PC lent et soucis avec pilote nvlddmkm

[yevgi]

Salut à tous.

Je profites pour poser mes problèmes dans la même discussion pour m'y retrouver plus facilement :p

Depuis quelques temps j'ai remarqué que mon pc est un peu plus lent qu'avant... je suppose qu'il y a un lien direct avec le fait qu'une de mes barrettes de RAM a rendu l'âme mais je me demande si y a que ça...
Du coup ma première question serrait : est-ce que vous pensez que ça serrait la seule cause du ralentissement? ou est-ce que j'aurais chopé une saleté quelque part?
J'utilise Malewarebyte's en tant que "anti-virus" et Zone alarm pour le pare-feu. Du coup : est-ce une bonne idée ou est-ce que je peux les virer pour en mettre d'autres?

En ce qui concerne le deuxième problème. ça arrive que mes écrans (je suis en dual screen) s'éteignent pour quelques secondes et après j'ai un retour windows avec le triangle jaune dans la zone de notifications, et quand je clique dessus il disparaît. en cherchant les logs windows, j'ai pu trouver que "Le pilote d'affichage nvlddmkm ne répondait plus". Je vous avoue que ça me fait pas mal flipper car ce pu**** de pilote m'a déjà fait grillé une CG il y a quelques années et j'aimerais vraiment pas que ça se reproduise :/
Et donc : est-ce que vous auriez une solution?

Merci à tous

P.S. Voici un rapport aida64 pour que vous ayez une idée de la machine :

Code: Tout sélectionner

Operating System                                  Microsoft Windows 7 Ultimate 6.1.7601.23418 (Win7 RTM)
    Date                                              2017-08-02
    Time                                              13:45


--------[ Summary ]-----------------------------------------------------------------------------------------------------

    Computer:
      Computer Type                                     ACPI x64-based PC
      Operating System                                  Microsoft Windows 7 Ultimate
      OS Service Pack                                   Service Pack 1
      Internet Explorer                                 11.0.9600.18314
      DirectX                                           DirectX 11.1
      Computer Name                                     YEVGIS-PC
      User Name                                         yevgi
      Logon Domain                                      yevgis-PC
      Date / Time                                       2017-08-02 / 13:45

    Motherboard:
      CPU Type                                          QuadCore Intel Core 2 Quad Q6600, 2400 MHz (9 x 267)
      Motherboard Name                                  Dell XPS 420
      Motherboard Chipset                               Intel Beachwood X38
      System Memory                                     6080 MB
      DIMM1: Kingston 2G-UDIMM                          2 GB DDR2-667 DDR2 SDRAM  (5-5-5-15 @ 333 MHz)  (4-4-4-12 @ 266 MHz)  (3-3-3-9 @ 200 MHz)
      DIMM2:                                            2 GB DDR2-667 DDR2 SDRAM  (5-5-5-15 @ 333 MHz)  (4-4-4-12 @ 266 MHz)  (3-3-3-9 @ 200 MHz)
      DIMM4:                                            2 GB DDR2-667 DDR2 SDRAM  (5-5-5-15 @ 333 MHz)  (4-4-4-12 @ 266 MHz)  (3-3-3-9 @ 200 MHz)
      BIOS Type                                         Phoenix (02/25/09)

    Display:
      Video Adapter                                     NVIDIA GeForce GTX 750 Ti  (2 GB)
      Video Adapter                                     NVIDIA GeForce GTX 750 Ti  (2 GB)
      Video Adapter                                     NVIDIA GeForce GTX 750 Ti  (2 GB)
      Video Adapter                                     NVIDIA GeForce GTX 750 Ti  (2 GB)
      3D Accelerator                                    nVIDIA GeForce GTX 750 Ti
      Monitor                                           Asus VN248  [24" LCD]  (EBLMTF232864)
      Monitor                                           BenQ FP222W  [22" LCD]  (17117574)

    Multimedia:
      Audio Adapter                                     nVIDIA HDMI/DP @ nVIDIA GM107 - High Definition Audio Controller
      Audio Adapter                                     SigmaTel STAC9227X @ Intel 82801IB ICH9 - High Definition Audio Controller [A-2]

    Storage:
      Storage Controller                                ANCN6DJE IDE Controller
      Storage Controller                                Intel Chipset SATA RAID Controller
      Disk Drive                                        Hitach  HUA723020ALA641 SCSI Disk Device  (2000 GB, 7200 RPM, SATA-III)
      Disk Drive                                        ST316081 2AS SCSI Disk Device  (160 GB, 7200 RPM, SATA-II)
      Disk Drive                                        TEAC USB   HS-CF Card USB Device
      Disk Drive                                        TEAC USB   HS-MS Card USB Device
      Disk Drive                                        TEAC USB   HS-SD Card USB Device
      Disk Drive                                        TEAC USB   HS-xD/SM USB Device
      Disk Drive                                        WD      WD2500AAJS-75VWA SCSI Disk Device  (232 GB)
      Disk Drive                                        WD 6400AAK External USB Device  (596 GB, USB)
      Disk Drive                                        WD Ext HDD 1021 USB Device  (1863 GB, USB)
      Optical Drive                                     TODK XUZK1Q7 SCSI CdRom Device
      SMART Hard Disks Status                           OK

    Partitions:
      C: (NTFS)                                         149.0 GB (56.3 GB free)
      D: (NTFS)                                         1863.0 GB (641.2 GB free)
      E: (NTFS)                                         232.7 GB (74.3 GB free)
      K: (NTFS)                                         1863.0 GB (1135.1 GB free)
      M: (NTFS)                                         596.2 GB (133.8 GB free)
      Total Size                                        4703.9 GB (2040.8 GB free)

[routman54]

Bonjour ,
Une remarque , Malwrebytes n'est pas un antivirus , surtout si tu as la version Free , il est bien de l'avoir de le mettre à jour et de le passer une fois par mois selon les sites que tu fréquentes ce sera plus ou moins .
Des antivirus gratuit ce n'est pas ce qui manque les plus utilisés les trois A : Avast , Avira , AVG ou encore un qui est cher à notre ami Pac428 Panda .
Vu el matériel je ne pense pas que le fait d'avoir 6 ou 8 Go de rams change quelque chose , surtout que l'on ne sait pas si ton système est en 32 ou 64 bits .
nvlddmkm c'est un pilote de chez Nvidia , as tu essayé de mettre ta carte graphique à jour ?
Si le système n'est pas le bon tu changes c'est > ICI <.
Bonne continuation .

[yevgi]

Bonjour et merci de ta réponse.

aida l'a mentionné mais c'est pas hyper flagrant : Computer Type ACPI x64-based PC.
Vais essayer la mise à jour en espérant que ça va résoudre le problème.

Et Zone Alarm? je garde ou je vire?
Vais voir pour l'anti-virus. Panda j'aime pas car il est trop gourmand en CPU (en tout cas sur mon pc).

Apres ça, est-ce qu'à ton avis il faudrait faire un coup de ménage avec des prog de détection au cas où?

[routman54]

Re ,
On peut toujours faire une vérification avec FRST .

Cliques sur l'icône : tu choisis 64 bits puisque c'est le cas .
Tu enregistres et Exécutes le logiciel en tant qu'administrateur
La fenêtre principal s'ouvre , tu cliques sur Analyse
Deux rapports seront fait ils seront ou est ton logiciel ( Téléchargements ou Bureau )
Tu nous les joins à ton prochain message en te servant de cliques sur l'image

Si besoin on t'enverra sur la section Virus et Sécurité .
Bonne continuation .

[EinsteinZero]

Code: Tout sélectionner

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2017
Ran by yevgi (administrator) on YEVGIS-PC (02-08-2017 18:33:18)
Running from K:\Downloads
Loaded Profiles: yevgi (Available Profiles: yevgi)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Anglais (États-Unis)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Apple Inc.) C:\Program Files (x86)\Blizzard\Bonjour Service\mDNSResponder.exe
(Outertech) C:\Program Files (x86)\Cacheman\CachemanServ.exe
(Flux Software LLC) C:\Users\yevgi\AppData\Local\FluxSoftware\Flux\flux.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hammer & Chisel, Inc.) C:\Users\yevgi\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\yevgi\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\yevgi\AppData\Local\Discord\app-0.0.297\Discord.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Farbar) K:\Downloads\FRST64 (1).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2016-04-12] (PixArt Imaging Incorporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [144184 2016-10-11] (Check Point Software Technologies Ltd.)
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Run: [f.lux] => C:\Users\yevgi\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062560 2017-07-18] (Valve Corporation)
HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Policies\Explorer: [NoSMBalloonTip] 0
HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\MountPoints2: {ab104840-2f23-11e5-af39-806e6f6e6963} - L:\setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-07-20] (Microsoft Corporation)
Startup: C:\Users\yevgi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AIMP3.lnk [2016-01-01]
ShortcutTarget: AIMP3.lnk -> C:\Program Files (x86)\AIMP3\AIMP3.exe (AIMP DevTeam)
Startup: C:\Users\yevgi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Chrome.lnk [2016-03-01]
ShortcutTarget: Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction <==== ATTENTION
GroupPolicy\User: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{96753750-4F8E-4C96-B1A4-22C9005A0A2C}: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{96753750-4F8E-4C96-B1A4-22C9005A0A2C}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-3773579273-1286502390-278821453-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2014-05-22] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2014-05-22] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: 4nk7tqaa.default
FF ProfilePath: C:\Users\yevgi\AppData\Roaming\Mozilla\Firefox\Profiles\4nk7tqaa.default [2017-06-13]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\4nk7tqaa.default -> @Mail.Ru
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\4nk7tqaa.default -> Поиск@Mail.Ru
FF Homepage: Mozilla\Firefox\Profiles\4nk7tqaa.default -> hxxp://www.google.fr/
FF Session Restore: Mozilla\Firefox\Profiles\4nk7tqaa.default -> is enabled.
FF Extension: (Video DownloadHelper) - C:\Users\yevgi\AppData\Roaming\Mozilla\Firefox\Profiles\4nk7tqaa.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-06-12]
FF Extension: (Adblock Plus) - C:\Users\yevgi\AppData\Roaming\Mozilla\Firefox\Profiles\4nk7tqaa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-12]
FF Extension: (Youtube Unblocker Remediation) - C:\Users\yevgi\AppData\Roaming\Mozilla\Firefox\Profiles\4nk7tqaa.default\features\{0c778b91-91a5-416f-bc49-95a5f6173c23}\malware-remediation@mozilla.org.xpi [2017-06-12]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-01-27] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-28] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-06-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-06-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-28] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-06-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-05] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-05] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-01] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-01] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-06-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3773579273-1286502390-278821453-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-06-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3773579273-1286502390-278821453-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\yevgi\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3773579273-1286502390-278821453-1001: @talk.google.com/O1DPlugin -> C:\Users\yevgi\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3773579273-1286502390-278821453-1001: @tools.google.com/Google Update;version=3 -> C:\Users\yevgi\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-3773579273-1286502390-278821453-1001: @tools.google.com/Google Update;version=9 -> C:\Users\yevgi\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-3773579273-1286502390-278821453-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\yevgi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [No File]
FF Plugin ProgramFiles/Appdata: C:\Users\yevgi\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\yevgi\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)

Chrome:
=======
CHR HomePage: Default -> mail.ru/cnt/11956636?rciguc__PARAM__
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\yevgi\AppData\Local\Google\Chrome\User Data\Default [2017-08-02]
CHR Extension: (Adguard AdBlocker) - C:\Users\yevgi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2017-07-17]
CHR Extension: (Adblock Plus) - C:\Users\yevgi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-12]
CHR Extension: (Tampermonkey) - C:\Users\yevgi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-05-22]
CHR Extension: (Morpheon Dark) - C:\Users\yevgi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafbdhjdkjnoafhfelkjpchpaepjknad [2017-02-08]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\yevgi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-10]
CHR Extension: (Chrome Media Router) - C:\Users\yevgi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-17]
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 Bonjour Service; C:\Program Files (x86)\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2017-04-19] (Apple Inc.)
R2 CachemanService; C:\Program Files (x86)\Cacheman\CachemanServ.exe [238152 2013-05-15] (Outertech)
S4 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2574168 2015-09-11] (Dell Inc.)
S4 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201560 2015-09-11] (Dell Inc.)
S4 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [400656 2017-06-24] (EasyAntiCheat Ltd)
S3 GalaxyClientService; E:\GOG Galaxy\GalaxyClientService.exe [488000 2017-07-09] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8077376 2017-07-09] (GOG.com)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-07-12] (Hi-Rez Studios) [File not signed]
S3 HnGSteamService; E:\Jeux Steam\steamapps\common\Heroes & Generals\hngservice.exe [722216 2017-07-20] (Reto-Moto ApS)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2016-04-14] (Macrovision Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-27] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2016-11-17] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2016-11-17] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1165368 2016-11-17] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-07-08] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-11-21] ()
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S4 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [21160 2015-09-30] (Dell Inc.)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [838128 2016-12-15] (Tunngle.net GmbH)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4087568 2016-10-11] (Check Point Software Technologies Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2016-10-06] (Check Point Software Technologies, Ltd.)
R2 ZoneAlarm ICM Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe [796472 2016-10-11] (Check Point Software Technologies Ltd.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2016-03-28] ()
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [32464 2015-09-11] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-09-11] (Dell Computer Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-05-09] ()
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2017-01-14] (Echobit, LLC)
R3 hcw88rc5; C:\Windows\System32\Drivers\hcw88rc5.sys [15872 2012-11-20] (Hauppauge Computer Works, Inc.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31144 2015-06-23] (Intel Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2016-03-28] ()
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [251832 2017-08-02] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2016-11-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2016-11-17] (NVIDIA Corporation)
R3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [677376 2016-04-12] (PixArt Imaging Inc.)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11616 2001-08-25] () [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-07-20] (Duplex Secure Ltd.)
U5 tap0901t; C:\Windows\System32\Drivers\tap0901t.sys [39464 2016-04-27] (Tunngle.net GmbH)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [461240 2017-03-20] (Check Point Software Technologies Ltd.)
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-01-04] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2017-01-04] (Zemana Ltd.)
U3 ajhni3wt; C:\Windows\System32\Drivers\ajhni3wt.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-02 15:55 - 2017-08-02 15:55 - 000000000 ____D C:\NVIDIA
2017-08-02 15:42 - 2017-08-02 15:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
2017-08-02 14:35 - 2017-08-03 02:46 - 000000000 ____D C:\Users\yevgi\AppData\Local\Nordic_Games
2017-07-30 19:01 - 2017-07-30 19:01 - 000000000 ____D C:\Users\yevgi\AppData\Local\CAPCOM
2017-07-30 19:00 - 2017-07-30 19:00 - 000000717 _____ C:\Users\yevgi\Desktop\Dragon's Dogma Dark Arisen.lnk
2017-07-30 19:00 - 2017-07-30 19:00 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\Dragon's Dogma Dark Arisen_Uninstall
2017-07-30 14:15 - 2017-07-30 14:15 - 000000509 _____ C:\Users\Public\Desktop\Mad Max.lnk
2017-07-28 17:59 - 2017-07-28 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-07-27 17:57 - 2017-07-27 17:57 - 000000000 ____D C:\Users\yevgi\Documents\Carmageddon Reincarnation
2017-07-27 16:26 - 2017-07-27 16:26 - 000000728 _____ C:\Users\yevgi\Desktop\Carmageddon Reincarnation.lnk
2017-07-27 16:26 - 2017-07-27 16:26 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\Carmageddon Reincarnation
2017-07-27 12:44 - 2017-07-27 12:44 - 000000000 ____D C:\ProgramData\Gaijin
2017-07-27 00:27 - 2017-07-27 00:27 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\EasyAntiCheat
2017-07-26 11:20 - 2017-08-02 17:05 - 000002740 _____ C:\Windows\System32\Tasks\AutoKMSDaily
2017-07-25 09:20 - 2017-08-02 17:05 - 000078848 _____ C:\Windows\KMSEmulator.exe
2017-07-24 17:21 - 2017-07-24 17:20 - 000381359 _____ C:\Users\yevgi\Desktop\Fronshtein Eugène - CV Aadm.pdf
2017-07-24 17:21 - 2017-07-11 14:12 - 000384952 _____ C:\Users\yevgi\Desktop\Fronshtein Eugène - CV Acom.pdf
2017-07-24 16:03 - 2017-08-02 17:05 - 000000202 _____ C:\Windows\Tasks\AutoKMSDaily.job
2017-07-24 16:03 - 2017-08-02 17:05 - 000000200 _____ C:\Windows\Tasks\AutoKMS.job
2017-07-24 16:03 - 2017-07-24 16:03 - 000647168 _____ C:\Windows\AutoKMS.exe
2017-07-24 16:03 - 2017-07-24 16:03 - 000002432 _____ C:\Windows\System32\Tasks\AutoKMS
2017-07-24 16:03 - 2017-07-24 16:03 - 000000184 _____ C:\Windows\AutoKMS.ini
2017-07-20 16:38 - 2017-07-20 16:38 - 000000774 _____ C:\Users\Public\Desktop\Sorcerer King.lnk
2017-07-13 02:40 - 2017-07-13 02:40 - 000000953 _____ C:\Users\Public\Desktop\The Bureau XCOM Declassified.lnk
2017-07-12 15:02 - 2017-07-30 12:27 - 000000000 ____D C:\Users\yevgi\AppData\Local\Saints Row The Third
2017-07-12 15:01 - 2017-07-12 15:01 - 000000770 _____ C:\Users\Public\Desktop\Saints Row - The Third.lnk
2017-07-11 21:22 - 2017-07-11 21:38 - 000000000 ____D C:\Users\yevgi\Documents\Mount&Blade Warband Savegames
2017-07-11 21:03 - 2017-07-11 21:31 - 000000000 ____D C:\Users\yevgi\Documents\Mount&Blade Warband
2017-07-11 21:03 - 2017-07-11 21:23 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\Mount&Blade Warband
2017-07-11 20:58 - 2017-07-11 20:58 - 000000761 _____ C:\Users\Public\Desktop\Race The Sun.lnk
2017-07-11 20:56 - 2017-07-11 20:56 - 000000852 _____ C:\Users\Public\Desktop\Mount and Blade - Warband.lnk
2017-07-11 16:29 - 2017-07-11 16:29 - 000000802 _____ C:\Users\Public\Desktop\Kings Bounty Crossworlds GOTY.lnk
2017-07-09 22:12 - 2017-07-09 22:12 - 000000800 _____ C:\Users\Public\Desktop\FTL - Advanced Edition.lnk
2017-07-09 14:24 - 2017-07-09 14:24 - 000000000 ____D C:\Users\yevgi\AppData\Local\GOG.com
2017-07-09 14:21 - 2017-07-09 14:21 - 000000749 _____ C:\Users\Public\Desktop\Oblivion.lnk
2017-07-09 12:26 - 2017-08-02 18:33 - 000055318 _____ C:\Windows\ZAM.krnl.trace
2017-07-09 12:26 - 2017-08-02 18:33 - 000024870 _____ C:\Windows\ZAM_Guard.krnl.trace
2017-07-07 16:45 - 2017-07-07 16:45 - 000000741 _____ C:\Users\Public\Desktop\Cossacks 3.lnk
2017-07-07 16:16 - 2017-07-07 16:16 - 000000707 _____ C:\Users\Public\Desktop\POD GOLD.lnk
2017-07-07 16:16 - 1996-10-22 16:59 - 000744960 _____ (Intel Corporation) C:\Windows\SysWOW64\IR41_32.DLL
2017-07-05 12:06 - 2017-07-05 12:21 - 000010899 _____ C:\Users\yevgi\Desktop\Budget.xlsx

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-03 02:47 - 2016-07-20 15:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-08-03 02:47 - 2016-07-20 15:05 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-03 02:47 - 2015-09-09 15:58 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-08-03 02:47 - 2015-07-22 01:16 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-03 02:47 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\registration
2017-08-03 02:47 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-08-03 02:45 - 2015-07-18 16:37 - 000000000 ____D C:\Program Files\Intel
2017-08-02 18:33 - 2016-10-17 14:56 - 000000000 ____D C:\FRST
2017-08-02 18:32 - 2015-07-18 14:53 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\AIMP3
2017-08-02 17:04 - 2016-07-20 15:20 - 000000000 ____D C:\Users\yevgi\AppData\Local\NVIDIA Corporation
2017-08-02 17:04 - 2016-07-20 15:19 - 000000000 ____D C:\Users\yevgi\AppData\Local\NVIDIA
2017-08-02 17:04 - 2015-07-18 16:40 - 000000000 ____D C:\Program Files (x86)\Steam
2017-08-02 17:03 - 2017-05-17 23:45 - 000251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-08-02 17:03 - 2017-01-30 15:09 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-08-02 17:02 - 2016-07-20 15:27 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-02 17:01 - 2016-03-05 13:17 - 000458272 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-02 17:01 - 2015-07-18 14:18 - 000000000 ____D C:\Users\yevgi
2017-08-02 17:01 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-02 16:05 - 2015-11-09 11:48 - 000000000 ____D C:\temp
2017-08-02 15:47 - 2015-07-18 14:36 - 000118096 _____ C:\Users\yevgi\AppData\Local\GDIPFONTCACHEV1.DAT
2017-08-02 15:42 - 2016-01-28 20:12 - 000000975 _____ C:\Users\Public\Desktop\DriversCloud.com - Start the detection.lnk
2017-08-02 15:42 - 2015-09-09 15:35 - 000000000 ____D C:\ProgramData\DriversCloud.com
2017-08-02 15:42 - 2015-09-09 15:35 - 000000000 ____D C:\Program Files\DriversCloud.com
2017-08-02 14:23 - 2009-07-14 06:45 - 000032464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-08-02 14:23 - 2009-07-14 06:45 - 000032464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-08-02 13:50 - 2015-10-28 20:03 - 002127460 _____ C:\Users\yevgi\Desktop\Report AIDA64.txt
2017-08-01 16:47 - 2015-08-26 11:38 - 000384976 _____ C:\Windows\system32\perfh00D.dat
2017-08-01 16:47 - 2015-08-26 11:38 - 000084952 _____ C:\Windows\system32\perfc00D.dat
2017-08-01 16:47 - 2015-08-03 13:42 - 000746478 _____ C:\Windows\system32\perfh00C.dat
2017-08-01 16:47 - 2015-08-03 13:42 - 000149900 _____ C:\Windows\system32\perfc00C.dat
2017-08-01 16:47 - 2009-07-14 07:13 - 002139360 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-31 23:47 - 2015-07-18 16:49 - 000000000 ____D C:\Users\yevgi\Documents\My games
2017-07-31 20:46 - 2015-07-22 02:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-07-31 20:46 - 2009-07-14 07:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-07-31 16:59 - 2015-07-18 17:58 - 000000000 ____D C:\Users\yevgi\AppData\Local\Battle.net
2017-07-31 16:58 - 2015-07-18 17:58 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-07-30 15:45 - 2016-03-10 19:02 - 000000000 ____D C:\Users\yevgi\Documents\WB Games
2017-07-30 14:00 - 2015-12-14 10:20 - 000000000 ____D C:\AdwCleaner
2017-07-30 13:43 - 2015-07-18 16:46 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\uTorrent
2017-07-30 12:31 - 2016-07-25 13:39 - 000000000 ____D C:\Users\yevgi\AppData\Local\CrashDumps
2017-07-28 19:23 - 2015-07-22 23:19 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\Skype
2017-07-28 17:59 - 2016-04-12 17:39 - 000000000 ___RD C:\Program Files (x86)\Skype
2017-07-28 17:59 - 2015-07-22 23:19 - 000002697 _____ C:\Users\Public\Desktop\Skype.lnk
2017-07-28 17:59 - 2015-07-22 23:19 - 000000000 ____D C:\ProgramData\Skype
2017-07-27 14:03 - 2017-05-17 23:44 - 000001911 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-07-27 14:03 - 2016-08-27 15:15 - 000001380 _____ C:\Users\yevgi\Desktop\MediaInfo.lnk
2017-07-27 12:44 - 2017-06-05 01:00 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crossout
2017-07-20 17:35 - 2015-07-18 17:17 - 000000000 ____D C:\ProgramData\Stardock
2017-07-17 13:34 - 2015-10-22 19:09 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\TeamViewer
2017-07-13 02:20 - 2015-07-20 23:30 - 000005434 _____ C:\Users\yevgi\Documents\ax_files.xml
2017-07-10 21:23 - 2015-07-18 16:45 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2017-07-10 01:11 - 2015-07-20 03:23 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\vlc
2017-07-09 14:21 - 2016-12-23 12:44 - 000000000 ____D C:\ProgramData\GOG.com
2017-07-09 12:29 - 2009-07-14 04:34 - 000000778 _____ C:\Windows\win.ini
2017-07-09 12:27 - 2016-11-09 23:36 - 000000000 ____D C:\Windows\Minidump
2017-07-09 12:26 - 2015-07-18 14:10 - 000269008 ____N C:\Windows\Minidump\070917-40201-01.dmp
2017-07-08 14:11 - 2015-12-09 01:55 - 000018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2017-07-03 19:33 - 2015-11-09 15:01 - 000000000 ____D C:\Users\yevgi\AppData\Roaming\TS3Client
2017-07-03 16:18 - 2017-06-07 12:59 - 000000961 _____ C:\Users\yevgi\Desktop\TESO.lnk

==================== Files in the root of some directories =======

2017-02-11 21:50 - 2017-02-11 22:28 - 000000098 _____ () C:\Users\yevgi\AppData\Roaming\LauncherSettings_live.cfg
2017-02-11 21:57 - 2017-02-11 21:58 - 000000043 _____ () C:\Users\yevgi\AppData\Roaming\TheHunterSettings_steam_live.cfg
2016-08-01 15:17 - 2016-08-01 15:17 - 000000000 ___SH () C:\Users\yevgi\AppData\Local\LumaEmu
2015-07-29 21:34 - 2017-05-08 21:51 - 000007626 _____ () C:\Users\yevgi\AppData\Local\Resmon.ResmonCfg
2017-02-27 19:22 - 2017-02-27 19:22 - 000000016 _____ () C:\ProgramData\mntemp

Files to move or delete:
====================
C:\Users\yevgi\ZHPCleaner.exe
C:\Users\yevgi\ZHPDiag3.exe


Some files in TEMP:
====================
2016-10-20 19:26 - 2016-10-20 19:26 - 002458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\yevgi\AppData\Local\Temp\libeay32.dll
2016-10-20 19:26 - 2016-10-20 19:26 - 000970912 _____ (Microsoft Corporation) C:\Users\yevgi\AppData\Local\Temp\msvcr120.dll
2016-10-20 19:26 - 2016-10-20 19:26 - 000772672 _____ () C:\Users\yevgi\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-08-01 18:59

==================== End of FRST.txt ============================

[EinsteinZero]

Code: Tout sélectionner

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2017
Ran by yevgi (02-08-2017 18:34:53)
Running from K:\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2015-07-18 12:18:30)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3773579273-1286502390-278821453-500 - Administrator - Disabled)
Guest (S-1-5-21-3773579273-1286502390-278821453-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3773579273-1286502390-278821453-1002 - Limited - Enabled)
yevgi (S-1-5-21-3773579273-1286502390-278821453-1001 - Administrator - Enabled) => C:\Users\yevgi

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

«XCOM 2 1.0.0.2893 (HKLM-x32\...\«XCOM 2_is1) (Version: 1.0.0.2893 - 2K Games)
µTorrent (HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
7 Days to Die (HKLM\...\Steam App 251570) (Version:  - The Fun Pimps)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
AIDA64 Extreme v5.30 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.30 - FinalWire Ltd.)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.60.1497, 15.07.2015 - AIMP DevTeam)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 373.06 - NVIDIA Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Cacheman (HKLM-x32\...\Cacheman) (Version: 7.90 - Outertech)
Carmageddon Reincarnation (HKLM-x32\...\Carmageddon Reincarnation_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, spider91)
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
Cossacks 3 (HKLM-x32\...\1797227701_is1) (Version: 2.0.0.3 - GOG.com)
CPUID CPU-Z 1.77 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.29 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
Crossout Launcher 1.0.3.18 (HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\CrossOutLauncher_is1) (Version:  - )
Darkstone (HKLM-x32\...\GOGPACKDARKSTONE_is1) (Version: 2.0.0.10 - GOG.com)
Dell Data Vault (HKLM\...\{2E55EEFD-2162-4A7D-9158-EDB0305603A6}) (Version: 4.3.5.1 - Dell Inc.) Hidden
Dell Resource CD (HKLM-x32\...\{42929F0F-CE14-47AF-9FC7-FF297A603021}) (Version: 1.10.0000 - Nom de votre société)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.1.14 - Dell)
Dell System Detect (HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\58d94f3ce2c27db0) (Version: 7.9.0.10 - Dell)
Dell Update (HKLM-x32\...\{DB82968B-57A4-4397-81A5-ECAB21B5DFCD}) (Version: 1.7.1015.0 - Dell Inc.)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dragon's Dogma Dark Arisen (HKLM-x32\...\Dragon's Dogma Dark Arisen_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, Panky)
DriversCloud.com (64 bits) (HKLM\...\{DAF9DBEF-113C-42A9-853C-B890E70DEB48}) (Version: 10.0.4.0 - Cybelsoft)
Dungeons 2 (HKLM\...\Steam App 262280) (Version:  - Realmforge Studios)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
f.lux (HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\Flux) (Version:  - )
Far Cry (Patch 1.4) (HKLM-x32\...\{7EF15AAF-42AC-4CF6-B4B4-C4F0D1D92122}) (Version: 1.00.0000 - Ubisoft) Hidden
Far Cry 3 (HKLM-x32\...\Far Cry 3_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, spider91)
Fences (HKLM\...\{10CD364B-FFCC-48BE-B469-B9622A033075}) (Version: 1.0 - Stardock Corporation) Hidden
Fences (HKLM-x32\...\Fences) (Version:  - Stardock Corporation)
Free MP3 WMA OGG Converter 9.6.2 (HKLM-x32\...\Free MP3 WMA OGG Converter_is1) (Version:  - CyberPower Tech, Inc.)
FreeMouseAutoClicker 3.7 (HKLM-x32\...\{292F00C5-25EF-4FBE-9873-13EF1F69DEED}_is1) (Version:  - Advanced Mouse Auto Clicker ltd.)
FTL -  Advanced Edition (HKLM-x32\...\GOGPACKFTL_is1) (Version: 2.3.0.13 - GOG.com)
Gameforge Live 2.0.12 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.12 - Gameforge)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Heroes & Generals (HKLM\...\Steam App 227940) (Version:  - Reto-Moto)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.9.6 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 20.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
King's Bounty Crossworlds GOTY (HKLM-x32\...\GOGPACKKINGSBOUNTYCROSSGOTY_is1) (Version: 2.0.0.2 - GOG.com)
Left 4 Dead 2 (HKLM\...\Steam App 550) (Version:  - Valve)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Mad Max (HKLM-x32\...\Mad Max_is1) (Version:  - )
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
MediaInfo 0.7.87 (HKLM\...\MediaInfo) (Version: 0.7.87 - MediaArea.net)
Microsoft .NET Framework 4.5.2 (עברית) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1037) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office Language Pack 2010 - French/Français (HKLM\...\Office14.OMUI.fr-fr) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{4549ceb8-695a-42eb-a183-4820d542a15f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mises à jour NVIDIA 2.13.0.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.13.0.21 - NVIDIA Corporation) Hidden
Mount and Blade - Warband  - Viking Conquest (HKLM-x32\...\Mount and Blade: Warband  - Viking Conquest_is1) (Version: 2.1.1.11 - GOG.com)
Mount and Blade - Warband (HKLM-x32\...\1207666913_is1) (Version: 2.2.0.10 - GOG.com)
Mozilla Firefox 45.0.1 (x86 fr) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 fr)) (Version: 45.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.8 (HKLM-x32\...\{5D198290-6E7D-426C-9AF0-8DA34CC7E596}) (Version: 1.2.8 - Thorvald Natvig)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA PhysX (Legacy) (HKLM-x32\...\{FAAC26AD-73BA-40CE-86AA-C9213F9E064A}) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 373.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 373.06 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA Pilote du contrôleur 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Pilote graphique 373.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 373.06 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
OCCT 4.4.2 (HKLM-x32\...\OCCT) (Version: 4.4.2 - Ocbase.com)
Oh...Sir! The Insult Simulator (HKLM\...\Steam App 512250) (Version:  - Vile Monarch)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{121727D5-FDF3-4723-BA57-EB383440ED72}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.11.2.10120 - Electronic Arts, Inc.)
Paladins (HKLM\...\Steam App 444090) (Version:  - Hi-Rez Studios)
Panneau de configuration NVIDIA 373.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 373.06 - NVIDIA Corporation) Hidden
Path of Exile (HKLM\...\Steam App 238960) (Version:  - Grinding Gear Games)
PAYDAY 2 (HKLM\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.313.1 - Tracker Software Products Ltd)
POD GOLD (HKLM-x32\...\GOGPACKPOD_is1) (Version: 2.0.0.19 - GOG.com)
Portal Knights (HKLM-x32\...\Portal Knights_is1) (Version:  - )
Prey (HKLM-x32\...\Prey_is1) (Version:  - )
Race The Sun (HKLM-x32\...\1207660134_is1) (Version: 2.3.0.8 - GOG.com)
Realtek USB Audio (HKLM-x32\...\{0A46A65D-89AC-464C-8026-3CD44960BD04}) (Version: 6.3.9600.41 - Realtek Semiconductor Corp.)
Saints Row - The Third (HKLM-x32\...\1430740694_is1) (Version: 2.0.0.4 - GOG.com)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (HKLM\...\{90140000-0100-040C-1000-0000000FF1CE}_Office14.OMUI.fr-fr_{8342039F-CB53-43AA-9B78-53108FBA912C}) (Version:  - Microsoft)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM\...\Steam App 8930) (Version:  - Firaxis Games)
Sid Meiers Civilization VI - Digital Deluxe v.1.0.0.26 (HKLM-x32\...\Sid Meiers Civilization VI - Digital Deluxe_is1) (Version:  - )
Skype™ 7.38 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.38.101 - Skype Technologies S.A.)
Sorcerer King™ (HKLM-x32\...\1445609115_is1) (Version: 2.0.0.4 - GOG.com)
Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
StarCraft (HKLM-x32\...\StarCraft) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellaris (HKLM-x32\...\Stellaris_is1) (Version:  - )
Sunrise (HKLM-x32\...\Sunrise_is1) (Version: 2.3.0.8 - GOG.com)
Synei System Utilities (HKLM-x32\...\{BFDC3B26-7DB0-43D3-BC84-7E9649C157EA}_is1) (Version: 3.45 - Synei)
TeamSpeak 3 Client (HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
The Bureau XCOM Declassified version 1.0 u1 (HKLM-x32\...\The Bureau XCOM Declassified_is1) (Version: 1.0 u1 - 2K Games)
The Elder Scrolls IV: Oblivion (HKLM-x32\...\1458058109_is1) (Version: 1.2.0416 - GOG.com)
The Forest (HKLM\...\Steam App 242760) (Version:  - Endnight Games Ltd)
The Witcher Adventure Game (HKLM-x32\...\1207666883_is1) (Version: 2.4.0.23 - GOG.com)
Titan Quest - Anniversary Edition (HKLM-x32\...\Titan Quest - Anniversary Edition_R.G. Mechanics_is1) (Version:  - R.G. Mechanics, Panky)
Titan Quest Anniversary Edition (HKLM\...\Steam App 475150) (Version:  - Iron Lore Entertainment)
Tunngle (HKLM-x32\...\Tunngle_is1) (Version: 5.8.8 - Tunngle.net GmbH)
Unity Web Player (HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Universal Extractor 1.6.1 (HKLM-x32\...\Universal Extractor_is1) (Version: 1.6.1 - Jared Breland)
Uplay (HKLM-x32\...\Uplay) (Version: 22.2 - Ubisoft)
UsbFix (HKLM-x32\...\Usbfix) (Version: 8.145 - El Desaparecido - http://www.usbfix.net - http://www.sosvirus.net)
VC_CRT_x64 (HKLM\...\{54F2237F-018C-483B-8884-9FC0D88840C3}) (Version: 1.02.0000 - Intel Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VP3 Codec for Video for Windows (HKLM-x32\...\VP3 Codec for Video for Windows) (Version:  - )
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - Blizzard Entertainment)
Webcam 1200 (HKLM-x32\...\{66D475AE-F18B-43A0-8BAF-61AF4403E339}) (Version: 1.0.0.0 - Logitech)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
ZoneAlarm Firewall (HKLM-x32\...\{0DB65A9A-2AA7-4CFE-BC87-4C159559F4C8}) (Version: 15.0.139.17085 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Free Firewall (HKLM-x32\...\ZoneAlarm Free Firewall) (Version: 15.0.139.17085 - Check Point)
ZoneAlarm Security (HKLM-x32\...\{4552CC32-D1DD-492B-AEAC-6233A709345E}) (Version: 15.0.139.17085 - Check Point Software Technologies Ltd.) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3773579273-1286502390-278821453-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\yevgi\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3773579273-1286502390-278821453-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\yevgi\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers1: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2010-06-22] (Stardock)
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxShlex.dll [2010-03-25] (Alcohol Soft Development Team)
ContextMenuHandlers2-x32: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxShlEx64.dll [2010-03-25] (Alcohol Soft Development Team)
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2010-06-22] (Stardock)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> No File
ContextMenuHandlers5: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2010-06-22] (Stardock)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2016-10-01] (NVIDIA Corporation)
ContextMenuHandlers5: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} =>  -> No File
ContextMenuHandlers6: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2010-06-22] (Stardock)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00A140B1-DA2F-4179-84EA-71BEA24FAC35} - System32\Tasks\AutoKMSDaily => C:\Windows\AutoKMS.exe [2017-07-24] ()
Task: {03FA0EE5-EFBB-436A-8F51-3A5B0AF89440} - System32\Tasks\{8F08A45C-F1A7-4E36-99E7-A870176D3071} => E:\Games\Diablo II\Diablo II.exe
Task: {04391620-F238-49C3-A4FE-B61E28F3A22B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {057489AC-EFB5-4302-8DCC-E646DEDE842F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-07-13] (AVAST Software)
Task: {2825C982-DA87-4670-A29F-DE6EBB9DA22F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {43F78A2C-90BA-400B-BC6A-506DCC6505A3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {68660A0F-D3FD-406F-A6EC-737C245CFD6E} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-09-30] (Dell Inc.)
Task: {68D175A4-2C7E-4FF5-A4FB-AF49D8E3F069} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2017-07-24] ()
Task: {70CCA311-766B-4CF1-96C7-9EE874F4D3B0} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {7FE40908-3375-4614-979F-C6B89B2CA19A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {81FEAB20-BB67-4FFD-BD8F-7A898FE1AC7B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3773579273-1286502390-278821453-1001Core => C:\Users\yevgi\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-02] (Google Inc.)
Task: {99A54054-9B8B-43BD-8522-8E11A2D60A74} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {9F3C6EFA-527A-4694-B4D3-84D725CC7D93} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)
Task: {B572290D-ABDF-42EC-A0C0-31749FABBD54} - System32\Tasks\{E3B2DB34-9D51-4A6A-87F0-FACE695BA33A} => C:\Windows\system32\pcalua.exe -a L:\AOCSETUP.EXE -d L:\
Task: {B5F32921-2157-4AF1-AF8B-BCA898FDC390} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {C9F1EE0D-F0AE-45E4-96E4-5FCD8D7F5EDA} - System32\Tasks\{C090FDC1-EA3E-4ABD-AB86-EFF9B86C8B0D} => C:\Windows\system32\pcalua.exe -a L:\autorun.exe -d L:\
Task: {EF387AE4-816D-432B-A35E-43533EE55511} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-28] (Adobe Systems Incorporated)
Task: {F2648AB2-5824-4040-89BD-185AD0103D58} - System32\Tasks\{12799062-EF4C-4E91-BF78-83F05181242C} => C:\Windows\system32\pcalua.exe -a L:\setup.exe -d L:\
Task: {F26F27FE-55A4-4B47-965D-0167C203BE2A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3773579273-1286502390-278821453-1001UA => C:\Users\yevgi\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-02] (Google Inc.)
Task: {F4A53993-608B-425A-A16D-43539379B42B} - System32\Tasks\{98319D33-0C72-47D9-BCFB-EAA3F6956F24} => C:\Windows\system32\pcalua.exe -a C:\Windows\IsUninst.exe -c -f"e:\games\might and magic heroes iii\Heroes of Might and Magic® III.isu" -c"C:\Program Files (x86)\Common Files\3DO Shared\3DOUnInst.dll
Task: {F557A22F-6AA9-4488-ADE3-DA88C99F1BF4} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3773579273-1286502390-278821453-1001Core.job => C:\Users\yevgi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3773579273-1286502390-278821453-1001UA.job => C:\Users\yevgi\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\yevgi\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->                                                                                                                                                         
ShortcutWithArgument: C:\Users\yevgi\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> "hxxp://rigneda.ru/?utm_source=startlink03&utm_content=adbf052057e305ed7ecce74202676864&utm_term=F3E78F79ED9F7BA79F44D13CD61E4CB9&utm_d=20170103"
ShortcutWithArgument: C:\Users\yevgi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->                                                                                                                                                         
ShortcutWithArgument: C:\Users\yevgi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->                                                                                                                                                         
ShortcutWithArgument: C:\Users\yevgi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->                                                                                                                                                         
ShortcutWithArgument: C:\Users\yevgi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Вoйти в Интeрнeт.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> "hxxp://rigneda.ru/?utm_source=startlink03&utm_content=adbf052057e305ed7ecce74202676864&utm_term=F3E78F79ED9F7BA79F44D13CD61E4CB9&utm_d=20170103"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->                                                                                                                                                         

==================== Loaded Modules (Whitelisted) ==============

2016-07-20 15:18 - 2016-10-01 21:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 004300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2016-11-26 13:18 - 2016-11-17 15:46 - 001148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-11-26 13:18 - 2016-11-17 15:46 - 004490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-26 13:20 - 2016-11-17 15:46 - 000420408 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2017-06-28 22:32 - 2017-06-23 05:21 - 003807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libglesv2.dll
2017-06-28 22:32 - 2017-06-23 05:21 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libegl.dll
2016-11-21 16:38 - 2016-11-21 16:38 - 000076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-07-18 16:41 - 2017-05-17 03:54 - 000678176 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-07-18 16:41 - 2016-09-01 03:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-07-18 16:41 - 2016-09-01 03:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-07-18 16:41 - 2016-09-01 03:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-07-18 16:41 - 2017-07-18 02:33 - 002497824 _____ () C:\Program Files (x86)\Steam\video.dll
2015-07-18 16:41 - 2016-01-27 09:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-07-18 16:41 - 2016-01-27 09:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-07-18 16:41 - 2016-01-27 09:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-07-18 16:41 - 2016-01-27 09:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-07-18 16:41 - 2016-01-27 09:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-07-18 16:41 - 2017-07-18 02:33 - 000884512 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-14 18:15 - 2016-07-05 00:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-11-26 13:19 - 2016-11-17 15:46 - 000020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-11-26 13:18 - 2016-11-17 15:46 - 000901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-11-26 13:18 - 2016-11-17 15:46 - 003776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-14 15:17 - 2017-07-06 19:58 - 073088800 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-06-21 22:19 - 2017-05-17 03:54 - 000678176 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2015-07-18 16:41 - 2017-07-18 02:33 - 000384288 _____ () C:\Program Files (x86)\Steam\steam.dll
2017-01-12 18:22 - 2017-01-04 15:28 - 001958912 _____ () C:\Users\yevgi\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
2017-01-12 18:23 - 2017-01-12 18:23 - 001082880 _____ () \\?\C:\Users\yevgi\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
2017-01-12 18:23 - 2017-01-12 18:23 - 003750400 _____ () \\?\C:\Users\yevgi\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
2017-01-12 18:23 - 2017-01-12 18:23 - 000914432 _____ () \\?\C:\Users\yevgi\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
2017-01-12 18:23 - 2017-05-24 14:53 - 001385976 _____ () \\?\C:\Users\yevgi\AppData\Roaming\discord\0.0.297\modules\discord_overlay\discord_overlay.node
2017-01-12 18:22 - 2017-01-04 15:28 - 002278912 _____ () C:\Users\yevgi\AppData\Local\Discord\app-0.0.297\libglesv2.dll
2017-01-12 18:22 - 2017-01-04 15:28 - 000096768 _____ () C:\Users\yevgi\AppData\Local\Discord\app-0.0.297\libegl.dll
2017-08-02 18:32 - 2017-08-02 18:32 - 000148992 _____ () \\?\C:\Users\yevgi\AppData\Local\Temp\8160.tmp.node
2017-01-12 18:23 - 2017-04-26 19:10 - 002658296 _____ () \\?\C:\Users\yevgi\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
2017-01-12 18:23 - 2017-03-22 23:23 - 002665976 _____ () \\?\C:\Users\yevgi\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node
2015-07-18 16:41 - 2015-09-25 01:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2017-07-31 17:37 - 2017-07-31 18:22 - 002009088 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\TQ.exe
2017-07-31 17:37 - 2017-07-31 18:22 - 000748544 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\NatLib.dll
2017-07-31 17:37 - 2017-07-31 18:22 - 003363840 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\Engine.dll
2017-07-31 17:37 - 2017-07-31 17:49 - 000374272 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\mss32.dll
2017-07-31 17:47 - 2017-07-31 17:47 - 000193024 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\binkw32.dll
2017-07-31 17:37 - 2017-07-31 18:23 - 000468992 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\RGAPI.dll
2017-07-31 17:37 - 2017-07-31 18:22 - 005259264 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\Game.dll
2017-07-31 18:18 - 2017-07-31 18:18 - 000084480 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\Direct3D.dll
2017-07-31 17:47 - 2017-07-31 17:47 - 000149504 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\mssmp3.asi
2017-07-31 17:59 - 2017-07-31 17:59 - 000214528 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\mssvoice.asi
2017-07-31 17:46 - 2017-07-31 17:46 - 000100352 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\mssa3d.m3d
2017-07-31 17:46 - 2017-07-31 17:46 - 000083456 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\mssds3d.m3d
2017-07-31 17:59 - 2017-07-31 17:59 - 000092672 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\mssdx7.m3d
2017-07-31 17:46 - 2017-07-31 17:46 - 000140800 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\msseax.m3d
2017-07-31 17:37 - 2017-07-31 17:47 - 000372224 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\mssrsx.m3d
2017-07-31 17:46 - 2017-07-31 17:46 - 000079360 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\msssoft.m3d
2017-07-31 17:47 - 2017-07-31 17:47 - 000111104 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\MilesRedist\mssdsp.flt
2017-07-31 17:37 - 2017-07-31 18:11 - 000831488 _____ () D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\pathengine.dll
2017-07-17 19:30 - 2017-07-17 19:30 - 000863744 _____ () C:\Windows\mod_frst.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\RUAudExD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\splwow64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system.ini:c1_encryption_d [14]
AlternateDataStreams: C:\Windows\system.ini:c1_encryption_e [84]
AlternateDataStreams: C:\Windows\win.ini:c1_encryption_d [14]
AlternateDataStreams: C:\Windows\win.ini:c1_encryption_e [84]
AlternateDataStreams: C:\Windows\system32\aaclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aelupsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdgfxinfo64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdmantle64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdmmcl6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdocl12cl64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\amdocl_as64.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\amdocl_ld64.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atieah64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ATIODCLI.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ATIODE.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\basesrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\detoured.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diskperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ep0icd1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\EP0SLM01.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fixmapi.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\FntCache.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hsa-thunk64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\icaapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDAZE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KBDAZEL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kbdgeoqw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\LkmdfCoInst.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\LMouFiltCoInst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\logman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mantle64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mantleaxl64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mcmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mstscax.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml6r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\relog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schedsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shimeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\spoolsv.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tsgqec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\typeperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ucrtbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\user32.dll.bak:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\UtcResources.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\aaclient.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdgfxinfo32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdmantle32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdmmcl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdocl12cl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\amdocl_as32.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\amdocl_ld32.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\apphelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atiadlxx.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atieah32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\detoured.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\diskperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\DWrite.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\els.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\explorer.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\fixmapi.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\GameMon.des:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hsa-thunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDAZE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KBDAZEL.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kbdgeoqw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksuser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\logman.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mantle32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mantleaxl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mapistub.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MSMPEG2ENC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2vdec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mstscax.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml6r.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\nlsbres.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qasf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\relog.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sdbinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shimeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SP207.AX:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tsgqec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\typeperf.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ucrtbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Uninstal.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\user32.dll.bak:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\usp10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vp31vfw.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wmpmde.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wshrm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmk.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\drmkaud.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\LHidFilt.Sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\LMouFilt.Sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\LUsbFilt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ndis.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\PFC027.SYS:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\portcls.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tdx.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tssecsrv.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\usbscan.sys:$CmdTcID [130]
AlternateDataStreams: C:\Users\yevgi:Heroes & Generals [38]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3773579273-1286502390-278821453-1001\...\dell.com -> dell.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2016-06-08 14:57 - 000000876 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3773579273-1286502390-278821453-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\yevgi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.8.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: CmdAgent => 2
MSCONFIG\Services: DellDataVault => 2
MSCONFIG\Services: DellDataVaultWiz => 2
MSCONFIG\Services: DellUpdate => 2
MSCONFIG\Services: SupportAssistAgent => 2
MSCONFIG\Services: TeamViewer9 => 2
MSCONFIG\startupfolder: C:^Users^yevgi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Google Chrome.lnk => C:\Windows\pss\Google Chrome.lnk.Startup
MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CachemanTray => C:\Program Files (x86)\Cacheman\CachemanTray.exe
MSCONFIG\startupreg: Cm108Sound => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
MSCONFIG\startupreg: COMODO Internet Security => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
MSCONFIG\startupreg: Discord => C:\Users\yevgi\AppData\Local\Discord\app-0.0.296\Discord.exe
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: Google Update => "C:\Users\yevgi\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Monitor => C:\Windows\PixArt\PAC207\Monitor.exe
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: ShadowPlay => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: Speech Recognition => "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{6E00E953-4A2C-46D3-AD86-4E69CAA66B35}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{46AD7DA7-A9A5-44C0-9761-94CFD0AA973F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5A2DF4D7-BBB4-40BE-A6CF-8099A6B3C6F8}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E1F1CE5D-E9D0-4E0A-BBAC-837B3412F3EE}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9B7CC8F8-21C9-49F5-9B63-25DE6486364E}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{AB586A22-A331-4FF8-98CD-E7FAEC514B0F}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BD392CA8-BD1D-4C62-A85E-4EF4BA15270A}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{FBA411C3-4849-48BD-A162-6B05405F252A}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{98316452-E39E-432B-BBFD-0E6DA8298CEF}E:\games\space run\ospacegame.exe] => (Block) E:\games\space run\ospacegame.exe
FirewallRules: [UDP Query User{17A4CBCF-5D6B-43FF-9FC2-4097413865D8}E:\games\space run\ospacegame.exe] => (Block) E:\games\space run\ospacegame.exe
FirewallRules: [{826CBC6C-30F8-488A-B62E-DFBD02700621}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{156C68D8-CD7E-49F0-BBBA-6D9D976774D2}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{AB58D33F-93F2-4A3F-9722-9131571FFB8A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{47098ABC-8FCC-4661-A06B-FB22B5420281}E:\games\diablo iii\diablo iii.exe] => (Allow) E:\games\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{F0B81CFE-5B31-4A3E-898F-36CB407FC23E}E:\games\diablo iii\diablo iii.exe] => (Allow) E:\games\diablo iii\diablo iii.exe
FirewallRules: [{8CBAD8F6-88EA-4F5A-8FE3-35A592CC2C7C}] => (Allow) LPort=48113
FirewallRules: [{FCA59F1E-C2F6-4E61-8CC8-878CFAB92F45}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2B7DFF25-D270-449C-A9EC-44316DA65BB9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{7B10069E-81B3-42A8-BB9B-85906AB1A6EE}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{DBFF09EC-7D85-48E9-851F-FE7FF29020C2}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{8EC849A8-3142-4E81-9B0C-06E6BC643535}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [UDP Query User{D5FBAFD9-325F-40AA-8A4E-E0C45143120B}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{9872774B-1108-48BD-9187-9B66DA2BF982}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{E415B561-0A5D-4CBC-B880-4BC3291B051A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{269E9E8B-DD52-4477-B10B-1C17B8D83B1D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{498F4FD9-D58B-4924-9C14-9669F39EE87A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{5D4556DD-221F-4B21-9449-622F08E7C6C9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E376B7F5-DF68-4430-BBEC-8453B2BB80C7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{44250A84-4E01-4B85-AFA1-82D4542E30FF}E:\games\warcraft iii\war3.exe] => (Allow) E:\games\warcraft iii\war3.exe
FirewallRules: [UDP Query User{12D80059-9173-4A5C-B3DE-F27BFA9E8479}E:\games\warcraft iii\war3.exe] => (Allow) E:\games\warcraft iii\war3.exe
FirewallRules: [TCP Query User{DB5C4474-60C0-40C0-BF6D-AEE4CF72FEB5}K:\downloads\downloader_diablo2_engb.exe] => (Allow) K:\downloads\downloader_diablo2_engb.exe
FirewallRules: [UDP Query User{998676F8-8E1F-4B82-9B11-8CF1719BD6D2}K:\downloads\downloader_diablo2_engb.exe] => (Allow) K:\downloads\downloader_diablo2_engb.exe
FirewallRules: [TCP Query User{705D1247-BA71-4A7F-8469-259EBC661D00}K:\downloads\downloader_diablo2_lord_of_destruction_engb.exe] => (Allow) K:\downloads\downloader_diablo2_lord_of_destruction_engb.exe
FirewallRules: [UDP Query User{7F1C5536-BAC5-4909-B14F-2BF3B5BBA83B}K:\downloads\downloader_diablo2_lord_of_destruction_engb.exe] => (Allow) K:\downloads\downloader_diablo2_lord_of_destruction_engb.exe
FirewallRules: [TCP Query User{E21C0A0B-7D69-46F0-8FC7-FCE3A243DF24}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{14F06A2A-8CBB-46CE-A926-C61E816117A5}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{0205A12C-B9AA-4F3E-BCE2-173E24E3D9A3}E:\games\diablo ii\game.exe] => (Allow) E:\games\diablo ii\game.exe
FirewallRules: [UDP Query User{B8C6DB6C-BA30-4F80-9F4E-09DE81427D37}E:\games\diablo ii\game.exe] => (Allow) E:\games\diablo ii\game.exe
FirewallRules: [{11D2031D-33A7-4C11-A88B-10DA0D361027}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F084E300-DF52-490A-8A3F-2CAD6E3BEABF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EBBB8110-B6E9-4B31-8708-031B3E1CEDBD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C5E9929C-59FD-46CC-BA2C-4FE14F1F0659}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F4ABA0EC-7DFD-4396-8A74-0C7110D88D20}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe
FirewallRules: [{90C7914B-6A5B-47EA-A849-07A6773D45C8}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe
FirewallRules: [{08E7CE14-7B99-4564-A353-A0BDD4C40A16}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{358F9F2D-0695-49DB-8CFA-3C490DECF206}] => (Allow) C:\Users\yevgi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2751D972-E167-4C49-BDF1-0AACBD0FF5C5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B26C1E24-360B-493B-A6CB-8FF7A1F030AF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{D3A5E0C1-550F-480E-934C-0AA40938DCB4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{DC28E25B-C82A-45CD-A74D-BF6056B284B7}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0FFD73D1-0DB8-40A7-A540-554D65EA2744}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{18B1F281-5AFD-473B-8EA7-4B89D01ED553}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{A7CBA873-54E9-4CA8-9123-C20418A01295}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{BE210509-4E4D-475A-8972-8421A79A47B3}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{70F26251-0FC5-409A-86C0-D52450CF883B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{B03670A4-BBC9-44E7-A0FA-11CE486D0164}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{C4DAF8CD-F207-454F-9280-4C4E64CBC8D6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{A9B01AFB-46C8-4445-B4D4-97544DEA626A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9DFE9F99-7D2A-4898-9DFA-06B1F0DA76FE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B98F09AB-094D-461F-8DAF-3D97E06AC34E}] => (Allow) E:\Jeux Steam\SteamApps\common\Oh...Sir! The Insult Simulator\ohsir.exe
FirewallRules: [{17158836-1D5A-49D2-9114-3916CF3DC5B0}] => (Allow) E:\Jeux Steam\SteamApps\common\Oh...Sir! The Insult Simulator\ohsir.exe
FirewallRules: [{AE0D69A3-F167-49EE-A837-8A5FE53B061C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{81FE68EC-E0AA-4515-BBA8-D9C1FA8378CB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E3A60353-E931-488D-9F32-9BD3EEF820FE}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{D70438BD-61A2-43DD-81E1-19AAE3CABFC0}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{3DB330BC-8FB1-47B7-9882-F00C7362B5A6}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{94067FB1-6DD9-4C94-8952-393653C5842A}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{9AC0E0A1-C276-422E-88C6-EF7250C55CE6}] => (Allow) E:\Jeux Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{B196DD4E-2783-4AF4-9F68-9DAEDECE8367}] => (Allow) E:\Jeux Steam\SteamApps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{2BE2DB78-E6A3-4D62-BF5C-B033EE78BAF5}] => (Allow) E:\GameforgeLive\gfl_client.exe
FirewallRules: [{A3F54353-444B-4575-860D-72ABBBCBDC12}] => (Allow) E:\Jeux Steam\SteamApps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{B8B909D4-CAE1-460B-AA6D-E8CEAD107F9D}] => (Allow) E:\Jeux Steam\SteamApps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{C205FE3F-B95D-4921-B2AE-E345F49C0A27}] => (Allow) E:\Jeux Steam\SteamApps\common\Dungeons2\Dungeons2.exe
FirewallRules: [{15205DE2-F29D-4A6A-9D14-A188B247420B}] => (Allow) E:\Jeux Steam\SteamApps\common\Dungeons2\Dungeons2.exe
FirewallRules: [{88D1A9DF-5F78-4BAD-9423-613A9D1706D9}] => (Allow) E:\Jeux Steam\SteamApps\common\Dungeons2\mono\bin\mono.exe
FirewallRules: [{0750656B-5C3E-42BE-BFF2-BA60E1361B60}] => (Allow) E:\Jeux Steam\SteamApps\common\Dungeons2\mono\bin\mono.exe
FirewallRules: [{C33486FD-2258-4562-B04F-007C6747A85D}] => (Allow) E:\Jeux Steam\SteamApps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{D9177301-B1D8-4A69-A81B-8D7B544B33A8}] => (Allow) E:\Jeux Steam\SteamApps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{8651FB72-EF22-424B-A341-2F7DF20550D2}] => (Allow) E:\Jeux Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{A5DEFA1D-ACD1-42A3-AF75-4A50B3AE2235}] => (Allow) E:\Jeux Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{265E3E99-0D00-49C8-9AE7-B08FDC0AA189}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{96C66E53-5561-4653-82DA-8E420EFF0F9C}] => (Allow) D:\Steam Games\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{55FDF457-67E9-4AD9-88FC-42BB4D845027}] => (Allow) D:\Steam Games\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{905837F9-2AB5-4BD1-ABB6-B1175C67B5F0}] => (Allow) D:\Steam Games\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{24891948-7954-4BF3-948A-1350173954D5}] => (Allow) D:\Steam Games\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{21872127-ED73-4A83-AF00-437C83B4A369}] => (Allow) D:\Steam Games\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{66614761-99D5-493C-930B-B6DD9C5CCE4B}] => (Allow) D:\Steam Games\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{6CC30C86-6E16-4729-8FC6-5584403351EF}] => (Allow) D:\Steam Games\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{3F7E1C15-36AC-48C4-8FD2-194A8D5CE399}] => (Allow) D:\Steam Games\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{2130F9AE-599C-46CA-B71D-FBB7BC242866}] => (Allow) D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\TQ.exe
FirewallRules: [{EAFFB3E7-234A-40A0-863E-F0AB52ED85E9}] => (Allow) D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\TQ.exe
FirewallRules: [{D361246F-D451-4E6B-B419-74441DBBC09A}] => (Allow) D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe
FirewallRules: [{070649D8-1EB6-42B7-8540-080F20197588}] => (Allow) D:\Steam Games\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe
FirewallRules: [{C96701E7-C5AA-4C75-B21E-9374D687906D}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe
FirewallRules: [{3638A7F6-7DF2-4C68-BF37-9A697452E187}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe

==================== Restore Points =========================

02-08-2017 15:39:54 Installed DriversCloud.com (64 bits)
02-08-2017 15:41:15 Installed DriversCloud.com (64 bits)
02-08-2017 15:45:51 IIF_MSI

==================== Faulty Device Manager Devices =============

Name: TAP-Win32 Adapter V9 (Tunngle)
Description: TAP-Win32 Adapter V9 (Tunngle)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Win32 Provider V9 (Tunngle)
Service: tap0901t
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/02/2017 05:52:48 PM) (Source: Software Protection Platform Service) (EventID: 8193) (User: )
Description: Le planificateur d’activation des licences (sppuinotify.dll) a échoué avec le code d’erreur suivant :
0x80070005

Error: (08/02/2017 05:01:14 PM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Échec de l’activation de la licence Windows. Erreur 0x80070005.

Error: (08/02/2017 05:01:11 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (08/02/2017 04:08:22 PM) (Source: Software Protection Platform Service) (EventID: 8193) (User: )
Description: Le planificateur d’activation des licences (sppuinotify.dll) a échoué avec le code d’erreur suivant :
0x80070005

Error: (08/02/2017 03:34:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Steam.exe version 4.5.78.60 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.

ID de processus : 230

Heure de début : 01d30b8c2e4f1a75

Heure de fin : 12

Chemin d’accès de l’application : C:\Program Files (x86)\Steam\Steam.exe

ID de rapport : 5933f35a-7787-11e7-b602-001d0924fd9a

Error: (08/02/2017 03:08:22 PM) (Source: Software Protection Platform Service) (EventID: 8193) (User: )
Description: Le planificateur d’activation des licences (sppuinotify.dll) a échoué avec le code d’erreur suivant :
0x80070005

Error: (08/02/2017 02:38:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Steam.exe version 4.5.78.60 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.

ID de processus : 5fc

Heure de début : 01d30b78cc1c5ee0

Heure de fin : 48

Chemin d’accès de l’application : C:\Program Files (x86)\Steam\Steam.exe

ID de rapport : 53c45119-777f-11e7-b602-001d0924fd9a

Error: (08/02/2017 02:08:22 PM) (Source: Software Protection Platform Service) (EventID: 8193) (User: )
Description: Le planificateur d’activation des licences (sppuinotify.dll) a échoué avec le code d’erreur suivant :
0x80070005

Error: (08/02/2017 01:34:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante NVIDIA GeForce Experience.exe, version : 51.2704.1434.1, horodatage : 0x582db2ae
Nom du module défaillant : libcef.dll, version : 3.2704.1434.0, horodatage : 0x5796c11a
Code d’exception : 0x80000003
Décalage d’erreur : 0x001ec3d9
ID du processus défaillant : 0x498
Heure de début de l’application défaillante : 0x01d30b834bc0af89
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
Chemin d’accès du module défaillant: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
ID de rapport : 8989fa3d-7776-11e7-b602-001d0924fd9a

Error: (08/02/2017 01:34:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante NVIDIA GeForce Experience.exe, version : 51.2704.1434.1, horodatage : 0x582db2ae
Nom du module défaillant : libcef.dll, version : 3.2704.1434.0, horodatage : 0x5796c11a
Code d’exception : 0x80000003
Décalage d’erreur : 0x001ec3d9
ID du processus défaillant : 0x13a0
Heure de début de l’application défaillante : 0x01d30b8345b7f33a
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
Chemin d’accès du module défaillant: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
ID de rapport : 857748e9-7776-11e7-b602-001d0924fd9a


System errors:
=============
Error: (08/02/2017 05:52:48 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: Le démarrage du serveur DCOM {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} en tant que / n’est pas possible. L’erreur :
"5"
 s’est produite lors de l’activation de la commande :
C:\Windows\System32\slui.exe -Embedding

Error: (08/02/2017 05:03:46 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
OMCI

Error: (08/02/2017 01:08:22 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: Le démarrage du serveur DCOM {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} en tant que / n’est pas possible. L’erreur :
"5"
 s’est produite lors de l’activation de la commande :
C:\Windows\System32\slui.exe -Embedding

Error: (08/02/2017 12:19:25 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
OMCI

Error: (08/01/2017 01:28:26 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: Le démarrage du serveur DCOM {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} en tant que / n’est pas possible. L’erreur :
"5"
 s’est produite lors de l’activation de la commande :
C:\Windows\System32\slui.exe -Embedding

Error: (08/01/2017 12:38:46 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
OMCI

Error: (07/31/2017 12:19:01 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: Le démarrage du serveur DCOM {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} en tant que / n’est pas possible. L’erreur :
"5"
 s’est produite lors de l’activation de la commande :
C:\Windows\System32\slui.exe -Embedding

Error: (07/31/2017 11:30:51 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
OMCI

Error: (07/30/2017 03:00:51 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: Le démarrage du serveur DCOM {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} en tant que / n’est pas possible. L’erreur :
"5"
 s’est produite lors de l’activation de la commande :
C:\Windows\System32\slui.exe -Embedding

Error: (07/30/2017 02:11:27 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
OMCI


CodeIntegrity:
===================================
  Date: 2016-09-08 19:52:22.051
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-08 19:44:48.459
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-08 19:44:48.131
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-08 11:32:50.846
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-08 11:27:01.521
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-08 11:27:01.240
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-07 12:49:15.051
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-07 12:42:18.927
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-07 12:42:18.552
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.

  Date: 2016-09-06 13:33:17.364
  Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys car le jeu de hachages d’images par page n’a pas été trouvé sur le système.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Percentage of memory in use: 61%
Total physical RAM: 6077.93 MB
Available physical RAM: 2334.12 MB
Total Virtual: 12154.04 MB
Available Virtual: 7747.97 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.05 GB) (Free:58.79 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Games) (Fixed) (Total:1863.01 GB) (Free:639.21 GB) NTFS
Drive e: (Games) (Fixed) (Total:232.7 GB) (Free:74.34 GB) NTFS
Drive k: (DD Externe (Isos + Séries)) (Fixed) (Total:1863.01 GB) (Free:1134.33 GB) NTFS
Drive l: (The Bureau) (CDROM) (Total:7.81 GB) (Free:0 GB) CDFS
Drive m: (DD Externe) (Fixed) (Total:596.17 GB) (Free:133.85 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.8 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: D35FCA64)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 987BF765)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 596.2 GB) (Disk ID: ACDD9B22)
Partition 1: (Not Active) - (Size=596.2 GB) - (Type=07 NTFS)

========================================================
Disk: 8 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00273BB2)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

[EinsteinZero]

Bonjour,
[Message de la modération]

Merci d'héberger sur un serveur (comme cjoint.com ou 1fichier.com) les rapports ou de les mettre entre balises code (ce qui ne fonctionne pas toujours quand il y a des [ ]) car sinon les pages du forum, où ils sont postés, deviennent rapidement très indigestes à lire.

pour cette fois j'ai ajouté les balises "Code"... je ne compte pas en faire une habitude...

...je peux, par contre supprimer "la chose" si besoin....

[fin du Message]

[bernard53]

Bonsoir
Ceci suite aux rapports.
Téléchargez le fichier attaché Fixlist.txt suivant le lien ci-dessous et enregistrez-le sur le Bureau.
http://www.cjoint.com/c/GHcsneJWtxY
NOTE .Il est important que les deux fichiers, FRST/FRST64 et fixlist.txt se trouvent dans le même emplacement, sinon la correction ne fonctionnera pas.
NOTICE: Ces lignes ont été écrites spécialement pour cet utilisateur, pour être utilisées exclusivement sur ce PC. Exécuter ces instructions sur une autre machine pourrait endommager le système d'exploitation.
Exécutez FRST/FRST64 cliquez une seule fois sur le bouton Corriger et attendez.

Si, pour une raison quelconque, l'outil a besoin d'un redémarrage, laissez le système redémarrer normalement. Ensuite laissez l'outil terminer son travail.
Quand il a fini, FRST va créer un rapport placé sur le Bureau (Fixlog.txt). Copiez/collez ce rapport dans votre réponse.


Joins ces rapports dans ta prochaine réponse en suivant ce tutoriel.

Ensuite supprimes "ZoneAlarm " car Windows a un très bon Pare Feu. Garde MalwaresBytes et installe un antivirus comme conseillé par routman
Ensuite pas d'installation de KMS qui va plus te créer de soucis que le reste s.t.p.

[yevgi]

@ EinsteinZero : désolé, je ne savais pas ^^"

@ bernard53 : si j'ai bien compris, une mauvaise utilisation du programme peut tuer le pc donc je préfère être sûr de la manip avant de faire quoique ce soit.
Ton lien ne me donne que le contenu du fichier .txt donc j'en ai créé un la où se trouve FRST ainsi que ses logs en l'appelant fixlist.txt et le contenu qui m'est affiché avec le lien. est-ce que ça suffit?

Ensuite j'ai le prog en anglais mais pour le moment ca ne pose pas de soucis (corriger = fix) mais si jamais il y aura des manipulations plus précises il faudra le prendre en compte ^^


P.S c'est quoi un KMS ? ^^"

[bernard53]

Pas de soucis il suffit d’enregistrer mon script en .txt comme signalé.
Rien à craindre avec mon script
A quoi sert KMS. Cela sert a valider un office illégalement
Plus de soucis que de rapport en sachant qu'il existe des mêmes logiciel gratuit. tel Libre office ou autres.

[yevgi]

Voici le fichier fixlog.txt ci-join

D'accord, je vois mieux ce qu'est un KMS, merci

[bernard53]

Bien
Comment va ton pc cette fois?

[yevgi]

Pour l'instant tout va bien
Pourvue que ça dure :p

Par contre, apres avoir fait les MàJ drivers, j'arrivais pas a arriver sur le bureau après redémarrage...
j'étais obligé de faire une restauration :/

C'était avant la manip FRST.

[bernard53]

As tu encore ce soucis au démarrage ou pas s.t.p.
Déjà tu as ciblé le soucis si c'est depuis une mise à jour des drivers.

[yevgi]

Pas de soucis au demarrage.
Par contre je viens de nouveau d'avoir le soucis de clignotement des écrans ><