D25DEDE87E3EF797832) (Version: 10/09/2009 1.0.1 - Palm)
  706. Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
  707. Windows Live Sync (HKLM-x32\...\{67D0313C-4F15-437D-9A2D-C1564088A26A}) (Version: 14.0.8050.1202 - Microsoft Corporation)
  708. WinRAR 4.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
  709. Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS)
  710. World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
  711.  
  712. ==================== Custom CLSID (selected items): ==========================
  713.  
  714. (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
  715.  
  716. CustomCLSID: HKU\S-1-5-21-3640462671-3525918540-2347106381-1001_Classes\CLSID\{81693d39-469e-4804-974b-f33516aedae0}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
  717. CustomCLSID: HKU\S-1-5-21-3640462671-3525918540-2347106381-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\asus\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
  718. CustomCLSID: HKU\S-1-5-21-3640462671-3525918540-2347106381-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\asus\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
  719.  
  720. ==================== Restore Points =========================
  721.  
  722.  
  723. ==================== Hosts content: ==========================
  724.  
  725. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
  726.  
  727. 2011-09-21 19:21 - 2015-02-17 18:35 - 00451034 ____N C:\Windows\system32\Drivers\etc\hosts
  728. 127.0.0.1 practivate.adobe.com
  729. 127.0.0.1 lmlicenses.wip4.adobe.com
  730. 127.0.0.1 lm.licenses.adobe.com
  731. 127.0.0.1 na1r.services.adobe.com
  732. 127.0.0.1 hlrcv.stage.adobe.com
  733. 127.0.0.1 www.007guard.com
  734. 127.0.0.1 007guard.com
  735. 127.0.0.1 008i.com
  736. 127.0.0.1 www.008k.com
  737. 127.0.0.1 008k.com
  738. 127.0.0.1 www.00hq.com
  739. 127.0.0.1 00hq.com
  740. 127.0.0.1 010402.com
  741. 127.0.0.1 www.032439.com
  742. 127.0.0.1 032439.com
  743. 127.0.0.1 www.0scan.com
  744. 127.0.0.1 0scan.com
  745. 127.0.0.1 1000gratisproben.com
  746. 127.0.0.1 www.1000gratisproben.com
  747. 127.0.0.1 1001namen.com
  748. 127.0.0.1 www.1001namen.com
  749. 127.0.0.1 100888290cs.com
  750. 127.0.0.1 www.100888290cs.com
  751. 127.0.0.1 www.100sexlinks.com
  752. 127.0.0.1 100sexlinks.com
  753. 127.0.0.1 10sek.com
  754. 127.0.0.1 www.10sek.com
  755. 127.0.0.1 www.1-2005-search.com
  756. 127.0.0.1 1-2005-search.com
  757.  
  758. There are 1000 more lines.
  759.  
  760.  
  761. ==================== Scheduled Tasks (whitelisted) =============
  762.  
  763. (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
  764.  
  765. Task: {01EFD15E-FB50-45DB-B966-277558600732} - System32\Tasks\AdobeAAMUpdater-1.0-asus-PC-asus => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
  766. Task: {03651079-923A-4F57-9578-F87462E24CC9} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
  767. Task: {057BADDA-E9F7-4B2B-AF86-594ACBB8209D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\WSCStub.exe [2015-03-07] (Symantec Corporation)
  768. Task: {29C963CF-0732-484D-8265-53ADA14C2676} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)
  769. Task: {2B1696FB-C6E4-485D-8DD0-AEBE7CA173F6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
  770. Task: {2F97BD63-E377-4ABB-BEFC-D816B8B39394} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\SymErr.exe [2014-01-30] (Symantec Corporation)
  771. Task: {3554A75E-4F97-4949-B2C2-D89FA13D1559} - System32\Tasks\{927A9BC0-59EF-43EF-AD63-C732A4B2E4DD} => msiexec.exe /package "C:\Users\asus\Desktop\Touchpad\novacom-win-64\NovacomInstaller_x64.msi"
  772. Task: {3FD3B381-74A2-49E4-9954-4E3DCDAD52FF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
  773. Task: {5136535F-78A6-411D-97E9-B752D07CA903} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3640462671-3525918540-2347106381-1001Core => C:\Users\asus\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
  774. Task: {68CC9B35-B838-4C67-B462-23177DC4CAC2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-19] (Google Inc.)
  775. Task: {77815D52-8905-41A1-8597-0E4BBE518A22} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe
  776. Task: {7C0CC1C5-946E-4382-BE3C-DBFD1DB0A232} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
  777. Task: {7E1FDFD1-43CA-4D13-A791-9C6AC90952B4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
  778. Task: {8FE7790D-A2E4-47B0-AF9B-F2AEAFDBF255} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
  779. Task: {AB5DA1A7-ABFF-46D9-83B4-4FEF516EAC9D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
  780. Task: {AD0CAEE8-0A6F-492C-B934-B529E23FCCBB} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
  781. Task: {B588FD18-EEE5-49C1-89CC-4CD562E9D634} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
  782. Task: {BF004156-4D4B-40FE-BFF7-BEA79284E5AC} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
  783. Task: {C7B34FD8-96ED-4835-8AC4-91FEE017EB64} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
  784. Task: {D67101CD-C690-4B0E-BB74-2276DFB00A64} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-08-12] (ASUS)
  785. Task: {E11A6F57-56B3-4F43-AE5E-D2D4EC261F72} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\SymErr.exe [2014-01-30] (Symantec Corporation)
  786. Task: {FD0E3FD1-93C4-4350-B761-682749B0295B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3640462671-3525918540-2347106381-1001UA => C:\Users\asus\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
  787. Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  788. Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  789. Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  790. Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3640462671-3525918540-2347106381-1001Core.job => C:\Users\asus\AppData\Local\Google\Update\GoogleUpdate.exe
  791. Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3640462671-3525918540-2347106381-1001UA.job => C:\Users\asus\AppData\Local\Google\Update\GoogleUpdate.exe
  792.  
  793. ==================== Loaded Modules (whitelisted) ==============
  794.  
  795. 2011-11-16 02:55 - 2013-03-15 06:16 - 00086304 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
  796. 2010-11-16 07:52 - 2007-11-30 21:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
  797. 2010-07-15 02:11 - 2010-07-15 02:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
  798. 2011-09-03 00:15 - 2011-08-09 07:44 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
  799. 2010-09-24 02:53 - 2010-09-24 02:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  800. 2015-04-01 16:18 - 2015-04-01 16:18 - 00781312 _____ () C:\Users\asus\Downloads\delfix_10.9.exe
  801. 2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
  802. 2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
  803. 2015-02-17 17:00 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
  804. 2015-02-17 17:00 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
  805. 2015-02-17 17:00 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
  806. 2015-02-17 17:00 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
  807. 2015-02-17 17:00 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
  808. 2014-11-03 18:11 - 2014-11-03 18:11 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\b2363cf94faf59386ab4778a39c16e2b\IsdiInterop.ni.dll
  809. 2011-09-02 22:02 - 2011-05-20 10:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
  810. 2014-12-14 23:05 - 2014-12-06 03:50 - 01077064 _____ () C:\Users\asus\AppData\Local\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
  811. 2014-12-14 23:05 - 2014-12-06 03:50 - 00211272 _____ () C:\Users\asus\AppData\Local\Google\Chrome\Application\39.0.2171.95\libegl.dll
  812. 2014-12-14 23:05 - 2014-12-06 03:50 - 09009480 _____ () C:\Users\asus\AppData\Local\Google\Chrome\Application\39.0.2171.95\pdf.dll
  813. 2014-12-14 23:05 - 2014-12-06 03:50 - 01677128 _____ () C:\Users\asus\AppData\Local\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
  814.  
  815. ==================== Alternate Data Streams (whitelisted) =========
  816.  
  817. (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
  818.  
  819. AlternateDataStreams: C:\Users\asus\AppData\Local\ICCbjQDXz:fPCo4VMMuUd3L8P34YbnZGVGx
  820. AlternateDataStreams: C:\Users\asus\AppData\Local\Temp:edNR9wKddZWwfKhSmnfOH9u850ZiT
  821. AlternateDataStreams: C:\Users\asus\AppData\Local\Temporary Internet Files:PaZW8581v8Zqx2ZFZ6FALuyz
  822.  
  823. ==================== Safe Mode (whitelisted) ===================
  824.  
  825. (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
  826.  
  827. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318} => "default"="DiskDrive"
  828. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service"
  829. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver"
  830. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318} => "default"="DiskDrive"
  831.  
  832. ==================== EXE Association (whitelisted) ===============
  833.  
  834. (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
  835.  
  836.  
  837. ==================== Other Areas ============================
  838.  
  839. (Currently there is no automatic fix for this section.)
  840.  
  841. HKU\S-1-5-21-3640462671-3525918540-2347106381-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\asus\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
  842. DNS Servers: 192.168.0.254
  843.  
  844. ==================== MSCONFIG/TASK MANAGER disabled items ==
  845.  
  846. (Currently there is no automatic fix for this section.)
  847.  
  848.  
  849. ==================== Accounts: =============================
  850.  
  851. Administrateur (S-1-5-21-3640462671-3525918540-2347106381-500 - Administrator - Disabled) => C:\Users\Administrateur
  852. asus (S-1-5-21-3640462671-3525918540-2347106381-1001 - Administrator - Enabled) => C:\Users\asus
  853. Invité (S-1-5-21-3640462671-3525918540-2347106381-501 - Limited - Disabled)
  854. UpdatusUser (S-1-5-21-3640462671-3525918540-2347106381-1000 - Limited - Enabled) => C:\Users\UpdatusUser
  855.  
  856. ==================== Faulty Device Manager Devices =============
  857.  
  858.  
  859. ==================== Event log errors: =========================
  860.  
  861. Application errors:
  862. ==================
  863. Error: (04/01/2015 03:11:28 PM) (Source: System Restore) (EventID: 8193) (User: )
  864. Description: Échec de la création d’un point de restauration (Processus = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation ; Description = Point de contrôle planifié ; Erreur = 0x80070422).
  865.  
  866. Error: (04/01/2015 11:42:52 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
  867. Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 6032. Message ID: [0x2509].
  868.  
  869. Error: (04/01/2015 11:15:41 AM) (Source: SDFSSvc.exe) (EventID: 0) (User: )
  870. Description: Le processus de service n’a pas pu se connecter au contrôleur de service
  871.  
  872. Error: (04/01/2015 11:04:32 AM) (Source: Application Error) (EventID: 1000) (User: )
  873. Description: Nom de l’application défaillante nvtray.exe, version : 7.17.13.1422, horodatage : 0x51428f51
  874. Nom du module défaillant : nvtray.exe, version : 7.17.13.1422, horodatage : 0x51428f51
  875. Code d’exception : 0x40000015
  876. Décalage d’erreur : 0x0000000000154f89
  877. ID du processus défaillant : 0xc64
  878. Heure de début de l’application défaillante : 0xnvtray.exe0
  879. Chemin d’accès de l’application défaillante : nvtray.exe1
  880. Chemin d’accès du module défaillant: nvtray.exe2
  881. ID de rapport : nvtray.exe3
  882.  
  883. Error: (04/01/2015 11:03:55 AM) (Source: Application Error) (EventID: 1000) (User: )
  884. Description: Nom de l’application défaillante NIS.exe, version : 12.11.4.4, horodatage : 0x53f531a0
  885. Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
  886. Code d’exception : 0xc0000005
  887. Décalage d’erreur : 0x194ce358
  888. ID du processus défaillant : 0xc3c
  889. Heure de début de l’application défaillante : 0xNIS.exe0
  890. Chemin d’accès de l’application défaillante : NIS.exe1
  891. Chemin d’accès du module défaillant: NIS.exe2
  892. ID de rapport : NIS.exe3
  893.  
  894. Error: (03/30/2015 03:00:11 AM) (Source: System Restore) (EventID: 8193) (User: )
  895. Description: Échec de la création d’un point de restauration (Processus = C:\Windows\system32\svchost.exe -k netsvcs ; Description = Windows Update ; Erreur = 0x80070422).
  896.  
  897. Error: (03/30/2015 02:14:24 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
  898. Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 4852. Message ID: [0x2509].
  899.  
  900. Error: (03/29/2015 10:32:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  901. Description: Task Scheduling Error: m->NextScheduledSPRetry 22464
  902.  
  903. Error: (03/29/2015 10:32:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  904. Description: Task Scheduling Error: m->NextScheduledEvent 22464
  905.  
  906. Error: (03/29/2015 10:32:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  907. Description: Task Scheduling Error: Continuously busy for more than a second
  908.  
  909.  
  910. System errors:
  911. =============
  912. Error: (04/01/2015 11:18:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
  913. Description: Le service NVIDIA Update Service Daemon n’a pas pu démarrer en raison de l’erreur :
  914. %%1069
  915.  
  916. Error: (04/01/2015 11:18:17 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
  917. Description: Le service nvUpdatusService n’a pas pu ouvrir de session en tant que .\UpdatusUser avec le mot de passe actuellement configuré en raison de l’erreur suivante :
  918. %%1330
  919.  
  920. Pour vous assurer que le service est configuré correctement, utilisez le composant logiciel enfichable Services dans Microsoft Management Console (MMC).
  921.  
  922. Error: (04/01/2015 11:15:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
  923. Description: Le service BuddyVM n’a pas pu démarrer en raison de l’erreur :
  924. %%1275
  925.  
  926. Error: (04/01/2015 11:15:38 AM) (Source: Application Popup) (EventID: 1060) (User: )
  927. Description: Le chargement de \??\C:\Program Files (x86)\VMLaunch\BuddyVM.sys a été bloqué en raison d’une incompatibilité avec ce système. Contactez l’éditeur de votre logiciel pour obtenir une version compatible du pilote.
  928.  
  929. Error: (04/01/2015 11:15:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
  930. Description: Le service STEC3 n’a pas pu démarrer en raison de l’erreur :
  931. %%2
  932.  
  933. Error: (04/01/2015 11:10:44 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
  934. Description: Le service Programme d’installation pour les modules Windows ne s’est pas fermé correctement après avoir reçu une commande d’anticipation de fermeture.
  935.  
  936. Error: (04/01/2015 11:04:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
  937. Description: Le service NVIDIA Update Service Daemon n’a pas pu démarrer en raison de l’erreur :
  938. %%1069
  939.  
  940. Error: (04/01/2015 11:04:25 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
  941. Description: Le service nvUpdatusService n’a pas pu ouvrir de session en tant que .\UpdatusUser avec le mot de passe actuellement configuré en raison de l’erreur suivante :
  942. %%1330
  943.  
  944. Pour vous assurer que le service est configuré correctement, utilisez le composant logiciel enfichable Services dans Microsoft Management Console (MMC).
  945.  
  946. Error: (03/29/2015 10:20:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
  947. Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x800f0902 : Mise à jour de sécurité pour Windows 7 pour ordinateurs à processeur x64 (KB3034344).
  948.  
  949. Error: (03/29/2015 10:01:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
  950. Description: Le service NVIDIA Update Service Daemon n’a pas pu démarrer en raison de l’erreur :
  951. %%1069
  952.  
  953.  
  954. Microsoft Office Sessions:
  955. =========================
  956. Error: (04/01/2015 03:11:28 PM) (Source: System Restore) (EventID: 8193) (User: )
  957. Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationPoint de contrôle planifié0x80070422
  958.  
  959. Error: (04/01/2015 11:42:52 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
  960. Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 6032. Message ID: [0x2509].
  961.  
  962. Error: (04/01/2015 11:15:41 AM) (Source: SDFSSvc.exe) (EventID: 0) (User: )
  963. Description: Le processus de service n’a pas pu se connecter au contrôleur de service
  964.  
  965. Error: (04/01/2015 11:04:32 AM) (Source: Application Error) (EventID: 1000) (User: )
  966. Description: nvtray.exe7.17.13.142251428f51nvtray.exe7.17.13.142251428f51400000150000000000154f89c6401d06a59b3db0207C:\Program Files\NVIDIA Corporation\Display\nvtray.exeC:\Program Files\NVIDIA Corporation\Display\nvtray.exe1bb3584a-d84e-11e4-8174-20cf30752a24
  967.  
  968. Error: (04/01/2015 11:03:55 AM) (Source: Application Error) (EventID: 1000) (User: )
  969. Description: NIS.exe12.11.4.453f531a0unknown0.0.0.000000000c0000005194ce358c3c01d06c598670ea06C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exeunknown05d900d3-d84e-11e4-8174-20cf30752a24
  970.  
  971. Error: (03/30/2015 03:00:11 AM) (Source: System Restore) (EventID: 8193) (User: )
  972. Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x80070422
  973.  
  974. Error: (03/30/2015 02:14:24 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
  975. Description: .NET Runtime version 4.0.30319.18444 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 4852. Message ID: [0x2509].
  976.  
  977. Error: (03/29/2015 10:32:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  978. Description: Task Scheduling Error: m->NextScheduledSPRetry 22464
  979.  
  980. Error: (03/29/2015 10:32:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  981. Description: Task Scheduling Error: m->NextScheduledEvent 22464
  982.  
  983. Error: (03/29/2015 10:32:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  984. Description: Task Scheduling Error: Continuously busy for more than a second
  985.  
  986.  
  987. CodeIntegrity Errors:
  988. ===================================
  989. Date: 2015-04-01 11:15:38.955
  990. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  991.  
  992. Date: 2015-04-01 11:15:38.861
  993. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  994.  
  995. Date: 2015-03-29 21:50:27.059
  996. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  997.  
  998. Date: 2015-03-29 21:50:26.825
  999. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  1000.  
  1001. Date: 2015-02-26 02:40:27.864
  1002. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  1003.  
  1004. Date: 2015-02-26 02:40:27.630
  1005. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  1006.  
  1007. Date: 2015-02-26 02:25:06.727
  1008. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  1009.  
  1010. Date: 2015-02-26 02:25:06.493
  1011. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  1012.  
  1013. Date: 2015-02-17 23:25:43.175
  1014. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  1015.  
  1016. Date: 2015-02-17 23:25:42.926
  1017. Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Program Files (x86)\VMLaunch\BuddyVM.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
  1018.  
  1019.  
  1020. ==================== Memory info ===========================
  1021.  
  1022. Processor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
  1023. Percentage of memory in use: 68%
  1024. Total physical RAM: 3884.42 MB
  1025. Available physical RAM: 1205.95 MB
  1026. Total Pagefile: 7767.02 MB
  1027. Available Pagefile: 4566.82 MB
  1028. Total Virtual: 8192 MB
  1029. Available Virtual: 8191.81 MB
  1030.  
  1031. ==================== Drives ================================
  1032.  
  1033. Drive c: (OS) (Fixed) (Total:346.62 GB) (Free:221.52 GB) NTFS ==>[System with boot components (obtained from reading drive)]
  1034. Drive d: (Nouveau nom) (Fixed) (Total:97.66 GB) (Free:97.53 GB) NTFS
  1035.  
  1036. ==================== MBR & Partition Table ==================
  1037.  
  1038. ========================================================
  1039. Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0C5913D)
  1040. Partition 1: (Not Active) - (Size=21.5 GB) - (Type=1C)
  1041. Partition 2: (Active) - (Size=346.6 GB) - (Type=07 NTFS)
  1042. Partition 3: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
  1043.  
  1044. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement