What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Malware suspension [Solved]

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited

i really don't know that's a malware or not but here is my suspensions , i noticed that my disk is suddenly up to 99% without any programs working on my laptop , my mouse keep loading like i have just launched a new program or tab in my browser and i noticed a pack up from my facebook profiles including all messages and videos i have , and my anti-virus was used to update once i lanuch my laptop now it is stopped and i don't know how to restart it again

i tried to follow your guide but i didn't understand what is writen in those files .

what i am supposed to do ? 

thanks 

Post #2

:welcome:

 

Without looking at any logs we cannot deterimine whats going on on your system. The logs will show us if malware is present or not. Just read the instructions closely, if you have problems running this program and posting the logs you may want to think about having a friend who maybe a bit more computer savvy give you a hand.

 

 

 
Please download Farbar Recovery Scan Tool and save it to your DESKTOP<<<<<<
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 
How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system
A simple way to check your system: Start –> Computer (right click) –> Properties
 
[external image: FRST_zps5d956a1a.jpg]
 
 
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Just keep the defaults as in the picture checkmarked
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
    • Post #3
    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2016
    Ran by [removed] (15-12-2016 22:58:10)
    Running from C:\Users\[removed]\Downloads
    Windows 8.1 Pro (Update) (X64) (2016-04-26 21:47:06)
    Boot Mode: Normal
    ==========================================================
     
     
    ==================== Accounts: =============================
     
    Administrator (S-1-5-21-4211983725-98754823-3943254612-500 - Administrator - Disabled)
    Ahmed-pc (S-1-5-21-4211983725-98754823-3943254612-1001 - Administrator - Enabled) => C:\Users\Ahmed-pc
    Guest (S-1-5-21-4211983725-98754823-3943254612-501 - Limited - Disabled)
    UpdatusUser (S-1-5-21-4211983725-98754823-3943254612-1002 - Limited - Enabled) => C:\Users\UpdatusUser
     
    ==================== Security Center ========================
     
    (If an entry is included in the fixlist, it will be removed.)
     
    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
     
    ==================== Installed Programs ======================
     
    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
     
    Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
    Adobe Illustrator CC 2015 (HKLM-x32\…\{5680D629-B263-49CC-821E-3CEBD4507B51}) (Version: 19.0 - Adobe Systems Incorporated)
    Adobe Photoshop CC 2015 (HKLM-x32\…\{2D99B50E-431D-4AA8-85C1-172A6F8BCF01}) (Version: 16.0 - Adobe Systems Incorporated)
    Adobe Update Management Tool (HKLM-x32\…\{534A7A1A-7102-4AF6-23EA-7CD279C7B625}_is1) (Version: 8.0 - PainteR)
    Arduino (HKLM-x32\…\Arduino) (Version: 1.0.6 - Arduino LLC)
    ARM Toolchain 7.0 (x32 Version: 7.0.575 - Atmel) Hidden
    Atmel Driver Files (HKLM-x32\…\{6F7D7F68-DBBF-45E2-ADE8-B78E72C2D1C1}) (Version: 7.1.16 - Atmel Corporation)
    Atmel LibUSB0 Driver (x64) (HKLM\…\{C1F86585-CDAC-4ABE-B163-161DDBCC4332}) (Version: 7.0.125 - Atmel)
    Atmel Segger USB Drivers (501e) (HKLM-x32\…\{156C0C95-4DDE-4F88-97A0-5EEE22269CE3}) (Version: 7.0.417 - Atmel)
    Atmel Software Framework (x32 Version: 7.0.897 - Atmel) Hidden
    Atmel Studio 7.0 (HKLM-x32\…\{adaef4da-da98-4898-b445-135c2ea2efa5}) (Version: 7.0.943 - Atmel)
    Atmel Studio Development Environment (x32 Version: 7.0.943 - Atmel) Hidden
    Atmel WinDriver (HKLM-x32\…\{FAF2A9D1-33C8-48FF-8FD5-20075A53AB9C}) (Version: 7.0.23 - Atmel)
    Atmel WinUSB (HKLM-x32\…\{22D3C72E-42F9-4B0F-B331-E0AA134ADF76}) (Version: 6.2.32 - Atmel)
    Avast Free Antivirus (HKLM-x32\…\Avast) (Version: 12.3.2280 - AVAST Software)
    AVR32 Device Support (x32 Version: 7.0.922 - Atmel) Hidden
    AVR32 Toolchain 7.0 (x32 Version: 7.0.536 - Atmel) Hidden
    AVR8 Device Support (x32 Version: 7.0.922 - Atmel) Hidden
    AVR8 Toolchain (x32 Version: 7.0.909 - Atmel) Hidden
    AVRDUDESS 2.4 (HKLM-x32\…\{B6EAF03F-3DB3-4170-A4B0-B7007AAD6D0C}_is1) (Version: 2.4 - Zak Kemble)
    Borland C++Builder 5 (HKLM-x32\…\CBuilder5) (Version:  - )
    Cisco Packet Tracer 6.3 (HKLM-x32\…\Cisco Packet Tracer 6.3_is1) (Version:  - Cisco Systems, Inc.)
    CodeBlocks (HKU\S-1-5-21-4211983725-98754823-3943254612-1001\…\CodeBlocks) (Version: 13.12 - The Code::Blocks Team)
    Conexant HD Audio (HKLM\…\CNXT_AUDIO_HDA) (Version: 8.65.28.50 - Conexant)
    Dolby Digital Plus Home Theater (HKLM\…\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.5.1.1 - Dolby Laboratories Inc)
    doPDF 6.1  printer (HKLM\…\doPDF 6  printer_is1) (Version:  - Softland)
    ElecNet Trial Edition 7.6 (64-bit) (HKLM\…\{1B243E17-64E6-49DA-91B6-74AF77DC4B9C}) (Version: 7.6 - Infolytica Corporation)
    Energy Manager (HKLM-x32\…\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.33 - Lenovo)
    Energy Manager (x32 Version: 1.0.0.33 - Lenovo) Hidden
    FileZilla Client 3.18.0 (HKLM-x32\…\FileZilla Client) (Version: 3.18.0 - Tim Kosse)
    Google Chrome (HKLM-x32\…\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
    Google Toolbar for Internet Explorer (HKLM-x32\…\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
    Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
    HI-TECH C Compiler for the PIC10/12/16 MCUs V9.82PL0 (HKLM-x32\…\PICC 9.82) (Version: 9.82 - HI-TECH Software)
    HI-TECH C51-lite V9.60PL0 (HKLM-x32\…\HC51 9.60PL0) (Version: 9.60 - HI-TECH Software)
    HP Deskjet 1510 series Basic Device Software (HKLM\…\{C9064E5C-D5AB-4EEB-86A6-50756901038A}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
    HP Deskjet 1510 series Help (HKLM-x32\…\{2E25FCEB-EFCB-4696-AA01-D3CBAC721831}) (Version: 30.0.0 - Hewlett Packard)
    HP Photo Creations (HKLM-x32\…\HP Photo Creations) (Version: 1.0.0.7702 - HP)
    HP Update (HKLM-x32\…\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    Imagenomic Portraiture 2.3 Plug-in (build 2308) (HKLM\…\ImagenomicPortraiturePlugin) (Version:  - )
    Intel(R) Management Engine Components (HKLM-x32\…\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
    Intel(R) Processor Graphics (HKLM-x32\…\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)
    Intel(R) Rapid Storage Technology (HKLM\…\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.0.1098 - Intel Corporation)
    InterBase (HKLM-x32\…\InterBase) (Version:  - )
    Java 8 Update 111 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
    Keil µVision4 (HKLM-x32\…\Keil µVision4) (Version: 5.14.2.1 - ARM Ltd)
    Lenovo EasyCamera (HKLM-x32\…\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10256 - Realtek Semiconductor Corp.)
    Lenovo pointing device (HKLM\…\Elantech) (Version: 11.4.31.1 - ELAN Microelectronic Corp.)
    LTspice XVII (HKLM\…\LTspice XVII) (Version:  - Linear Technology Corporation)
    MagNet Trial Edition 7.6 (64-bit) (HKLM\…\{2FA3E68F-0AD2-4E72-88FE-1BE3689D9682}) (Version: 7.6 - Infolytica Corporation)
    MATLAB R2013a (HKLM\…\Matlab R2013a) (Version: 8.1 - The MathWorks, Inc.)
    Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\…\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\…\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\…\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\…\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\…\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\…\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft Help Viewer 2.2 (HKLM-x32\…\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
    Microsoft Office Professional Plus 2016 - en-us (HKLM\…\ProplusRetail - en-us) (Version: 16.0.7571.2072 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-4211983725-98754823-3943254612-1001\…\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
    Microsoft Project Professional 2016 - en-us (HKLM\…\ProjectProRetail - en-us) (Version: 16.0.7571.2072 - Microsoft Corporation)
    Microsoft SQL Server 2014 Management Objects  (HKLM-x32\…\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\…\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
    Microsoft Visio Professional 2016 - en-us (HKLM\…\VisioProRetail - en-us) (Version: 16.0.7571.2072 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\…\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\…\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\…\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
    Microsoft Visual Studio 2015 Shell (Isolated) (HKLM-x32\…\{d2981c27-a434-4c9a-96c7-0209e97c4eac}) (Version: 14.0.23107.10 - Microsoft Corporation)
    Nero 8 Micro 8.3.6.0 (HKLM-x32\…\Nero8Lite_is1) (Version: 8.3.6.0 - Updatepack.nl)
    Nik Collection (HKLM-x32\…\Nik Collection) (Version: 1.2.11 - Google)
    NVIDIA GeForce Experience 1.7 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.7 - NVIDIA Corporation)
    NVIDIA Graphics Driver 332.33 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.33 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.13.0927 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
    Office 16 Click-to-Run Extensibility Component (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
    Office 16 Click-to-Run Licensing Component (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
    Office 16 Click-to-Run Localization Component (Version: 16.0.7571.2072 - Microsoft Corporation) Hidden
    Product Improvement Study for HP Deskjet 1510 series (HKLM\…\{EC27E742-EB04-4A2C-BA64-20271929528A}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
    Proteus 8 Professional (HKLM-x32\…\{B8A525DB-6906-4F0C-92D7-33D55345E4E8}) (Version: 8.0.15417.0 - Labcenter Electronics)
    Qualcomm Atheros Bluetooth Suite (64) (HKLM\…\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.308 - Qualcomm Atheros Communications)
    Qualcomm Atheros Client Installation Program (HKLM-x32\…\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
    Realtek Card Reader (HKLM-x32\…\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39052 - Realtek Semiconductor Corp.)
    Realtek Ethernet Controller Driver (HKLM-x32\…\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
    SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
    SAM Device Support (x32 Version: 7.0.931 - Atmel) Hidden
    Security Task Manager 2.1h (HKLM-x32\…\Security Task Manager) (Version: 2.1h - Neuber Software)
    Update for  (KB2504637) (HKLM-x32\…\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
    VLC media player 2.0.5 (HKLM-x32\…\VLC media player) (Version: 2.0.5 - VideoLAN)
    Windows Driver Package - Lenovo (ACPIVPC) System  (02/17/2013 9.52.0.776) (HKLM\…\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
    Windows Driver Package - Lenovo (WUDFRd) LenovoVhid  (07/25/2013 10.30.0.288) (HKLM\…\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
    WinRAR 5.31 (64-bit) (HKLM\…\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
     
    ==================== Custom CLSID (Whitelisted): ==========================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    CustomCLSID: HKU\S-1-5-21-4211983725-98754823-3943254612-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Ahmed-pc\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\FileCoAuthLib64.dll (Microsoft Corporation)
     
    ==================== Scheduled Tasks (Whitelisted) =============
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    Task: {5485F610-E1C3-4CFC-AB0A-D18B99264849} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-02] (Microsoft Corporation)
    Task: {73FBE458-02DC-4016-B972-5AA56F8D80B1} - System32\Tasks\MATLAB R2013a Startup Accelerator => C:\Program Files\MATLAB\R2013a\bin\win64\MATLABStartupAccelerator.exe [2013-01-16] ()
    Task: {7BED6B40-9A99-4D52-9C48-235EC722C6B9} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [2015-08-10] (MSFree Inc.)
    Task: {7C4B3B7F-A61E-4767-80B0-FEFDCC9BC16A} - System32\Tasks\HPCustParticipation HP Deskjet 1510 series => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.)
    Task: {7EF508CC-7D53-4266-B55A-4664ED655D83} - System32\Tasks\SafeZone scheduled Autoupdate 1480691573 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
    Task: {93B98C92-79EB-4EC5-B73D-1EFC0D0FA5C1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-12-07] (Microsoft Corporation)
    Task: {B44D4862-428D-4436-9D58-127908FB4118} - System32\Tasks\NIUpdateServiceStartupTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe
    Task: {BF33AEA2-28BC-4070-B86F-B9E3B81ED364} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-12-07] (Microsoft Corporation)
    Task: {C348BE8A-0787-48F3-A27B-756983ED3BAA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-26] (Google Inc.)
    Task: {C77804C4-7EBC-4693-A2C2-8693CE7E6678} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-02] (AVAST Software)
    Task: {D1A3876D-C27A-4500-BF57-F38EC201D0ED} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-02] (Microsoft Corporation)
    Task: {F2C8CC43-CE7D-4191-9A11-41FD040EBCDC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
    Task: {F6C55CC4-79E1-49D5-9201-B6C60F9566C9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-12-02] (AVAST Software)
    Task: {FB3E4ED2-DA97-4EDA-950C-D5723D827252} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-26] (Google Inc.)
     
    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
     
    Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\MATLAB R2013a Startup Accelerator.job => C:\Program Files\MATLAB\R2013a\bin\win64\MATLABStartupAccelerator.exe
     
    ==================== Shortcuts =============================
     
    (The entries could be listed to be restored or removed.)
     
    ==================== Loaded Modules (Whitelisted) ==============
     
    2016-04-27 00:02 - 2014-01-06 10:13 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
    2016-05-27 14:19 - 2016-05-27 14:19 - 00052912 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
    2016-04-26 15:21 - 2016-12-02 17:36 - 08924872 _____ () C:\Program Files\Microsoft Office\root\Office16\1033\GrooveIntlResource.dll
    2016-12-15 22:45 - 2016-12-15 22:45 - 01678560 _____ () C:\Users\Ahmed-pc\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
    2013-10-30 07:22 - 2013-10-30 07:22 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
    2013-10-30 07:19 - 2013-10-30 07:19 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
    2013-10-30 07:26 - 2013-10-30 07:26 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
    2016-04-27 00:00 - 2010-10-26 06:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
    2016-12-15 02:33 - 2016-12-08 10:03 - 02412888 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
    2016-12-15 02:33 - 2016-12-08 10:03 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
    2016-01-13 03:12 - 2016-01-13 03:12 - 53316304 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\Plug-Ins\Spaces2\libcef.dll
    2016-01-13 03:10 - 2016-01-13 03:10 - 04100304 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\aif.dll
    2016-12-02 17:08 - 2016-12-02 17:08 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
    2016-12-15 22:36 - 2016-12-15 22:36 - 03131344 _____ () C:\Program Files\AVAST Software\Avast\defs\16121500\algo.dll
    2016-12-02 17:08 - 2016-12-02 17:08 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
    2016-12-02 17:08 - 2016-12-02 17:08 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
    2016-04-26 23:50 - 2013-09-16 21:20 - 01242584 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
    2016-01-13 03:12 - 2016-01-13 03:12 - 44047568 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\libcef.dll
    2016-01-13 03:12 - 2016-01-13 03:12 - 01488592 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\libglesv2.dll
    2016-01-13 03:12 - 2016-01-13 03:12 - 00080080 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\libegl.dll
     
    ==================== Alternate Data Streams (Whitelisted) =========
     
    (If an entry is included in the fixlist, only the ADS will be removed.)
     
     
    ==================== Safe Mode (Whitelisted) ===================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
     
     
    ==================== Association (Whitelisted) ===============
     
    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
     
     
    ==================== Internet Explorer trusted/restricted ===============
     
    (If an entry is included in the fixlist, it will be removed from the registry.)
     
     
    ==================== Hosts content: ===============================
     
    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
     
    2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
     
     
    ==================== Other Areas ============================
     
    (Currently there is no automatic fix for this section.)
     
    HKU\S-1-5-21-4211983725-98754823-3943254612-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ahmed-pc\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
    DNS Servers: [removed] - [removed]
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.
     
    ==================== MSCONFIG/TASK MANAGER disabled items ==
     
    HKLM\…\StartupApproved\Run: => "cAudioFilterAgent"
    HKLM\…\StartupApproved\Run: => "Energy Manager"
    HKLM\…\StartupApproved\Run: => "Lenovo Utility"
    HKLM\…\StartupApproved\Run: => "SmartAudio"
    HKLM\…\StartupApproved\Run32: => "HP Software Update"
    HKU\S-1-5-21-4211983725-98754823-3943254612-1001\…\StartupApproved\StartupFolder: => "Send to OneNote.lnk"
     
    ==================== FirewallRules (Whitelisted) ===============
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    FirewallRules: [vm-monitoring-nb-session] => LPort=139
    FirewallRules: [{AE1B33EF-994F-4F40-B890-DE5C0376AE7A}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    FirewallRules: [{BDB40262-027F-4C90-903A-C2C77BC9E9D9}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    FirewallRules: [{01837B77-9AF4-4FC1-B409-EAA7320D28BD}] => C:\Program Files\Microsoft Office\root\Office16\Lync.exe
    FirewallRules: [{CB63F7F5-8DEE-4D49-A222-B7BE30CA6370}] => C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
    FirewallRules: [{5003FCC3-48D6-4179-ABA5-7F7E0693A3BA}] => C:\Users\Ahmed-pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe
    FirewallRules: [{1C47E3EF-D5C7-4BF9-9328-FAA05360D8B4}] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
    FirewallRules: [{F975ABF6-B751-4128-BA2E-18ED229830BB}] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
    FirewallRules: [{2969DDAA-3744-4D06-AF13-CD25A1648242}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe
    FirewallRules: [{218CF8FB-020F-4693-8205-06897E28D627}] => C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe
    FirewallRules: [{E5CCE5F0-CAB3-43D0-A45A-012522505374}] => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe
    FirewallRules: [{958C6236-4C32-40C2-9E3D-E48F556C5A98}] => C:\Program Files (x86)\Labcenter Electronics\Proteus 8 Demonstration\BIN\\PDS.EXE
    FirewallRules: [{3B03FA47-BB40-4640-934B-AD3DBEB8193A}] => C:\Program Files (x86)\Labcenter Electronics\Proteus 8 Demonstration\BIN\\PDS.EXE
    FirewallRules: [{FAEFC4A9-2C3A-4F76-84F6-6989DB43C895}] => C:\Program Files (x86)\Labcenter Electronics\Proteus 8 Professional\BIN\PDS.EXE
    FirewallRules: [{6162997D-FCD3-42CF-91CF-F8BD00BC325B}] => C:\Program Files (x86)\Labcenter Electronics\Proteus 8 Professional\BIN\PDS.EXE
    FirewallRules: [{8D2CA2C5-4F34-4201-AFF6-A97EA1E83A68}] => C:\Program Files (x86)\Labcenter Electronics\Proteus 8 Professional\BIN\PDS.EXE
    FirewallRules: [{5B493985-C4C7-44BF-B4A3-CE13477A437E}] => C:\Program Files (x86)\Labcenter Electronics\Proteus 8 Professional\BIN\PDS.EXE
    FirewallRules: [TCP Query User{0FD757AD-8A98-4979-B39A-45DC521B013B}C:\program files (x86)\cisco packet tracer 6.3\bin\packettracer6.exe] => C:\program files (x86)\cisco packet tracer 6.3\bin\packettracer6.exe
    FirewallRules: [UDP Query User{4D21DA1B-5158-4BB2-AEEC-74852AF711B2}C:\program files (x86)\cisco packet tracer 6.3\bin\packettracer6.exe] => C:\program files (x86)\cisco packet tracer 6.3\bin\packettracer6.exe
    FirewallRules: [TCP Query User{DCAD473B-6107-4938-9026-9DD441AA78EA}F:\pro evolution soccer 2016\pes2016.exe] => F:\pro evolution soccer 2016\pes2016.exe
    FirewallRules: [UDP Query User{4F51C30B-776B-4B67-AA6A-D717762AD44F}F:\pro evolution soccer 2016\pes2016.exe] => F:\pro evolution soccer 2016\pes2016.exe
    FirewallRules: [{7AE616E9-7BF0-488E-8845-2B16116797CE}] => C:\Program Files (x86)\Atmel\Studio\7.0\atbackend\atbackend.exe
    FirewallRules: [{5BD7750C-9BEC-4227-A8FE-FE112C12D6A9}] => C:\Program Files (x86)\Atmel\Studio\7.0\AtmelStudio.exe
    FirewallRules: [{0B16C94E-846E-452E-863E-945EC4A948E1}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [TCP Query User{200ACE9E-40FD-4B0F-B8B3-4D627269584F}F:\games\outlast\binaries\win64\olgame.exe] => F:\games\outlast\binaries\win64\olgame.exe
    FirewallRules: [UDP Query User{8FEE94C1-539C-4D4C-843A-FCDE90BBF7CF}F:\games\outlast\binaries\win64\olgame.exe] => F:\games\outlast\binaries\win64\olgame.exe
    FirewallRules: [TCP Query User{EABD88B4-1FD3-48E8-88B0-BEF7A0055012}C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe] => C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe
    FirewallRules: [UDP Query User{7A72C099-5988-443D-B814-08D782DA39E4}C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe] => C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe
    FirewallRules: [TCP Query User{9B014D70-C161-40BA-82A1-BE8ED6280EC4}C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\java.exe] => C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\java.exe
    FirewallRules: [UDP Query User{AE50CBCB-1D57-4668-9934-9629D6A8C7A4}C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\java.exe] => C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\java.exe
    FirewallRules: [TCP Query User{303FFA90-AC7D-47CB-B081-939CD417344B}C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe] => C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe
    FirewallRules: [UDP Query User{66938B60-8783-4D2E-9CBB-30BC5DD3553A}C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe] => C:\users\ahmed-pc\desktop\arduino-1.6.9-windows\arduino-1.6.9\java\bin\javaw.exe
    FirewallRules: [{FFE757D7-583A-45FF-BD2B-2AA46E15446F}] => C:\Program Files\Microsoft Office\root\Office16\Lync.exe
    FirewallRules: [{47992507-B35F-40BC-8052-0C1E9A3E9632}] => C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
    FirewallRules: [TCP Query User{24868EC1-C5AE-40DB-A651-CE0798E2A232}C:\users\ahmed-pc\desktop\processing-2.2.1\java\bin\java.exe] => C:\users\ahmed-pc\desktop\processing-2.2.1\java\bin\java.exe
    FirewallRules: [UDP Query User{4A82218C-B911-4A66-ABF5-2AFB1271274C}C:\users\ahmed-pc\desktop\processing-2.2.1\java\bin\java.exe] => C:\users\ahmed-pc\desktop\processing-2.2.1\java\bin\java.exe
    FirewallRules: [TCP Query User{878BF729-E2E5-4958-8A15-E78C2A91EA52}C:\users\ahmed-pc\desktop\new folder (3)\processing-2.2.1\java\bin\java.exe] => C:\users\ahmed-pc\desktop\new folder (3)\processing-2.2.1\java\bin\java.exe
    FirewallRules: [UDP Query User{AE6D2B08-306F-45AC-8F14-5222E28A9B6A}C:\users\ahmed-pc\desktop\new folder (3)\processing-2.2.1\java\bin\java.exe] => C:\users\ahmed-pc\desktop\new folder (3)\processing-2.2.1\java\bin\java.exe
    FirewallRules: [{2FC9E4DB-D13F-4B13-8B16-B9A8070B58B0}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
     
    ==================== Restore Points =========================
     
    05-12-2016 23:51:23 Windows Update
    13-12-2016 05:31:51 Windows Update
     
    ==================== Faulty Device Manager Devices =============
     
    Name: 
    Description: 
    Class Guid: 
    Manufacturer: 
    Service: 
    Problem: : The drivers for this device are not installed. (Code 28)
    Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
     
     
    ==================== Event log errors: =========================
     
    Application errors:
    ==================
    Error: (12/15/2016 10:39:06 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IAStorDataMgrSvc.exe, version: 13.0.0.1098, time stamp: 0x52f2620d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x049b4c35
    Faulting process id: 0x1704
    Faulting application start time: 0x01d257132ca57f60
    Faulting application path: C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    Faulting module path: unknown
    Report Id: 851c4faf-c306-11e6-8911-68f72898ebd6
    Faulting package full name: 
    Faulting package-relative application ID:
     
    Error: (12/15/2016 10:39:06 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: IAStorDataMgrSvc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.NullReferenceException
    Stack:
       at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
       at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
       at IAStorDataMgr.EventRelay.b__0(System.Object)
       at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
       at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
       at System.Threading.ThreadPoolWorkQueue.Dispatch()
       at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
     
    Error: (12/15/2016 03:59:43 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IAStorDataMgrSvc.exe, version: 13.0.0.1098, time stamp: 0x52f2620d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x04844c35
    Faulting process id: 0xb58
    Faulting application start time: 0x01d256db61f747e1
    Faulting application path: C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    Faulting module path: unknown
    Report Id: ba73fc0a-c2ce-11e6-8910-d0534960e691
    Faulting package full name: 
    Faulting package-relative application ID:
     
    Error: (12/15/2016 03:59:43 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: IAStorDataMgrSvc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.NullReferenceException
    Stack:
       at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
       at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
       at IAStorDataMgr.EventRelay.b__0(System.Object)
       at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
       at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
       at System.Threading.ThreadPoolWorkQueue.Dispatch()
       at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
     
    Error: (12/15/2016 03:17:54 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IAStorDataMgrSvc.exe, version: 13.0.0.1098, time stamp: 0x52f2620d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x04794c35
    Faulting process id: 0xdc8
    Faulting application start time: 0x01d256d58a3408dd
    Faulting application path: C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    Faulting module path: unknown
    Report Id: e2c11430-c2c8-11e6-890f-d0534960e691
    Faulting package full name: 
    Faulting package-relative application ID:
     
    Error: (12/15/2016 03:17:54 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: IAStorDataMgrSvc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.NullReferenceException
    Stack:
       at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
       at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
       at IAStorDataMgr.EventRelay.b__0(System.Object)
       at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
       at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
       at System.Threading.ThreadPoolWorkQueue.Dispatch()
       at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
     
    Error: (12/15/2016 01:46:24 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IAStorDataMgrSvc.exe, version: 13.0.0.1098, time stamp: 0x52f2620d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x03aa4c35
    Faulting process id: 0x17f0
    Faulting application start time: 0x01d256642ce6efaf
    Faulting application path: C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    Faulting module path: unknown
    Report Id: 85663cd7-c257-11e6-890e-68f72898ebd6
    Faulting package full name: 
    Faulting package-relative application ID:
     
    Error: (12/15/2016 01:46:24 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: IAStorDataMgrSvc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.NullReferenceException
    Stack:
       at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
       at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
       at IAStorDataMgr.EventRelay.b__0(System.Object)
       at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
       at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
       at System.Threading.ThreadPoolWorkQueue.Dispatch()
       at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
     
    Error: (12/14/2016 08:14:10 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IAStorDataMgrSvc.exe, version: 13.0.0.1098, time stamp: 0x52f2620d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x04de4c35
    Faulting process id: 0x126c
    Faulting application start time: 0x01d25635c35846d7
    Faulting application path: C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    Faulting module path: unknown
    Report Id: 1bcb1a9f-c229-11e6-890d-68f72898ebd6
    Faulting package full name: 
    Faulting package-relative application ID:
     
    Error: (12/14/2016 08:14:10 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: IAStorDataMgrSvc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.NullReferenceException
    Stack:
       at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
       at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
       at IAStorDataMgr.EventRelay.b__0(System.Object)
       at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
       at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
       at System.Threading.ThreadPoolWorkQueue.Dispatch()
       at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
     
     
    System errors:
    =============
    Error: (12/15/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
     
    Error: (12/15/2016 03:59:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
     
    Error: (12/15/2016 03:17:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
     
    Error: (12/15/2016 01:46:26 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
     
    Error: (12/14/2016 10:59:06 PM) (Source: DCOM) (EventID: 10010) (User: Ahmed)
    Description: The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.
     
    Error: (12/14/2016 09:43:38 PM) (Source: DCOM) (EventID: 10010) (User: Ahmed)
    Description: The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.
     
    Error: (12/14/2016 08:14:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
     
    Error: (12/14/2016 05:29:46 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout.
     
    Error: (12/14/2016 05:29:46 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout.
     
    Error: (12/14/2016 03:55:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
     
     
    ==================== Memory info =========================== 
     
    Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
    Percentage of memory in use: 42%
    Total physical RAM: 8088.36 MB
    Available physical RAM: 4669.41 MB
    Total Virtual: 9368.36 MB
    Available Virtual: 4882.14 MB
     
    ==================== Drives ================================
     
    Drive c: () (Fixed) (Total:150.98 GB) (Free:65.67 GB) NTFS
    Drive e: () (Fixed) (Total:389.85 GB) (Free:377.37 GB) NTFS
    Drive f: () (Fixed) (Total:390.34 GB) (Free:129.69 GB) NTFS
     
    ==================== MBR & Partition Table ==================
     
    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D9FA2484)
    Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=151 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=390.3 GB) - (Type=07 NTFS)
    Partition 4: (Not Active) - (Size=389.9 GB) - (Type=OF Extended)
     
    ==================== End of Addition.txt ============================
    Post #4
    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
    Ran by [removed] (administrator) on AHMED (15-12-2016 22:57:18)
    Running from C:\Users\[removed]\Downloads
    [removed]
    Platform: Windows 8.1 Pro (Update) (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: IE)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
     
    ==================== Processes (Whitelisted) =================
     
    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
     
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
    (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
    (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
    (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
    (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
    (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
    (Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
    () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
    () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
    (Intel Corporation) C:\Windows\System32\igfxtray.exe
    (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
    (Realtek semiconductor) C:\Windows\RTFTrack.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2015\Photoshop.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
    (Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\CEPHtmlEngine.exe
    (Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\CEPHtmlEngine.exe
    (Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\CEPHtmlEngine.exe
    (Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\CEPHtmlEngine.exe
    (Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\CEPHtmlEngine.exe
    (Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\CEPHtmlEngine.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.7571.2075\OfficeClickToRun.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
     
    ==================== Registry (Whitelisted) ====================
     
    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
     
    HKLM\…\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-02-26] (Intel Corporation)
    HKLM\…\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
    HKLM\…\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
    HKLM\…\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
    HKLM\…\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
    HKLM\…\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891080 2013-10-17] (ELAN Microelectronics Corp.)
    HKLM\…\Run: [RtsFT] => C:\Windows\RTFTrack.exe [6340312 2013-12-23] (Realtek semiconductor)
    HKLM\…\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2016-04-27] (Lenovo(beijing) Limited)
    HKLM\…\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2016-04-27] (Lenovo(beijing) Limited)
    HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-04-28] (Adobe Systems Incorporated)
    HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-12-02] (AVAST Software)
    HKLM-x32\…\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
    HKLM-x32\…\Run: [] => [X]
    HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
    Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
    HKLM\…\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-10-30] (Qualcomm®Atheros®)
    HKU\S-1-5-21-4211983725-98754823-3943254612-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-12-02] (AVAST Software)
    Startup: C:\Users\Ahmed-pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2016-04-27]
    ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)
    GroupPolicy: Restriction - Chrome <======= ATTENTION
    GroupPolicy\User: Restriction <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
     
    ==================== Internet (Whitelisted) ====================
     
    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
     
    AutoConfigURL: [S-1-5-21-4211983725-98754823-3943254612-1001] => hxxp://no-stops.com/wpad.dat?fbc7eff281cfc41c4d1f472c69366e2d21574897
    Tcpip\Parameters: [DhcpNameServer] [removed] [removed]
    Tcpip\..\Interfaces\{003F0231-46F2-4977-BCF8-F0C6AD00027D}: [DhcpNameServer] [removed] [removed]
    Tcpip\..\Interfaces\{3DF77972-FAD6-4B18-929B-4E5EE3165E02}: [DhcpNameServer] [removed] [removed]
    ManualProxies: 0hxxp://no-stops.com/wpad.dat?fbc7eff281cfc41c4d1f472c69366e2d21574897
     
    Internet Explorer:
    ==================
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-4211983725-98754823-3943254612-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp
    URLSearchHook: [S-1-5-21-4211983725-98754823-3943254612-1002] ATTENTION => Default URLSearchHook is missing
    BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-12-02] (Microsoft Corporation)
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-12-02] (Google Inc.)
    BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-12-02] (Microsoft Corporation)
    BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-12-02] (Microsoft Corporation)
    BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-11-22] (Oracle Corporation)
    BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-12-02] (AVAST Software)
    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-12-02] (Google Inc.)
    BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-02] (Microsoft Corporation)
    BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-22] (Oracle Corporation)
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-12-02] (Google Inc.)
    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-12-02] (Google Inc.)
    Toolbar: HKU\S-1-5-21-4211983725-98754823-3943254612-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-12-02] (Google Inc.)
    Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
    Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
    Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
    Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
    Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
    Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
    Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
    Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-02] (Microsoft Corporation)
     
    FireFox:
    ========
    FF DefaultProfile: u1yj1ikt.default
    FF ProfilePath: C:\Users\Ahmed-pc\AppData\Roaming\Mozilla\Firefox\Profiles\u1yj1ikt.default [2016-07-09]
    FF Extension: (Disable Private Browsing Plus) - C:\Users\Ahmed-pc\AppData\Roaming\Mozilla\Firefox\Profiles\u1yj1ikt.default\Extensions\{43e98d89-1e1d-a8dc-eb86-b9221fc3ccbf}.xpi [2016-07-09]
    FF Extension: (Procon Latte Content Filter) - C:\Users\Ahmed-pc\AppData\Roaming\Mozilla\Firefox\Profiles\u1yj1ikt.default\Extensions\{9D6218B8-03C7-4b91-AA43-680B305DD35C}.xpi [2016-07-09]
    FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
    FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-12]
    FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-12]
    FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
    FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-02] (Microsoft Corporation)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
    FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-22] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-22] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-12-02] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-12-02] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
    FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
     
    Chrome: 
    =======
    CHR Profile: C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default [2016-12-15]
    CHR Extension: (Google Slides) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-02]
    CHR Extension: (Google Docs) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-02]
    CHR Extension: (Google Drive) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-02]
    CHR Extension: (YouTube) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-02]
    CHR Extension: (Avast SafePrice) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-12-02]
    CHR Extension: (Google Sheets) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-02]
    CHR Extension: (Google Docs Offline) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-02]
    CHR Extension: (Avast Online Security) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-12-15]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-02]
    CHR Extension: (Gmail) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-02]
    CHR Extension: (Chrome Media Router) - C:\Users\Ahmed-pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-05]
    CHR HKLM-x32\…\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
     
    ==================== Services (Whitelisted) ====================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [317568 2013-10-30] (Windows (R) Win 7 DDK provider) [File not signed]
    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-12-02] (AVAST Software)
    R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3698888 2016-12-02] (Microsoft Corporation)
    R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-10-09] (ELAN Microelectronics Corp.)
    S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-02-26] (Intel Corporation)
    R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
    S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
    R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-10-30] (Atheros) [File not signed]
     
    ===================== Drivers (Whitelisted) ======================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-12-02] (AVAST Software)
    R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-12-02] (AVAST Software)
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-12-02] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-12-02] (AVAST Software)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-12-02] (AVAST Software)
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-12-02] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-12-02] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-12-02] (AVAST Software)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-12-02] (AVAST Software)
    R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3880448 2013-11-13] (Qualcomm Atheros Communications, Inc.)
    S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-10-30] (Qualcomm Atheros)
    S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
    S3 libusb0; C:\Windows\system32\DRIVERS\libusb0.sys [44480 2011-05-28] (hxxp://libusb-win32.sourceforge.net)
    S3 libusb0; C:\Windows\SysWOW64\DRIVERS\libusb0.sys [42592 2014-02-06] (hxxp://libusb-win32.sourceforge.net)
    R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
    R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9101016 2013-12-23] (Realtek Semiconductor Corp.)
    R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
    S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
    S3 ssudobex; C:\Windows\system32\DRIVERS\ssudobex.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.)
    S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
    S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
    R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [268800 2014-01-28] (Jungo Connectivity)
     
    ==================== NetSvcs (Whitelisted) ===================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
     
    ==================== One Month Created files and folders ========
     
    (If an entry is included in the fixlist, the file/folder will be moved.)
     
    2016-12-15 22:57 - 2016-12-15 22:57 - 00021935 _____ C:\Users\Ahmed-pc\Downloads\FRST.txt
    2016-12-15 22:50 - 2016-12-07 15:43 - 01631722 ____N C:\Users\Ahmed-pc\Desktop\al.rar
    2016-12-15 22:50 - 2016-12-06 23:06 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\al
    2016-12-15 22:45 - 2016-12-15 22:45 - 00003172 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
    2016-12-15 20:35 - 2016-12-15 20:46 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\robot_3dtracking
    2016-12-15 20:33 - 2016-12-15 20:33 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\sketch_dec13a
    2016-12-15 20:01 - 2016-12-15 20:28 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\_7amada
    2016-12-15 16:58 - 2016-12-15 19:41 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\master2
    2016-12-15 15:40 - 2016-12-15 15:40 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\testbluetooth
    2016-12-15 15:39 - 2016-12-15 19:10 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\serialmaster
    2016-12-14 20:37 - 2016-12-14 20:38 - 00809893 _____ C:\Users\Ahmed-pc\Downloads\Weight-control-1.pdf
    2016-12-14 20:37 - 2016-12-14 20:37 - 00752738 _____ C:\Users\Ahmed-pc\Downloads\PUD1.pdf
    2016-12-14 16:36 - 2016-12-14 17:29 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\master
    2016-12-14 10:52 - 2016-12-14 10:52 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\_3DInterface
    2016-12-14 10:49 - 2014-05-19 20:13 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\processing-2.2.1
    2016-12-14 10:40 - 2016-12-14 10:49 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\project
    2016-12-13 21:53 - 2016-12-15 22:57 - 00000000 ____D C:\FRST
    2016-12-13 21:51 - 2016-12-13 21:53 - 02420224 _____ (Farbar) C:\Users\Ahmed-pc\Downloads\FRST64.exe
    2016-12-13 10:08 - 2016-07-12 16:08 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
    2016-12-13 09:36 - 2016-12-13 09:37 - 05200384 _____ (AVAST Software) C:\Users\Ahmed-pc\Downloads\aswmbr.exe
    2016-12-12 23:06 - 2016-12-12 23:16 - 49707232 _____ (Microsoft Corporation) C:\Users\Ahmed-pc\Downloads\Windows-KB890830-x64-V5.42.exe
    2016-12-12 22:51 - 2016-12-12 23:04 - 30200424 _____ C:\Users\Ahmed-pc\Downloads\Unconfirmed 790072.crdownload
    2016-12-12 22:20 - 2016-12-12 22:20 - 00044952 _____ () C:\Windows\system32\Drivers\staport.sys
    2016-12-12 22:20 - 2016-12-02 17:08 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
    2016-12-12 20:35 - 2016-12-12 20:36 - 01330738 _____ C:\Users\Ahmed-pc\Downloads\Diamagnetism.pdf
    2016-12-12 20:35 - 2016-12-12 20:36 - 00587205 _____ C:\Users\Ahmed-pc\Downloads\Solid State Electronics - Magnetic Materials.pdf
    2016-12-12 19:30 - 2016-12-12 19:32 - 07978078 _____ C:\Users\Ahmed-pc\Downloads\Solid section 5.pdf
    2016-12-10 13:24 - 2016-12-10 15:11 - 00000000 ____D C:\Users\Ahmed-pc\Documents\insertion sort
    2016-12-10 13:22 - 2016-12-10 13:22 - 00000000 ____D C:\Users\Ahmed-pc\Documents\insertion sort project 1
    2016-12-09 23:57 - 2016-12-09 23:58 - 01385758 _____ C:\Users\Ahmed-pc\Downloads\solid p1 5.pdf
    2016-12-09 23:56 - 2016-12-09 23:58 - 02167802 _____ C:\Users\Ahmed-pc\Downloads\solid p1 4.pdf
    2016-12-09 23:55 - 2016-12-09 23:57 - 02719281 _____ C:\Users\Ahmed-pc\Downloads\solid p1 1.pdf
    2016-12-09 23:55 - 2016-12-09 23:57 - 01341068 _____ C:\Users\Ahmed-pc\Downloads\solid p1 3.pdf
    2016-12-09 22:46 - 2016-12-09 22:46 - 00564107 _____ C:\Users\Ahmed-pc\Downloads\Wifi-logo.zip
    2016-12-09 22:08 - 2016-12-09 22:08 - 01749567 _____ C:\Users\Ahmed-pc\Downloads\Solid P2 3.pdf
    2016-12-09 22:07 - 2016-12-09 22:08 - 01482123 _____ C:\Users\Ahmed-pc\Downloads\Solid P2 2.pdf
    2016-12-09 22:07 - 2016-12-09 22:07 - 01065652 _____ C:\Users\Ahmed-pc\Downloads\Solid P2 1.pdf
    2016-12-09 20:32 - 2016-12-09 20:33 - 01235723 _____ C:\Users\Ahmed-pc\Downloads\Lecture-8-Solution.pdf
    2016-12-09 20:30 - 2016-12-09 20:31 - 02883132 _____ C:\Users\Ahmed-pc\Downloads\Lecture-7-Solution.pdf
    2016-12-09 20:29 - 2016-12-09 20:35 - 15209591 _____ C:\Users\Ahmed-pc\Downloads\Lecture-5-6-7-Solution.pdf
    2016-12-08 17:52 - 2016-12-08 17:52 - 01422375 _____ C:\Users\Ahmed-pc\Downloads\CMOS Analog Circuit design.pdf
    2016-12-08 17:51 - 2016-12-08 17:51 - 02004102 _____ C:\Users\Ahmed-pc\Downloads\Digital.pdf
    2016-12-08 17:45 - 2016-12-08 17:45 - 00000184 _____ C:\Users\Ahmed-pc\Downloads\algoritm task (2).txt
    2016-12-08 14:22 - 2016-12-08 14:33 - 68006248 _____ C:\Users\Ahmed-pc\Downloads\خيانة فى البندقية - ستيف بيرى.pdf
    2016-12-07 23:10 - 2016-12-07 23:10 - 00000000 ___HT C:\Windows\wusa.lock
    2016-12-07 23:10 - 2016-12-07 23:10 - 00000000 ____D C:\b7675c7885ec84070ff70b00bcaa5960
    2016-12-07 23:09 - 2016-12-07 23:09 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
    2016-12-07 15:49 - 2016-12-07 15:49 - 00000536 _____ C:\Users\Ahmed-pc\Desktop\arduino - Shortcut.lnk
    2016-12-07 15:49 - 2016-12-07 15:49 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Roaming\Arduino15
    2016-12-06 23:15 - 2016-12-06 23:15 - 00000000 ____D C:\Users\Ahmed-pc\Documents\Processing
    2016-12-06 23:15 - 2016-12-06 23:15 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Roaming\Processing
    2016-12-06 23:13 - 2016-12-06 23:13 - 00017862 _____ C:\Users\Ahmed-pc\Downloads\3DInterface-master (2).zip
    2016-12-06 23:09 - 2016-12-06 23:09 - 00001015 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk
    2016-12-06 23:09 - 2016-12-06 23:09 - 00001003 _____ C:\Users\Public\Desktop\Arduino.lnk
    2016-12-06 23:09 - 2016-12-06 23:09 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Roaming\Arduino
    2016-12-06 23:09 - 2016-12-06 23:09 - 00000000 ____D C:\Program Files (x86)\Arduino
    2016-12-06 22:57 - 2016-12-06 23:09 - 55139088 _____ C:\Users\Ahmed-pc\Downloads\arduino-1.0.6-windows.exe
    2016-12-06 22:50 - 2014-05-19 20:13 - 00000000 ____D C:\Users\Ahmed-pc\Downloads\processing-2.2.1
    2016-12-06 22:33 - 2016-12-06 22:33 - 01065587 _____ C:\Users\Ahmed-pc\Downloads\EE 261 - Final Project - Touchless 3D Tracking Interface.pdf
    2016-12-06 21:06 - 2016-12-06 21:06 - 01242586 _____ C:\Users\Ahmed-pc\Downloads\C1-(C6).pdf
    2016-12-06 19:32 - 2016-12-06 19:33 - 02497301 _____ C:\Users\Ahmed-pc\Desktop\Circuits-Section7-Eng.Karmous.pdf
    2016-12-06 19:28 - 2016-12-06 19:28 - 01161963 _____ C:\Users\Ahmed-pc\Desktop\Circuits-Section6-Eng.Karmous.pdf
    2016-12-06 19:27 - 2016-12-06 19:28 - 01511104 _____ C:\Users\Ahmed-pc\Desktop\Circuits-Section5-Eng.Karmous.pdf
    2016-12-06 18:56 - 2016-12-06 18:58 - 03713987 _____ C:\Users\Ahmed-pc\Downloads\Analog Comm Lec#05 (Dr.Amr).pdf
    2016-12-06 18:54 - 2016-12-06 18:55 - 02110302 _____ C:\Users\Ahmed-pc\Downloads\Analog Comm Lec#04 (Dr.Amr).pdf
    2016-12-06 18:52 - 2016-12-06 18:54 - 02220493 _____ C:\Users\Ahmed-pc\Downloads\Analog Comm Lec#02 (Dr.Amr).pdf
    2016-12-06 18:52 - 2016-12-06 18:53 - 01601125 _____ C:\Users\Ahmed-pc\Downloads\Analog Comm Lec#01 (Dr.Amr).pdf
    2016-12-06 11:37 - 2016-11-02 22:48 - 00372568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2016-12-06 11:37 - 2016-11-02 22:48 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2016-12-06 11:37 - 2016-11-02 16:03 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2016-12-06 11:37 - 2016-11-02 16:00 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2016-12-06 11:37 - 2016-10-27 20:53 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2016-12-06 11:37 - 2016-10-27 20:51 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2016-12-06 11:37 - 2016-10-27 20:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2016-12-06 11:37 - 2016-10-27 20:28 - 25763328 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2016-12-06 11:37 - 2016-10-27 20:19 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2016-12-06 11:37 - 2016-10-27 20:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2016-12-06 11:37 - 2016-10-27 20:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
    2016-12-06 11:37 - 2016-10-27 20:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2016-12-06 11:37 - 2016-10-27 19:57 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
    2016-12-06 11:37 - 2016-10-27 19:49 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2016-12-06 11:37 - 2016-10-27 19:47 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2016-12-06 11:37 - 2016-10-27 19:46 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2016-12-06 11:37 - 2016-10-27 19:46 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2016-12-06 11:37 - 2016-10-27 19:44 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2016-12-06 11:37 - 2016-10-27 19:17 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2016-12-06 11:37 - 2016-10-27 19:16 - 02920448 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2016-12-06 11:37 - 2016-10-27 19:03 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2016-12-06 11:37 - 2016-10-27 18:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2016-12-06 11:37 - 2016-10-27 17:05 - 20304896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2016-12-06 11:37 - 2016-10-25 16:11 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2016-12-06 11:37 - 2016-10-22 19:35 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2016-12-06 11:37 - 2016-10-22 19:34 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2016-12-06 11:37 - 2016-10-22 19:27 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2016-12-06 11:37 - 2016-10-22 19:21 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2016-12-06 11:37 - 2016-10-22 18:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2016-12-06 11:37 - 2016-10-22 18:57 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
    2016-12-06 11:37 - 2016-10-22 18:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2016-12-06 11:37 - 2016-10-22 18:51 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
    2016-12-06 11:37 - 2016-10-22 18:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
    2016-12-06 11:37 - 2016-10-22 18:45 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2016-12-06 11:37 - 2016-10-22 18:45 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2016-12-06 11:37 - 2016-10-22 18:44 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2016-12-06 11:37 - 2016-10-22 18:43 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2016-12-06 11:37 - 2016-10-22 18:30 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2016-12-06 11:37 - 2016-10-22 18:12 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2016-12-06 11:37 - 2016-10-22 18:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2016-12-06 11:37 - 2016-10-22 18:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2016-12-06 11:37 - 2016-10-13 21:06 - 01385280 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
    2016-12-06 11:37 - 2016-10-13 21:06 - 01124376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
    2016-12-06 11:37 - 2016-10-12 10:01 - 00377176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
    2016-12-06 11:37 - 2016-10-11 22:21 - 00497448 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
    2016-12-06 11:37 - 2016-10-11 22:21 - 00399776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
    2016-12-06 11:37 - 2016-10-11 20:34 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
    2016-12-06 11:37 - 2016-10-11 19:47 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
    2016-12-06 11:37 - 2016-10-11 18:55 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
    2016-12-06 11:37 - 2016-10-10 23:17 - 00444248 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2016-12-06 11:37 - 2016-10-10 23:17 - 00333656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2016-12-06 11:37 - 2016-10-10 00:59 - 00551256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
    2016-12-06 11:37 - 2016-10-09 01:12 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2016-12-06 11:37 - 2016-10-09 00:53 - 03754496 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
    2016-12-06 11:37 - 2016-10-09 00:21 - 01445376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2016-12-06 11:37 - 2016-10-09 00:18 - 00840704 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
    2016-12-06 11:37 - 2016-10-09 00:07 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
    2016-12-06 11:37 - 2016-10-09 00:02 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
    2016-12-06 11:37 - 2016-10-08 23:49 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
    2016-12-06 11:37 - 2016-10-08 23:21 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
    2016-12-06 11:37 - 2016-10-08 03:34 - 01660040 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
    2016-12-06 11:37 - 2016-10-08 03:34 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
    2016-12-06 11:37 - 2016-10-04 22:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
    2016-12-06 11:37 - 2016-10-04 22:23 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
    2016-12-06 11:37 - 2016-10-04 22:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
    2016-12-06 11:37 - 2016-10-04 22:08 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
    2016-12-06 11:37 - 2016-10-01 02:22 - 07444312 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2016-12-06 11:37 - 2016-09-17 20:16 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
    2016-12-06 11:37 - 2016-09-17 19:21 - 00089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
    2016-12-06 11:37 - 2016-09-14 03:53 - 01663184 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2016-12-06 11:37 - 2016-09-14 03:53 - 01523208 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2016-12-06 11:37 - 2016-09-14 03:53 - 01490112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2016-12-06 11:37 - 2016-09-14 03:53 - 01358952 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2016-12-06 11:37 - 2016-09-13 00:03 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
    2016-12-06 11:37 - 2016-09-12 23:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
    2016-12-06 11:37 - 2016-09-10 00:52 - 00921944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
    2016-12-06 11:37 - 2016-09-10 00:14 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
    2016-12-06 11:37 - 2016-09-09 16:15 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
    2016-12-06 11:37 - 2016-09-09 16:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
    2016-12-06 11:37 - 2016-09-09 16:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2016-12-06 11:37 - 2016-09-09 16:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
    2016-12-06 11:37 - 2016-09-09 16:02 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
    2016-12-06 11:37 - 2016-09-09 15:38 - 00446124 _____ C:\Windows\system32\ApnDatabase.xml
    2016-12-06 11:37 - 2016-09-08 22:41 - 00121176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
    2016-12-06 11:37 - 2016-09-08 16:00 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2016-12-06 11:37 - 2016-09-08 16:00 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
    2016-12-06 11:37 - 2016-09-08 00:07 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2016-12-06 11:37 - 2016-09-07 23:59 - 01754112 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
    2016-12-06 11:37 - 2016-09-07 23:59 - 01377792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2016-12-06 11:37 - 2016-09-07 23:57 - 01560064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
    2016-12-06 11:37 - 2016-09-07 23:56 - 01491456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
    2016-12-06 11:37 - 2016-09-03 20:20 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\iscsidsc.dll
    2016-12-06 11:37 - 2016-09-03 20:06 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\iscsiexe.dll
    2016-12-06 11:37 - 2016-09-03 19:21 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsidsc.dll
    2016-12-06 11:37 - 2016-09-03 19:18 - 00825856 _____ (Microsoft Corporation) C:\Windows\system32\pmcsnap.dll
    2016-12-06 11:37 - 2016-09-03 18:12 - 00512512 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
    2016-12-06 11:37 - 2016-09-03 18:05 - 01094656 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2016-12-06 11:37 - 2016-09-03 17:58 - 00397824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
    2016-12-06 11:37 - 2016-09-02 16:05 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
    2016-12-06 11:37 - 2016-09-02 16:05 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
    2016-12-06 11:37 - 2016-09-01 16:33 - 00377856 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
    2016-12-06 11:37 - 2016-09-01 16:33 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
    2016-12-06 11:37 - 2016-09-01 16:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
    2016-12-06 11:37 - 2016-08-30 16:11 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
    2016-12-06 11:37 - 2016-08-30 04:45 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
    2016-12-06 11:37 - 2016-08-30 04:18 - 00871936 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
    2016-12-06 11:37 - 2016-08-30 04:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
    2016-12-06 11:37 - 2016-08-30 04:03 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
    2016-12-06 11:37 - 2016-08-27 18:33 - 02881536 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
    2016-12-06 11:37 - 2016-08-27 18:11 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
    2016-12-06 11:37 - 2016-08-26 06:41 - 22360280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2016-12-06 11:37 - 2016-08-26 06:41 - 19789224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
    2016-12-06 11:37 - 2016-08-25 22:50 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
    2016-12-06 11:37 - 2016-08-25 21:40 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
    2016-12-06 11:37 - 2016-08-22 15:34 - 01628672 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
    2016-12-06 11:37 - 2016-08-21 00:24 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2016-12-06 11:37 - 2016-08-21 00:12 - 02463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2016-12-06 11:37 - 2016-08-13 02:05 - 09323008 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
    2016-12-06 11:37 - 2016-08-13 02:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifibus.sys
    2016-12-06 11:37 - 2016-08-13 02:02 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys
    2016-12-06 11:37 - 2016-08-13 02:01 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
    2016-12-06 11:37 - 2016-08-13 00:35 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
    2016-12-06 11:37 - 2016-08-13 00:19 - 09323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
    2016-12-06 11:37 - 2016-08-12 23:47 - 15431168 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
    2016-12-06 11:37 - 2016-08-12 23:17 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
    2016-12-06 11:37 - 2016-08-12 22:52 - 13317120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
    2016-12-06 11:37 - 2016-08-12 03:58 - 02315496 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
    2016-12-06 11:37 - 2016-08-12 03:58 - 01946176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
    2016-12-06 11:37 - 2016-08-11 20:33 - 00096256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\parport.sys
    2016-12-06 11:37 - 2016-08-11 20:33 - 00083456 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
    2016-12-06 11:37 - 2016-08-11 20:33 - 00023040 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\serenum.sys
    2016-12-06 11:37 - 2016-08-11 19:17 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
    2016-12-06 11:37 - 2016-08-11 07:46 - 00420184 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
    2016-12-06 11:37 - 2016-08-03 17:42 - 01317888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
    2016-12-06 11:37 - 2016-08-03 17:36 - 01102848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
    2016-12-06 11:37 - 2016-08-03 17:36 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
    2016-12-06 11:37 - 2016-08-03 17:33 - 00215552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
    2016-12-06 11:37 - 2016-07-30 19:12 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
    2016-12-06 11:37 - 2016-07-30 18:36 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
    2016-12-06 11:37 - 2016-07-26 15:40 - 00162850 _____ C:\Windows\SysWOW64\C_932.NLS
    2016-12-06 11:37 - 2016-07-26 15:40 - 00162850 _____ C:\Windows\system32\C_932.NLS
    2016-12-06 11:37 - 2016-07-23 20:18 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
    2016-12-06 11:37 - 2016-07-23 20:12 - 00954880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
    2016-12-06 01:05 - 2016-12-06 01:05 - 04092587 _____ C:\Users\Ahmed-pc\Desktop\Propeller_Display.pdf
    2016-12-06 00:08 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
    2016-12-06 00:08 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
    2016-12-05 23:30 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2016-12-05 22:43 - 2016-08-04 16:17 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
    2016-12-05 22:43 - 2016-08-03 20:06 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
    2016-12-05 22:43 - 2016-08-03 20:05 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
    2016-12-05 22:43 - 2016-06-25 20:13 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
    2016-12-05 22:43 - 2016-06-25 18:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
    2016-12-05 22:43 - 2016-06-25 18:05 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
    2016-12-05 22:43 - 2016-01-30 21:50 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
    2016-12-05 22:43 - 2016-01-30 21:00 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
    2016-12-05 22:43 - 2016-01-30 20:18 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
    2016-12-05 22:43 - 2016-01-30 19:48 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
    2016-12-05 22:41 - 2016-07-08 16:17 - 00696832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
    2016-12-05 22:40 - 2016-08-21 01:22 - 00435200 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2016-12-05 22:40 - 2016-08-21 00:50 - 00360448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2016-12-05 22:40 - 2016-06-11 05:44 - 00107984 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
    2016-12-05 22:40 - 2016-06-11 05:44 - 00091416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
    2016-12-05 22:40 - 2016-05-19 01:18 - 00563024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2016-12-05 22:40 - 2016-05-19 01:16 - 00178016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2016-12-05 22:39 - 2016-08-21 01:45 - 07076864 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
    2016-12-05 22:39 - 2016-08-21 01:05 - 05273600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
    2016-12-05 22:39 - 2016-08-21 00:42 - 07795712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
    2016-12-05 22:39 - 2016-08-21 00:27 - 05268480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
    2016-12-05 22:39 - 2016-08-10 00:47 - 00803176 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2016-12-05 22:39 - 2016-08-10 00:47 - 00611576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2016-12-05 22:34 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
    2016-12-05 22:34 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
    2016-12-05 22:28 - 2016-08-22 18:06 - 00179248 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2016-12-05 22:28 - 2016-08-22 18:06 - 00100184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2016-12-05 22:28 - 2016-08-21 03:03 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2016-12-05 22:28 - 2016-08-21 03:01 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2016-12-05 22:28 - 2016-08-21 03:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2016-12-05 22:28 - 2016-08-21 00:55 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2016-12-05 22:28 - 2016-05-19 01:18 - 00397232 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
    2016-12-05 22:28 - 2016-05-19 00:28 - 00340880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
    2016-12-05 22:22 - 2016-06-21 20:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
    2016-12-05 22:22 - 2016-06-21 16:12 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
    2016-12-05 22:21 - 2016-08-13 09:40 - 01737080 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2016-12-05 22:21 - 2016-08-13 02:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2016-12-05 22:18 - 2016-08-14 21:34 - 01541248 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2016-12-05 22:18 - 2016-08-14 18:14 - 01376768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
    2016-12-05 22:18 - 2016-08-11 18:26 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
    2016-12-05 22:18 - 2016-08-11 18:17 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
    2016-12-05 22:18 - 2016-08-11 18:16 - 00455680 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
    2016-12-05 21:25 - 2016-12-14 22:04 - 00000000 ____D C:\ProgramData\SecTaskMan
    2016-12-05 21:25 - 2016-12-05 21:25 - 00001170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk
    2016-12-05 21:25 - 2016-12-05 21:25 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk
    2016-12-05 21:25 - 2016-12-05 21:25 - 00001147 _____ C:\Users\Public\Desktop\Security Task Manager.lnk
    2016-12-05 21:25 - 2016-12-05 21:25 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
    2016-12-05 21:24 - 2016-12-05 21:25 - 02840616 _____ C:\Users\Ahmed-pc\Downloads\SecurityTaskManager_Setup.exe
    2016-12-05 21:13 - 2016-12-05 21:14 - 00759436 _____ C:\Users\Ahmed-pc\Downloads\C4 (1).pdf
    2016-12-05 21:12 - 2016-12-05 21:16 - 04654605 _____ C:\Users\Ahmed-pc\Downloads\C3 (1).pdf
    2016-12-05 12:56 - 2016-12-05 13:00 - 00000000 ____D C:\Users\Ahmed-pc\Desktop\New folder (2)
    2016-12-02 17:12 - 2016-12-12 22:39 - 00003884 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1480691573
    2016-12-02 17:12 - 2016-12-12 22:39 - 00001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
    2016-12-02 17:11 - 2016-12-02 17:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
    2016-12-02 17:08 - 2016-12-02 17:08 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
    2016-12-02 17:08 - 2016-12-02 17:08 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
    2016-12-02 16:41 - 2016-12-15 02:33 - 00002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-12-02 16:20 - 2016-12-02 16:21 - 01065376 _____ (Google Inc.) C:\Users\Ahmed-pc\Downloads\ChromeSetup (1).exe
    2016-11-30 00:00 - 2016-11-30 00:03 - 04950807 _____ C:\Users\Ahmed-pc\Downloads\Realistic-laptop-top-view.zip
    2016-11-28 20:03 - 2016-11-28 20:10 - 16771987 _____ C:\Users\Ahmed-pc\Downloads\AjaibNet.Com_La_ta7zan_el9arni.rar
    2016-11-28 19:56 - 2016-11-29 00:10 - 00000000 ____D C:\Users\Ahmed-pc\Documents\emancipation
    2016-11-28 17:20 - 2016-11-28 17:37 - 59658861 _____ C:\Users\Ahmed-pc\Downloads\Industrial 1 dr.magda (1).m4a
    2016-11-28 16:54 - 2016-11-28 16:59 - 00000000 ____D C:\Users\Ahmed-pc\Documents\ahmedjeo
    2016-11-28 16:36 - 2016-11-28 16:36 - 00000000 ____D C:\Users\Ahmed-pc\Documents\ahmed.assignment1
    2016-11-27 22:48 - 2016-11-27 22:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infolytica ElecNet Trial Edition 7.6 (64-bit)
    2016-11-27 11:32 - 2016-11-27 23:12 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Roaming\Infolytica
    2016-11-26 23:19 - 2016-11-26 23:30 - 44528456 _____ (Infolytica Corporation) C:\Users\Ahmed-pc\Downloads\ElecNetTrialEdition7060.exe
    2016-11-26 22:03 - 2016-11-27 22:48 - 00000000 ____D C:\Users\Public\Documents\Infolytica
    2016-11-26 22:03 - 2016-11-27 22:47 - 00000000 ____D C:\Program Files\Infolytica
    2016-11-26 22:03 - 2016-11-26 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infolytica MagNet Trial Edition 7.6 (64-bit)
    2016-11-26 21:45 - 2016-11-26 21:56 - 50040032 _____ (Infolytica Corporation) C:\Users\Ahmed-pc\Downloads\MagNetTrialEdition7060.exe
    2016-11-26 00:05 - 2016-11-26 00:08 - 15914439 _____ C:\Users\Ahmed-pc\Downloads\After sulfuric.wmv
    2016-11-26 00:00 - 2016-11-26 00:02 - 10260319 _____ C:\Users\Ahmed-pc\Downloads\phenol.wmv
    2016-11-26 00:00 - 2016-11-26 00:01 - 04311745 _____ C:\Users\Ahmed-pc\Downloads\Phenol_dessict.wmv
    2016-11-25 23:36 - 2016-11-25 23:36 - 00324322 _____ C:\Users\Ahmed-pc\Downloads\Experiment-2.pdf
    2016-11-25 23:11 - 2016-11-25 23:11 - 00788854 _____ C:\Users\Ahmed-pc\Downloads\Simulation-Guide-Lab-2.pdf
    2016-11-25 19:03 - 2016-11-25 19:04 - 00849386 _____ C:\Users\Ahmed-pc\Downloads\38c9d8fb-46eb-4e8e-aa51-89a2ae6265a5-160318153014 (1).pdf
    2016-11-24 23:33 - 2016-11-24 23:50 - 74746262 _____ C:\Users\Ahmed-pc\Downloads\Mad.Max.Crack.v3.Only.rar
    2016-11-24 23:30 - 2016-11-24 23:33 - 14466633 _____ C:\Users\Ahmed-pc\Downloads\Unconfirmed 930309.crdownload
    2016-11-24 20:36 - 2016-11-24 20:47 - 38168961 _____ C:\Users\Ahmed-pc\Downloads\Shiny-brochure-with-new-year-holiday-fireworks.zip
    2016-11-24 19:07 - 2016-11-24 19:26 - 00000000 ____D C:\Users\Ahmed-pc\Documents\ahmedos
    2016-11-24 12:01 - 2015-07-10 22:16 - 15764200 _____ C:\Users\Ahmed-pc\Desktop\All Sessions - CCNAX_Print.pdf
    2016-11-23 18:05 - 2016-11-23 18:06 - 01277211 _____ C:\Users\Ahmed-pc\Downloads\aerosols-.pdf
    2016-11-22 19:17 - 2016-11-22 19:18 - 03196848 _____ C:\Users\Ahmed-pc\Downloads\Analog Comm Lec#02 (Dr.Sayed).pdf
    2016-11-22 16:23 - 2016-11-22 16:25 - 09243421 _____ C:\Users\Ahmed-pc\Downloads\students_tuoterials common cold & cough section 4A.pptx
    2016-11-22 16:23 - 2016-11-22 16:23 - 01492716 _____ C:\Users\Ahmed-pc\Downloads\Common cold & Cough.ppt.pptx
    2016-11-22 14:42 - 2016-11-22 14:53 - 00000000 ____D C:\ProgramData\Oracle
    2016-11-22 14:42 - 2016-11-22 14:42 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
    2016-11-22 14:42 - 2016-11-22 14:42 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Roaming\Sun
    2016-11-22 14:42 - 2016-11-22 14:42 - 00000000 ____D C:\Users\Ahmed-pc\AppData\LocalLow\Sun
    2016-11-22 14:42 - 2016-11-22 14:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2016-11-22 14:42 - 2016-11-22 14:42 - 00000000 ____D C:\Program Files (x86)\Java
    2016-11-22 14:08 - 2016-11-22 14:08 - 00737344 _____ (Oracle Corporation) C:\Users\Ahmed-pc\Downloads\JavaSetup8u111.exe
    2016-11-22 14:01 - 2016-11-22 14:01 - 00017862 _____ C:\Users\Ahmed-pc\Downloads\3DInterface-master (1).zip
    2016-11-21 19:51 - 2016-11-21 20:06 - 63572948 _____ C:\Users\Ahmed-pc\Downloads\_b50972a32644e2055937f6f9747e9120_algo1slides.zip
    2016-11-20 19:00 - 2016-11-20 19:00 - 00017862 _____ C:\Users\Ahmed-pc\Downloads\3DInterface-master.zip
    2016-11-20 17:26 - 2016-11-20 17:26 - 00849386 _____ C:\Users\Ahmed-pc\Downloads\38c9d8fb-46eb-4e8e-aa51-89a2ae6265a5-160318153014.pdf
    2016-11-20 00:51 - 2016-11-20 00:58 - 33936830 _____ C:\Users\Ahmed-pc\Downloads\Aerosol presentation.ppsx
    2016-11-18 16:44 - 2016-11-18 16:47 - 20087084 _____ C:\Users\Ahmed-pc\Downloads\VV Pillay - Modern Medical Toxicology, 4th Edition.pdf
    2016-11-16 05:14 - 2016-11-16 05:14 - 05193216 _____ C:\Users\Ahmed-pc\Downloads\Lecture 11 - Crystallography.ppt
    2016-11-16 05:13 - 2016-11-16 05:13 - 01755136 _____ C:\Users\Ahmed-pc\Downloads\Crystallography.ppt
     
    ==================== One Month Modified files and folders ========
     
    (If an entry is included in the fixlist, the file/folder will be moved.)
     
    2016-12-15 22:50 - 2016-04-26 23:52 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4211983725-98754823-3943254612-1001
    2016-12-15 22:45 - 2016-04-27 13:33 - 00002307 _____ C:\Users\Ahmed-pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
    2016-12-15 22:45 - 2016-04-26 15:25 - 00003180 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-4211983725-98754823-3943254612-1001
    2016-12-15 22:41 - 2016-04-26 15:16 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1ED1CF5A-C47B-4A79-944F-8E424F0C229E}
    2016-12-15 22:40 - 2013-09-30 06:14 - 00865408 _____ C:\Windows\system32\PerfStringBackup.INI
    2016-12-15 22:40 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
    2016-12-15 22:36 - 2016-04-30 18:57 - 00000564 _____ C:\Windows\Tasks\MATLAB R2013a Startup Accelerator.job
    2016-12-15 22:36 - 2016-04-26 23:13 - 00000914 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2016-12-15 22:35 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2016-12-15 20:29 - 2016-04-26 23:13 - 00000918 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2016-12-15 20:12 - 2016-04-26 15:44 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
    2016-12-13 22:38 - 2016-10-14 19:48 - 00000034 _____ C:\Users\Ahmed-pc\AppData\Roaming\AdobeWLCMCache.dat
    2016-12-13 22:09 - 2016-04-27 00:07 - 00000000 ____D C:\Users\Ahmed-pc\Documents\Bluetooth Folder
    2016-12-13 21:45 - 2016-04-26 23:47 - 00000000 ____D C:\Users\Ahmed-pc
    2016-12-13 21:45 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
    2016-12-13 21:45 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
    2016-12-13 21:22 - 2016-04-27 00:02 - 00000000 ____D C:\Users\UpdatusUser
    2016-12-13 10:16 - 2016-04-26 15:26 - 00000000 ____D C:\ProgramData\KMSAutoS
    2016-12-12 23:16 - 2016-06-17 17:49 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2016-12-12 23:14 - 2016-04-26 15:41 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Local\Google
    2016-12-12 23:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
    2016-12-12 21:33 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
    2016-12-10 15:11 - 2016-05-14 21:02 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Roaming\CodeBlocks
    2016-12-10 13:40 - 2016-04-30 22:31 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Local\CrashDumps
    2016-12-09 13:40 - 2016-04-26 15:30 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Roaming\Atheros
    2016-12-08 14:17 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
    2016-12-07 23:10 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2016-12-07 23:09 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2016-12-07 23:06 - 2016-04-26 15:19 - 00000000 ____D C:\Program Files\Microsoft Office
    2016-12-06 18:43 - 2013-08-22 16:44 - 00481312 _____ C:\Windows\system32\FNTCACHE.DAT
    2016-12-06 18:19 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
    2016-12-06 17:59 - 2016-06-17 17:49 - 00000000 ____D C:\Windows\system32\MRT
    2016-12-05 20:46 - 2016-04-26 23:47 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Local\Packages
    2016-12-02 17:48 - 2016-07-27 16:37 - 00000000 ____D C:\ProgramData\Google
    2016-12-02 17:48 - 2016-07-27 16:37 - 00000000 ____D C:\Program Files\Google
    2016-12-02 17:48 - 2016-04-26 17:46 - 00000000 ____D C:\Program Files (x86)\Google
    2016-12-02 17:10 - 2016-04-26 15:44 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
    2016-12-02 17:10 - 2016-04-26 15:44 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
    2016-12-02 17:10 - 2016-04-26 15:44 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
    2016-12-02 17:08 - 2016-04-26 15:44 - 00969560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.148069143168707
    2016-12-02 17:08 - 2016-04-26 15:44 - 00513496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.148069143643710
    2016-12-02 17:08 - 2016-04-26 15:44 - 00292704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys.148069143985912
    2016-12-02 17:08 - 2016-04-26 15:44 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
    2016-12-02 17:08 - 2016-04-26 15:44 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
    2016-12-02 17:08 - 2016-04-26 15:44 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
    2016-12-02 17:08 - 2016-04-26 15:44 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
    2016-12-02 17:08 - 2016-04-26 15:44 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
    2016-12-02 17:08 - 2016-04-26 15:44 - 00000000 ____D C:\Program Files\AVAST Software
    2016-12-02 17:08 - 2016-04-26 15:43 - 00000000 ____D C:\ProgramData\AVAST Software
    2016-12-01 22:05 - 2016-04-28 00:52 - 00000000 ____D C:\Users\Ahmed-pc\AppData\Local\Adobe
    2016-12-01 18:06 - 2016-04-30 21:47 - 00000000 ____D C:\Users\Ahmed-pc\Documents\MATLAB
    2016-11-28 17:52 - 2016-10-16 20:33 - 00000000 ____D C:\Users\Ahmed-pc\Documents\records omnia 2016aa2017
    2016-11-28 16:54 - 2016-08-24 03:40 - 00000000 ____D C:\Users\Ahmed-pc\Documents\7amada
    2016-11-26 00:51 - 2016-10-07 17:00 - 00004025 _____ C:\Users\Ahmed-pc\AppData\Roaming\LTspiceXVII.ini
    2016-11-26 00:51 - 2016-10-07 17:00 - 00000000 ____D C:\Users\Ahmed-pc\Documents\LTspiceXVII
    2016-11-24 23:56 - 2016-07-09 10:38 - 00000000 ____D C:\Users\Ahmed-pc\Documents\WB Games
    2016-11-22 23:24 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
    2016-11-22 23:24 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
     
    ==================== Files in the root of some directories =======
     
    2016-10-14 19:48 - 2016-12-13 22:38 - 0000034 _____ () C:\Users\Ahmed-pc\AppData\Roaming\AdobeWLCMCache.dat
    2016-10-07 17:00 - 2016-11-26 00:51 - 0004025 _____ () C:\Users\Ahmed-pc\AppData\Roaming\LTspiceXVII.ini
    2016-05-10 22:30 - 2016-05-10 22:44 - 0000600 _____ () C:\Users\Ahmed-pc\AppData\Local\PUTTY.RND
    2016-06-22 05:27 - 2016-06-22 05:27 - 0000017 _____ () C:\Users\Ahmed-pc\AppData\Local\resmon.resmoncfg
    2016-08-03 15:16 - 2016-08-03 15:16 - 0000000 _____ () C:\Users\Ahmed-pc\AppData\Local\{0A60D5CA-B3F7-46E5-A16B-E19D72B16CF9}
    2016-06-25 03:24 - 2016-06-25 03:24 - 0000000 _____ () C:\Users\Ahmed-pc\AppData\Local\{50AD9DCB-4788-4027-AA39-05347E17BCB9}
    2016-04-28 00:10 - 2016-04-28 00:10 - 0000057 _____ () C:\ProgramData\Ament.ini
    2016-04-26 23:59 - 2016-04-26 23:59 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
     
    Some files in TEMP:
    ====================
    C:\Users\Ahmed-pc\AppData\Local\Temp\AdobeApplicationManager.exe
    C:\Users\Ahmed-pc\AppData\Local\Temp\{317CF975-85D3-42A0-9804-460CCDCA48BF}-nikcollection-1.2.11.exe
    C:\Users\Ahmed-pc\AppData\Local\Temp\{38406C0A-8FDB-4B8A-83BF-026C29962B58}-nikcollection-1.2.11.exe
    C:\Users\Ahmed-pc\AppData\Local\Temp\{CF1B74FD-2BE6-43E0-8486-BDB7346F0536}-nikcollection-1.2.11.exe
     
     
    ==================== Bamital & volsnap ======================
     
    (There is no automatic fix for files that do not pass verification.)
     
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
     
    LastRegBack: 2016-12-14 10:59
     
    ==================== End of FRST.txt ============================
    Post #6

    Lets run this quick program while I am looking over your FRST logs

     

     

     
    [external image: CKS_zpsugippntv.jpg]
    Download CKScanner by askey127 from Here & save it to your Desktop.
    •  
    • Doubleclick CKScanner.exe then click Search For Files
    • When the cursor hourglass disappears, click Save List To File
    • A message box will verify the file saved
    • Please Run this program only once
    • Double-click the CKFiles.txt icon on your desktop then copy/paste the contents in your next reply
     

     

    Post #7
    CKScanner 2.5 - Additional Security Risks - These are not necessarily bad
    c:\program files\matlab\r2013a\resources\pde\en\crackg.xml
    c:\program files\matlab\r2013a\toolbox\pde\crackb.m
    c:\program files\matlab\r2013a\toolbox\pde\crackg.m
    c:\program files\matlab\r2013a\toolbox\pde\ja\crackb.m
    c:\program files\matlab\r2013a\toolbox\pde\ja\crackg.m
    c:\users\ahmed-pc\downloads\mad.max.crack.v3.only.rar
    scanner sequence 3.BD.11.QVNAUZ
     —– EOF —– 
    Post #8

    You have markers in your FRST log suggesting that your Windows Operating System and also Microsoft Office may be illegal. CKScanner also shows that you may have cracked programs on your system which are illegal also. Can you explain.

    Post #9

    here in our country we don't buy programs just download the crack and  it works but does this have a relation with my suspension 

    + one more new suspension in my task manager (start up list) i have something called program it is unknown and i can't find it's place .

     

     
    Post #10
    Hello Ahmed,
     
    In regards to your cracked software. Most people dont realize that almost 100% of cracked/illegal software has some form or malicious code written into it.  If I was to continue helping you it would be a waste of time because as you download other cracks, your just going to infect yourself all over again. Also with continuing to help you, with all the illegal programs and Operating System it can be construed in the eyes of the law as aiding and abetting a crime. Its also this forums policy and the policy of most other malware removal forums that before help can be offered all illegal programs need to be uninstalled, this includes your illegal copy of windows. 
     
    https://community.norton.com/en/forums/malware-removal-forum-recommendations
     
    As you can see most forums will not offer help when illegal/cracked/pirated software is present. Your free to try one of them and see if they will offer help
     
    Sorry I cant do more but its our policy
     

    Ask AI

    AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

    Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI