~ ZHPDiag v2016.4.1.81 By Nicolas Coolman (2016/04/01) ~ Run by Johann (Administrator) (2016/04/01 15:09:32) ~ Web: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ State version: Version OK ~ Mode: Scan ~ Report: C:\Users\Johann\Desktop\ZHPDiag.txt ~ Report: C:\Users\Johann\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ System startup: Normal (Normal boot) Windows 10 Home, 64-bit (Build 10586) ---\\ Internet Browsers (2) - 0s MFIE: Mozilla Firefox 45.0.1 (x86 en-US) MSIE: Internet Explorer v11.0.10586.0 ---\\ Windows Product Information (3) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK ---\\ System protection software (1) - 3s Windows Defender (Deactivate) ---\\ Information on the system (6) - 0s ~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4104.168 MB (58% free) System Restore: Activé (Enable) System drive C: has 142 GB () free of 237 GB ---\\ Connection to the system mode (3) - 0s ~ Computer Name: COOLDREAM ~ User Name: Johann ~ Logged in as Administrator ---\\ Enumeration of the disk units (1) - 0s ~ Drive C: has 142 GB free of 237 GB (System) ---\\ State of the Windows Security Center (7) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Search Generic System Files (24) - 1s [MD5.4572EB3DDBD2DFA10DE7A037A6CC6D53] - 30/10/2015 - (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\Explorer.exe [4502864] =>.Microsoft Windows® [MD5.0DCB89B1F3689BC6262FF30BBD603171] - 30/10/2015 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [59392] =>.Microsoft Corporation [MD5.CAD491DD9EC00BB841EA407D9C498C4A] - 30/10/2015 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\WINDOWS\System32\Wininit.exe [290856] =>.Microsoft Windows Publisher® [MD5.3DBF35217181E483D28D434B9E847412] - 30/10/2015 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [2647552] =>.Microsoft Corporation [MD5.46C8E60DEDBDA95C102D1B2E74676578] - 30/10/2015 - (.Microsoft Corporation - Windows Logon Application.) -- C:\WINDOWS\System32\Winlogon.exe [584704] =>.Microsoft Corporation [MD5.9EEAA1B69DC3FD620AE576CC8F4147DC] - 30/10/2015 - (.Microsoft Corporation - Software Licensing Library.) -- C:\WINDOWS\System32\sppcomapi.dll [430592] =>.Microsoft Corporation [MD5.E7B524818100B0FDE2B057C74B0C0DCD] - 31/03/2016 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [686984] =>.Microsoft Windows® [MD5.2796C0957F6F05A528DD64B8591371B6] - 31/03/2016 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\Syswow64\dnsapi.dll [535088] =>.Microsoft Windows® [MD5.F71FCE3C16F5B15FDD84580AA067C749] - 30/10/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [579424] =>.Microsoft Windows® [MD5.492B99D2E3D5D7BFD5F0AE1BE7BD37DD] - 30/10/2015 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>.Microsoft Windows® [MD5.7F9C7226D743B232907ED2537B8A574F] - 30/10/2015 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672] =>.Microsoft Corporation [MD5.82D97776BF982AA143BDC7DFB5054EA8] - 30/10/2015 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173568] =>.Microsoft Corporation [MD5.C9478D7DB7BE5D7ACE65CB1167F07320] - 30/10/2015 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [148480] =>.Microsoft Corporation [MD5.84BC034B6BB763733C1949B7B9BAF976] - 30/10/2015 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [79872] =>.Microsoft Corporation [MD5.53FDD9E69189E546DE4740F8C4D8AB2F] - 30/10/2015 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688] =>.Microsoft Corporation [MD5.9E5E8F2A1996F23B7E9687846AA81B01] - 30/10/2015 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [143360] =>.Microsoft Corporation [MD5.61F9F27A8C3D7BCD287FE98A440421CE] - 30/10/2015 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [430944] =>.Microsoft Windows® [MD5.F51C02D992A8D6BC5EC4D990F227D4C7] - 30/10/2015 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [279552] =>.Microsoft Corporation [MD5.F6A2D0EC594A1039B0F9D42BB8EC0BD3] - 30/10/2015 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2152800] =>.Microsoft Windows® [MD5.7D0FC96264C0F8F2C1321E33E8EB646C] - 30/10/2015 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation [MD5.381B8F2311A0375676B635EA5E7C8AB0] - 30/10/2015 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation [MD5.1DC2CC74B51E4DC4CD5A20C1021E4010] - 30/10/2015 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [173056] =>.Microsoft Corporation [MD5.E94274E6E163B63A12A5242CC8D0B39D] - 30/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118112] =>.Microsoft Windows® [MD5.E1F91A727A04C9F8199D04FF3BBBF63C] - 30/10/2015 - (.Microsoft Corporation - Volume Shadow Copy Driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [414560] =>.Microsoft Windows® ---\\ Non Microsoft non disabled Windows Services (4) - 1s O23 - Service: Areofbad (Areofbad) . (...) - C:\Users\Johann\AppData\Roaming\EmimDionpae\Jhsuxuka.exe (.not file.) O23 - Service: Bitdefender Antivirus Free Edition (gzserv) . (.Bitdefender - Bitdefender Antivirus Free Edition.) - C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe =>.Bitdefender SRL® O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Technologies SA® O23 - Service: xedmal (xedmal) . (...) - C:\ProgramData\xedmal\xedmal.exe (.not file.) =>PUP.Optional.Salus ---\\ Services not Microsoft (SR=Run, SS=Stop) (9) - 18s SS - Demand [31/03/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\syswow64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SS - Demand [24/02/2016] [ 88024] Arc Service (ArcService) . (.Perfect World Entertainment Inc.) - C:\Program Files (x86)\Arc\ArcService.exe {291DE82F4D9653E82F70193D11B986CF} =>.Perfect World Entertainment Inc SS - Demand [01/06/2015] [ 290224] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\syswow64\IntelCpHeciSvc.exe =>.Intel Corporation - pGFX® SR - Auto [01/04/2016] [ 79552] Bitdefender Antivirus Free Edition (gzserv) . (.Bitdefender.) - C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe =>.Bitdefender SRL® SS - Demand [31/03/2016] [ 425832] IbissVirhot (IbissVirhot) . (...) - C:\Program Files\Sunm\IbissVirhot.exe =>PUP.Optional.Shopperz SS - Demand [15/03/2016] [ 146888] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SS - Auto [01/03/2013] [ 161384] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Technologies SA® SS - Demand [10/03/2016] [ 835152] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve® ---\\ Task Planned Automatically (9) - 3s [MD5.A9D55370A0CBADD1E1E2B4796ACD26DF] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\syswow64\Macromed\Flash\FlashPlayerUpdateService.exe [269504] (.Activate.) =>.Adobe Systems Incorporated® [MD5.7843C883D5EF33A8D85D21AD9C9A2D3E] [APT] [Loccop] (...) -- C:\Program Files\Sunm\Potdesa.bat [84] (.Activate.) [MD5.00000000000000000000000000000000] [APT] [NRPPAVIDQFBAOIQL] (...) -- C:\ProgramData\Service7609\Service7609.exe (.not file.) [0] (.Activate.) =>Heuristic.Graftor [MD5.9371336044D1538280EE75CF0AAD4EB8] [APT] [{D907BC5A-C6B7-425D-9317-E16ECCB6E806}] (...) -- C:\Users\Johann\AppData\Local\uninstall.exe [2560] (.Activate.) O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [830] =>.Adobe Systems Incorporated® O39 - APT: NRPPAVIDQFBAOIQL - (...) -- C:\WINDOWS\Tasks\NRPPAVIDQFBAOIQL.job [364] (.Orphean.) =>Heuristic.Graftor O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater [3816] =>.Adobe Systems Incorporated® O39 - APT: Loccop - (...) -- C:\WINDOWS\System32\Tasks\Loccop [3402] O39 - APT: NRPPAVIDQFBAOIQL - (...) -- C:\WINDOWS\System32\Tasks\NRPPAVIDQFBAOIQL [3442] (.Orphean.) =>Heuristic.Graftor ---\\ Process running (13) - 1s [MD5.995688E8FE683E2DA66D7C83A67C1E5C] - (.Bitdefender - Bitdefender Antivirus Free Edition.) -- C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe [79552] [PID.328] =>.Bitdefender SRL® [MD5.563DD007EF7FCFD1E3B838FF280AA69C] - (.Bitdefender - Bitdefender Antivirus Free Edition.) -- C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe [266120] [PID.460] =>.Bitdefender SRL® [MD5.904CA475F6ADD4080B0EA5144D23FDF1] - (...) -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe [144384] [PID.3312] [MD5.4076E418CD3EB0E09FFBCD828C35CE26] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288] [PID.4232] =>.Synaptics Incorporated® [MD5.0C3154D0620F974AD5C4E8D87626C8CF] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [183216] [PID.4268] =>.Intel Corporation - pGFX® [MD5.E4AA3D28753EF9DB333FE40079993B09] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [411056] [PID.4404] =>.Intel Corporation - pGFX® [MD5.CF40080765D6F66FA93318C0DB6C7D1F] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [453552] [PID.4492] =>.Intel Corporation - pGFX® [MD5.BD0EA5C8A4EF518C46E05F99908A56CE] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [121640] [PID.4588] =>.Synaptics Incorporated® [MD5.CF19EB5A54C88152E321C8EE3D0CD158] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RAVCpl64.exe [5641728] [PID.4600] =>.Realtek Semiconductor [MD5.80B72881A9BDDA484867F22DDC2E84DD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [392136] [PID.4932] =>.Mozilla Corporation® [MD5.748118FF9B504D6CCE14A7AF45E65EA0] - (...) -- C:\Program Files\WindowsApps\Microsoft.XboxApp_15.15.22005.0_x64__8wekyb3d8bbwe\XboxApp.exe [16384] [PID.3292] [MD5.C9E240562FFC0EADB6F0179B61D55C96] - (...) -- C:\Program Files\WindowsApps\Playtika.CaesarsSlotsFreeCasino_1.40.10.0_x86__7vjeg68vnncd2\CaesarsSlots.W10.exe [16896] [PID.2940] [MD5.914D4A53A400912E91EC087F66095390] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Johann\Downloads\ZHPDiag3.exe [2171904] [PID.4032] =>.Nicolas Coolman ---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (1) - 1s P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\syswow64\Macromed\Flash\NPSWF32_21_0_0_197.dll =>.Adobe Systems Incorporated ---\\ Internet Explorer Extensions, Start, Search (9) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?linkid=54896 R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://www.google.com R1 - HKEY_USERS\S-1-5-21-527404139-1759109901-2943392317-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer, Proxy Management (2) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 ---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s F2 - REG:system.ini: UserInit= F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet= ---\\ Hosts file redirection (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (57) ---\\ Auto loading programs from Registry and folders (11) - 0s O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated® O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation - pGFX® O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation - pGFX® O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation - pGFX® O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\WINDOWS\RAVCpl64.exe =>.Realtek Semiconductor O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\WINDOWS\Skytel.exe =>.Realtek Semiconductor Corp. O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve® O4 - HKLM\..\Wow6432Node\Run: [sun9] (Orphean) O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\syswow64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\syswow64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-527404139-1759109901-2943392317-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -- C:\Program Files (x86)\Steam\Steam.exe =>.Valve® ---\\ Global shortcuts Startup (13) - 2s O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Johann\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\sendTo [Administrator]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies SA® O4 - GS\Desktop [Guest]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Johann\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\sendTo [Guest]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies SA® O4 - GS\Desktop [Johann]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Johann\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\sendTo [Johann]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies SA® O4 - GS\CommonDesktop [Public]: Arc.lnk . (.Perfect World Entertainment - Arc.) C:\Program Files (x86)\Arc\ArcLauncher.exe {291DE82F4D9653E82F70193D11B986CF} =>.Perfect World Entertainment O4 - GS\CommonDesktop [Public]: Bitdefender Antivirus Free Edition.lnk . (.Bitdefender - .) C:\Program Files (x86)\Bitdefender\Antivirus Free Edition\gziface.exe =>.BitDefender O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\CommonDesktop [Public]: OpenOffice 4.1.2.lnk . (.Apache Software Foundation - OpenOffice 4.1.2.) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe =>.Apache Software Foundation O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\WINDOWS\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe O4 - GS\CommonDesktop [Public]: Steam.lnk . (.Valve Corporation - Steam Client Bootstrapper.) C:\Program Files (x86)\Steam\Steam.exe =>.Valve® O4 - GS\Programs [Public]: OneDrive.lnk . (...) C:\Users\Johann\AppData\Local\Microsoft\OneDrive\OneDrive.exe ---\\ Lop.com/Domain Hijackers (4) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = PK5001Z O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 205.171.2.25 O17 - HKLM\System\CCS\Services\Tcpip\..\{aa85a65a-015b-44cf-8969-6e6b453d5eef}: DhcpNameServer = 192.168.0.1 205.171.2.25 O17 - HKLM\System\CCS\Services\Tcpip\..\{aa85a65a-015b-44cf-8969-6e6b453d5eef}: DhcpDomain = PK5001Z ---\\ Extra protocols (24) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\syswow64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\syswow64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\syswow64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\syswow64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\syswow64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\syswow64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\syswow64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\syswow64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\syswow64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\syswow64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\syswow64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\syswow64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\syswow64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\syswow64\itss.dll =>.Microsoft Corporation O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\syswow64\mshtml.dll =>.Microsoft Corporation O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll =>.Skype Technologies SA® O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\syswow64\tbauth.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\syswow64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\syswow64\mshtml.dll =>.Microsoft Corporation O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\syswow64\tbauth.dll =>.Microsoft Corporation O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Photo Gallery Album Download Protocol Handl.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation® O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\syswow64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\syswow64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\syswow64\mscoree.dll =>.Microsoft Corporation ---\\ Software installed (24) - 5s O42 - Logiciel: Adobe Flash Player 21 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Arc - (.Perfect World Entertainment.) [HKLM][64Bits] -- {CED8E25B-122A-4E80-B612-7F99B93284B3} =>.Perfect World Entertainment, Inc.® O42 - Logiciel: Bitdefender Antivirus Free Edition - (.Bitdefender.) [HKLM][64Bits] -- BitDefender Gonzales =>.Bitdefender SRL® O42 - Logiciel: Controller Companion - (.Koga Tech Limited.) [HKLM][64Bits] -- Steam App 367670 =>.Valve® O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft O42 - Logiciel: Half-Life 2 - (.Valve.) [HKLM][64Bits] -- Steam App 220 =>.Valve® O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft SOAP Toolkit 3.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCB4C18A-ACA6-4383-8688-E19933A705DD} =>.Microsoft Corporation O42 - Logiciel: Mozilla Firefox 45.0.1 (x86 en-US) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 45.0.1 (x86 en-US) =>.Mozilla Corporation® O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} =>.Microsoft O42 - Logiciel: Neverwinter - (.Cryptic Studios.) [HKLM][64Bits] -- Steam App 109600 =>.Valve® O42 - Logiciel: OpenOffice 4.1.2 - (.Apache Software Foundation.) [HKLM][64Bits] -- {E6AD67BB-1C33-4AB3-A387-E0D48137AB70} =>.Apache Software Foundation O42 - Logiciel: Realtek High Definition Audio Driver - (...) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Skype™ 6.3 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} =>.Skype Technologies S.A. O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- Steam =>.Valve® O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated O42 - Logiciel: Torchlight - (.Runic Games.) [HKLM][64Bits] -- Steam App 41500 =>.Valve® O42 - Logiciel: Torchlight II - (.Runic Games.) [HKLM][64Bits] -- Steam App 200710 =>.Valve® O42 - Logiciel: Transmission-Qt - (.Transmission.) [HKLM][64Bits] -- Transmission-Qt =>.Transmission O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484} =>.AVG Technologies O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} =>.AVG Technologies CZ, s.r.o. ---\\ HKCU & HKLM Software Keys (50) - 5s HKLM\SOFTWARE\Wow6432Node\AVG HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\MimarSinan HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\mtxedmal =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\mtZonekix HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\OpenOffice HKLM\SOFTWARE\Wow6432Node\Perfect World Entertainment HKLM\SOFTWARE\Wow6432Node\runic games HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SOFTWIN HKLM\SOFTWARE\Wow6432Node\Sunm HKLM\SOFTWARE\Wow6432Node\Swift PC Optimizer HKLM\SOFTWARE\Wow6432Node\Valve HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\Xtp HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Avg HKCU\SOFTWARE\Avg Secure Update HKCU\SOFTWARE\Bitdefender HKCU\SOFTWARE\Chromium HKCU\SOFTWARE\Cryptic HKCU\SOFTWARE\Earth Networks HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\OpenOffice HKCU\SOFTWARE\Perfect World Platform Client HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Rtp HKCU\SOFTWARE\runic games HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SOFTWIN HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\Valve HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software ---\\ Contents of the Common Files folders (135) - 36s O43 - CFD: 01/04/2016 - [] D -- C:\Program Files\Bitdefender =>.Bitdefender SRL® O43 - CFD: 31/03/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 13/03/2016 - [] D -- C:\Program Files\Controller Companion {6ED6DB30745204026B7D11F7FA436D20} O43 - CFD: 31/03/2016 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\MSBuild O43 - CFD: 01/04/2016 - [] D -- C:\Program Files\nplus O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 01/04/2016 - [] D -- C:\Program Files\Sunm =>PUP.Optional.Shopperz O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated® O43 - CFD: 21/03/2016 - [] AD -- C:\Program Files\Transmission {3C7102704E173E96B7135518C5EFACEB} O43 - CFD: 08/03/2016 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 19/03/2016 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 19/03/2016 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Windows Multimedia Platform O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Windows NT O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 08/03/2016 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 01/04/2016 - [] HD -- C:\Program Files\WindowsApps O43 - CFD: 08/03/2016 - [] SD -- C:\Program Files\WindowsPowerShell O43 - CFD: 26/03/2016 - [] AD -- C:\Program Files (x86)\Arc {291DE82F4D9653E82F70193D11B986CF} O43 - CFD: 01/04/2016 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 21/03/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.Perfect World Entertainment, Inc.® O43 - CFD: 31/03/2016 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 30/03/2016 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 31/03/2016 - [] AD -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla Corporation® O43 - CFD: 31/03/2016 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla Corporation® O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 31/03/2016 - [] D -- C:\Program Files (x86)\MSSOAP O43 - CFD: 26/03/2016 - [] AD -- C:\Program Files (x86)\OpenOffice 4 O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 30/03/2016 - [] RD -- C:\Program Files (x86)\Skype =>.Skype Technologies SA® O43 - CFD: 31/03/2016 - [] D -- C:\Program Files (x86)\Steam =>.Valve® O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 30/03/2016 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation® O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 19/03/2016 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 08/03/2016 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 08/03/2016 - [] SD -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 08/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 08/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 08/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 01/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus Free Edition O43 - CFD: 08/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 01/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SOAP Toolkit Version 3 O43 - CFD: 26/03/2016 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.2 O43 - CFD: 21/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment O43 - CFD: 30/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 08/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 08/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam O43 - CFD: 08/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 08/03/2016 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 21/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transmission-Qt O43 - CFD: 08/03/2016 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 31/03/2016 - [] D -- C:\ProgramData\Avg O43 - CFD: 31/03/2016 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 08/03/2016 - [0] D -- C:\ProgramData\Comms O43 - CFD: 08/03/2016 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 08/03/2016 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 31/03/2016 - [] D -- C:\ProgramData\MFAData O43 - CFD: 31/03/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 08/03/2016 - [] D -- C:\ProgramData\Microsoft OneDrive O43 - CFD: 19/03/2016 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 30/03/2016 - [] D -- C:\ProgramData\Skype O43 - CFD: 08/03/2016 - [0] D -- C:\ProgramData\SoftwareDistribution O43 - CFD: 08/03/2016 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 08/03/2016 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 31/03/2016 - [] D -- C:\ProgramData\USOPrivate O43 - CFD: 31/03/2016 - [] D -- C:\ProgramData\USOShared O43 - CFD: 31/03/2016 - [] HDC -- C:\ProgramData\{43F44E49-5C13-4185-AEBE-B57CB0AA8D4D} O43 - CFD: 13/03/2016 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 31/03/2016 - [] D -- C:\Program Files (x86)\Common Files\MSSoap O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 30/03/2016 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 01/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Solozumdex O43 - CFD: 14/03/2016 - [] D -- C:\Program Files (x86)\Common Files\Steam O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 30/03/2016 - [] D -- C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\Adobe O43 - CFD: 22/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\Arc O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\ASPackage =>PUP.Optional.ASPackage O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\Macromedia O43 - CFD: 31/03/2016 - [] SD -- C:\Users\Johann\AppData\Roaming\Microsoft O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\Mozilla O43 - CFD: 26/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\OpenOffice O43 - CFD: 01/04/2016 - [] D -- C:\Users\Johann\AppData\Roaming\QuickScan O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\Skype O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\transmission O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\TuneUp Software O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\Unylfi O43 - CFD: 01/04/2016 - [] D -- C:\Users\Johann\AppData\Roaming\ZHP O43 - CFD: 08/03/2016 - [0] D -- C:\Users\Johann\AppData\Local\ActiveSync O43 - CFD: 31/03/2016 - [0] D -- C:\Users\Johann\AppData\Local\Adobe O43 - CFD: 08/03/2016 - [0] SHD -- C:\Users\Johann\AppData\Local\Application Data O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Avg O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Local\AvgSetupLog O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Local\CEF O43 - CFD: 15/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Comms O43 - CFD: 19/03/2016 - [] D -- C:\Users\Johann\AppData\Local\ControllerCompanion O43 - CFD: 01/04/2016 - [] D -- C:\Users\Johann\AppData\Local\Diagnostics O43 - CFD: 13/03/2016 - [] D -- C:\Users\Johann\AppData\Local\ElevatedDiagnostics O43 - CFD: 08/03/2016 - [0] SHD -- C:\Users\Johann\AppData\Local\History O43 - CFD: 26/03/2016 - [] D -- C:\Users\Johann\AppData\Local\IsolatedStorage O43 - CFD: 21/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Macromedia O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Local\MFAData O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Microsoft O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Local\MicrosoftEdge O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Mozilla O43 - CFD: 26/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Packages O43 - CFD: 08/03/2016 - [0] D -- C:\Users\Johann\AppData\Local\PackageStaging O43 - CFD: 31/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Programs O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Publishers O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Steam O43 - CFD: 01/04/2016 - [] D -- C:\Users\Johann\AppData\Local\Temp O43 - CFD: 31/03/2016 - [0] D -- C:\Users\Johann\AppData\Local\Tempfolder O43 - CFD: 08/03/2016 - [0] SHD -- C:\Users\Johann\AppData\Local\Temporary Internet Files O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Local\TileDataLayer O43 - CFD: 21/03/2016 - [] D -- C:\Users\Johann\AppData\Local\transmission O43 - CFD: 08/03/2016 - [0] D -- C:\Users\Johann\AppData\Local\VirtualStore O43 - CFD: 30/03/2016 - [] D -- C:\Users\Johann\AppData\Local\Windows Live O43 - CFD: 08/03/2016 - [] RD -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 31/03/2016 - [] RD -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 08/03/2016 - [] RD -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 31/03/2016 - [0] D -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage =>PUP.Optional.ASPackage O43 - CFD: 08/03/2016 - [] D -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 08/03/2016 - [] RD -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 08/03/2016 - [] RD -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 08/03/2016 - [] RSD -- C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell ---\\ Latest files created in Prefetcher (2) - 9s O45 - LFCP:[MD5.EEEA7BABB0DE39BE508480E4C57B8B00] 31/03/2016 A -- C:\WINDOWS\Prefetch\PREDM.TMP-64FEF7D4.pf =>PUP.Optional.Downware O45 - LFCP:[MD5.3F121005B0F10842BA6BCE24584DD2EE] 31/03/2016 A -- C:\WINDOWS\Prefetch\SETUP_REC_EN_238.TMP-38FD9F42.pf =>.Superfluous.Tuto4PC ---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 0s O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Johann\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Johann\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Johann\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Johann\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Johann\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® ---\\ System Drivers List (56) - 8s O58 - SDL:2015/10/30 01:17:22 N . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:22 N . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:22 N . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:22 N . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:22 N . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:22 N . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows® O58 - SDL:2013/04/17 14:59:56 A . (.BitDefender - Active Virus Control filter driver.) -- C:\WINDOWS\System32\drivers\avc3.sys [718840] =>.Bitdefender SRL® O58 - SDL:2012/11/02 14:17:46 A . (.BitDefender - BitDefender AntiVirus Active Virus Control.) -- C:\WINDOWS\System32\drivers\avchv.sys [261056] =>.Bitdefender SRL® O58 - SDL:2013/04/17 14:59:58 A . (.BitDefender - Active Virus Control Kernel Filtering drive.) -- C:\WINDOWS\System32\drivers\avckf.sys [593144] =>.Bitdefender SRL® O58 - SDL:2015/10/30 01:17:22 N . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 01:17:22 N . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 01:17:22 N . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:22 N . (.Microsoft Corp. - KMDF driver for DC1 Controller.) -- C:\WINDOWS\System32\drivers\dc1-controller.sys [57344] =>.Microsoft Corp. O58 - SDL:2015/10/30 01:17:22 N . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3436896] =>.Microsoft Windows® O58 - SDL:2013/04/22 13:21:00 A . (.BitDefender LLC - BitDefender Gonzales FileSystem Driver.) -- C:\WINDOWS\System32\drivers\gzflt.sys [148696] =>.Bitdefender SRL® O58 - SDL:2010/10/20 01:34:26 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys [56344] =>.Intel Corporation® O58 - SDL:2007/07/11 03:30:34 A . (.Hewlett-Packard Development Company, L.P. - HP Remote Control HID Device.) -- C:\WINDOWS\System32\drivers\HpqRemHid.sys [9088] =>.Hewlett-Packard Development Company, L.P. O58 - SDL:2015/10/30 01:17:22 N . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:18 N . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation O58 - SDL:2015/10/30 01:17:18 N . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [165888] =>.Intel Corporation O58 - SDL:2015/10/30 01:17:18 N . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group® O58 - SDL:2015/10/30 01:17:18 N . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation O58 - SDL:2015/10/30 01:17:22 N . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:22 N . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [424800] =>.Microsoft Windows® O58 - SDL:2015/06/01 22:00:18 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [5384176] =>.Intel Corporation - pGFX® O58 - SDL:2015/10/30 01:17:23 N . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108888] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [104800] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [99168] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [705376] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [76128] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows® O58 - SDL:2013/10/27 10:04:06 A . (.NVIDIA Corporation - Stereoscopic 3D USB controller driver.) -- C:\WINDOWS\System32\drivers\nvstusb.sys [451872] =>.NVIDIA Corporation® O58 - SDL:2015/10/30 01:17:23 N . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58208] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [58720] =>.Microsoft Windows® O58 - SDL:2006/11/18 14:07:48 A . (.REDC - RICOH xD SM Driver.) -- C:\WINDOWS\System32\drivers\rixdpx64.sys [55296] =>.REDC O58 - SDL:2015/10/30 01:17:23 N . (.Realtek - Realtek 8136/8168/8169 NDIS 6.40 64-bit Dri.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [589824] =>.Realtek O58 - SDL:2008/01/15 12:19:46 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [1341464] =>.Realtek Semiconductor Corp® O58 - SDL:2015/10/30 01:17:19 N . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 33003.) -- C:\WINDOWS\System32\drivers\rtwlane_13.sys [3749888] =>.Realtek Semiconductor Corporation O58 - SDL:2015/10/30 01:17:23 N . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2011/10/14 06:37:42 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver.sys [20016] =>.Synaptics Incorporated® O58 - SDL:2015/10/30 01:17:23 N . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2011/10/14 05:37:44 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [396848] =>.Synaptics Incorporated® O58 - SDL:2013/08/19 14:32:10 A . (.Windows (R) Win 7 DDK provider - Toshiba Hotkey Driver.) -- C:\WINDOWS\System32\drivers\Thotkey.sys [32624] =>.TOSHIBA CORPORATION® O58 - SDL:2013/05/28 12:12:19 A . (.BitDefender S.R.L. - Trufos Kernel Module.) -- C:\WINDOWS\System32\drivers\trufos.sys [382536] =>.Bitdefender SRL® O58 - SDL:2013/08/15 03:13:32 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\WINDOWS\System32\drivers\TVALZ_O.SYS [32832] =>.TOSHIBA CORPORATION® O58 - SDL:2015/10/30 01:17:23 N . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [26976] =>.Microsoft Windows® O58 - SDL:2015/10/30 01:17:23 N . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [59232] =>.Microsoft Windows® ---\\ Last modified or created user files (13) - 14s O61 - LFC: 2016/03/26 08:02:19 A . (..) -- C:\Users\Johann\Downloads\Apache_OpenOffice_4.1.2_Win_x86_install_en-US(1).exe [140783556] O61 - LFC: 2016/03/26 10:44:59 A . (.Earth Networks, Inc..) -- C:\Users\Johann\Downloads\WeatherBugSetup.exe [3397912] {5753B94A4B4F428A574131A68539135D} O61 - LFC: 2016/03/25 21:13:59 A . (..) -- C:\Users\Johann\Documents\my games\runic games\torchlight 2\save\76561197988379319\sharedstash_v2.bin [17] O61 - LFC: 2016/03/24 18:39:37 A . (..) -- C:\Users\Johann\Documents\my games\runic games\torchlight 2\modsave\76561197988379319\sharedstash_v2.bin [2592] O61 - LFC: 2016/03/31 12:33:28 A . (.© 2016.) -- C:\Users\Johann\AppData\Roaming\Funtop.bin [188531] O61 - LFC: 2016/03/31 12:33:16 A . (..) -- C:\Users\Johann\AppData\Roaming\Labfix.bin [848437] O61 - LFC: 2016/03/31 12:44:17 A . (..) -- C:\Users\Johann\AppData\Roaming\ASPackage\Uninstall.exe [92415] =>PUP.Optional.ASPackage O61 - LFC: 2016/03/31 12:36:55 A . (..) -- C:\Users\Johann\AppData\Local\uninstall.exe [2560] O61 - LFC: 2016/03/31 12:55:29 A . (..) -- C:\Users\Johann\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_Data.bin [2131220] O61 - LFC: 2016/04/01 07:39:22 A . (..) -- C:\Users\Johann\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_Header.bin [12136] O61 - LFC: 2016/04/01 14:33:26 A . (..) -- C:\Users\Johann\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8192] O61 - LFC: 2016/04/01 09:24:19 A . (..) -- C:\Users\Johann\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_635951116686912964.bin [54979] O61 - LFC: 2016/04/01 15:01:44 A . (..) -- C:\Users\Johann\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148] ---\\ File Associations Shell Spawning (10) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® ---\\ Start Menu Internet (4) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation ---\\ Search Browser Infection (1) - 4s O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC ---\\ Search Svchost Services (41) - 1s O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\Windows\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard Certificate Propagation.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [283136] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\WINDOWS\System32\gpsvc.dll [1338368] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\WINDOWS\System32\ikeext.dll [957952] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\WINDOWS\System32\iphlpsvc.dll [958464] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\WINDOWS\System32\appinfo.dll [94720] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\WINDOWS\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\WINDOWS\System32\eapsvc.dll [112640] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\WINDOWS\system32\schedsvc.dll [1012224] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [225280] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [134656] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [328192] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [372736] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\WINDOWS\System32\wercplsupport.dll [96256] =>.Microsoft Corporation O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll [186880] =>.Microsoft Corporation O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Network Setup Service.) -- C:\WINDOWS\System32\NetSetupSvc.dll [203776] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\WINDOWS\System32\ncasvc.dll [168960] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\WINDOWS\system32\wlidsvc.dll [2058240] =>.Microsoft Corporation O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [57856] =>.Microsoft Corporation O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1035776] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\WINDOWS\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [914944] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [205824] =>.Microsoft Corporation O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [943104] =>.Microsoft Corporation O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows Managent Service DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [278016] =>.Microsoft Corporation O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1130496] =>.Microsoft Corporation O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll [1073152] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\WINDOWS\System32\bdesvc.dll [360448] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [106496] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [696320] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [507904] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\System32\sens.dll [73216] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\System32\ipnathlp.dll [457728] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [311808] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll [2280448] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\System32\qmgr.dll [1144320] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [608768] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation Service.) -- C:\Windows\System32\lfsvc.dll [27136] =>.Microsoft Corporation O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [360960] =>.Microsoft Corporation ---\\ Firewall Active Exception List (6) - 6s O87 - FAEL: "{886640DA-C3B8-41A9-A80A-F4C510FE458A}" [In-None-P6-TRUE] .(.Koga Tech Ltd - Controller Companion (Steam).) -- C:\Program Files (x86)\Steam\steamapps\common\Controller Companion\ControllerCompanion.exe {6ED6DB30745204026B7D11F7FA436D20} =>.Steam SteamApps Games O87 - FAEL: "{C20ECFC5-9559-47B1-9E2F-6C52B2F969E2}" [In-None-P17-TRUE] .(.Koga Tech Ltd - Controller Companion (Steam).) -- C:\Program Files (x86)\Steam\steamapps\common\Controller Companion\ControllerCompanion.exe {6ED6DB30745204026B7D11F7FA436D20} =>.Steam SteamApps Games O87 - FAEL: "TCP Query User{6B26EC68-8019-4C10-B83A-976B67A4C8A2}C:\program files\transmission\transmission-qt.exe" [In-None-P6-TRUE] .(.Transmission Project - Transmission. A Fast, Easy, and Free BitTor.) -- C:\program files\transmission\transmission-qt.exe {3C7102704E173E96B7135518C5EFACEB} O87 - FAEL: "UDP Query User{E3C9E23E-18EF-4D13-8348-1694FC175106}C:\program files\transmission\transmission-qt.exe" [In-None-P17-TRUE] .(.Transmission Project - Transmission. A Fast, Easy, and Free BitTor.) -- C:\program files\transmission\transmission-qt.exe {3C7102704E173E96B7135518C5EFACEB} O87 - FAEL: "{9ACD0C1A-3162-4AF9-9349-4E58B13BA1ED}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AVG\Av\avgmfapx.exe (.not file.) O87 - FAEL: "{1D59E79A-5E1C-4412-8956-4A839E04749F}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AVG\Av\avgmfapx.exe (.not file.) ---\\ Additional Scan (O88) (9) - 0s HKLM\SYSTEM\CurrentControlSet\Services\xedmal =>PUP.Optional.Salus C:\WINDOWS\Tasks\NRPPAVIDQFBAOIQL.job =>Heuristic.Graftor C:\WINDOWS\System32\Tasks\NRPPAVIDQFBAOIQL =>Heuristic.Graftor HKLM\SOFTWARE\Wow6432Node\mtxedmal =>PUP.Optional.Salus C:\Users\Johann\AppData\Roaming\ASPackage =>PUP.Optional.ASPackage C:\Users\Johann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage =>PUP.Optional.ASPackage C:\WINDOWS\Prefetch\PREDM.TMP-64FEF7D4.pf =>PUP.Optional.Downware C:\WINDOWS\Prefetch\SETUP_REC_EN_238.TMP-38FD9F42.pf =>.Superfluous.Tuto4PC C:\Users\Johann\AppData\Roaming\ASPackage\Uninstall.exe =>PUP.Optional.ASPackage ---\\ Summary of the elements found (6) - 0s http://www.nicolascoolman.fr/pup-salus/ =>PUP.Optional.Salus http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Shopperz http://www.nicolascoolman.fr/?p=4664 =>Heuristic.Graftor http://www.nicolascoolman.fr/pup-optional-aspackage/ =>PUP.Optional.ASPackage http://www.nicolascoolman.fr/?p=401 =>PUP.Optional.Downware http://www.nicolascoolman.fr/pup-optional-tuto4pc/ =>.Superfluous.Tuto4PC ~ End of the scan, 3612 items in 00h02mn31s (547)(0)