Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-06-2019Ran by Eric Bougeard (administrator) on ERICHOME3 (TOSHIBA Satellite A210) (01-06-2019 22:13:44)Running from D:\My Stuff\My Documents\Downloads\BleepingComputerLoaded Profiles: Eric Bougeard (Available Profiles: Eric Bougeard & Administrator)Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)Internet Explorer Version 8 (Default browser: FF)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: -frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)() [File not signed] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe() [File not signed] C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe() [File not signed] C:\Program Files\dvd43\DVD43_Tray.exe() [File not signed] C:\WINDOWS\KMService.exe() [File not signed] C:\WINDOWS\system32\srvany.exe(Acronis, Inc -> Acronis) C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe(Acronis, Inc -> Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe(Acronis, Inc -> Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe(Acronis, Inc -> Acronis) D:\Program Files\Acronis\DriveMonitor\adm_tray.exe(Adobe Systems, Incorporated -> Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat.exe(Advanced Micro Devices Inc.) [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe(ATI Technologies Inc.) [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe(ATI Technologies Inc.) [File not signed] C:\WINDOWS\system32\ati2evxx.exe(ATI Technologies Inc.) [File not signed] C:\WINDOWS\system32\ati2evxx.exe(Brother Industries, Ltd.) [File not signed] C:\Program Files\Brother\Brmfcmon\BrMfimon.exe(Chicony) [File not signed] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe(CobianSoft, Luis Cobian) [File not signed] D:\Program Files\Cobian Backup 11\cbVSCService11.exe(CrypKey (Canada) Ltd.) [File not signed] C:\WINDOWS\system32\Crypserv.exe(Disc Soft Ltd -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe(FileZilla Project) [File not signed] C:\Program Files\FileZilla Server\FileZilla Server.exe(Google Inc -> Google LLC) C:\Program Files\Google\Update\1.3.34.11\GoogleCrashHandler.exe(Luis Cobian, CobianSoft) [File not signed] D:\Program Files\Cobian Backup 11\cbInterface.exe(Luis Cobian, CobianSoft) [File not signed] D:\Program Files\Cobian Backup 11\cbService.exe(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.ELSAWINDB\MSSQL\Binn\sqlservr.exe(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe(Microsoft Corporation -> Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Desktop Search\WindowsSearch.exe(Microsoft Windows Component Publisher -> Microsoft Corp., Veritas Software) C:\WINDOWS\system32\dmadmin.exe(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\cidaemon.exe(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\cisvc.exe(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\locator.exe(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\netdde.exe(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe(Microsoft Windows Hardware Compatibility Publisher -> Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe(Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynToshiba.exe(Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe(Notepad++ -> Don HO don.h@free.fr) C:\Program Files\Notepad++\notepad++.exe(Open Source Developer, Robin Krom -> Greenshot) [File not signed] C:\Program Files\Greenshot\Greenshot.exe(OpenVPN Technologies, Inc. -> ) [File not signed] C:\Program Files\OpenVPN\bin\openvpn-gui.exe(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe(PcWinTech.com) [File not signed] C:\Program Files\CleanMem\Mini_Monitor.exe(SafeNet, Inc. -> SafeNet Inc.) C:\WINDOWS\system32\hasplms.exe(SafeNet, Inc. -> SafeNet, Inc) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe(Safer-Networking Ltd.) [File not signed] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe(ScanSoft, Inc.) [File not signed] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe(TOSHIBA AMERICA INFORMATION SYSTEMS, INC. -> ) C:\Toshiba\IVP\ISM\pinger.exe(TOSHIBA AMERICA INFORMATION SYSTEMS, INC. -> ) C:\Toshiba\IVP\swupdate\swupdtmr.exe(TOSHIBA Corp.) [File not signed] C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\WINDOWS\system32\TODDSrv.exe(TOSHIBA CORPORATION) [File not signed] C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe(TOSHIBA CORPORATION) [File not signed] C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe(TOSHIBA CORPORATION) [File not signed] C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe(TOSHIBA) [File not signed] C:\Program Files\TOSHIBA\TOSHIBA Applet\THotkey.exe(Volkswagen AG) [File not signed] D:\Program Files\ElsaWin\bin\LcSvrAdm.exe(Volkswagen AG) [File not signed] D:\Program Files\ElsaWin\bin\LcSvrAuf.exe(Volkswagen AG) [File not signed] D:\Program Files\ElsaWin\bin\LcSvrDba.exe(Volkswagen AG) [File not signed] D:\Program Files\ElsaWin\bin\LcSvrHis.exe(Volkswagen AG) [File not signed] D:\Program Files\ElsaWin\bin\LcSvrPas.exe(Volkswagen AG) [File not signed] D:\Program Files\ElsaWin\bin\LcSvrSaz.exe==================== Registry (Whitelisted) ===========================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [THotkey] => C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe [356352 2007-08-28] (TOSHIBA) [File not signed]HKLM\...\Run: [SynTPStart] => C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.)HKLM\...\Run: [amd_dc_opt] => C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2007-07-23] (AMD) [File not signed]HKLM\...\Run: [SSBkgdUpdate] => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [155648 2003-10-14] (Scansoft, Inc.) [File not signed]HKLM\...\Run: [PaperPort PTD] => C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [57393 2005-03-17] (ScanSoft, Inc.) [File not signed]HKLM\...\Run: [IndexSearch] => C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [40960 2005-03-17] (ScanSoft, Inc.) [File not signed]HKLM\...\Run: [Camera Assistant Software] => C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [413696 2007-05-22] (Chicony) [File not signed]HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16841216 2007-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)HKLM\...\Run: [Synchronization Manager] => C:\WINDOWS\system32\mobsync.exe [143360 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1343488 2008-08-14] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.)HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgentHKLM\...\Run: [WD Drive Manager] => C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe [438272 2008-02-19] (WDC) [File not signed]HKLM\...\Run: [BrMfcWnd] => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [622592 2006-06-28] () [File not signed]HKLM\...\Run: [ControlCenter3] => C:\Program Files\Brother\ControlCenter3\brctrcen.exe [77824 2006-06-29] (Brother Industries, Ltd.) [File not signed]HKLM\...\Run: [dvd43] => C:\Program Files\dvd43\dvd43_tray.exe [827904 2009-10-23] () [File not signed]HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2010-02-11] (Advanced Micro Devices, Inc.) [File not signed]HKLM\...\Run: [adm_tray.exe] => D:\Program Files\Acronis\DriveMonitor\adm_tray.exe [466768 2011-02-24] (Acronis, Inc -> Acronis)HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [395384 2012-04-27] (Acronis, Inc -> Acronis)HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2637784 2012-04-27] (Acronis, Inc -> Acronis)HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [1046488 2017-02-10] (DivX, LLC -> DivX, LLC)HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)HKLM\...\Run: [] => [X]HKLM\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems, Incorporated -> Adobe Systems Inc.)HKLM\...\Run: [Cobian Backup 11 interface] => D:\Program Files\Cobian Backup 11\cbInterface.exe [4407808 2013-03-07] (Luis Cobian, CobianSoft) [File not signed]HKLM\...\Run: [Fences] => C:\Program Files\Stardock\Fences\Fences.exe [4031152 2013-11-26] (Stardock Corporation -> Stardock Corporation)HKLM\...\Run: [CFSServ.exe] => CFSServ.exe -NoClientHKLM\...\Run: [NDSTray.exe] => C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [974848 2007-12-11] (TOSHIBA CORPORATION) [File not signed]HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot) [File not signed]HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11] (ATI Technologies Inc.)Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-10-28] (Logitech, Inc.)Winlogon\Notify\NavLogon: C:\WINDOWS\system32\NavLogon.dll [2000-12-22] ()HKU\S-1-5-21-1229272821-1659004503-839522115-1003\...\Run: [CleanMem Mini Monitor] => C:\Program Files\CleanMem\Mini_Monitor.exe [1417216 2013-08-22] (PcWinTech.com) [File not signed]HKU\S-1-5-21-1229272821-1659004503-839522115-1003\...\Run: [SpybotSD TeaTimer] => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.) [File not signed]HKU\S-1-5-21-1229272821-1659004503-839522115-1003\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [3635544 2015-11-15] (Disc Soft Ltd -> Disc Soft Ltd) [File not signed]HKU\S-1-5-21-1229272821-1659004503-839522115-1003\...\Run: [OpenHardwareMonitor] => D:\My Stuff\My Documents\Downloads\openhardwaremonitor-v0.8.0-beta\OpenHardwareMonitor\OpenHardwareMonitor.exe [494592 2016-11-06] () [File not signed]HKU\S-1-5-21-1229272821-1659004503-839522115-1003\...\Policies\Explorer: [ClearRecentDocsOnExit] 01000000HKU\S-1-5-18\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [520424 2013-03-06] (Microsoft Corporation -> Microsoft Corporation)HKLM\...\Drivers32: [msacm.trspch] => C:\WINDOWS\system32\tssoft32.acm [8192 2001-08-23] (Microsoft Windows Component Publisher -> DSP GROUP, INC.)HKLM\...\Drivers32: [VIDC.I420] => C:\WINDOWS\system32\msh263.drv [294912 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\...\Drivers32: [vidc.iv31] => C:\WINDOWS\system32\ir32_32.dll [199168 2001-08-23] (Microsoft Windows Component Publisher -> )HKLM\...\Drivers32: [vidc.iv32] => C:\WINDOWS\system32\ir32_32.dll [199168 2001-08-23] (Microsoft Windows Component Publisher -> )HKLM\...\Drivers32: [vidc.iv41] => C:\WINDOWS\system32\ir41_32.ax [848384 2008-04-14] (Microsoft Windows Component Publisher -> Intel Corporation)HKLM\...\Drivers32: [msacm.msg723] => C:\WINDOWS\system32\msg723.acm [118784 2001-08-23] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\...\Drivers32: [vidc.M263] => C:\WINDOWS\system32\msh263.drv [294912 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\...\Drivers32: [vidc.M261] => C:\WINDOWS\system32\msh261.drv [188416 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\...\Drivers32: [msacm.msaudio1] => C:\WINDOWS\system32\msaud32.acm [282654 2009-09-01] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\...\Drivers32: [msacm.sl_anet] => C:\WINDOWS\system32\sl_anet.acm [86016 2008-04-14] (Microsoft Windows Component Publisher -> Sipro Lab Telecom Inc.)HKLM\...\Drivers32: [msacm.iac2] => C:\WINDOWS\System32\iac25_32.ax [199680 2008-04-14] (Microsoft Windows Component Publisher -> Intel Corporation)HKLM\...\Drivers32: [vidc.iv50] => C:\WINDOWS\system32\ir50_32.dll [755200 2008-04-14] (Microsoft Windows Component Publisher -> Intel Corporation)HKLM\...\Drivers32: [VIDC.MPG4] => C:\WINDOWS\system32\mpg4c32.dll [427520 2000-06-02] (Microsoft Corporation) [File not signed]HKLM\...\Drivers32: [VIDC.MP42] => C:\WINDOWS\system32\mpg4c32.dll [427520 2000-06-02] (Microsoft Corporation) [File not signed]HKLM\...\Drivers32: [vidc.ffds] => C:\WINDOWS\system32\ffdshow.ax [2494464 2008-07-05] () [File not signed]HKLM\...\Drivers32: [msacm.ac3filter] => C:\WINDOWS\system32\ac3filter.acm [421888 2008-06-30] () [File not signed]HKLM\...\Drivers32: [vidc.DIVX] => C:\WINDOWS\system32\DivX.dll [720384 2010-02-19] (DivX, Inc.) [File not signed]HKLM\...\Drivers32: [vidc.yv12] => C:\WINDOWS\system32\DivX.dll [720384 2010-02-19] (DivX, Inc.) [File not signed]HKLM\Software\...\AppCompatFlags\Custom\matshost.exe: [c9920352-04e6-469d-bab8-e2b9c7c75415.sdb] -> Microsoft Automated Troubleshooting Services ShimHKLM\Software\...\AppCompatFlags\InstalledSDB\c9920352-04e6-469d-bab8-e2b9c7c75415: [DatabasePath] -> C:\WINDOWS\AppPatch\Custom\c9920352-04e6-469d-bab8-e2b9c7c75415.sdb [2013-11-14]HKLM\Software\Microsoft\Active Setup\Installed Components: [ C:\WINDOWS\system32\ieudinit.exe [2009-03-08] (Microsoft Windows -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [>22d6f312-b0f6-11d0-94ab-0080c74c7e95] -> C:\WINDOWS\inf\unregmp2.exe [2007-06-26] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [>26923b43-4d38-484f-9b9e-de460746276c] -> C:\WINDOWS\system32\shmgrate.exe [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [>881dd1c5-3dcf-431b-b061-f3f88e8be88a] -> C:\WINDOWS\system32\shmgrate.exe [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [AcrobatPRO10] -> wscript.exe "C:\Program Files\Adobe\Acrobat 10.0\AcrobatUserDefaults.vbs"HKLM\Software\Microsoft\Active Setup\Installed Components: [2179C5D3-EBFF-11CF-B6FD-00AA00B4E220] ->HKLM\Software\Microsoft\Active Setup\Installed Components: [22d6f312-b0f6-11d0-94ab-0080c74c7e95] ->HKLM\Software\Microsoft\Active Setup\Installed Components: [44BBA840-CC51-11CF-AAFA-00AA00B6015C] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [44BBA842-CC51-11CF-AAFA-00AA00B6015B] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [5945c046-1e7d-11d1-bc44-00c04fd912be] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [6BF52A52-394A-11d3-B153-00C04F79FAA6] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation)HKLM\Software\Microsoft\Active Setup\Installed Components: [73FA19D0-2D75-11D2-995D-00C04F98BBC9] ->HKLM\Software\Microsoft\Active Setup\Installed Components: [7790769C-0471-11d2-AF11-00C04FA35D02] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)HKLM\Software\...\Winlogon\GPExtensions: [C631DF4C-088F-4156-B058-4375F0853CD8] -> C:\WINDOWS\System32\cscui.dll [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk [2019-05-03]ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Windows -> Microsoft Corporation)Startup: C:\Documents and Settings\Eric Bougeard\Start Menu\Programs\Startup\Fences.lnk [2016-03-23]ShortcutTarget: Fences.lnk -> C:\Program Files\Stardock\Fences\Fences.exe (Stardock Corporation -> Stardock Corporation)Startup: C:\Documents and Settings\Eric Bougeard\Start Menu\Programs\Startup\OpenVPN GUI.lnk [2015-08-29]ShortcutTarget: OpenVPN GUI.lnk -> C:\Program Files\OpenVPN\bin\openvpn-gui.exe (OpenVPN Technologies, Inc. -> ) [File not signed]Startup: C:\Documents and Settings\Eric Bougeard\Start Menu\Programs\Startup\Windows Task Manager.lnk [2018-03-01]ShortcutTarget: Windows Task Manager.lnk -> C:\WINDOWS\system32\taskmgr.exe (Microsoft Windows Component Publisher -> Microsoft Corporation)BootExecute:GroupPolicy: Restriction ? C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_32_0_0_192_Plugin.exeTask: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exeTask: C:\WINDOWS\Tasks\Clean System Memory.job => C:\WINDOWS\system32\CleanMem.exeTask: C:\WINDOWS\Tasks\DivXUpdate.job => C:\Program Files\Common Files\DivX Shared\DivX Update\DivXUpdate.exeTask: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exeTask: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exeTask: C:\WINDOWS\Tasks\ReconnectW.job => D:\My Stuff\My Documents\ReconnectW.bat C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txtTcpip\Parameters: [DhcpNameServer] 192.168.0.254Tcpip\..\Interfaces\082C7047-1869-4E8C-B6A3-49A184095D0B: [NameServer] 193.183.98.66,51.15.98.97,94.16.114.254,206.189.120.27Tcpip\..\Interfaces\082C7047-1869-4E8C-B6A3-49A184095D0B: [DhcpNameServer] 192.168.0.254Internet Explorer:==================HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.comHKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.comHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.comHKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.comHKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhomeHKU\S-1-5-21-1229272821-1659004503-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchURLSearchHook: HKU\S-1-5-21-1229272821-1659004503-839522115-1003 - (No Name) - EF99BD32-C1FB-11D2-892F-0090271D4F88 - No FileSearchScopes: HKLM -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL =SearchScopes: HKU\S-1-5-21-1229272821-1659004503-839522115-1003 -> DefaultScope 32E2BD14-973F-45A7-8EDC-583289FC6048 URL = hxxp://www.google.com/search?q=searchTerms&rls=com.microsoft:language&ie=inputEncoding&oe=outputEncoding&startIndex=startIndex?&startPage=startPageSearchScopes: HKU\S-1-5-21-1229272821-1659004503-839522115-1003 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL =SearchScopes: HKU\S-1-5-21-1229272821-1659004503-839522115-1003 -> 32E2BD14-973F-45A7-8EDC-583289FC6048 URL = hxxp://www.google.com/search?q=searchTerms&rls=com.microsoft:language&ie=inputEncoding&oe=outputEncoding&startIndex=startIndex?&startPage=startPageSearchScopes: HKU\S-1-5-21-1229272821-1659004503-839522115-1003 -> FC3D4B39-A9B8-4A77-A873-8860CB30C786 URL = hxxp://en.wikipedia.org/wiki/Special:Search?search=searchTermsBHO: No Name -> 02478D38-C3F9-4efb-9B51-7695ECA05670 -> No FileBHO: Adobe PDF Reader Link Helper -> 06849E9F-C8D7-4D59-B87D-784B7D6BE0B3 -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)BHO: Spybot-S&D IE Protection -> 53707962-6F74-2D53-2644-206D7942484F -> C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Ltd. -> Safer Networking Limited)BHO: Search Helper -> 6EBF7485-159F-4bff-A14F-B9E3AAC4465B -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19] (Microsoft Corporation -> Microsoft Corporation)BHO: Groove GFS Browser Helper -> 72853161-30C5-4D22-B7F9-0BBC1D38A37E -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)BHO: Java™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-07] (Oracle America, Inc. -> Oracle Corporation)BHO: Windows Live Sign-in Helper -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17] (Microsoft Corporation -> Microsoft Corporation)BHO: Adobe PDF Conversion Toolbar Helper -> AE7CD045-E861-484f-8273-0445EE161910 -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)BHO: Java™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-07] (Oracle America, Inc. -> Oracle Corporation)BHO: No Name -> E7E6F031-17CE-4C07-BC86-EABFE594F69C -> No FileBHO: SmartSelect Class -> F4971EE7-DAA0-4053-9964-665D8EE6A077 -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)Toolbar: HKLM - Adobe PDF - 47833539-D0C5-4125-9FA8-0819E2EAAC93 - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)Toolbar: HKU\S-1-5-21-1229272821-1659004503-839522115-1003 -> No Name - 21FA44EF-376D-4D53-9B0F-8A89D3229068 - No FileToolbar: HKU\S-1-5-21-1229272821-1659004503-839522115-1003 -> No Name - EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107 - No FileDPF: 2D20E99C-1FD7-48EC-9FDF-CF3555B273D4 hxxp://192.168.0.47:8080/VDControl.CAB?2,0,0,94DPF: 5AE58FCF-6F6A-49B2-B064-02492C66E3F4 hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1378845651250DPF: 5D6F45B3-9043-443D-A792-115447494D24 hxxp://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cabDPF: 5EDB10D9-7E95-4833-A218-62F375DAFCF1 hxxps://parici.sopragroup.com/postauthI/epi.cabDPF: 633E61EE-B3E7-43A7-A2B0-7E9B448B5AF7 hxxp://192.168.0.49/addon/surveillancestation/SurveillanceCenterPlaybackOcx.cabDPF: 74DBCB52-F298-4110-951D-AD2FF67BC8AB hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cabDPF: 7C8B002F-035E-44BC-9C67-7396029B17FD hxxp://192.168.0.49/addon/surveillancestation/SurveillanceCenterRealOcx.cabDPF: 8FFBE65D-2C9C-4669-84BD-5829DC0B603C hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cabDPF: B79A53C0-1DAC-4636-BACE-FD086A7A79BF hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cabDPF: CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cabDPF: D4323BF2-006A-4440-A2F5-27E3E7AB25F8 hxxp://3dlifeplayer.dl.3dvia.com/player/install/3DVIA_player_installer.exeHandler: grooveLocalGWS - 88FED34C-F0CA-4636-A375-3CB6248B04CD - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)Handler: lid - 5C135180-9973-46D9-ABF4-148267CBB8BF - C:\WINDOWS\System32\msvidctl.dll [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)Handler: vw-wi - 0F3C833F-FB28-40EA-8CB9-6A55B996C3F6 - D:\Program Files\ElsaWin\bin\wiprot.dll [2011-12-06] (TODO: ) [File not signed]StartMenuInternet: IEXPLORE.EXE - iexplore.exeFireFox:========FF ProfilePath: C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455 [2019-06-01]FF Homepage: C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455 -> about:homeFF NetworkProxy: C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455 -> type", 0FF Extension: (Disconnect) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\2.0@disconnect.me.xpi [2019-04-02]FF Extension: (British English Dictionary (Updated)) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\en-gb@flyingtophat.co.uk [2015-12-21] [Legacy] [not signed]FF Extension: (Tampermonkey) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\firefox@tampermonkey.net.xpi [2019-04-06]FF Extension: (Dictionnaire français) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\fr-dicollecte@dictionaries.addons.mozilla.org [2018-05-10] [Legacy]FF Extension: (SaveFrom.net helper) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\helper-sig@savefrom.net.xpi [2019-05-29] [UpdateUrl:hxxps://download.sf-helper.com/mozilla/updates.json]FF Extension: (I don't care about cookies) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2019-02-04]FF Extension: (openingtraslate) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\jid1-r2tWDbSkq8AZK1@jetpack.xpi [2017-06-13]FF Extension: (uBlock Origin) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\uBlock0@raymondhill.net.xpi [2018-12-01]FF Extension: (Session Manager) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\1280606b-2510-4fe0-97ef-9b5a22eafe30.xpi [2017-12-05] [Legacy]FF Extension: (HttpFox) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\4093c4de-454a-4329-8aff-c6b0b123c386.xpi [2016-04-27] [Legacy]FF Extension: (NoScript) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\73a6fe31-595d-460b-a920-fcc0f8843232.xpi [2018-01-28] [Legacy]FF Extension: (IE Tab) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\77b819fa-95ad-4f2c-ac7c-486b356188a9 [2017-05-03] [Legacy]FF Extension: (Cookies Manager+) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\bb6bc1bb-f824-4702-90cd-35e2fb24f25d [2017-12-05] [Legacy]FF Extension: (Search By Image (by Google)) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\ce7e73df-6a44-4028-8079-5927a588c948.xpi [2016-10-21] [Legacy]FF Extension: (FoxClocks) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\d37dc5d0-431d-44e5-8c91-49419370caa1.xpi [2017-11-03] [Legacy]FF Extension: (Greasemonkey) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\Extensions\e4a8a97b-f2ed-450b-b12d-ee082ba24781.xpi [2017-12-13]FF Extension: (Hotfix for Firefox bug 1548973 (armagaddon 2.0) mitigation) - C:\Documents and Settings\Eric Bougeard\Application Data\Mozilla\Firefox\Profiles\ff8svbh4.default-1440702266455\features\a6ac0af9-4b4e-48df-a423-d0ea0e6217f9\hotfix-bug-1548973@mozilla.org.xpi [2019-05-24] [Legacy]FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Program Files\Java\jre6\lib\deploy\jqs\ff => not foundFF HKLM\...\Firefox\Extensions: [20a82645-c095-46ed-80e3-08825760534b] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtensionFF Extension: (Microsoft .NET Framework Assistant) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-06-20] [Legacy] [not signed]FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_192.dll [2019-05-24] (Adobe Inc. -> ) [File not signed]FF Plugin: @checkpoint.com/FFApi -> C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll [No File]FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll [No File]FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2017-02-09] (DivX, LLC -> DivX, LLC)FF Plugin: @itstructures.com/ffactivex -> C:\Program Files\Firefox ActiveX Plugin\npffax.dll [2011-12-28] () [File not signed]FF Plugin: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-07] (Oracle America, Inc. -> Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-07] (Oracle America, Inc. -> Oracle Corporation)FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] (Microsoft Corporation -> Microsoft Corporation)FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation)FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN -> VideoLAN)FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN -> VideoLAN)FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN -> VideoLAN)FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN -> VideoLAN)FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN -> VideoLAN)FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN -> VideoLAN)FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems, Incorporated -> Adobe Systems Inc.)FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems, Incorporated -> Adobe Systems Inc.)Chrome:=======CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - ==================== Services (Whitelisted) ====================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [846048 2012-04-27] (Acronis, Inc -> Acronis)S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-05-24] (Adobe Inc. -> Adobe) [File not signed]R2 AgereModemAudio; C:\WINDOWS\system32\agrsmsvc.exe [9216 2007-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems)R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [602112 2010-02-11] (ATI Technologies Inc.) [File not signed]S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () [File not signed]R2 cbVSCService11; D:\Program Files\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [File not signed]R2 CFSvcs; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2007-12-11] (TOSHIBA CORPORATION) [File not signed]R2 CobianBackup11; D:\Program Files\Cobian Backup 11\cbService.exe [1131008 2013-03-07] (Luis Cobian, CobianSoft) [File not signed]R2 Crypkey License; C:\WINDOWS\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) [File not signed]R3 Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [1087320 2015-08-10] (Disc Soft Ltd -> Disc Soft Ltd)R2 FileZilla Server; C:\Program Files\FileZilla Server\FileZilla Server.exe [632320 2012-02-26] (FileZilla Project) [File not signed]R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4683144 2014-07-17] (SafeNet, Inc. -> SafeNet Inc.)R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2015-02-07] (Oracle America, Inc. -> Oracle Corporation)R2 KMService; C:\WINDOWS\system32\srvany.exe [8192 2019-05-02] () [File not signed]R2 LcSvrAdm; D:\Program Files\ElsaWin\bin\LcSvrAdm.exe [227328 2014-11-24] (Volkswagen AG) [File not signed]R2 LcSvrAuf; D:\Program Files\ElsaWin\bin\LcSvrAuf.exe [1336320 2014-11-24] (Volkswagen AG) [File not signed]R2 LcSvrDba; D:\Program Files\ElsaWin\bin\LcSvrDba.exe [381952 2014-11-24] (Volkswagen AG) [File not signed]R2 LcSvrHis; D:\Program Files\ElsaWin\bin\LcSvrHis.exe [329728 2014-11-24] (Volkswagen AG) [File not signed]R2 LcSvrPAS; D:\Program Files\ElsaWin\bin\LcSvrPas.exe [470016 2014-11-24] (Volkswagen AG) [File not signed]R2 LcSvrSaz; D:\Program Files\ElsaWin\bin\LcSvrSaz.exe [375808 2014-11-24] (Volkswagen AG) [File not signed]S4 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2005-11-15] (Hewlett-Packard Company) [File not signed]S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4430792 2017-08-07] (Malwarebytes Corporation -> Malwarebytes)R2 MSSQL$ELSAWINDB; C:\Program Files\Microsoft SQL Server\MSSQL10_50.ELSAWINDB\MSSQL\Binn\sqlservr.exe [43130032 2015-03-30] (Microsoft Corporation -> Microsoft Corporation)S3 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG -> Nero AG)S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [32736 2017-09-26] (OpenVPN Technologies, Inc. -> The OpenVPN Project) [File not signed]R2 pinger; C:\Toshiba\IVP\ISM\pinger.exe [136816 2007-01-25] (TOSHIBA AMERICA INFORMATION SYSTEMS, INC. -> )R2 SentinelKeysServer; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [374304 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc.)R2 SentinelProtectionServer; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1259040 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc)R2 SentinelSecurityRuntime; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [292384 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc.)S2 SQLAgent$ELSAWINDB; C:\Program Files\Microsoft SQL Server\MSSQL10_50.ELSAWINDB\MSSQL\Binn\SQLAGENT.EXE [381104 2015-03-30] (Microsoft Corporation -> Microsoft Corporation)S3 SwPrv; C:\WINDOWS\System32\dllhost.exe /Processid:C6DA0F03-627F-46F5-8AB1-12280D2F8C25 [5120 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)R2 Swupdtmr; c:\Toshiba\IVP\swupdate\swupdtmr.exe [66928 2007-10-23] (TOSHIBA AMERICA INFORMATION SYSTEMS, INC. -> )R2 TAPPSRV; C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe [35840 2007-04-10] (TOSHIBA Corp.) [File not signed]R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [7757552 2017-08-16] (TeamViewer GmbH -> TeamViewer GmbH)S3 VPNTunnel; C:\Program Files\VPNTunnel\vpn.service.exe [12536 2016-07-11] (Edelino Commerce Inc. -> ) [File not signed]S3 WDBtnMgrSvc.exe; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [106496 2008-02-19] (WDC) [File not signed]S3 SysmonLog; %SystemRoot%\system32\smlogsvc.exe [X]===================== Drivers (Whitelisted) ======================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R3 adatadrv; C:\WINDOWS\System32\DRIVERS\adatadrv.sys [762112 2009-07-01] (none) [File not signed]R3 AgereSoftModem; C:\WINDOWS\System32\DRIVERS\AGRSM.sys [1161888 2007-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems)R2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [425304 2014-07-17] (SafeNet, Inc. -> SafeNet Inc.)R3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [244040 2014-07-17] (SafeNet, Inc. -> SafeNet Inc.)R3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [296200 2014-07-17] (SafeNet, Inc. -> SafeNet Inc.)R3 AmdLLD; C:\WINDOWS\System32\DRIVERS\AmdLLD.sys [34304 2007-06-29] (Microsoft Windows Hardware Compatibility Publisher -> AMD, Inc.)S3 androidusb; C:\WINDOWS\System32\Drivers\ssadadb.sys [32064 2013-08-21] (MCCI Internal Testing Software -> Google Inc)R3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [3565056 2010-02-11] (ATI Technologies Inc.) [File not signed]S3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [556200 2011-02-19] (Broadcom Corporation -> Broadcom Corporation.)R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [37160 2011-02-19] (Broadcom Corporation -> Broadcom Corporation.)R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [933416 2011-02-19] (Broadcom Corporation -> Broadcom Corporation.)S3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [118440 2011-02-19] (Broadcom Corporation -> Broadcom Corporation.)S3 btwhid; C:\WINDOWS\System32\DRIVERS\btwhid.sys [59688 2011-02-19] (Broadcom Corporation -> Broadcom Corporation.)S3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [51752 2011-02-19] (Broadcom Corporation -> Broadcom Corporation.)S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Windows Component Publisher -> Microsoft Corporation)S3 CTU2K; C:\WINDOWS\System32\Drivers\CTU2K.sys [24197 2003-01-24] (FTDI Ltd.) [File not signed]S3 dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [20032 2013-10-30] (SAMSUNG ELECTRONICS CO.,LTD. -> Devguru Co., Ltd)S3 dtlitescsibus; C:\WINDOWS\System32\DRIVERS\dtlitescsibus.sys [25016 2015-09-19] (Disc Soft Ltd -> Disc Soft Ltd)R3 dtultrascsibus; C:\WINDOWS\System32\DRIVERS\dtultrascsibus.sys [25016 2016-03-16] (Disc Soft Ltd -> Disc Soft Ltd)R3 dtultrausbbus; C:\WINDOWS\System32\DRIVERS\dtultrausbbus.sys [39992 2016-03-16] (Disc Soft Ltd -> Disc Soft Ltd)S3 dvd43llh; C:\WINDOWS\System32\DRIVERS\dvd43llh.sys [18816 2015-09-19] (RIF) [File not signed]S3 edicusb; C:\WINDOWS\System32\DRIVERS\edicusb7.sys [30768 2013-06-10] (Softing AG -> Softing Automotive Electronics GmbH)R2 fssfltr; C:\WINDOWS\System32\DRIVERS\fssfltr_tdi.sys [54760 2010-04-28] (Microsoft Corporation -> Microsoft Corporation)R3 FwLnk; C:\WINDOWS\System32\DRIVERS\FwLnk.sys [5888 2007-04-04] (Microsoft Windows Hardware Compatibility Publisher -> TOSHIBA Corporation)R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [609624 2014-07-17] (SafeNet, Inc. -> SafeNet Inc.)S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2005-10-22] (Microsoft Windows Hardware Compatibility Publisher -> HP)S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2005-10-22] (Microsoft Windows Hardware Compatibility Publisher -> HP)S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2005-10-22] (Microsoft Windows Hardware Compatibility Publisher -> HP)R3 IntcAzAudAddService; C:\WINDOWS\System32\drivers\RtkHDAud.sys [4611072 2007-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)S3 LUsbFilt; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [28624 2010-08-24] (Logitech -> Logitech, Inc.)R2 multikey; C:\WINDOWS\System32\DRIVERS\multikey.sys [50560 2009-05-16] (Chingachguk & Denger2k (Elite & SP edition)) [File not signed]S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Windows Component Publisher -> Microsoft Corporation)R2 Netdevio; C:\WINDOWS\System32\DRIVERS\netdevio.sys [12032 2007-12-12] (TOSHIBA Corporation.) [File not signed]R1 NetworkX; C:\WINDOWS\system32\ckldrv.sys [21638 2008-08-22] () [File not signed]S3 nm; C:\WINDOWS\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Windows Component Publisher -> Microsoft Corporation)R2 NSHE; C:\WINDOWS\system32\Drivers\NSHE.SYS [98816 2015-09-27] (NGO -> T0r0 2008) [File not signed]R1 Odptdi; C:\WINDOWS\system32\drivers\odptdi.sys [31232 2006-08-03] (Aventail Corporation) [File not signed]S3 pccsmcfd; C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys [19072 2012-10-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)S3 pfc; C:\WINDOWS\System32\drivers\pfc.sys [9856 2006-03-29] (Padus, Inc.) [File not signed]R1 prodrv06; C:\WINDOWS\System32\drivers\prodrv06.sys [53920 2004-08-09] (Protection Technology) [File not signed]R0 prohlp02; C:\WINDOWS\System32\drivers\prohlp02.sys [114016 2004-08-09] (Protection Technology) [File not signed]R0 prosync1; C:\WINDOWS\System32\drivers\prosync1.sys [7040 2004-07-19] (Protection Technology) [File not signed]R2 rimmptsk; C:\WINDOWS\System32\DRIVERS\rimmptsk.sys [39936 2007-02-24] (Microsoft Windows Hardware Compatibility Publisher -> REDC)R2 rimsptsk; C:\WINDOWS\System32\DRIVERS\rimsptsk.sys [42496 2007-01-23] (Microsoft Windows Hardware Compatibility Publisher -> REDC)R2 rismxdp; C:\WINDOWS\System32\DRIVERS\rixdptsk.sys [37376 2007-03-21] (Microsoft Windows Hardware Compatibility Publisher -> REDC)S4 RsFx0153; C:\WINDOWS\System32\DRIVERS\RsFx0153.sys [250152 2015-03-30] (Microsoft Corporation -> Microsoft Corporation)S3 RT-USB; C:\WINDOWS\System32\drivers\RT-USB.SYS [58880 2009-05-21] (Ross-Tech, LLC -> Ross-Tech LLC)S3 RTL8187B; C:\WINDOWS\System32\DRIVERS\RTL8187B.sys [341376 2009-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corporation )R3 RTLE8023xp; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [98944 2007-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corporation )S3 RTLVLAN; C:\WINDOWS\System32\DRIVERS\RTLVLAN.SYS [17664 2011-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corporation )S3 RTLVLANMP; C:\WINDOWS\System32\DRIVERS\RTLVLAN.SYS [17664 2011-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corporation )R2 RtNdPt5x; C:\WINDOWS\System32\DRIVERS\RtNdPt5x.sys [27424 2011-06-15] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation )U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Windows Component Publisher -> Microsoft Corporation)S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [20480 2007-11-13] (Microsoft Windows Component Publisher -> Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)R0 sfhlp01; C:\WINDOWS\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]R3 SNTNLUSB; C:\WINDOWS\System32\DRIVERS\SNTNLUSB.SYS [41896 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc.)R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [329384 2015-09-19] (Disc Soft Ltd -> Duplex Secure Ltd.)S3 ssudserd; C:\WINDOWS\System32\DRIVERS\ssudserd.sys [184192 2014-06-16] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))R3 SynTP; C:\WINDOWS\System32\DRIVERS\SynTP.sys [231424 2008-08-14] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics, Inc.)R3 tap0901; C:\WINDOWS\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (OpenVPN Technologies, Inc. -> The OpenVPN Project)S3 tapoas; C:\WINDOWS\System32\DRIVERS\tapoas.sys [26112 2012-07-15] (The OpenVPN Project) [File not signed]U5 Tcpip6; C:\Windows\System32\Drivers\Tcpip6.sys [226880 2010-02-11] (Microsoft Windows Component Publisher -> Microsoft Corporation)S3 tdcmdpst; C:\WINDOWS\System32\DRIVERS\tdcmdpst.sys [16128 2007-02-22] (Microsoft Windows Hardware Compatibility Publisher -> TOSHIBA Corporation.)R3 UVCFTR; C:\WINDOWS\System32\Drivers\UVCFTR_S.SYS [11776 2007-04-16] (Microsoft Windows Hardware Compatibility Publisher -> Chicony Electronics Co., Ltd.)R0 vididr; C:\WINDOWS\System32\DRIVERS\vididr.sys [125472 2012-12-27] (Acronis, Inc -> Acronis)R0 vidsflt53; C:\WINDOWS\System32\DRIVERS\vsflt53.sys [83392 2012-12-27] (Acronis, Inc -> Acronis)S3 vncmirror; C:\WINDOWS\System32\DRIVERS\vncmirror.sys [4608 2013-03-04] (Microsoft Windows Hardware Compatibility Publisher -> RealVNC Ltd.)S3 WDC_SAM; C:\WINDOWS\System32\DRIVERS\wdcsam.sys [11520 2008-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)S1 AmdPPM; system32\DRIVERS\AmdPPM.sys [X]S4 hpt3xx; no ImagePathS4 IntelIde; no ImagePathS3 rt2870; system32\DRIVERS\rt2870.sys [X]S0 srescan; system32\ZoneLabs\srescan.sys [X]S3 Tosrfcom; no ImagePathS0 vmci; system32\DRIVERS\vmci.sys [X]S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One month (created) ========(If an entry is included in the fixlist, the file/folder will be moved.)2019-06-01 22:13 - 2019-06-01 22:13 - 000000000 ____D C:\FRST2019-05-24 10:45 - 2019-06-01 22:07 - 000000788 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job2019-05-06 19:27 - 2019-05-06 19:27 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office2019-05-06 19:21 - 2019-05-06 20:02 - 000000000 ____D C:\Program Files\Microsoft Works2019-05-06 19:20 - 2019-05-06 19:20 - 000000000 ____D C:\Program Files\Microsoft Visual Studio2019-05-06 19:16 - 2019-05-06 19:16 - 000000000 __RHD C:\MSOCache2019-05-06 18:43 - 2019-05-06 18:43 - 000000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Visual Studio 20052019-05-06 18:42 - 2019-05-06 19:20 - 000000000 ____D C:\WINDOWS\SHELLNEW2019-05-03 23:56 - 2019-05-03 23:56 - 000000000 ____D C:\WINDOWS\Offline Address Books2019-05-03 18:22 - 2019-05-03 18:22 - 000000000 ____D C:\Documents and Settings\Eric Bougeard\Application Data\Windows Desktop Search2019-05-03 17:41 - 2019-05-03 18:07 - 000065536 _____ C:\WINDOWS\system32\config\EventForwarding-Operational.Evt2019-05-03 17:41 - 2019-05-03 17:41 - 000000000 __HDC C:\WINDOWS\$NtUninstallKB2492386$2019-05-03 17:41 - 2019-05-03 17:41 - 000000000 __HDC C:\WINDOWS\$968930Uinstall_KB968930$2019-05-03 17:41 - 2019-05-03 17:41 - 000000000 ____D C:\WINDOWS\system32\winrm2019-05-03 17:41 - 2019-05-03 17:41 - 000000000 ____D C:\WINDOWS\$NtUninstallKB968930$2019-05-03 17:40 - 2019-05-03 17:40 - 000001809 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Windows Search.lnk2019-05-03 17:40 - 2019-05-03 17:40 - 000000000 __HDC C:\WINDOWS\$NtUninstallbasecsp$2019-05-03 17:39 - 2019-05-03 17:39 - 000000000 __HDC C:\WINDOWS\$NtUninstallKB940157$2019-05-02 23:35 - 2019-05-02 23:34 - 000151552 _____ C:\WINDOWS\KMService.exe2019-05-02 23:35 - 2019-05-02 23:34 - 000008192 _____ C:\WINDOWS\system32\srvany.exe==================== One month (modified) ========(If an entry is included in the fixlist, the file/folder will be moved.)2019-06-01 22:15 - 2012-11-10 05:18 - 000000000 ____D C:\Documents and Settings\Eric Bougeard\Local Settings\temp2019-06-01 22:12 - 2018-04-08 16:28 - 000000880 _____ C:\WINDOWS\Tasks\Adobe Flash Player NPAPI Notifier.job2019-06-01 22:12 - 2016-03-21 23:38 - 000458752 _____ C:\WINDOWS\system32\config\ACEEvent.evt2019-06-01 22:12 - 2008-01-05 13:09 - 000000000 ____D C:\WINDOWS\system32\Macromed2019-06-01 22:07 - 2009-08-27 17:12 - 000000886 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job2019-06-01 22:06 - 2011-12-14 23:12 - 000000258 _____ C:\WINDOWS\Tasks\Clean System Memory.job2019-06-01 21:27 - 2017-01-12 21:16 - 000000308 _____ C:\WINDOWS\Tasks\DivXUpdate.job2019-06-01 21:27 - 2012-07-11 23:13 - 000031906 _____ C:\WINDOWS\SchedLgU.Txt2019-06-01 12:05 - 2008-11-23 14:35 - 000000000 ____D C:\Program Files\FengShui2019-06-01 04:06 - 2009-08-27 17:12 - 000000882 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job2019-05-31 23:00 - 2012-11-11 11:29 - 000000330 _____ C:\WINDOWS\Tasks\Spybot - Search & Destroy Updater - Scheduled Task.job2019-05-27 18:23 - 2012-04-28 23:41 - 000000000 ____D C:\Documents and Settings\Eric Bougeard\Application Data\vlc2019-05-24 15:41 - 2008-01-11 12:43 - 000001324 _____ C:\WINDOWS\system32\d3d9caps.dat2019-05-24 10:45 - 2014-06-25 21:22 - 000000000 ____D C:\Documents and Settings\Eric Bougeard\Local Settings\Application Data\Adobe2019-05-24 10:45 - 2012-04-11 13:09 - 000842296 _____ (Adobe) C:\WINDOWS\system32\FlashPlayerApp.exe2019-05-24 10:45 - 2011-05-20 23:32 - 000175160 _____ (Adobe) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl2019-05-24 10:36 - 2015-06-13 15:20 - 000000300 _____ C:\WINDOWS\Tasks\ReconnectW.job2019-05-24 10:36 - 2001-08-23 14:00 - 000002206 _____ C:\WINDOWS\system32\wpa.dbl2019-05-24 01:06 - 2008-01-05 13:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT2019-05-24 01:03 - 2008-01-05 13:25 - 000000000 ____D C:\Documents and Settings\Eric Bougeard2019-05-19 12:40 - 2012-01-13 19:57 - 000000000 ____D C:\Documents and Settings\Eric Bougeard\Application Data\uTorrent2019-05-09 22:32 - 2014-06-06 22:39 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Microsoft Help2019-05-08 00:38 - 2008-03-14 00:02 - 000000116 _____ C:\WINDOWS\NeroDigital.ini2019-05-07 23:35 - 2012-04-28 03:05 - 000001945 _____ C:\WINDOWS\epplauncher.mif2019-05-07 23:07 - 2012-11-10 05:18 - 000000000 ____D C:\Documents and Settings\NetworkService\Local Settings\temp2019-05-07 22:53 - 2008-01-05 04:48 - 000000000 RSHDC C:\WINDOWS\system32\dllcache2019-05-06 22:40 - 2001-08-23 14:00 - 000001461 _____ C:\WINDOWS\win.ini2019-05-06 21:06 - 2008-01-05 13:11 - 000001513 _____ C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk2019-05-06 21:02 - 2009-07-17 21:46 - 000090344 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT2019-05-06 20:55 - 2008-01-05 04:53 - 000342624 _____ C:\WINDOWS\system32\FNTCACHE.DAT2019-05-06 20:03 - 2008-01-05 04:54 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared2019-05-06 19:21 - 2012-06-20 01:15 - 000000000 ____D C:\Program Files\MSBuild2019-05-06 19:20 - 2008-01-05 17:19 - 000000000 ____D C:\Program Files\Microsoft Office2019-05-06 18:43 - 2014-06-06 22:42 - 000000000 ____D C:\Program Files\Microsoft Visual Studio 82019-05-06 18:22 - 2014-06-06 22:48 - 000065536 _____ C:\WINDOWS\system32\config\OAlerts.evt2019-05-06 18:14 - 2008-01-05 04:53 - 000000000 ____D C:\Documents and Settings\All Users2019-05-04 15:01 - 2014-06-09 18:33 - 000000000 ____D C:\Program Files\Windows Desktop Search2019-05-04 14:12 - 2008-01-05 04:48 - 000000000 ___HD C:\WINDOWS\inf2019-05-03 18:07 - 2008-01-05 04:48 - 000000000 ____D C:\WINDOWS\security2019-05-03 17:42 - 2012-06-09 02:00 - 000001355 _____ C:\WINDOWS\imsins.BAK2019-05-03 17:42 - 2010-03-31 16:21 - 000000000 ___HD C:\WINDOWS\$hf_mig$2019-05-03 17:41 - 2008-01-05 04:48 - 000000000 ____D C:\WINDOWS\Help2019-05-03 17:39 - 2008-01-05 04:54 - 000739494 _____ C:\WINDOWS\system32\PerfStringBackup.INI2019-05-03 00:44 - 2014-02-13 02:17 - 002301793 _____ C:\WINDOWS\setupapi.log.2.old2019-05-02 21:25 - 2017-11-14 03:04 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys==================== Files in the root of some directories =======2010-06-20 23:24 - 2010-06-20 23:24 - 000000000 ____C () C:\Documents and Settings\Eric Bougeard\settings.dat2012-10-16 00:28 - 2012-10-14 12:28 - 000000044 ____H () C:\Program Files\52919ec2.tmp2014-07-21 00:08 - 2014-07-21 00:08 - 000000000 ____C () C:\Program Files\appl.log2013-04-29 21:43 - 2013-04-28 09:43 - 000000044 ____H () C:\Program Files\b4fc9b02.tmp2014-09-19 18:49 - 2014-09-20 00:24 - 000038532 _____ () C:\Documents and Settings\Eric Bougeard\Application Data\Comma Separated Values (Windows).ADR2013-09-12 02:52 - 2014-05-03 16:42 - 000012671 _____ () C:\Documents and Settings\Eric Bougeard\Application Data\logfile.txt2008-01-05 16:33 - 2011-06-03 18:58 - 000079360 _____ () C:\Documents and Settings\Eric Bougeard\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini2016-10-15 00:17 - 2018-05-08 15:44 - 000000600 _____ () C:\Documents and Settings\Eric Bougeard\Local Settings\Application Data\PUTTY.RND2013-06-29 15:56 - 2013-06-29 15:56 - 000000057 _____ () C:\Documents and Settings\All Users\Application Data\Ament.ini2017-08-03 21:27 - 2017-08-03 21:27 - 000005068 _____ () C:\Documents and Settings\All Users\Application Data\dfnpcrng.nwi2017-04-09 10:43 - 2017-04-09 10:43 - 000003513 _____ () C:\Documents and Settings\All Users\Application Data\lpm.dat2008-03-21 15:19 - 2008-04-15 15:54 - 010896316 ____C () C:\Documents and Settings\All Users\Application Data\LuUninstall.LiveUpdate2017-08-03 21:27 - 2017-08-03 21:27 - 000000016 _____ () C:\Documents and Settings\All Users\Application Data\mntemp==================== SigCheck ===============================(There is no automatic fix for files that do not pass verification.)==================== End of FRST.txt ============================
autodata 3.38 language pack fin mega
2ff7e9595c
Comments