API tools faq
paste
Advertisement
Guest User

OTLana

a guest
Dec 14th, 2016
184
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 54.65 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 14-12-16 11:28:04 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Anaïs\Downloads
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17031)
  5. Locale: 0000080C | Country: Belgique | Language: FRB | Date Format: dd-MM-yy
  6.  
  7. 3,93 Gb Total Physical Memory | 1,84 Gb Available Physical Memory | 46,77% Memory free
  8. 7,93 Gb Paging File | 5,22 Gb Available in Paging File | 65,84% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 913,91 Gb Total Space | 876,71 Gb Free Space | 95,93% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: ANAÏS | User Name: Anaïs | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2016-12-14 11:27:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Anaïs\Downloads\OTL.exe
  21. PRC - [2016-12-13 13:08:14 | 006,703,656 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\setup\avast.setup
  22. PRC - [2016-12-10 13:31:52 | 000,288,920 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
  23. PRC - [2014-03-26 19:12:28 | 002,199,840 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  24. PRC - [2014-03-26 19:12:16 | 001,616,160 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  25. PRC - [2014-03-21 12:34:16 | 000,259,304 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
  26. PRC - [2014-02-26 19:13:00 | 000,053,248 | ---- | M] () -- C:\Windows\SysWOW64\UMonit64.exe
  27. PRC - [2014-01-22 15:51:33 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  28. PRC - [2014-01-22 15:51:32 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  29. PRC - [2014-01-16 17:08:10 | 002,797,312 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
  30. PRC - [2013-12-10 00:27:38 | 000,390,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  31. PRC - [2013-12-10 00:27:36 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  32. PRC - [2013-09-05 15:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  33. PRC - [2013-07-16 18:21:38 | 000,235,008 | ---- | M] (TODO: <Company name>) -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
  34. PRC - [2012-07-14 00:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
  35.  
  36.  
  37. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  38.  
  39. MOD - [2014-02-26 19:13:00 | 000,053,248 | ---- | M] () -- C:\Windows\SysWOW64\UMonit64.exe
  40.  
  41.  
  42. [color=#E56717]========== Services (SafeList) ==========[/color]
  43.  
  44. SRV:[b]64bit:[/b] - [2014-03-21 15:07:36 | 000,449,768 | ---- | M] (Acer Incorporate) [On_Demand | Running] -- C:\Program Files\Acer\Acer Quick Access\RMSvc.exe -- (RMSvc)
  45. SRV:[b]64bit:[/b] - [2014-03-21 15:07:30 | 000,457,960 | ---- | M] (Acer Incorporate) [On_Demand | Running] -- C:\Program Files\Acer\Acer Quick Access\QASvc.exe -- (QASvc)
  46. SRV:[b]64bit:[/b] - [2014-03-21 12:34:12 | 002,573,544 | ---- | M] (Acer Incorporated) [On_Demand | Running] -- C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe -- (ePowerSvc)
  47. SRV:[b]64bit:[/b] - [2014-03-17 11:07:32 | 000,459,496 | ---- | M] (Acer Incorporate) [Auto | Running] -- C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe -- (LMSvc)
  48. SRV:[b]64bit:[/b] - [2014-03-12 02:16:00 | 000,282,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
  49. SRV:[b]64bit:[/b] - [2014-02-22 16:53:10 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
  50. SRV:[b]64bit:[/b] - [2014-02-22 10:57:16 | 000,710,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  51. SRV:[b]64bit:[/b] - [2014-02-22 10:26:58 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  52. SRV:[b]64bit:[/b] - [2014-02-22 10:25:39 | 000,399,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  53. SRV:[b]64bit:[/b] - [2014-02-22 10:25:14 | 000,269,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  54. SRV:[b]64bit:[/b] - [2014-02-22 10:23:58 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  55. SRV:[b]64bit:[/b] - [2014-02-22 10:23:49 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  56. SRV:[b]64bit:[/b] - [2014-02-22 09:32:18 | 001,306,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  57. SRV:[b]64bit:[/b] - [2014-01-27 16:38:59 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  58. SRV:[b]64bit:[/b] - [2014-01-24 22:47:26 | 000,222,952 | ---- | M] (acer) [On_Demand | Running] -- C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe -- (UEIPSvc)
  59. SRV:[b]64bit:[/b] - [2014-01-22 15:51:32 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  60. SRV:[b]64bit:[/b] - [2013-12-10 08:35:18 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  61. SRV:[b]64bit:[/b] - [2013-11-23 05:50:00 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  62. SRV:[b]64bit:[/b] - [2013-10-19 06:37:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  63. SRV:[b]64bit:[/b] - [2013-08-31 11:00:10 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
  64. SRV:[b]64bit:[/b] - [2013-08-27 13:32:30 | 000,828,376 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
  65. SRV:[b]64bit:[/b] - [2013-08-27 13:32:14 | 000,747,520 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  66. SRV:[b]64bit:[/b] - [2013-08-22 13:32:01 | 000,346,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
  67. SRV:[b]64bit:[/b] - [2013-08-22 13:32:00 | 000,023,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  68. SRV:[b]64bit:[/b] - [2013-08-22 13:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  69. SRV:[b]64bit:[/b] - [2013-08-22 12:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  70. SRV:[b]64bit:[/b] - [2013-08-22 12:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  71. SRV:[b]64bit:[/b] - [2013-08-22 12:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  72. SRV:[b]64bit:[/b] - [2013-08-22 12:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  73. SRV:[b]64bit:[/b] - [2013-08-22 12:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  74. SRV:[b]64bit:[/b] - [2013-08-22 11:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  75. SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
  76. SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  77. SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  78. SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
  79. SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  80. SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  81. SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  82. SRV:[b]64bit:[/b] - [2013-08-22 11:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  83. SRV:[b]64bit:[/b] - [2013-08-22 10:59:26 | 000,832,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  84. SRV:[b]64bit:[/b] - [2013-08-22 10:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  85. SRV:[b]64bit:[/b] - [2013-08-22 10:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  86. SRV:[b]64bit:[/b] - [2013-08-22 10:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
  87. SRV:[b]64bit:[/b] - [2013-08-22 10:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  88. SRV:[b]64bit:[/b] - [2013-08-22 10:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  89. SRV:[b]64bit:[/b] - [2013-08-22 10:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  90. SRV:[b]64bit:[/b] - [2013-08-22 10:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  91. SRV:[b]64bit:[/b] - [2013-08-22 10:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  92. SRV - [2014-03-26 19:12:16 | 001,616,160 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
  93. SRV - [2014-03-12 13:30:22 | 000,092,160 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe -- (BTDevManager)
  94. SRV - [2014-03-12 02:16:04 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  95. SRV - [2014-01-16 17:08:10 | 002,797,312 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe -- (CCDMonitorService)
  96. SRV - [2013-12-10 00:27:38 | 000,390,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  97. SRV - [2013-12-10 00:27:36 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  98. SRV - [2013-09-05 15:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  99. SRV - [2013-08-31 10:25:30 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
  100. SRV - [2013-08-22 13:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  101. SRV - [2013-08-22 04:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
  102. SRV - [2013-08-22 03:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
  103. SRV - [2013-07-16 18:21:38 | 000,235,008 | ---- | M] (TODO: <Company name>) [Auto | Running] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService)
  104. SRV - [2012-07-14 00:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
  105. SRV - [2010-10-12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  106.  
  107.  
  108. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  109.  
  110. DRV:[b]64bit:[/b] - [2016-12-13 13:58:25 | 001,031,392 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\SysNative\drivers\aswSnx.sys -- (aswSnx)
  111. DRV:[b]64bit:[/b] - [2014-03-07 17:26:42 | 000,450,520 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  112. DRV:[b]64bit:[/b] - [2014-03-07 17:18:23 | 003,729,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  113. DRV:[b]64bit:[/b] - [2014-03-01 21:32:31 | 000,038,296 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
  114. DRV:[b]64bit:[/b] - [2014-03-01 21:32:31 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
  115. DRV:[b]64bit:[/b] - [2014-02-22 17:00:26 | 000,157,528 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
  116. DRV:[b]64bit:[/b] - [2014-02-22 17:00:25 | 000,236,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  117. DRV:[b]64bit:[/b] - [2014-02-22 16:50:31 | 000,054,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
  118. DRV:[b]64bit:[/b] - [2014-02-22 16:49:51 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  119. DRV:[b]64bit:[/b] - [2014-02-22 16:49:50 | 000,467,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  120. DRV:[b]64bit:[/b] - [2014-02-22 16:49:49 | 000,384,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  121. DRV:[b]64bit:[/b] - [2014-02-22 16:49:49 | 000,189,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
  122. DRV:[b]64bit:[/b] - [2014-02-22 16:49:49 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  123. DRV:[b]64bit:[/b] - [2014-02-22 16:49:47 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  124. DRV:[b]64bit:[/b] - [2014-02-22 16:44:13 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS)
  125. DRV:[b]64bit:[/b] - [2014-02-22 13:14:02 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  126. DRV:[b]64bit:[/b] - [2014-02-20 03:20:30 | 000,042,224 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynRMIHID.sys -- (SynRMIHID)
  127. DRV:[b]64bit:[/b] - [2014-02-17 17:52:10 | 000,558,296 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtkBtfilter.sys -- (RtkBtFilter)
  128. DRV:[b]64bit:[/b] - [2014-01-22 15:52:21 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\aswSP.sys -- (aswSP)
  129. DRV:[b]64bit:[/b] - [2014-01-22 15:52:21 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\aswVmm.sys -- (aswVmm)
  130. DRV:[b]64bit:[/b] - [2014-01-22 15:52:21 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  131. DRV:[b]64bit:[/b] - [2014-01-22 15:52:21 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  132. DRV:[b]64bit:[/b] - [2014-01-22 15:52:21 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\aswTdi.sys -- (aswTdi)
  133. DRV:[b]64bit:[/b] - [2014-01-22 15:52:19 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  134. DRV:[b]64bit:[/b] - [2014-01-22 15:52:19 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  135. DRV:[b]64bit:[/b] - [2014-01-22 15:52:19 | 000,022,600 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\aswKbd.sys -- (aswKbd)
  136. DRV:[b]64bit:[/b] - [2013-12-18 20:35:22 | 000,839,896 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)
  137. DRV:[b]64bit:[/b] - [2013-12-10 00:27:36 | 000,100,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
  138. DRV:[b]64bit:[/b] - [2013-12-04 19:41:54 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
  139. DRV:[b]64bit:[/b] - [2013-11-21 07:31:28 | 000,632,168 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
  140. DRV:[b]64bit:[/b] - [2013-11-11 03:48:41 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  141. DRV:[b]64bit:[/b] - [2013-11-01 12:39:53 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  142. DRV:[b]64bit:[/b] - [2013-10-26 02:54:32 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  143. DRV:[b]64bit:[/b] - [2013-10-19 04:48:54 | 002,946,264 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtwlane.sys -- (RTWlanE)
  144. DRV:[b]64bit:[/b] - [2013-10-13 03:48:34 | 000,136,536 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  145. DRV:[b]64bit:[/b] - [2013-10-05 16:25:54 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  146. DRV:[b]64bit:[/b] - [2013-10-03 17:32:28 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iaLPSS_I2C.sys -- (iaLPSS_I2C)
  147. DRV:[b]64bit:[/b] - [2013-10-03 17:32:26 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iaLPSS_GPIO.sys -- (iaLPSS_GPIO)
  148. DRV:[b]64bit:[/b] - [2013-09-14 15:06:57 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  149. DRV:[b]64bit:[/b] - [2013-08-22 20:11:06 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  150. DRV:[b]64bit:[/b] - [2013-08-22 20:11:03 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  151. DRV:[b]64bit:[/b] - [2013-08-22 14:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  152. DRV:[b]64bit:[/b] - [2013-08-22 14:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  153. DRV:[b]64bit:[/b] - [2013-08-22 13:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  154. DRV:[b]64bit:[/b] - [2013-08-22 13:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  155. DRV:[b]64bit:[/b] - [2013-08-22 13:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  156. DRV:[b]64bit:[/b] - [2013-08-22 13:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  157. DRV:[b]64bit:[/b] - [2013-08-22 13:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  158. DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  159. DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  160. DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  161. DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  162. DRV:[b]64bit:[/b] - [2013-08-22 13:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
  163. DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  164. DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  165. DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  166. DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  167. DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  168. DRV:[b]64bit:[/b] - [2013-08-22 13:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  169. DRV:[b]64bit:[/b] - [2013-08-22 13:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  170. DRV:[b]64bit:[/b] - [2013-08-22 13:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  171. DRV:[b]64bit:[/b] - [2013-08-22 13:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  172. DRV:[b]64bit:[/b] - [2013-08-22 13:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  173. DRV:[b]64bit:[/b] - [2013-08-22 13:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  174. DRV:[b]64bit:[/b] - [2013-08-22 13:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  175. DRV:[b]64bit:[/b] - [2013-08-22 13:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  176. DRV:[b]64bit:[/b] - [2013-08-22 13:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  177. DRV:[b]64bit:[/b] - [2013-08-22 13:39:44 | 000,377,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  178. DRV:[b]64bit:[/b] - [2013-08-22 13:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  179. DRV:[b]64bit:[/b] - [2013-08-22 13:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  180. DRV:[b]64bit:[/b] - [2013-08-22 13:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  181. DRV:[b]64bit:[/b] - [2013-08-22 13:34:22 | 000,265,056 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
  182. DRV:[b]64bit:[/b] - [2013-08-22 13:34:22 | 000,124,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
  183. DRV:[b]64bit:[/b] - [2013-08-22 13:31:28 | 000,034,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
  184. DRV:[b]64bit:[/b] - [2013-08-22 12:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  185. DRV:[b]64bit:[/b] - [2013-08-22 12:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  186. DRV:[b]64bit:[/b] - [2013-08-22 12:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
  187. DRV:[b]64bit:[/b] - [2013-08-22 12:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  188. DRV:[b]64bit:[/b] - [2013-08-22 12:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  189. DRV:[b]64bit:[/b] - [2013-08-22 12:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  190. DRV:[b]64bit:[/b] - [2013-08-22 12:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  191. DRV:[b]64bit:[/b] - [2013-08-22 12:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  192. DRV:[b]64bit:[/b] - [2013-08-22 12:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  193. DRV:[b]64bit:[/b] - [2013-08-22 12:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  194. DRV:[b]64bit:[/b] - [2013-08-22 12:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
  195. DRV:[b]64bit:[/b] - [2013-08-22 12:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  196. DRV:[b]64bit:[/b] - [2013-08-22 12:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  197. DRV:[b]64bit:[/b] - [2013-08-22 12:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  198. DRV:[b]64bit:[/b] - [2013-08-22 12:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  199. DRV:[b]64bit:[/b] - [2013-08-22 12:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  200. DRV:[b]64bit:[/b] - [2013-08-22 12:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  201. DRV:[b]64bit:[/b] - [2013-08-22 12:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
  202. DRV:[b]64bit:[/b] - [2013-08-22 12:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  203. DRV:[b]64bit:[/b] - [2013-08-22 12:36:17 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  204. DRV:[b]64bit:[/b] - [2013-08-22 12:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  205. DRV:[b]64bit:[/b] - [2013-08-22 12:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  206. DRV:[b]64bit:[/b] - [2013-08-22 09:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
  207. DRV:[b]64bit:[/b] - [2013-08-13 00:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  208. DRV:[b]64bit:[/b] - [2013-08-10 01:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
  209. DRV:[b]64bit:[/b] - [2013-07-30 19:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  210. DRV:[b]64bit:[/b] - [2013-07-25 20:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  211. DRV:[b]64bit:[/b] - [2013-07-17 02:59:00 | 000,021,360 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMDriver.sys -- (LMDriver)
  212. DRV:[b]64bit:[/b] - [2013-07-17 02:59:00 | 000,014,680 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RadioShim.sys -- (RadioShim)
  213. DRV:[b]64bit:[/b] - [2009-10-20 09:34:26 | 000,009,728 | ---- | M] (QUANTA) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\QRDCIO.sys -- (QRDCIO)
  214.  
  215. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  216.  
  217.  
  218. [color=#E56717]========== Internet Explorer ==========[/color]
  219.  
  220. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {1110CCE4-9A98-491B-9C7A-5ECB427B073A}
  221. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{1110CCE4-9A98-491B-9C7A-5ECB427B073A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
  222. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  223. IE - HKLM\..\SearchScopes,DefaultScope = {1110CCE4-9A98-491B-9C7A-5ECB427B073A}
  224. IE - HKLM\..\SearchScopes\{1110CCE4-9A98-491B-9C7A-5ECB427B073A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
  225.  
  226. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
  227. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
  228. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
  229. IE - HKCU\..\SearchScopes,DefaultScope = {1110CCE4-9A98-491B-9C7A-5ECB427B073A}
  230. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  231.  
  232.  
  233. [color=#E56717]========== FireFox ==========[/color]
  234.  
  235. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  236. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  237. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll (Google Inc.)
  238. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll (Google Inc.)
  239. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  240. FF - HKLM\Software\MozillaPlugins\Adobe Reader: c:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  241.  
  242.  
  243.  
  244. [color=#E56717]========== Chrome ==========[/color]
  245.  
  246. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
  247. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\agicnfmechmlphpjmeefookfjhifbmhi\2.3.2.2_0\
  248. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
  249. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
  250. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
  251. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
  252. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd\8.0_0\
  253. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\
  254. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\3.7.0_0\
  255. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\12.0.163_0\
  256. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\jckjbdbomnmbollkecaianifkigmgbjj\2.2.2_0\
  257. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.4.1_0\
  258. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\
  259. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\npfeahicbknalnphfgnamdokmknaidni\1.7.3_0\
  260. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  261. CHR - Extension: No name found = C:\Users\Anaïs\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5516.1005.0.3_0\
  262.  
  263. O1 HOSTS File: ([2013-08-22 14:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  264. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  265. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  266. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  267. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  268. O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  269. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  270. O4:[b]64bit:[/b] - HKLM..\Run: [BtServer] C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe (Realtek Semiconductor Corporation)
  271. O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
  272. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  273. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  274. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
  275. O4 - HKCU..\Run: [Spotify Web Helper] C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
  276. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  277. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  278. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  279. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  280. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
  281. O13[b]64bit:[/b] - gopher Prefix: missing
  282. O13 - gopher Prefix: missing
  283. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.88.203.3 62.197.111.140
  284. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5219D148-87CB-473B-BCDE-D3F92486AE57}: DhcpNameServer = 109.88.203.3 62.197.111.140
  285. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A5551502-F6B0-41BE-9413-89C1ECD205A3}: DhcpNameServer = 40.32.1.55
  286. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  287. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  288. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  289. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
  290. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  291. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  292. O32 - HKLM CDRom: AutoRun - 1
  293. O34 - HKLM BootExecute: (autocheck autochk *)
  294. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  295. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  296. O35 - HKLM\..comfile [open] -- "%1" %*
  297. O35 - HKLM\..exefile [open] -- "%1" %*
  298. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  299. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  300. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  301. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  302. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  303. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  304.  
  305. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  306.  
  307. [2016-12-14 07:04:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
  308. [2016-12-13 16:00:46 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  309. [2016-12-13 12:49:08 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\ElevatedDiagnostics
  310. [2016-12-13 11:45:02 | 000,378,944 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswSP.sys
  311. [2016-12-13 11:45:02 | 000,033,400 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswFsBlk.sys
  312. [2016-12-13 11:45:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Pro Antivirus
  313. [2016-12-13 11:45:00 | 000,072,016 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswRdr2.sys
  314. [2016-12-13 11:45:00 | 000,064,288 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswTdi.sys
  315. [2016-12-13 11:44:49 | 001,031,392 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswSnx.sys
  316. [2016-12-13 11:44:49 | 000,022,600 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswKbd.sys
  317. [2016-12-13 11:44:48 | 000,080,816 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswMonFlt.sys
  318. [2016-12-13 11:43:38 | 000,295,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\aswBoot.exe
  319. [2016-12-13 11:42:48 | 000,041,664 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
  320. [2016-12-13 11:42:19 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
  321. [2016-12-13 10:28:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  322. [2016-12-13 10:28:27 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
  323. [2016-12-12 11:36:12 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Roaming\Macromedia
  324. [2016-12-12 11:35:29 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Adobe
  325. [2016-12-10 13:55:02 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Diagnostics
  326. [2016-12-10 13:35:34 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
  327. [2016-12-10 13:31:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
  328. [2016-12-10 13:31:42 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Google
  329. [2016-12-10 13:30:43 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Apps
  330. [2016-12-10 13:30:42 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Deployment
  331. [2016-12-10 13:28:31 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Acer Aspire R7 Tutorial
  332. [2016-12-10 13:21:56 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\Documents\clear.fi
  333. [2016-12-10 13:19:30 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\AppData\Local\EmieUserList
  334. [2016-12-10 13:19:29 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\AppData\Local\EmieSiteList
  335. [2016-12-10 13:09:07 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\NVIDIA
  336. [2016-12-10 13:08:45 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Roaming\Spotify
  337. [2016-12-10 13:08:45 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Spotify
  338. [2016-12-10 13:00:35 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\clear.fi
  339. [2016-12-10 12:58:44 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
  340. [2016-12-10 12:58:44 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\Searches
  341. [2016-12-10 12:58:44 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  342. [2016-12-10 12:58:41 | 000,000,000 | -H-D | C] -- C:\Users\Anaïs\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
  343. [2016-12-10 12:58:32 | 000,000,000 | ---D | C] -- C:\Program Files\Accessory Store
  344. [2016-12-10 12:58:20 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Roaming\Adobe
  345. [2016-12-10 12:58:17 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\VirtualStore
  346. [2016-12-10 12:54:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles
  347. [2016-12-10 12:54:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer
  348. [2016-12-10 12:54:34 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs
  349. [2016-12-10 12:54:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau
  350. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Voisinage réseau
  351. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Voisinage d'impression
  352. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\AppData\Local\Temporary Internet Files
  353. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\SendTo
  354. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Recent
  355. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Modèles
  356. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Documents\Mes vidéos
  357. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Documents\Mes images
  358. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Mes documents
  359. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Menu Démarrer
  360. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Documents\Ma musique
  361. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Local Settings
  362. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\AppData\Local\Historique
  363. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Cookies
  364. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\Application Data
  365. [2016-12-10 12:52:37 | 000,000,000 | -HSD | C] -- C:\Users\Anaïs\AppData\Local\Application Data
  366. [2016-12-10 12:52:03 | 000,000,000 | --SD | C] -- C:\Users\Anaïs\AppData\Roaming\Microsoft
  367. [2016-12-10 12:52:03 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
  368. [2016-12-10 12:52:03 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\Favorites
  369. [2016-12-10 12:52:03 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\Documents
  370. [2016-12-10 12:52:03 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\Desktop
  371. [2016-12-10 12:52:03 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
  372. [2016-12-10 12:52:03 | 000,000,000 | R--D | C] -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
  373. [2016-12-10 12:52:03 | 000,000,000 | -H-D | C] -- C:\Users\Anaïs\AppData
  374. [2016-12-10 12:52:03 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Temp
  375. [2016-12-10 12:52:03 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Local\Microsoft
  376. [2016-12-10 12:52:03 | 000,000,000 | ---D | C] -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
  377. [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  378. [1 C:\Users\Anaïs\Documents\*.tmp files -> C:\Users\Anaïs\Documents\*.tmp -> ]
  379.  
  380. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  381.  
  382. [2016-12-14 11:18:21 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  383. [2016-12-14 11:17:25 | 000,001,074 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  384. [2016-12-14 11:16:19 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  385. [2016-12-14 11:16:18 | 617,095,421 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
  386. [2016-12-14 11:16:18 | 3371,610,112 | -HS- | M] () -- C:\hiberfil.sys
  387. [2016-12-14 10:38:44 | 000,001,078 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  388. [2016-12-13 15:07:21 | 000,000,000 | ---- | M] () -- C:\WINDOWS\SysWow64\config.nt
  389. [2016-12-13 13:58:25 | 001,031,392 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswSnx.sys
  390. [2016-12-13 13:58:25 | 000,000,175 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\aswSnx.sys.sum
  391. [2016-12-13 11:45:02 | 000,001,942 | ---- | M] () -- C:\Users\Public\Desktop\avast! Pro Antivirus.lnk
  392. [2016-12-13 10:28:34 | 000,000,838 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  393. [2016-12-13 10:03:49 | 000,000,017 | ---- | M] () -- C:\Users\Anaïs\AppData\Local\resmon.resmoncfg
  394. [2016-12-12 10:24:23 | 001,824,010 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
  395. [2016-12-12 10:24:23 | 000,812,350 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat
  396. [2016-12-12 10:24:23 | 000,722,476 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
  397. [2016-12-12 10:24:23 | 000,159,412 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat
  398. [2016-12-12 10:24:23 | 000,135,592 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
  399. [2016-12-12 10:23:01 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
  400. [2016-12-10 13:46:22 | 000,002,297 | ---- | M] () -- C:\Users\Anaïs\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
  401. [2016-12-10 13:32:42 | 000,002,273 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  402. [2016-12-10 13:19:00 | 000,001,452 | ---- | M] () -- C:\Users\Anaïs\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  403. [2016-12-10 13:17:27 | 000,344,760 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
  404. [2016-12-10 13:09:13 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
  405. [2016-12-10 13:01:22 | 000,018,096 | ---- | M] () -- C:\Users\Anaïs\Desktop\Applications supprimées.html
  406. [2016-12-10 12:58:07 | 000,000,180 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  407. [2016-12-10 12:53:55 | 000,024,768 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
  408. [2016-12-10 12:53:55 | 000,024,768 | ---- | M] () -- C:\WINDOWS\diagerr.xml
  409. [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  410. [1 C:\Users\Anaïs\Documents\*.tmp files -> C:\Users\Anaïs\Documents\*.tmp -> ]
  411.  
  412. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  413.  
  414. [2016-12-14 07:04:51 | 617,095,421 | ---- | C] () -- C:\WINDOWS\MEMORY.DMP
  415. [2016-12-13 13:58:26 | 000,000,175 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\aswSnx.sys.sum
  416. [2016-12-13 11:45:02 | 000,001,942 | ---- | C] () -- C:\Users\Public\Desktop\avast! Pro Antivirus.lnk
  417. [2016-12-13 11:44:49 | 000,189,936 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\aswVmm.sys
  418. [2016-12-13 11:44:49 | 000,065,336 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\aswRvrt.sys
  419. [2016-12-13 11:44:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SysWow64\config.nt
  420. [2016-12-13 10:28:34 | 000,000,838 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
  421. [2016-12-13 10:03:49 | 000,000,017 | ---- | C] () -- C:\Users\Anaïs\AppData\Local\resmon.resmoncfg
  422. [2016-12-12 10:23:01 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
  423. [2016-12-10 13:32:42 | 000,002,297 | ---- | C] () -- C:\Users\Anaïs\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
  424. [2016-12-10 13:32:42 | 000,002,285 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  425. [2016-12-10 13:32:42 | 000,002,273 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  426. [2016-12-10 13:32:02 | 000,001,078 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  427. [2016-12-10 13:32:01 | 000,001,074 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  428. [2016-12-10 13:19:00 | 000,001,452 | ---- | C] () -- C:\Users\Anaïs\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  429. [2016-12-10 13:09:13 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_LocationProvider_01_11_00.Wdf
  430. [2016-12-10 13:09:07 | 000,001,272 | ---- | C] () -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gestionnaire audio HD.lnk
  431. [2016-12-10 13:01:22 | 000,018,096 | ---- | C] () -- C:\Users\Anaïs\Desktop\Applications supprimées.html
  432. [2016-12-10 12:58:20 | 000,001,458 | ---- | C] () -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  433. [2016-12-10 12:58:07 | 000,000,180 | ---- | C] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  434. [2016-12-10 12:52:03 | 000,000,369 | ---- | C] () -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
  435. [2016-12-10 12:52:03 | 000,000,369 | ---- | C] () -- C:\Users\Anaïs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
  436. [2016-12-10 12:52:03 | 000,000,352 | ---- | C] () -- C:\Users\Anaïs\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
  437. [2016-12-10 12:52:03 | 000,000,334 | ---- | C] () -- C:\Users\Anaïs\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
  438. [2016-12-10 12:51:21 | 000,024,768 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
  439. [2016-12-10 12:51:21 | 000,024,768 | ---- | C] () -- C:\WINDOWS\diagerr.xml
  440. [2014-08-05 12:36:32 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
  441.  
  442. [color=#E56717]========== ZeroAccess Check ==========[/color]
  443.  
  444.  
  445. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  446.  
  447. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  448.  
  449. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  450.  
  451. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  452.  
  453. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  454. "" = C:\Windows\SysNative\shell32.dll -- [2014-02-22 16:50:34 | 021,230,744 | ---- | M] (Microsoft Corporation)
  455. "ThreadingModel" = Apartment
  456.  
  457. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  458. "" = %SystemRoot%\system32\shell32.dll -- [2014-02-22 15:18:27 | 018,682,288 | ---- | M] (Microsoft Corporation)
  459. "ThreadingModel" = Apartment
  460.  
  461. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  462. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013-08-22 10:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation)
  463. "ThreadingModel" = Free
  464.  
  465. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  466. "" = %systemroot%\system32\wbem\fastprox.dll -- [2013-08-22 03:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)
  467. "ThreadingModel" = Free
  468.  
  469. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  470. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013-08-22 10:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation)
  471. "ThreadingModel" = Both
  472.  
  473. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  474.  
  475. [color=#E56717]========== Alternate Data Streams ==========[/color]
  476.  
  477. @Alternate Data Stream - 94 bytes -> C:\Users\Anaïs\OneDrive:ms-properties
  478.  
  479. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!