FORUM D’ENTRAIDE INFORMATIQUE (FEI)
Site d’assistance et de sécurité informatique

[Résolu] infection cle usb et ordinateur affichant raccourci

Aide à la désinfection (pages publicitaires, moteur de recherche remplacé, redirections, virus...).
Règles du forum : Entraide concernant la désinfection et la sécurité informatique : en cas de publicités intempestives, pop-up, redirections, logiciels indésirables, ralentissements suspects, virus, etc.
Une désinfection complète vous sera assurée : désinfection, sécurisation, puis prévention.
Seuls les helpers (personnes qualifiées et formées à la désinfection) ainsi que le staff sont autorisés à apporter leur aide dans cette section.
Merci également de prendre connaissance de la charte générale du forum.
 Sujet verrouillé
  • Avatar du membre
  • Avatar du membre
Avatar du membre

[Résolu] infection cle usb et ordinateur affichant raccourci

par nat.
-  dim. 23 févr. 2014 21:18 #107535
voici mon rapport
pourriez vous m aider merci


############################## | UsbFix V 7.165 | [Suppression]

Utilisateur: nat (Administrateur) # PC-DE-NAT
Mis à jour le 20/02/2014 par El Desaparecido - Team SosVirus
Lancé à 21:04:45 | 23/02/2014

Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/

PC: TOSHIBA (Satellite P300)
CPU: Intel(R) Core(TM)2 Duo CPU     T6400  @ 2.00GHz
RAM - [Total : 3066 Mo| Free : 1675 Mo]
Bios: TOSHIBA
Boot: Normal boot

OS: Microsoft® Windows Vista™ Édition Familiale Premium  (6.0.6002 32-Bit) Service Pack 2
WB: Windows Internet Explorer : 9.0.8112.16421
WB: Google Chrome : 32.0.1700.107
WB: Mozilla Firefox : 27.0.1
WB: Safari : 534.57.2

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Norton AntiVirus Online [(!) Disabled | Updated]
AV: avast! Antivirus [(!) Disabled | Updated]
AS: Windows Defender [(!) Disabled | Updated]
AS: avast! Antivirus [(!) Disabled | Updated]
AS: Norton AntiVirus Online [Enabled | Updated]
FW: Windows FireWall [(!) Disabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001

C:\ (%systemdrive%) - Disque fixe # 151 Go (77 Go libre(s) - 51%) [Vista] # NTFS
D:\ - Disque amovible # 15 Go (13 Go libre(s) - 88%) [Sony_16GM] # FAT32
E:\ - Disque fixe # 146 Go (5 Mo libre(s) - 0%) [Data] # NTFS
F:\ - CD-ROM

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 624 |ParentID: 612)
C:\Windows\system32\wininit.exe (ID: 684 |ParentID: 612)
C:\Windows\system32\csrss.exe (ID: 692 |ParentID: 676)
C:\Windows\system32\services.exe (ID: 732 |ParentID: 684)
C:\Windows\system32\winlogon.exe (ID: 760 |ParentID: 676)
C:\Windows\system32\lsass.exe (ID: 776 |ParentID: 684)
C:\Windows\system32\lsm.exe (ID: 784 |ParentID: 684)
C:\Windows\system32\svchost.exe (ID: 936 |ParentID: 732)
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (ID: 1000 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 1044 |ParentID: 732)
C:\Windows\system32\Ati2evxx.exe (ID: 1180 |ParentID: 732)
C:\Windows\System32\svchost.exe (ID: 1196 |ParentID: 732)
C:\Windows\System32\svchost.exe (ID: 1236 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 1248 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 1392 |ParentID: 732)
C:\Windows\system32\SLsvc.exe (ID: 1412 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 1448 |ParentID: 732)
C:\Windows\system32\Ati2evxx.exe (ID: 1588 |ParentID: 1180)
C:\Windows\system32\svchost.exe (ID: 1668 |ParentID: 732)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1844 |ParentID: 732)
C:\Windows\System32\spoolsv.exe (ID: 1996 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 2024 |ParentID: 732)
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 832 |ParentID: 732)
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1728 |ParentID: 732)
C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe (ID: 1684 |ParentID: 732)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1216 |ParentID: 732)
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (ID: 1888 |ParentID: 732)
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (ID: 2068 |ParentID: 732)
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (ID: 2088 |ParentID: 732)
C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (ID: 2112 |ParentID: 732)
C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (ID: 2184 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 2308 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 2324 |ParentID: 732)
C:\Program Files\Toshiba TEMPRO\TempoSVC.exe (ID: 2364 |ParentID: 732)
C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (ID: 2480 |ParentID: 732)
C:\Windows\system32\TODDSrv.exe (ID: 2520 |ParentID: 732)
C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (ID: 2548 |ParentID: 732)
C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe (ID: 2620 |ParentID: 732)
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (ID: 2660 |ParentID: 732)
C:\Windows\System32\svchost.exe (ID: 2712 |ParentID: 732)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 2728 |ParentID: 732)
C:\Windows\system32\SearchIndexer.exe (ID: 2772 |ParentID: 732)
C:\Windows\system32\DRIVERS\xaudio.exe (ID: 2844 |ParentID: 732)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 2900 |ParentID: 2728)
C:\Windows\system32\taskeng.exe (ID: 3260 |ParentID: 1248)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 4084 |ParentID: 936)
C:\Windows\system32\SearchProtocolHost.exe (ID: 3256 |ParentID: 2772)
C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe (ID: 3244 |ParentID: 732)
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (ID: 3316 |ParentID: 2088)
C:\Windows\system32\Dwm.exe (ID: 1348 |ParentID: 1236)
C:\Windows\Explorer.EXE (ID: 2296 |ParentID: 3408)
C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (ID: 3748 |ParentID: 2112)
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe (ID: 324 |ParentID: 2296)
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (ID: 2640 |ParentID: 2296)
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe (ID: 4060 |ParentID: 2296)
C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe (ID: 3456 |ParentID: 2296)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 3524 |ParentID: 2296)
C:\Windows\system32\taskeng.exe (ID: 1504 |ParentID: 1248)
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (ID: 512 |ParentID: 2296)
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (ID: 4080 |ParentID: 2296)
C:\Program Files\Glary Utilities 4\SoftwareUpdate.exe (ID: 4104 |ParentID: 1504)
C:\Windows\system32\taskeng.exe (ID: 4120 |ParentID: 1248)
C:\Program Files\Google\Update\GoogleUpdate.exe (ID: 4128 |ParentID: 3260)
C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (ID: 4228 |ParentID: 1504)
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ID: 4416 |ParentID: 2292)
C:\Program Files\Toshiba\SmoothView\SmoothView.exe (ID: 4840 |ParentID: 2296)
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (ID: 5100 |ParentID: 2296)
C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (ID: 5232 |ParentID: 2296)
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe (ID: 5932 |ParentID: 512)
C:\Program Files\Common Files\Java\Java Update\jusched.exe (ID: 4520 |ParentID: 2296)
C:\Program Files\iTunes\iTunesHelper.exe (ID: 4684 |ParentID: 2296)
C:\Program Files\Allin1Convert_8h\bar\1.bin\8hSrchMn.exe (ID: 4972 |ParentID: 2296)
C:\Windows\system32\wbem\unsecapp.exe (ID: 5468 |ParentID: 936)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 5580 |ParentID: 936)
C:\Program Files\Allin1Convert_8h\bar\1.bin\8hbrmon.exe (ID: 1084 |ParentID: 2296)
C:\Program Files\OfferBox\OfferBox.exe (ID: 1336 |ParentID: 2296)
C:\Program Files\AVAST Software\Avast\AvastUI.exe (ID: 3384 |ParentID: 2296)
C:\Program Files\Windows Sidebar\sidebar.exe (ID: 5980 |ParentID: 2296)
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (ID: 6016 |ParentID: 2296)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe (ID: 4856 |ParentID: 2296)
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (ID: 4824 |ParentID: 2296)
C:\Windows\ehome\ehtray.exe (ID: 4896 |ParentID: 2296)
C:\Users\nat\AppData\Local\iLivid\iLivid.exe (ID: 5032 |ParentID: 2296)
C:\Users\nat\AppData\Local\Smartbar\Application\SnapDo.exe (ID: 5484 |ParentID: 2296)
C:\Program Files\Windows Media Player\wmpnscfg.exe (ID: 3732 |ParentID: 2296)
C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (ID: 5908 |ParentID: 2296)
C:\Windows\System32\WUDFHost.exe (ID: 4768 |ParentID: 1236)
C:\Program Files\Glary Utilities 4\Integrator.exe (ID: 5132 |ParentID: 3668)
C:\Windows\System32\mobsync.exe (ID: 5228 |ParentID: 936)
C:\Windows\ehome\ehmsas.exe (ID: 5324 |ParentID: 936)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 5968 |ParentID: 732)
C:\Program Files\Windows Sidebar\sidebar.exe (ID: 5696 |ParentID: 5980)
C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe (ID: 4820 |ParentID: 5232)
C:\Program Files\OfferBox\OfferBoxHTTPProxy.exe (ID: 4320 |ParentID: 1336)
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe (ID: 5404 |ParentID: 324)
C:\Program Files\iPod\bin\iPodService.exe (ID: 5440 |ParentID: 732)
C:\Windows\system32\svchost.exe (ID: 4280 |ParentID: 732)
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ID: 3004 |ParentID: 4416)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (ID: 3624 |ParentID: 3524)
C:\Windows\system32\conime.exe (ID: 4144 |ParentID: 5888)
C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe (ID: 6688 |ParentID: 3260)
C:\Windows\system32\SearchFilterHost.exe (ID: 6192 |ParentID: 2772)
C:\Windows\system32\DllHost.exe (ID: 5792 |ParentID: 936)

################## | Regedit Run |

04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKCU\..\Run : [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
04 - HKCU\..\Run : [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKCU\..\Run : [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKCU\..\Run : [ehTray.exe] C:\Windows\ehome\ehTray.exe
04 - HKCU\..\Run : [iLivid] "C:\Users\nat\AppData\Local\iLivid\iLivid.exe" -autorun
04 - HKCU\..\Run : [Browser Infrastructure Helper] C:\Users\nat\AppData\Local\Smartbar\Application\SnapDo.exe startup
04 - HKCU\..\Run : [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
04 - HKLM\..\Run : [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
04 - HKLM\..\Run : [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
04 - HKLM\..\Run : [NDSTray.exe] NDSTray.exe
04 - HKLM\..\Run : [cfFncEnabler.exe] cfFncEnabler.exe
04 - HKLM\..\Run : [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
04 - HKLM\..\Run : [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe IE PA
04 - HKLM\..\Run : [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
04 - HKLM\..\Run : [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
04 - HKLM\..\Run : [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
04 - HKLM\..\Run : [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM\..\Run : [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
04 - HKLM\..\Run : [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
04 - HKLM\..\Run : [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
04 - HKLM\..\Run : [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
04 - HKLM\..\Run : [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
04 - HKLM\..\Run : [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
04 - HKLM\..\Run : [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
04 - HKLM\..\Run : [EPSON Stylus DX3800 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /F "C:\Windows\TEMP\E_SD410.tmp" /EF "HKLM"
04 - HKLM\..\Run : [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [Allin1Convert Search Scope Monitor] "C:\PROGRA~1\ALLIN1~2\bar\1.bin\8hsrchmn.exe" /m=2 /w /h
04 - HKLM\..\Run : [Allin1Convert_8h Browser Plugin Loader] C:\PROGRA~1\ALLIN1~2\bar\1.bin\8hbrmon.exe
04 - HKLM\..\Run : [offerbox] C:\Program Files\OfferBox\OfferBox.exe
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\RunOnce : []
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
04 - HKU\S-1-5-19\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
04 - HKU\S-1-5-20\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [ehTray.exe] C:\Windows\ehome\ehTray.exe
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [iLivid] "C:\Users\nat\AppData\Local\iLivid\iLivid.exe" -autorun
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [Browser Infrastructure Helper] C:\Users\nat\AppData\Local\Smartbar\Application\SnapDo.exe startup
04 - HKU\S-1-5-21-1501028913-147664836-3955362586-1000\..\Run : [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

################## | Recherche générique |


(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cltmngsvc.exe

################## | Listing |

[01/10/2013 - 20:01:17 | SHD] - C:\$RECYCLE.BIN
[18/09/2006 - 22:43:36 | A | 0 Ko] - C:\autoexec.bat
[19/08/2009 - 17:31:07 | SHD] - C:\Boot
[11/04/2009 - 07:36:36 | RASH | 325 Ko] - C:\bootmgr
[18/09/2006 - 22:43:37 | N | 0 Ko] - C:\config.sys
[02/11/2006 - 14:02:03 | SHD] - C:\Documents and Settings
[13/11/2013 - 21:21:28 | N | 0 Ko] - C:\end
[23/02/2014 - 20:58:20 | ASH | 3138424 Ko] - C:\hiberfil.sys
[03/07/2008 - 15:36:18 | D] - C:\Intel
[13/01/2010 - 18:54:38 | RHD] - C:\MSOCache
[23/02/2014 - 20:58:19 | ASH | 3446712 Ko] - C:\pagefile.sys
[19/02/2014 - 21:01:38 | D] - C:\Program Files
[18/02/2014 - 23:54:26 | HD] - C:\ProgramData
[11/09/2008 - 07:13:48 | N | 0 Ko | 360E305E48902198EF31CC0A8073AC5A] - C:\SWSTAMP.TXT
[23/02/2014 - 20:57:14 | SHD] - C:\System Volume Information
[30/05/2011 - 19:16:12 | D] - C:\Temp
[01/03/2009 - 17:37:22 | D] - C:\Toshiba
[23/02/2014 - 21:04:42 | D] - C:\UsbFix
[23/02/2014 - 20:42:14 | N | 41 Ko | BED5794D4A62713AC9BB9A3642D57E09] - C:\UsbFix [Clean 2] PC-DE-NAT.txt
[23/02/2014 - 20:48:29 | N | 31 Ko | F3D2CB2AB1B2EF090BF2D8E0128CE490] - C:\UsbFix [Clean 4] PC-DE-NAT.txt
[23/02/2014 - 20:52:49 | N | 31 Ko | BF7323C2B37CBDF95128C68443FA330D] - C:\UsbFix [Clean 6] PC-DE-NAT.txt
[23/02/2014 - 21:06:08 | A | 15 Ko | 3E08A5A10208414591A9F095F0F9FCE7] - C:\UsbFix [Clean 8] PC-DE-NAT.txt
[23/02/2014 - 20:18:35 | N | 24 Ko | B098B2336DA888D816D69F6FDEB8B346] - C:\UsbFix [Scan 1] PC-DE-NAT.txt
[01/03/2009 - 17:32:33 | D] - C:\Users
[19/02/2014 - 21:02:44 | D] - C:\Windows
[03/07/2008 - 16:35:24 | D] - C:\Works
[06/08/2008 - 08:53:10 | T | 24 Ko] - C:\_wdsuef.dmp
[23/02/2014 - 20:24:06 | N | 4 Ko] - C:\{275CB784-DAF6-4D27-BBC9-74BA85BB2E4F}
[23/02/2014 - 20:19:29 | N | 3 Ko] - C:\{4B118A99-9C25-4CEE-B378-2F42571E8805}
[23/02/2014 - 20:20:37 | N | 4 Ko] - C:\{57600B53-469F-4801-BCCD-AF0A0FFFC9BC}
[19/01/2014 - 19:18:57 | N | 2 Ko] - C:\{721BF829-2366-487A-BC73-E719B3019A31}
[11/12/2013 - 21:11:20 | N | 2 Ko] - C:\{7B6A146A-D604-4391-A5CD-E0A0E751B68F}
[04/12/2013 - 03:39:42 | N | 2 Ko] - C:\{87171109-27D1-4574-A3B8-A96C5A368B0E}
[13/12/2013 - 20:22:49 | N | 2 Ko] - C:\{9B7FFF00-92C6-4538-A59A-6A0CDAE74F89}
[22/12/2013 - 16:55:00 | N | 2 Ko] - C:\{AE409719-81F3-411B-9E7A-00985E4623B9}
[13/12/2013 - 20:21:35 | N | 2 Ko] - C:\{B49B9C42-12C5-4673-92BC-BF42BBCE39A7}
[22/12/2013 - 14:01:25 | N | 2 Ko] - C:\{CC141258-E711-47DD-9E6C-9AB238FCD124}
[22/12/2013 - 16:57:36 | N | 2 Ko] - C:\{D90551E3-1D21-4CBE-8427-4115F1E6A5E8}
[22/11/2009 - 19:51:04 | D] - D:\accident domestique
[27/05/2009 - 21:13:36 | D] - D:\album roman
[17/02/2009 - 15:24:18 | D] - D:\article journal
[28/11/2012 - 10:59:26 | D] - D:\activité vie quotidienne
[17/02/2009 - 15:24:14 | D] - D:\alphabet syllabe présentation
[17/02/2009 - 15:24:26 | D] - D:\cocoote minute
[17/02/2009 - 15:24:32 | D] - D:\COMPRENDRE UNE ANNONCE PUBLIQUE
[23/01/2011 - 11:31:46 | D] - D:\contes
[14/03/2010 - 22:18:52 | D] - D:\correspondance bibliotheque
[17/02/2009 - 15:24:36 | D] - D:\débat
[21/11/2011 - 12:07:10 | D] - D:\delf a1
[18/03/2012 - 21:01:18 | D] - D:\delf a2
[27/02/2013 - 11:20:02 | D] - D:\delf b1
[11/03/2012 - 12:17:20 | D] - D:\description
[19/07/2011 - 16:39:18 | D] - D:\dessin animé diabète
[03/05/2011 - 21:54:24 | D] - D:\diabète
[02/05/2010 - 10:17:58 | D] - D:\dictionnaire
[07/02/2010 - 18:19:20 | D] - D:\dilf
[25/09/2013 - 16:39:12 | D] - D:\doc groupe avancé
[27/05/2009 - 21:17:58 | D] - D:\droit de l homme citoyennete
[17/02/2009 - 15:24:36 | D] - D:\echange
[30/06/2010 - 11:31:08 | D] - D:\ecole enfant
[20/06/2011 - 09:28:54 | D] - D:\ecrit alpha
[28/09/2013 - 21:53:28 | D] - D:\evaluation
[01/10/2010 - 16:02:58 | D] - D:\exercice test ANAEM
[18/01/2010 - 13:10:46 | D] - D:\famille
[27/11/2011 - 08:49:16 | D] - D:\FLE
[17/02/2009 - 15:24:40 | D] - D:\grammaire
[09/05/2012 - 09:28:10 | D] - D:\histoire 2012
[01/10/2013 - 23:04:44 | D] - D:\histoire de l outre mer 2 bis
[17/02/2009 - 15:24:40 | D] - D:\image
[27/05/2009 - 20:08:52 | D] - D:\immigration
[22/07/2011 - 15:52:46 | D] - D:\ImprimerDetailOffre.do_fichiers
[22/07/2011 - 15:52:48 | N | 16 Ko] - D:\ImprimerDetailOffre.do.htm
[17/02/2009 - 15:25:10 | D] - D:\INFORMATIQUE
[17/02/2009 - 15:25:14 | D] - D:\INTERVIEW DE TIKEN JAH FAKOLY - Actualité Musique - EVENE_fichiers
[07/03/2011 - 17:17:46 | D] - D:\itinéraire
[07/07/2009 - 11:20:48 | D] - D:\justice
[01/10/2013 - 22:19:54 | D] - D:\l histoire de l outre mer
[30/06/2010 - 11:30:36 | D] - D:\l impot sur le revenu
[17/02/2009 - 15:25:22 | D] - D:\la fête du 8 mars
[17/02/2009 - 15:25:24 | D] - D:\La grande histoire de la lutte des femmes (2)_fichiers
[17/02/2009 - 15:25:24 | D] - D:\la lettre
[09/02/2013 - 11:52:50 | D] - D:\la religion
[21/03/2011 - 23:48:58 | D] - D:\La_Paillade_fichiers
[21/03/2011 - 23:49:14 | N | 53 Ko] - D:\La_Paillade.htm
[03/01/2010 - 20:40:18 | D] - D:\LES Fêtes
[02/06/2009 - 20:12:48 | D] - D:\les monuments de paris
[17/02/2009 - 15:25:26 | D] - D:\les sorties pédagogiques
[28/03/2009 - 17:47:28 | D] - D:\Les transports en commun
[17/02/2009 - 15:25:26 | D] - D:\LOGEMENT
[07/12/2009 - 21:55:54 | D] - D:\meutre dans un jardin secret
[08/04/2010 - 21:00:28 | D] - D:\mutimédia
[17/02/2009 - 15:25:36 | D] - D:\NATHALIE
[17/02/2009 - 15:25:38 | D] - D:\Numération (1)-Nombres entiers de 0 à 999 999_fichiers
[28/10/2009 - 11:17:54 | D] - D:\nutrition
[17/02/2009 - 15:25:40 | D] - D:\op
[03/01/2012 - 10:57:54 | D] - D:\OusselinConjugaisons_fichiers
[03/01/2012 - 10:57:54 | N | 136 Ko] - D:\OusselinConjugaisons.html
[01/09/2009 - 21:57:54 | D] - D:\outil evaluation
[17/02/2009 - 15:25:48 | D] - D:\PAPIER ADMISTRATIF
[06/07/2009 - 09:57:14 | D] - D:\photo 2009
[10/07/2012 - 20:23:16 | D] - D:\photo à imprimer
[09/03/2011 - 21:43:28 | D] - D:\photo les modes de contraception
[25/09/2013 - 13:23:02 | D] - D:\planning
[01/10/2010 - 12:23:14 | D] - D:\polar fle
[04/09/2010 - 17:34:36 | D] - D:\post alpha
[17/02/2009 - 15:25:58 | D] - D:\présentation identité
[12/08/2010 - 15:51:14 | D] - D:\productionecrite4.php_fichiers
[17/02/2009 - 15:26:00 | D] - D:\QUEL TEMPS 1_fichiers
[17/02/2009 - 15:26:02 | D] - D:\recette
[25/06/2009 - 16:34:48 | D] - D:\raccourci vers DSC
[07/04/2011 - 21:08:24 | D] - D:\reperes.asp_fichiers
[07/04/2011 - 21:08:26 | N | 44 Ko] - D:\reperes.asp.htm
[17/02/2009 - 15:26:20 | D] - D:\Ressources - Mots Mêlés - Cycle3 Métiers (en -er - -ère)_fichiers
[15/05/2011 - 17:06:20 | D] - D:\révision vêtement
[23/01/2011 - 11:19:08 | D] - D:\s informer hébergement itinéraire
[14/05/2009 - 14:49:42 | D] - D:\sante
[27/05/2009 - 20:08:00 | D] - D:\se déplacer
[17/08/2010 - 15:28:58 | D] - D:\Thème de l'année 2010 2011
[17/02/2009 - 15:26:30 | D] - D:\travail
[17/02/2009 - 15:26:34 | D] - D:\univers du bb
[20/07/2011 - 10:01:22 | D] - D:\vidéo la france
[11/05/2009 - 08:43:04 | D] - D:\vie quotidienne
[30/01/2013 - 10:57:26 | D] - D:\vocabulaire débutant
[10/07/2012 - 11:53:20 | D] - D:\voyage à travers le monde
[18/12/2009 - 11:56:20 | N | 0 Ko] - D:\~$programme alpha débutant 3 semaines.xlsx
[14/11/2011 - 09:15:46 | N | 22 Ko] - D:\1.wps
[28/08/2012 - 15:15:46 | N | 12 Ko] - D:\3.docx
[28/01/2011 - 17:29:34 | N | 12 Ko] - D:\11 septembre 2001.docx
[06/03/2013 - 10:16:52 | N | 15 Ko] - D:\2010.docx
[05/04/2011 - 13:20:10 | N | 161 Ko] - D:\a la poste.docx
[18/03/2012 - 08:51:46 | N | 3698 Ko] - D:\Activ_lang_mater_imagesB.pdf
[25/09/2013 - 16:55:22 | N | 1159 Ko] - D:\Allez au contenu Allez à la navigation Allez à la recherche Change language.docx
[25/06/2012 - 06:49:04 | N | 23 Ko] - D:\Analyse entretien Madhia.docx
[13/02/2013 - 09:24:00 | N | 781 Ko] - D:\Apparition_du_chistianisme.odp
[10/04/2013 - 13:59:14 | N | 61 Ko] - D:\article chirurgie esthétique.docx
[25/01/2012 - 11:25:54 | N | 53 Ko] - D:\Au musée.docx
[12/05/2011 - 21:09:58 | N | 86 Ko] - D:\Au restaurant.docx
[21/06/2013 - 16:36:16 | N | 164 Ko] - D:\avis arrêt de travail.pdf
[11/03/2013 - 16:49:12 | N | 22 Ko] - D:\b.docx
[24/10/2012 - 10:34:36 | N | 42 Ko] - D:\BD32.doc
[06/05/2011 - 13:16:00 | N | 11 Ko] - D:\Bilan 2010bis.docx
[24/04/2012 - 16:53:52 | N | 15 Ko] - D:\bilan 2011.docx
[07/01/2013 - 17:16:42 | N | 11 Ko] - D:\bilan 2012.xlsx
[10/07/2012 - 08:11:12 | N | 16 Ko] - D:\Blaise Bachofen réinventer l'autonomie.docx
[16/10/2013 - 22:27:38 | N | 485 Ko] - D:\carte_monde_vierge.pdf
[06/03/2013 - 10:22:00 | N | 813 Ko] - D:\cerpe2010.pdf
[27/07/2011 - 10:14:24 | N | 11 Ko] - D:\Choc culturel.docx
[11/02/2013 - 16:35:08 | N | 571 Ko] - D:\christianisation de l-empire romain.pdf
[13/02/2013 - 09:32:20 | N | 161 Ko] - D:\christianisme.docx
[27/09/2013 - 09:08:56 | N | 12 Ko] - D:\Classeur1.xlsx
[27/09/2013 - 12:51:50 | N | 13 Ko] - D:\Classeur2.xlsx
[04/05/2012 - 17:23:20 | N | 98 Ko] - D:\clio-326-8-francoise-heritier-masculin-feminin-la-pensee-de-la-difference-paris-o-jacob-1996[1].pdf
[22/11/2012 - 17:03:26 | N | 66 Ko] - D:\Complétez les phrases avec  les verbes pronominaux.docx
[03/01/2012 - 10:57:14 | N | 147 Ko] - D:\conj3.pdf
[20/07/2011 - 10:37:50 | N | 21453 Ko] - D:\Cours du soir de français pour débutants (Val dOise).wmv
[23/10/2012 - 09:08:42 | N | 42 Ko] - D:\Créé 20.docx
[24/02/2012 - 16:15:08 | N | 1322 Ko] - D:\Dans la soirée du 16.docx
[24/04/2012 - 16:54:28 | N | 15 Ko] - D:\Dans Paris il y a une rue.docx
[25/01/2012 - 10:53:32 | N | 10948 Ko] - D:\découvrir la france.pdf
[24/06/2011 - 08:48:30 | N | 13 Ko] - D:\dehbia.docx
[16/08/2006 - 19:51:00 | N | 108 Ko] - D:\DELF_A2_Ecrit.pdf
[16/08/2006 - 19:52:38 | N | 100 Ko] - D:\DELF_A2_Oral.pdf
[19/04/2012 - 21:33:26 | N | 373 Ko] - D:\DELF_B2.pdf
[16/08/2006 - 19:54:16 | N | 111 Ko] - D:\DELF_B2_Ecrit.pdf
[16/08/2006 - 19:58:18 | N | 106 Ko] - D:\DELF_B2_Oral.pdf
[15/03/2011 - 12:24:14 | N | 10 Ko] - D:\demander.xlsx
[10/03/2009 - 12:37:18 | N | 27 Ko] - D:\Demander une information.doc
[07/03/2011 - 12:27:36 | N | 462 Ko] - D:\DESCRIPTION DAVID et chiara.docx
[04/10/2012 - 16:37:48 | N | 37 Ko] - D:\DictÇe 1 grippe A.doc
[28/08/2012 - 17:05:50 | N | 36 Ko] - D:\DictÇe 2 chien 1 CE2 CM1.doc
[28/08/2012 - 17:06:08 | N | 36 Ko] - D:\DictÇe 3  chien 2 CE2 CM1.doc
[28/08/2012 - 17:06:24 | N | 35 Ko] - D:\DictÇe 4 chien 3.doc
[28/08/2012 - 17:06:36 | N | 35 Ko] - D:\DictÇe 5  football.doc
[28/08/2012 - 17:07:10 | N | 34 Ko] - D:\DictÇe 6 Braille.doc
[28/08/2012 - 17:07:28 | N | 31 Ko] - D:\DictÇe 7 Le Mali.doc
[28/08/2012 - 17:07:46 | N | 31 Ko] - D:\DictÇe 8 Le parieur.doc
[28/08/2012 - 17:08:08 | N | 25 Ko] - D:\DictÇe 9 Le cafÇ.doc
[28/08/2012 - 17:02:24 | N | 26 Ko] - D:\DictÇe 10 Les mouches.doc
[28/08/2012 - 17:02:54 | N | 33 Ko] - D:\DictÇe 11 Vin nouveau.doc
[17/12/2012 - 16:29:54 | N | 33 Ko] - D:\DictÇe 12 Orage.doc
[28/08/2012 - 17:03:46 | N | 32 Ko] - D:\DictÇe 13  Le retour.doc
[28/08/2012 - 17:04:04 | N | 37 Ko] - D:\DictÇe 14 Sapin de Noel.doc
[28/08/2012 - 17:04:42 | N | 49 Ko] - D:\DictÇe 15 guàpe correction Non prÇparÇe.doc
[28/08/2012 - 17:05:00 | N | 38 Ko] - D:\DictÇe 16 Noel.doc
[28/08/2012 - 17:05:16 | N | 35 Ko] - D:\DictÇe 17  Galette 1.doc
[28/08/2012 - 17:05:34 | N | 35 Ko] - D:\DictÇe 18 Galette 2.doc
[30/03/2012 - 09:20:50 | N | 508 Ko] - D:\Doc1.docx
[17/12/2012 - 11:50:36 | N | 12 Ko] - D:\Donner son avis.docx
[12/12/2012 - 10:19:54 | N | 22 Ko] - D:\Donner son opinion.docx
[08/04/2011 - 12:30:16 | N | 11 Ko] - D:\Ecrire ce que vous mangez le matin.docx
[11/02/2012 - 10:17:32 | N | 1 Ko] - D:\ecrire-phrase 09.lnk
[11/02/2012 - 10:17:56 | N | 1 Ko] - D:\ecrire-phrase 10.lnk
[06/03/2013 - 10:32:46 | N | 48 Ko] - D:\emploi du temps.docx
[07/03/2013 - 16:42:18 | N | 90 Ko] - D:\emploi du temps.pub
[01/02/2012 - 10:21:32 | N | 103 Ko] - D:\eneueauauniveauun.jpg
[02/03/2011 - 20:02:24 | N | 60 Ko] - D:\enquete bernadette.docx
[10/07/2012 - 10:54:52 | N | 16 Ko] - D:\entretien angélina.docx
[12/12/2012 - 11:03:24 | N | 14 Ko] - D:\Être ou avoir utilisation.docx
[11/12/2011 - 16:34:34 | N | 10 Ko] - D:\evaluation decembre 2011.docx
[27/02/2013 - 11:10:08 | N | 239 Ko] - D:\evaluation fevrier 2013.docx
[12/10/2012 - 12:37:04 | N | 13 Ko] - D:\evaluation octobre 2012 ALPHA.docx
[14/11/2011 - 07:31:46 | N | 344 Ko] - D:\evaluations debut d'année.wps
[21/06/2013 - 09:28:28 | N | 11 Ko] - D:\faire les magasins.docx
[29/01/2012 - 18:03:26 | N | 21 Ko] - D:\fiche garde d'enfants.docx
[22/02/2012 - 19:29:08 | N | 1171 Ko] - D:\fichier_images_sequentielles.doc
[19/04/2012 - 21:19:50 | N | 32 Ko] - D:\FRA-P101-4_SA3_annexe_2-20090526-151258.doc
[28/08/2012 - 17:09:16 | N | 13 Ko] - D:\graphe dictee.odt
[28/08/2012 - 17:08:38 | N | 13 Ko] - D:\graphe dictee 2.odt
[14/03/2011 - 12:09:28 | N | 19 Ko] - D:\historique droit des femmes.docx
[27/07/2011 - 10:39:16 | N | 60 Ko] - D:\image beigli.docx
[03/01/2012 - 11:22:08 | N | 95 Ko] - D:\image carte de voeux.docx
[27/07/2011 - 11:12:06 | N | 1057 Ko] - D:\image recette.docx
[13/02/2012 - 19:55:12 | N | 871 Ko] - D:\image sequentielle 1.docx
[10/03/2011 - 07:35:10 | N | 1318 Ko] - D:\img093.jpg
[01/04/2011 - 06:57:22 | N | 823 Ko] - D:\img100.jpg
[15/05/2011 - 17:10:00 | N | 1503 Ko] - D:\img110.jpg
[15/05/2011 - 17:33:52 | N | 1479 Ko] - D:\img111.jpg
[08/12/2011 - 20:54:52 | N | 977 Ko] - D:\img139.jpg
[07/05/2011 - 22:31:26 | N | 15 Ko] - D:\Indiquer ses  goûts alimentaires.docx
[17/03/2011 - 17:03:32 | N | 3 Ko] - D:\inegalités.jpg
[14/09/2006 - 12:51:24 | N | 11 Ko] - D:\Intitulé de la formation.docx
[27/07/2011 - 10:13:48 | N | 10 Ko] - D:\kinsa grace.docx
[28/11/2012 - 10:57:58 | N | 219 Ko] - D:\La journee de Jean.doc
[11/02/2013 - 11:54:36 | N | 12 Ko] - D:\LA NAISSANCE DE L.docx
[20/07/2011 - 11:39:36 | N | 1423 Ko] - D:\La Vème République française.wmv
[22/03/2012 - 21:09:26 | N | 14 Ko] - D:\Langage sms.docx
[29/03/2011 - 09:08:02 | N | 1627 Ko] - D:\Le cameroun.docx
[08/04/2011 - 09:33:00 | N | 2355 Ko] - D:\Le cancer du sein.docx
[14/09/2011 - 15:17:02 | N | 41 Ko] - D:\Le choix  du sujet.wps
[24/01/2012 - 13:20:46 | N | 281 Ko] - D:\le metro.docx
[28/01/2011 - 17:28:34 | N | 37 Ko] - D:\Le racisme dans mon quartier.docx
[04/04/2011 - 20:55:16 | N | 610 Ko] - D:\le salon.jpg
[28/11/2012 - 11:05:00 | N | 812 Ko] - D:\les activites quotidiennes.doc
[18/12/2012 - 16:32:48 | N | 11 Ko] - D:\Les courses imparfait passé composé.docx
[14/03/2011 - 12:22:54 | N | 15 Ko] - D:\Les Nations Unies.docx
[27/03/2011 - 15:20:44 | N | 43 Ko] - D:\Les prépositions devant nom de pays.docx
[09/05/2012 - 14:04:58 | N | 13 Ko] - D:\Les Saisons.docx
[25/10/2012 - 15:03:14 | N | 12 Ko] - D:\LETTRE à l'inspection.docx
[22/05/2012 - 13:55:00 | N | 382 Ko] - D:\Lexique de la nourriture.docx
[03/05/2013 - 12:06:10 | N | 9 Ko] - D:\LISTE D ATTENTE.xlsx
[01/04/2011 - 09:13:54 | N | 97 Ko] - D:\logement 1.docx
[24/08/2011 - 10:15:14 | N | 3528 Ko] - D:\MA_MUNG-HDR-1999.pdf
[06/02/2011 - 22:51:32 | N | 11 Ko] - D:\Melle PANGA Nathalie.docx
[02/03/2011 - 20:02:24 | N | 60 Ko] - D:\enquete bernadette - Copie.docx
[01/02/2012 - 10:21:32 | N | 103 Ko] - D:\eneueauauniveauun - Copie.jpg
[17/12/2012 - 11:50:36 | N | 12 Ko] - D:\Donner son avis - Copie.docx
[30/03/2012 - 09:20:50 | N | 508 Ko] - D:\Doc1 - Copie.docx
[28/08/2012 - 17:05:34 | N | 35 Ko] - D:\DictÇe 18 Galette 2 - Copie.doc
[28/01/2011 - 17:29:34 | N | 12 Ko] - D:\11 septembre 2001 - Copie.docx
[08/12/2011 - 20:57:52 | N | 866 Ko] - D:\img140.jpg
[03/04/2011 - 20:19:52 | N | 990 Ko] - D:\la salle de bains.jpg
[24/08/2011 - 11:11:26 | N | 12 Ko] - D:\Même si les dynamiques des migrations s.docx
[15/11/2011 - 12:18:20 | N | 11 Ko] - D:\Mois de novembre 2011.docx
[11/02/2013 - 16:35:42 | N | 715 Ko] - D:\naissance expansion islam.pdf
[29/06/2011 - 09:22:40 | N | 76 Ko] - D:\phonétique.docx
[29/07/2011 - 11:43:26 | N | 11 Ko] - D:\Pogatcha suzanna.docx
[28/11/2012 - 10:58:42 | N | 77 Ko] - D:\Portraits du Quotidien.doc
[05/03/2013 - 09:46:10 | N | 1136 Ko] - D:\pour mémoire_armistice.pdf
[02/12/2011 - 22:13:30 | N | 346 Ko] - D:\Prehistoire.pdf
[04/03/2012 - 17:43:06 | N | 2660 Ko] - D:\Programme-cadre-francais.pdf
[13/05/2011 - 12:25:08 | N | 11 Ko] - D:\quantité.docx
[15/01/2013 - 19:28:20 | N | 37 Ko] - D:\recapInscription.pdf
[11/02/2013 - 16:36:42 | N | 10 Ko] - D:\Religion.docx
[10/10/2012 - 10:06:22 | N | 13 Ko] - D:\Repas équilibré.docx
[02/12/2011 - 22:38:46 | N | 807 Ko] - D:\repertoire.pdf
[16/08/2006 - 01:43:24 | N | 10 Ko] - D:\Réunion du 5.docx
[13/11/2011 - 10:40:16 | N | 16 Ko] - D:\révisions.wps
[17/01/2014 - 16:19:32 | N | 11 Ko] - D:\malika résiliation.docx
[21/01/2014 - 14:03:14 | N | 13 Ko] - D:\PANGA Nathalie.docx
[17/02/2014 - 20:12:22 | N | 573 Ko] - D:\2012-10-03_livret_accueil_professeurs_des_ecoles_stagiaires.pdf
[17/02/2014 - 20:20:16 | N | 315 Ko] - D:\LIVRET_PES_2013-2014.pdf
[01/03/2009 - 17:36:53 | SHD] - E:\$RECYCLE.BIN
[02/03/2009 - 02:08:40 | D] - E:\HDDRecovery
[12/08/2009 - 11:50:58 | N | 1 Ko] - E:\MediaID.bin
[19/08/2009 - 11:34:59 | D] - E:\PC-DE-NAT
[19/09/2008 - 14:07:36 | N | 0 Ko] - E:\R09597FR.tag
[23/02/2014 - 20:57:14 | SHD] - E:\System Volume Information

################## | Vaccin |

D:\Autorun.inf - Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf - Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |
Avatar du membre

infection cle usb et ordinateur affichant raccourci

par g3n-h@ckm@n
-  dim. 23 févr. 2014 21:34 #107548
salut

ca sert à rien de lancer les outils 25 fois

  • Télécharge Adwcleaner (de Xplode) sur ton Bureau !
  • Fais clic droit dessus, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista,sinon double-clique pour XP
    1. Choisis l'option Scanner
    2. Choisis l'option Nettoyer
    3. Accepte l'avertissement en cliquant sur OK

      Image
    4. Accepte les avertissements/informations en cliquant sur OK
    5. Copie et Colle le contenu du rapport qui apparaît au redémarrage du PC
    Avatar du membre

    Re: [Résolu] infection cle usb et ordinateur affichant racco

    par nat
    -  dim. 23 févr. 2014 22:17 #107564
    voici le rapport
    # AdwCleaner v3.019 - Rapport créé le 23/02/2014 à 21:42:20
    # Mis à jour le 17/02/2014 par Xplode
    # Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
    # Nom d'utilisateur : nat - PC-DE-NAT
    # Exécuté depuis : C:\Users\nat\Downloads\adwcleaner.exe
    # Option : Nettoyer
    ***** [ Services ] *****
    [#] Service Supprimé : DatamngrCoordinator
    Service Supprimé : Offerbox update service
    [#] Service Supprimé : Software_update
    [#] Service Supprimé : Software_update_m
    [#] Service Supprimé : WsysSvc

    ***** [ Fichiers / Dossiers ] *****

    Dossier Supprimé : C:\ProgramData\Babylon
    Dossier Supprimé : C:\ProgramData\BoxUpdChk
    Dossier Supprimé : C:\ProgramData\SaveSenseLive
    Dossier Supprimé : C:\ProgramData\Systweak
    Dossier Supprimé : C:\ProgramData\uniblue
    Dossier Supprimé : C:\ProgramData\wincert
    Dossier Supprimé : C:\ProgramData\CouolSaleCoupon
    Dossier Supprimé : C:\ProgramData\ssurfkeePito
    Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
    Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue
    Dossier Supprimé : C:\Program Files\Advanced System Protector
    Dossier Supprimé : C:\Program Files\Allin1Convert_8h
    Dossier Supprimé : C:\Program Files\BabylonToolbar
    Dossier Supprimé : C:\Program Files\Giant Savings
    Dossier Supprimé : C:\Program Files\Movies Toolbar
    Dossier Supprimé : C:\Program Files\MyPC Backup
    Dossier Supprimé : C:\Program Files\Mysearchdial
    Dossier Supprimé : C:\Program Files\OfferBox
    Dossier Supprimé : C:\Program Files\SaveSenseLive
    Dossier Supprimé : C:\Program Files\uniblue
    Dossier Supprimé : C:\Program Files\LyricsMonkey-15
    Dossier Supprimé : C:\Program Files\CouolSaleCoupon
    Dossier Supprimé : C:\Program Files\ssurfkeePito
    Dossier Supprimé : C:\Users\nat\AppData\Local\Allin1Convert_8h
    Dossier Supprimé : C:\Users\nat\AppData\Local\iac
    Dossier Supprimé : C:\Users\nat\AppData\Local\iLivid
    Dossier Supprimé : C:\Users\nat\AppData\Local\SaveSense
    Dossier Supprimé : C:\Users\nat\AppData\Local\SaveSenseLive
    Dossier Supprimé : C:\Users\nat\AppData\Local\Smartbar
    Dossier Supprimé : C:\Users\nat\AppData\Local\LyricsMonkey-15
    Dossier Supprimé : C:\Users\nat\AppData\Local\Temp\Smartbar
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\Allin1Convert_8h
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\BabylonToolbar
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\Billeo
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\iac
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\ilividmoviestoolbarha
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\Mysearchdial
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\PriceGong
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\searchresultstb
    Dossier Supprimé : C:\Users\nat\AppData\LocalLow\Smartbar
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Babylon
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\DealPly
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mysearchdial
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\OfferBox
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\SaveSense
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Systweak
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
    Dossier Supprimé : C:\Users\nat\Favorites\Documents\optimizer pro
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\ilividmoviestoolbarha
    Dossier Supprimé : C:\Program Files\Software
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\{4BE68A18-DEBA-49E0-9E09-EE7796F3B62A}
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\{AD9A41D2-9A49-4FA6-A79E-71A0785364C8}
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\ffxtlbr@mysearchdial.com
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\df228366-e2c4-46b8-90a5-7f788732f45e@ef1368ad-a4cd-43ec-9ff9-a16207813324.com
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\2vwp@ooui.co.uk
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\8hffxtbr@Allin1Convert_8h.com
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\ayeyiuiii@dqhafbrp.com
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\i87.oji@qhyeeiiii.com
    Dossier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\Extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23}
    Dossier Supprimé : C:\Users\nat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff
    Dossier Supprimé : C:\Users\nat\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmbajnfeegpfichienonefldpjedofp
    Fichier Supprimé : C:\END
    Fichier Supprimé : C:\Users\Public\Desktop\Advanced System Protector.lnk
    Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Offerbox.lnk
    Fichier Supprimé : C:\Windows\system32\roboot.exe
    Fichier Supprimé : C:\Users\nat\AppData\Local\mysearchdial-speeddial.crx
    Fichier Supprimé : C:\Users\nat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
    Fichier Supprimé : C:\Users\nat\Desktop\iLivid.lnk
    Fichier Supprimé : C:\Users\nat\Desktop\MySearchDial.url
    Fichier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\bProtector_extensions.rdf
    Fichier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\bprotector_extensions.sqlite
    Fichier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\bprotector_prefs.js
    Fichier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\searchplugins\Mysearchdial.xml
    Fichier Supprimé : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\searchplugins\Web Search.xml
    Fichier Supprimé : C:\Users\nat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage
    Fichier Supprimé : C:\Users\nat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage
    Fichier Supprimé : C:\Users\nat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage-journal
    Fichier Supprimé : C:\Windows\System32\Tasks\Advanced System Protector_startup
    Fichier Supprimé : C:\Windows\System32\Tasks\BoxSoftwareUpdate
    Fichier Supprimé : C:\Windows\System32\Tasks\Browser Manager
    Fichier Supprimé : C:\Windows\System32\Tasks\LaunchApp
    Fichier Supprimé : C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
    Fichier Supprimé : C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore
    Fichier Supprimé : C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
    Fichier Supprimé : C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA
    Fichier Supprimé : C:\Windows\Tasks\LyricsMonkey-15-chromeinstaller.job
    Fichier Supprimé : C:\Windows\System32\Tasks\LyricsMonkey-15-chromeinstaller
    Fichier Supprimé : C:\Windows\Tasks\LyricsMonkey-15-firefoxinstaller.job
    Fichier Supprimé : C:\Windows\System32\Tasks\LyricsMonkey-15-firefoxinstaller

    ***** [ Raccourcis ] *****

    Raccourci Désinfecté : C:\Users\Public\Desktop\Mozilla Firefox.lnk
    Raccourci Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    Raccourci Désinfecté : C:\Users\nat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    Raccourci Désinfecté : C:\Users\nat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
    Raccourci Désinfecté : C:\Users\nat\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
    Raccourci Désinfecté : C:\Users\nat\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
    Raccourci Désinfecté : C:\Users\nat\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Search.lnk

    ***** [ Registre ] *****

    Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [8hffxtbr@Allin1Convert_8h.com]
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ndkhncnongaclekkbelchmeafffimifj
    Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{032B1B70-4D20-4BEB-915E-FB4CF16A0309}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{032B1B70-4D20-4BEB-915E-FB4CF16A0309}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0137387A-7656-40AC-A2DE-7E8B70F27657}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0137387A-7656-40AC-A2DE-7E8B70F27657}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{048DD124-E5AA-479E-B3E1-2AE26DB5F13A}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{048DD124-E5AA-479E-B3E1-2AE26DB5F13A}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7E851352-5F51-4AF4-A2AF-F9EC840745E3}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7E851352-5F51-4AF4-A2AF-F9EC840745E3}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A35CEB82-C2DF-4A9D-A156-4C5A83F2D24A}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA8D7F4E-7E7D-477C-88A6-021D2A6D0274}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{591E90C5-3D18-4818-81F7-C8A2789B782A}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{591E90C5-3D18-4818-81F7-C8A2789B782A}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3ECD8F1-0B10-41FB-AE32-9BF9D0E69B62}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3ECD8F1-0B10-41FB-AE32-9BF9D0E69B62}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{741DB2C2-CF4B-4B30-93F7-3ABDFCCE67E5}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{741DB2C2-CF4B-4B30-93F7-3ABDFCCE67E5}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C3A82A59-8EC8-4F81-B44B-A82FED01CB3D}
    [#] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3A82A59-8EC8-4F81-B44B-A82FED01CB3D}
    Clé Supprimée : HKCU\Software\Classes\iLivid.torrent
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
    Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
    Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [iLivid]
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.dynamicbarbutton
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.dynamicbarbutton.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.feedmanager
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.feedmanager.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.htmlmenu
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.htmlmenu.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.htmlpanel
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.htmlpanel.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.multiplebutton
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.multiplebutton.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.pseudotransparentplugin
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.pseudotransparentplugin.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.radio
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.radio.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.radiosettings
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.radiosettings.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.scriptbutton
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.scriptbutton.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.settingsplugin
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.settingsplugin.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.skinlauncher
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.skinlauncher.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Allin1Convert_8h.SkinLauncherSettings
    Clé Supprimée : HKLM\SOFTWARE\Classes\Allin1Convert_8h.SkinLauncherSettings.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.thirdpartyinstaller
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.thirdpartyinstaller.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Allin1Convert_8h.ToolbarProtector
    Clé Supprimée : HKLM\SOFTWARE\Classes\Allin1Convert_8h.ToolbarProtector.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.urlalertbutton
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.urlalertbutton.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.xmlsessionplugin
    Clé Supprimée : HKLM\SOFTWARE\Classes\allin1convert_8h.xmlsessionplugin.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    Clé Supprimée : HKLM\SOFTWARE\Classes\b
    Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd
    Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore
    Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
    Clé Supprimée : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\driverscanner
    Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
    Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc
    Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
    Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.bho
    Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
    Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
    Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
    Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
    Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
    Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore
    Clé Supprimée : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialappCore.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\OfferBoxUI.TheBoxCtrl
    Clé Supprimée : HKLM\SOFTWARE\Classes\OfferBoxUI.TheBoxCtrl.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
    Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
    Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
    Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
    Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
    Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
    Clé Supprimée : HKLM\SOFTWARE\Classes\speedupmypc
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [OfferBox]
    Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
    Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.Software.com/Software Update;version=3
    Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.Software.com/Software Update;version=9
    Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
    Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
    Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0043910.BHO
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0043910.BHO.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0043910.Sandbox
    Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0043910.Sandbox.1
    Clé Supprimée : HKCU\Software\5b6d6dfb53cbd47
    Clé Supprimée : HKLM\SOFTWARE\5b6d6dfb53cbd47
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Allin1Convert Search Scope Monitor]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Allin1Convert_8h Browser Plugin Loader]
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0EE02110-967B-4256-ACA6-BC8AC7CB7E61}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1604FC43-3A1E-4C6B-850D-70C8A858C61A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{248B3E95-17A4-482D-A8A8-6B3DF4D05C35}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{250B71CD-97CA-40A5-834F-265719A62CAF}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{27F49273-DE3A-4111-90F9-6C474C37AEFB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{39D4F1A1-A94D-4B7D-BF1D-7446308800ED}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{443321F7-E46C-42F8-812B-F35E98CBB44F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5CDE4714-32DC-473C-8194-0645E62C2E96}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{889F49D2-6CEA-40BE-BE5F-7217485F9745}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8F83D657-5993-4FFA-9AEE-DA0B20D828A7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AF60F89A-4645-4381-8C7F-B8FEAB385445}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C8EF8F70-3807-424A-83F7-DA06FD4DACF9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DE0F6787-9D1C-42B7-A0B9-EAC630F87902}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E4EF697F-434B-4DC7-A464-4412462206DB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EF3F28C8-0330-4D18-B901-D24CB83E5AA1}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EF5DB804-585B-472E-B415-BC63F8F01BF6}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F2C368C5-9F44-4D43-89F3-A1CC87F1DA96}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F99DDD9A-07D0-47AB-86F1-193533DD2C60}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411391110}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422392210}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{53F6A516-3DCC-48F4-835C-6C670CB39CEA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8216BD4A-4DC2-4DCE-9AFF-C86C5ACC6757}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D4D390BE-98E6-4633-AD1B-B18B54BE5E76}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455395510}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466396610}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{16976E15-10EA-44FD-804A-6ECBC9EBBFC7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8ABB9FA2-0740-4AD9-8F54-1192254B3CF4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D09139AB-0ACB-4F22-B9AE-816E6838A814}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444394410}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411391110}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5CF5A690-C8F4-488E-9D20-F21AEF602D41}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411391110}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE48ED75-5A56-4C5F-BBCE-6F1AC3875F66}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411391110}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0EE02110-967B-4256-ACA6-BC8AC7CB7E61}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{27F49273-DE3A-4111-90F9-6C474C37AEFB}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AF60F89A-4645-4381-8C7F-B8FEAB385445}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E4EF697F-434B-4DC7-A464-4412462206DB}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F99DDD9A-07D0-47AB-86F1-193533DD2C60}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411391110}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248B3E95-17A4-482D-A8A8-6B3DF4D05C35}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D86A75B-CB6B-4764-885D-CA6336F04BA2}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53F6A516-3DCC-48F4-835C-6C670CB39CEA}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a2b4898d-0014-4c0d-a192-7ef3b39ab9e0}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a62e3235-1f4a-41bd-927e-435506deac9a}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bbadf613-af29-4b1d-9f70-a64310d35f22}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{be9022a8-9341-4488-85b8-d1d1a249a716}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CD1A63BA-A08C-431B-9A34-F240AADC728D}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CD1A63BA-A08C-431B-9A34-F240AADC728D}]
    Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
    Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SAFARI.EXE\shell\open\command
    Clé Supprimée : HKCU\Software\allin1convert_8h
    Clé Supprimée : HKCU\Software\APN DTX
    Clé Supprimée : HKCU\Software\BabylonToolbar
    Clé Supprimée : HKCU\Software\Billeo
    Clé Supprimée : HKCU\Software\Boxore
    Clé Supprimée : HKCU\Software\DataMngr
    [#] Clé Supprimée : HKCU\Software\DataMngr_Toolbar
    Clé Supprimée : HKCU\Software\ilivid
    Clé Supprimée : HKCU\Software\InstallCore
    Clé Supprimée : HKCU\Software\installedbrowserextensions
    Clé Supprimée : HKCU\Software\InstalledThirdPartyPrograms
    Clé Supprimée : HKCU\Software\mysearchdial
    Clé Supprimée : HKCU\Software\mysearchdial.com
    Clé Supprimée : HKCU\Software\Offerbox
    Clé Supprimée : HKCU\Software\SaveSenseLive
    Clé Supprimée : HKCU\Software\SmartBar
    Clé Supprimée : HKCU\Software\smartbarbackup
    Clé Supprimée : HKCU\Software\smartbarlog
    Clé Supprimée : HKCU\Software\systweak
    Clé Supprimée : HKCU\Software\torch
    Clé Supprimée : HKCU\Software\YahooPartnerToolbar
    Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Clé Supprimée : HKCU\Software\AppDataLow\Software\allin1convert_8h
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Giant Savings
    Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
    Clé Supprimée : HKCU\Software\AppDataLow\Software\LyricsMonkey-15
    Clé Supprimée : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Clé Supprimée : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
    Clé Supprimée : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    Clé Supprimée : HKLM\Software\allin1convert_8h
    Clé Supprimée : HKLM\Software\Babylon
    Clé Supprimée : HKLM\Software\BabylonToolbar
    Clé Supprimée : HKLM\Software\DataMngr
    Clé Supprimée : HKLM\Software\DealPlyLive
    Clé Supprimée : HKLM\Software\InstallCore
    Clé Supprimée : HKLM\Software\InstalledThirdPartyPrograms
    Clé Supprimée : HKLM\Software\mysearchdial
    Clé Supprimée : HKLM\Software\Offerbox
    Clé Supprimée : HKLM\Software\SaveSenseLive
    Avatar du membre

    Re: [Résolu] infection cle usb et ordinateur affichant racco

    par nat
    -  dim. 23 févr. 2014 22:19 #107566
    voici le rapport
    Clé Supprimée : HKLM\Software\systweak
    Clé Supprimée : HKLM\Software\torch
    Clé Supprimée : HKLM\Software\Uniblue
    Clé Supprimée : HKLM\Software\LyricsMonkey-15
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{48C7EA08-0178-45A4-B7D9-137AE61164E4}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\allin1convert_8hbar uninstall firefox
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Offerbox
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LyricsMonkey-15
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{48C7EA08-0178-45A4-B7D9-137AE61164E4}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CA2B24FD-EE10-42B9-B049-AA80268E7E21}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\allin1convert_8hbar uninstall firefox
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BuzzSearch
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DealPly
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mysearchdial
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Offerbox
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WsysControl
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\LyricsMonkey-15
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
    Donnée Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - ;*.offerbox.com

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v9.0.8112.16533

    Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
    Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
    Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
    Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

    -\\ Mozilla Firefox v27.0.1 (fr)

    [ Fichier : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\prefs.js ]

    Ligne Supprimée : user_pref("CT3297966.FF19Solved", "true");
    Ligne Supprimée : user_pref("CT3297966.UserID", "UN36281227703758279");
    Ligne Supprimée : user_pref("CT3297966.browser.search.defaultthis.engineName", "true");
    Ligne Supprimée : user_pref("CT3297966.fullUserID", "UN36281227703758279.IN.20130914222202");
    Ligne Supprimée : user_pref("CT3297966.installDate", "14/09/2013 22:22:05");
    Ligne Supprimée : user_pref("CT3297966.installSessionId", "0A8EB0E8-67D4-4BBE-80B9-18456C180E5D");
    Ligne Supprimée : user_pref("CT3297966.installSp", "false");
    Ligne Supprimée : user_pref("CT3297966.installUsage", "14/09/2013 22:24:00");
    Ligne Supprimée : user_pref("CT3297966.installUsageEarly", "14/09/2013 22:24:00");
    Ligne Supprimée : user_pref("CT3297966.installerVersion", "1.7.0.9");
    Ligne Supprimée : user_pref("CT3297966.keyword", "true");
    Ligne Supprimée : user_pref("CT3297966.originalHomepage", "hxxp://search.babylon.com/?affID=113357tt=4612_8babsrc=HP_ssmntrId=008610a60000000000000022fa0b894e");
    Ligne Supprimée : user_pref("CT3297966.originalSearchAddressUrl", "hxxp://search.babylon.com/?affID=113357tt=4612_8babsrc=KW_ssmntrId=008610a60000000000000022fa0b894eq=");
    Ligne Supprimée : user_pref("CT3297966.originalSearchEngine", "Google");
    Ligne Supprimée : user_pref("CT3297966.originalSearchEngineName", "Search the web (Babylon)");
    Ligne Supprimée : user_pref("CT3297966.searchRevert", "true");
    Ligne Supprimée : user_pref("CT3297966.searchUserMode", "1");
    Ligne Supprimée : user_pref("CT3297966.smartbar.homepage", "true");
    Ligne Supprimée : user_pref("CT3297966.versionFromInstaller", "10.20.0.13");
    Ligne Supprimée : user_pref("CT3297966.xpeMode", "0");
    Ligne Supprimée : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.babylon.com/?affID=113357tt=4612_8babsrc=KW_ssmntrId=008610a60000000000000022fa0b894eq=");
    Ligne Supprimée : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=113357tt=4612_8babsrc=HP_ssmntrId=008610a60000000000000022fa0b894e");
    Ligne Supprimée : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
    Ligne Supprimée : user_pref("browser.search.defaultthis.engineName", "WiseConvert 1.5 B2 Customized Web Search");
    Ligne Supprimée : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3297966CUI=UN36281227703758279UM=1SearchSource=3q={searchTerms}");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babsst");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "en");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.excTlbr", false);
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.id", "008610a60000000000000022fa0b894e");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15661");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "sst");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_defmntrId=008610a60000000000000022fa0b894eq=");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", true);
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=113357tt=4612_8babsrc=NT_ssmntrId=008610a60000000000000022fa0b894e");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.810:39:46");
    Ligne Supprimée : user_pref("extensions.D4M9Jo.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")-1||url.indexOf(\"txtlnkusaolp00000800\")-1||url.indexOf(\"sumorobo\")-1||url.inde[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.InstallationThankYouPage", false);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.InstallationTime", 1383851522);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.active", true);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.addressbar", "NA");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.addressbarenhanced", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.asyncdb.was_copied", "true");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.asyncdb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.asyncdb_dbWasSet_FF25_FIX", true);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.asyncinternaldb.was_copied", "true");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.asyncinternaldb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.asyncinternaldb_dbWasSet_FF25_FIX", true);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.backgroundver", 1);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.certdomaininstaller", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.changeprevious", false);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.cookie.InstallationTime.value", "1383851522");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.description", "LyricsMonkey will allow you to display lyrics for your favorite songs alongside any[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.domain", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.enablesearch", false);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.homepage", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.iframe", false);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000548%22%2C%22sub_id%22%3A%22106[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22928C48DEEA604D28BEDD[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_appVer.value", "36");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_lastVersion.value", "1");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_meta.value", "%7B%7D");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_nextCheck.expiration", "Mon Feb 24 2014 02:04:17 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_nextCheck.value", "true");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_queue.value", "%7B%7D");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb._country_code_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb._country_code_.value", "%22FR%22");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3Anull%2C%22i[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.monetization_plugin_last_executable_request.expiration", "Thu Feb 20 2014 10:23:50 GMT+[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//api.bizographics.com/v[...]
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.lastDailyReport", "1393179954943");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.lastUpdate", "1393182257611");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.manifesturl", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.name", "LyricsMonkey-15");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.newtab", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.opensearch", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/43910/plugins/093/ff/plugins.json");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.pluginsversion", 29);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.publisher", "Showpass");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.searchstatus", 0);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.setnewtab", false);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.thankyou", "");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.updateinterval", 360);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.43910.ver", 36);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.FilesValidatorDueTime", "1393180014907");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.apps", "43910");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.bic", "13c9a2923046c6bdc00d2d32706b8a47");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.cid", 43910);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.firstrun", false);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.hadappinstalled", true);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.installationdate", 1383851518);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.modetype", "production");
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.reportInstall", true);
    Ligne Supprimée : user_pref("extensions.adf228366e2c446b890a57f788732f45eef1368ada4cd43ec9ff9a16207813324com43910.statsDailyCounter", 193);
    Ligne Supprimée : user_pref("extensions.crossrider.bic", "13c9a2923046c6bdc00d2d32706b8a47");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1359796053);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.active", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.addressbar", "NA");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.addressbarenhanced", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.asyncdb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.asyncdb_dbWasSet_FF25_FIX", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.asyncinternaldb_dbWasSet", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.asyncinternaldb_dbWasSet_FF25_FIX", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.backgroundjs", "\n\n//\n");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.backgroundver", 43);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.changeprevious", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1359796053");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1359796053");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_arbitrary_code.expiration", "Tue Feb 11 2014 22:19:28 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_arbitrary_code.value", "%22%28function%28%29%7B_GPL_PLUGIN.st%3D%7B%5C%2274052%26pid%3D1269%5C%22%3A%7Bs%3A%5B%5C%2274052%26pid%3D1695%5C%22%2C[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.expiration", "Tue Feb 11 2014 22:19:28 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_cf_bu1.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_cf_bu1.value", "1361216298");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Fri Feb 14 2014 22:26:03 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22FR%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1392153279");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_currenttime.value", "%221391447691%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_delay.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_delay.value", "24");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure.value", "1368266278");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list.expiration", "Wed Feb 12 2014 01:32:16 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list.value", "%7B%22f7610cf2b37067876b694a05c56f32e2%22%3A%7B%22p%22%3A%22/%22%7D%2C%22d763717b4b2e0a17a877cc642fb80ee4%22%3A%7B%22p%22%3A%2[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_t.expiration", "Wed Feb 12 2014 21:35:37 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_t.value", "%22hxxp%3A//ftp.free.org/mirrors/videolan/vlc/2.1.3/win32/vlc-2.1.3-win32.exe%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installtime.value", "%221359648602%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2214019%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.value", "1359796071725");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221171%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%22138709%22");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.value", "1359796060391");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons display instantly while you're shopping online!");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.domain", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.enablesearch", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.fbremoteurl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.group", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.homepage", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.iframe", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%2258424%22%2C%22sub_id%22%3A%22default%22%2C%22uzid%22%3A%2258424%26subid%3D%26pid%3D1242%22[...]
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "102");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Wed Feb 12 2014 01:33:09 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.lastDailyReport", "1392143515547");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.lastUpdate", "1392143513548");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.manifesturl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.newtab", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.opensearch", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.name", "base");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 8);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.name", "GPL Plugin (Loader)");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.ver", 16);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.name", "GPL Background (BG)");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.ver", 39);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.name", "CrossriderAppUtils");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.ver", 5);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.name", "CrossriderUtils");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.ver", 9);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.name", "FFAppAPIWrapper");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.ver", 12);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.name", "jQuery");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.ver", 4);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.name", "debug");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.ver", 5);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.name", "resources");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.ver", 5);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.name", "initializer");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.ver", 4);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.name", "jquery_1_7_1");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.ver", 4);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.name", "resources_background");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.name", "appApiMessage");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_72.name", "appApiValidation");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_72.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.name", "CrossriderInfo");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.ver", 5);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.name", "omniCommands");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.ver", 3);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,1000015");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,1000014,28");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/4479/plugins/093/ff/plugins.json");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.pluginsversion", 73);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.publisher", "Innovative Apps");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.searchstatus", 0);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.setnewtab", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.settingsurl", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.thankyou", "");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.updateinterval", 360);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.4479.ver", 102);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.adsOldValue", -1);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.apps", "4479");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.bic", "13c9a2923046c6bdc00d2d32706b8a47");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.cid", 4479);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.firstrun", false);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.hadappinstalled", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.installationdate", 1359796053);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.lastcheck", 23062783);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.lastcheckitem", 23062989);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.modetype", "production");
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.reportInstall", true);
    Ligne Supprimée : user_pref("extensions.crossriderapp4479.statsDailyCounter", 333);
    Ligne Supprimée : user_pref("extensions.enabledAddons", "df228366-e2c4-46b8-90a5-7f788732f45e%40ef1368ad-a4cd-43ec-9ff9-a16207813324.com:0.93.35,ffxtlbr%40mysearchdial.com:1.6.0,wrc%40avast.com:9.0.2013.75,%7B972ce4c6-[...]
    Ligne Supprimée : user_pref("extensions.helperbar.DockingPositionDown", false);
    Ligne Supprimée : user_pref("extensions.helperbar.LastHiddenTime", 23075798);
    Ligne Supprimée : user_pref("extensions.helperbar.SmartbarDisabled", true);
    Ligne Supprimée : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
    Ligne Supprimée : user_pref("extensions.helperbar.Visibility", true);
    Ligne Supprimée : user_pref("extensions.helperbar.countryiso", "fr");
    Ligne Supprimée : user_pref("extensions.helperbar.downloadprovider", "adknowledgeyb");
    Ligne Supprimée : user_pref("extensions.helperbar.installationid", "f5373ed7-7599-f81d-7845-59c6806ef0d0");
    Ligne Supprimée : user_pref("extensions.helperbar.installdate", "13/11/2013");
    Ligne Supprimée : user_pref("extensions.helperbar.publisher", "adknowledgeyb");
    Ligne Supprimée : user_pref("extensions.mysearchdial.AL", 2);
    Ligne Supprimée : user_pref("extensions.mysearchdial.aflt", "irmsd0103");
    Ligne Supprimée : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
    Ligne Supprimée : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtBtAzz0ByDzytCzyzz0CtCtD0AyCtN0D0Tzu0SyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");
    Ligne Supprimée : user_pref("extensions.mysearchdial.cntry", "FR");
    Ligne Supprimée : user_pref("extensions.mysearchdial.cr", "1445064069");
    Ligne Supprimée : user_pref("extensions.mysearchdial.dfltLng", "");
    Ligne Supprimée : user_pref("extensions.mysearchdial.dfltSrch", true);
    Ligne Supprimée : user_pref("extensions.mysearchdial.dnsErr", true);
    Ligne Supprimée : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
    Ligne Supprimée : user_pref("extensions.mysearchdial.dpk_blck", "true");
    Ligne Supprimée : user_pref("extensions.mysearchdial.dpk_prompt", "true");
    Ligne Supprimée : user_pref("extensions.mysearchdial.excTlbr", false);
    Ligne Supprimée : user_pref("extensions.mysearchdial.hdrMd5", "5FF43CF929FAB3DC94A973A726B3C918");
    Ligne Supprimée : user_pref("extensions.mysearchdial.hmpg", true);
    Ligne Supprimée : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1a=irmsd0103cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByDzytCzyzz0CtCtD0AyCtN0D0Tzu0SyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutB[...]
    Ligne Supprimée : user_pref("extensions.mysearchdial.hpFFXOld", "hxxp://www.search.ask.com/?o=APN10645Agct=hpd= ... 549-127t=4");
    Ligne Supprimée : user_pref("extensions.mysearchdial.id", "00238B59198C10A6");
    Ligne Supprimée : user_pref("extensions.mysearchdial.instlDay", "16112");
    Ligne Supprimée : user_pref("extensions.mysearchdial.instlRef", "");
    Ligne Supprimée : user_pref("extensions.mysearchdial.lastB", "hxxp://www.search.ask.com/?o=APN10645Agct=hpd=0-666v=-t=4");
    Ligne Supprimée : user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.21.023:29:47");
    Ligne Supprimée : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2a=irmsd0103cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByDzytCzyzz0CtCtD0AyCtN0D0Tzu0SyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Czu[...]
    Ligne Supprimée : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"90\",\"lastVrsn\":\"90\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
    Ligne Supprimée : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
    Ligne Supprimée : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
    Ligne Supprimée : user_pref("extensions.mysearchdial.sg", "none");
    Ligne Supprimée : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
    Ligne Supprimée : user_pref("extensions.mysearchdial.tlbrId", "base");
    Ligne Supprimée : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3a=irmsd0103cd=2XzuyEtN2Y1L1QzutDtDtBtAzz0ByDzytCzyzz0CtCtD0AyCtN0D0Tzu0SyByBtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1C[...]
    Ligne Supprimée : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
    Ligne Supprimée : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
    Ligne Supprimée : user_pref("extensions.mysearchdial_i.hmpg", true);
    Ligne Supprimée : user_pref("extensions.mysearchdial_i.newTab", false);
    Ligne Supprimée : user_pref("extensions.mysearchdial_i.smplGrp", "none");
    Ligne Supprimée : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.023:29:47");
    Ligne Supprimée : user_pref("smartbar.addressBarOwnerCTID", "CT3297966");
    Ligne Supprimée : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3297966CUI=UN36281227703758279UM=1SearchSource=13");
    Ligne Supprimée : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3297966SearchSource=2CUI=UN36281227703758279UM=1q=");
    Ligne Supprimée : user_pref("smartbar.defaultSearchOwnerCTID", "CT3297966");
    Ligne Supprimée : user_pref("smartbar.homePageOwnerCTID", "CT3297966");
    Ligne Supprimée : user_pref("smartbar.machineId", "JYEXVORFPSYMEDLWIZQOXUZYNNDSVHJ1WVBG7XSEP+VIK2IJZERGG/RBTRI9TLG6JMOOYFGGFJP1RAYLGP52PG");

    -\\ Google Chrome v32.0.1700.107

    [ Fichier : C:\Users\nat\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Supprimée : homepage

    *************************

    AdwCleaner[R0].txt - [75939 octets] - [23/02/2014 21:39:29]
    AdwCleaner[S0].txt - [72116 octets] - [23/02/2014 21:42:20]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt
    Avatar du membre

    infection cle usb et ordinateur affichant raccourci

    par g3n-h@ckm@n
    -  dim. 23 févr. 2014 22:33 #107572
    quelle poubelle numérique j'ai jamais vu ca ! c'est ce qu'on apelle faire vraiment n'importe quoi avec son pc !! ^^
    • Désactive ton antivirus
    • Télécharge Shortcut_Module (de g3n-h@ckm@n) sur ton bureau.

      Note : Enregistrer votre travail avant de continuer !

      Image
    • Lance Shortcut_Module,
    • Clic sur Nettoyer

      Note : Patiente le temps du scan
    • Après le redémarrage relance l'outil et clique sur le petit "R" pour ouvrir le rapport , puis poste son contenu
    Avatar du membre

    Re: [Résolu] infection cle usb et ordinateur affichant racco

    par nat
    -  lun. 24 févr. 2014 01:07 #107612
    voici le rapport

    desolée mais ce fut compliqué!!!!

    ¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module | g3n-h@ckm@n | 23.02.2014.4

    ¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤ - Start 22:45:16 - 23/02/2014

    Mis à jour le : 23/02/2014 | 21.35 par g3n-h@ckm@n

    Contact : http://www.sosvirus.net

    Boot : Normal  

    Système : Windows Vista (TM) Home Premium (32 bits) HomePremium Service Pack 2

    Mémoire RAM = Total (MB) : 3140 | Libre (MB) : 1150
    Pagefile = Total (MB) : 6486 | Libre (MB) : 4237
    Virtuelle = Total (MB) : 2097 | Libre (MB) : 1983


    Registre sauvegardé , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

    ¤¤¤¤¤¤¤¤¤¤ | Mises à jour Windows

    Dernière(s) détection(s) : 2014-02-23 17:40:05
    Dernières Téléchargées : 2014-02-11 19:52:37
    Dernières installées : 2014-02-12 12:24:13
    Prochaine recherche : 2014-02-24 13:34:19

    ¤¤¤¤¤¤¤¤¤¤ | Processus tués

    948 | C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (.Microsoft Corporation - PresentationFontCache.exe.) - (3.0.6920.4000) - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
    1096 | C:\Windows\system32\Ati2evxx.exe (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - (6.14.10.4190) - C:\Windows\system32\Ati2evxx.exe
    1368 | C:\Windows\system32\SLsvc.exe (.Microsoft Corporation - Service de gestion des licences Microsoft.) - (6.0.6002.18005) - C:\Windows\system32\SLsvc.exe
    1504 | C:\Windows\system32\Ati2evxx.exe (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - (6.14.10.4190) - Ati2evxx.exe -Client
    1968 | C:\Windows\System32\spoolsv.exe (.Microsoft Corporation - Application sous-système spouleur.) - (6.0.6002.18294) - C:\Windows\System32\spoolsv.exe
    1628 | C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) - "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe"
    2000 | C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (.Apple Inc. - YSLoader.exe.) - (17.327.4.11) - "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
    1128 | C:\Program Files\Bonjour\mDNSResponder.exe (.Apple Inc. - Bonjour Service.) - (3.0.0.10) - "C:\Program Files\Bonjour\mDNSResponder.exe"
    1388 | C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (.TOSHIBA CORPORATION - Service of ConfigFree..) - (7.0.1.6) - "C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe"
    2052 | C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) - "C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe"
    2132 | C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (.Symantec Corporation - Symantec Service Framework.) - (11.2.3.6) - "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe" /s "NAV" /m "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\diMaster.dll" /prefetch:1
    2152 | C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (.O2Micro International - O2 Flash Memory Service.) - (1.0.0.3) - "C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe"
    2228 | C:\Program Files\Toshiba TEMPRO\TempoSVC.exe (.Toshiba Europe GmbH - Toshiba TEMPRO.) - (1.1.0.0) - "C:\Program Files\Toshiba TEMPRO\TempoSVC.exe"
    2480 | C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (.TOSHIBA Corporation - TOSHIBA Navi Support Service.) - (1.0.0.3) - "C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe"
    2544 | C:\Windows\system32\TODDSrv.exe (.TOSHIBA Corporation - TDCSrv Application.) - (1.0.0.5) - C:\Windows\system32\TODDSrv.exe
    2616 | C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (.TOSHIBA Corporation - TOSHIBA Power Saver.) - (1.0.0.1) - "C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe"
    2640 | C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe (.TOSHIBA Corporation - TosIPCSrv.exe.) - (1.0.0.1) - "C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe"
    2712 | C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (.Ulead Systems, Inc. - ULCDRSvr.) - (1.0.0.4) - "C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
    2752 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - (7.250.4232.0) - "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
    2804 | C:\Windows\system32\SearchIndexer.exe (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.6002.18005) - C:\Windows\system32\SearchIndexer.exe /Embedding
    2852 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) - (7.250.4232.0) - WLIDSvcM.exe 2752
    2904 | C:\Windows\system32\DRIVERS\xaudio.exe (.Conexant Systems, Inc. - Modem Audio Service.) - (1.0.15.0) - C:\Windows\system32\DRIVERS\xaudio.exe
    2996 | C:\Windows\System32\WUDFHost.exe (.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes en mode utilisateur.) - (6.2.9200.16384) - "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9f55f451-185c-4b6b-9b77-6e540b7abf23 -SystemEventPortName:HostProcess-0ffea209-0203-48d8-89c1-24941e3d6c86 -IoCancelEventPortName:HostProcess-fa0e093e-c941-468c-9d31-031b9fffdae4 -NonStateChangingEventPortName:HostProcess-3ee20c88-43ba-446f-a708-fbdeb86f8592 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:32462c16-64c7-43da-a396-0ba6540ed721 -DeviceGroupId:WpdFsGroup
    3996 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.0.6002.18342) - taskeng.exe {4BA3A2B4-E5D7-4069-9C27-63B7D2A9AFBC}
    3612 | C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe (.Toshiba - Service for SmartFaceV.) - (2.0.2.0) - "C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe"
    4024 | C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) - "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    2524 | C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (.Symantec Corporation - Symantec Service Framework.) - (11.2.3.6) - "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe" /c /a /s UserSession
    3980 | C:\Windows\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.0.6002.18005) - C:\Windows\Explorer.EXE
    1472 | C:\Program Files\Toshiba\ConfigFree\NDSTray.exe (.TOSHIBA CORPORATION - ConfigFree(TM) Task tray menu.) - (7.0.1.12) - "C:\Program Files\Toshiba\ConfigFree\NDSTray.exe"
    3456 | C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (.Google - Google Desktop.) - (5.9.1005.12335) - "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    3840 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.0.6002.18342) - taskeng.exe {E43B6A97-6763-4A3E-A853-035A29149C15}
    1084 | C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe (.Toshiba Europe GmbH - Toshiba TEMPRO.) - (1.1.0.0) - "C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe"
    1312 | C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe (.TOSHIBA - TOSHIBA Online Product Information.) - (1.0.0.0) - "C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe" -startup
    4064 | C:\Windows\System32\mobsync.exe (.Microsoft Corporation - Microsoft Sync Center.) - (6.0.6001.18000) - C:\Windows\System32\mobsync.exe -Embedding
    3808 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) - (10.1.7.0) - "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
    3240 | C:\Program Files\Glary Utilities 4\SoftwareUpdate.exe (.Glarysoft Ltd - SoftwareUpdate.) - (4.0.0.223) - "C:\Program Files\Glary Utilities 4\SoftwareUpdate.exe" -autorun
    3176 | C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (.Chicony - traybar.) - (1.5.4002.79) - "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
    3592 | C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) - (2.0.0.0) - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM"
    1356 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.0.6002.18342) - taskeng.exe {2E0008E0-75B8-4040-B6EE-314035B4093A}
    3100 | C:\Program Files\Google\Update\GoogleUpdate.exe (.Google Inc. - Programme d'installation de Google.) - (1.2.183.9) - "C:\Program Files\Google\Update\GoogleUpdate.exe" /c
    3772 | C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (.TOSHIBA Corporation - TOSHIBA Power Saver.) - (1.0.0.1) - "C:\Program Files\Toshiba\Power Saver\TPwrMain.exe"
    1284 | C:\Program Files\Toshiba\SmoothView\SmoothView.exe (.TOSHIBA Corporation - SmoothView.) - (3.0.8.32) - "C:\Program Files\Toshiba\SmoothView\SmoothView.exe"
    4180 | C:\Program Files\Windows Media Player\wmplayer.exe (.Microsoft Corporation - Windows Media Player.) - (11.0.6002.18311) - "C:\Program Files\Windows Media Player\wmplayer.exe" /SkipFUE /RemoteOCXLaunch /SuppressDialogs
    4244 | C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (.TOSHIBA Corporation - TOSHIBA Flash Cards.) - (2.0.0.6) - "C:\Program Files\Toshiba\FlashCards\TCrdMain.exe"
    4936 | C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (.TOSHIBA Corporation. - HDMICtrlMan.exe.) - (1.6.0.0) - "C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe"
    5916 | C:\Program Files\Common Files\Java\Java Update\jusched.exe (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) - (2.0.3.1) - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    4108 | C:\Program Files\iTunes\iTunesHelper.exe (.Apple Inc. - iTunesHelper.) - (10.7.0.21) - "C:\Program Files\iTunes\iTunesHelper.exe"
    4724 | C:\Program Files\Windows Sidebar\sidebar.exe (.Microsoft Corporation - Volet Windows.) - (6.0.6002.18005) - "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
    4752 | C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) - (2.2.0.1) - "C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe"
    4988 | C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.Microsoft Corporation - Windows Live Messenger.) - (15.4.3555.308) - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    5116 | C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.Google Inc. - GoogleToolbarNotifier.) - (2.0.301.1654) - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    5176 | C:\Windows\ehome\ehtray.exe (.Microsoft Corporation - Media Center Tray Applet.) - (6.0.6001.18000) - "C:\Windows\ehome\ehtray.exe"
    1576 | C:\Program Files\Windows Media Player\wmpnscfg.exe (.Microsoft Corporation - Application de configuration du service Partage réseau du Lecteur Windows Media.) - (11.0.6001.7000) - "C:\Program Files\Windows Media Player\wmpnscfg.exe"
    3920 | C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (.McAfee, Inc. - McAfee Security Scanner Scheduler.) - (3.8.141.0) - "C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe"
    5276 | C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe (. - .) - (1.7.8000.528) - "C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe" NoShow
    5284 | C:\Windows\system32\NOTEPAD.EXE (.Microsoft Corporation - Bloc-notes.) - (6.0.6001.18000) - "C:\Windows\system32\NOTEPAD.EXE" C:\AdwCleaner\AdwCleaner[S0].txt
    4352 | C:\Windows\system32\wbem\unsecapp.exe (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.0.6002.18005) - C:\Windows\system32\wbem\unsecapp.exe -Embedding
    4776 | C:\Program Files\Glary Utilities 4\Integrator.exe (.Glarysoft Ltd - Glary Utilities 4.) - (4.5.0.89) - "C:\Program Files\Glary Utilities 4\Integrator.exe" /autostart
    5520 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) - (11.0.6001.7000) - "C:\Program Files\Windows Media Player\wmpnetwk.exe"
    4496 | C:\Program Files\Windows Sidebar\sidebar.exe (.Microsoft Corporation - Volet Windows.) - (6.0.6002.18005) - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    4556 | C:\Windows\ehome\ehmsas.exe (.Microsoft Corporation - Media Center Media Status Aggregator Service.) - (6.0.6001.18000) - C:\Windows\ehome\ehmsas.exe -Embedding
    1516 | C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe (.TOSHIBA Corporation. - SoundChanger.exe.) - (1.6.0.0) - "C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe" /SPEAKER
    3748 | C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe (.TOSHIBA CORPORATION - ConfigFree Switch Manager.) - (7.0.1.8) - "C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe"
    3196 | C:\Program Files\iPod\bin\iPodService.exe (.Apple Inc. - iPodService Module (32-bit).) - (10.7.0.21) - "C:\Program Files\iPod\bin\iPodService.exe"
    5684 | C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) - (2.0.0.0) - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
    5412 | C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (.Synaptics, Inc. - Synaptics Pointing Device Helper.) - (10.1.7.0) - "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
    5972 | C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe (.Microsoft Corporation. - Microsoft SeaPort Search Enhancement Broker.) - (7.3.124.0) - "C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe"
    5440 | C:\Windows\system32\sdclt.exe (.Microsoft Corporation - Sauvegarde Microsoft® Windows.) - (6.0.6002.18353) - C:\Windows\system32\sdclt.exe /DETECTFAILURE
    5268 | C:\Program Files\Microsoft Office\Office12\WINWORD.EXE (.Microsoft Corporation - Microsoft Office Word.) - (12.0.6690.5000) - "C:\Program Files\Microsoft Office\Office12\WINWORD.EXE"
    4196 | C:\Program Files\Mozilla Firefox\firefox.exe (.Mozilla Corporation - Firefox.) - (27.0.1.5156) - "C:\Program Files\Mozilla Firefox\firefox.exe"
    3464 | C:\Windows\system32\SearchProtocolHost.exe (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.6002.18005) - "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
    4256 | C:\Program Files\Mozilla Firefox\plugin-container.exe (.Mozilla Corporation - Plugin Container for Firefox.) - (27.0.1.5156) - "C:\Program Files\Mozilla Firefox\plugin-container.exe" --channel=4196.6703000.1154365275 "C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll" -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 4196 "\\.\pipe\gecko-crash-server-pipe.4196" plugin
    3312 | C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) - (12.0.0.70) - "C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe" --proxy-stub-channel=Flash4256.560FC768.31332 --host-broker-channel=Flash4256.560FC768.20397 --host-pid=4256 --host-npapi-version=27 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll"
    4320 | C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) - (12.0.0.70) - "C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe" --channel=3312.0019F22C.1154673470 --proxy-stub-channel=Flash4256.560FC768.31332 --plugin-path="C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll" --host-npapi-version=27 --type=renderer

    ¤¤¤¤¤¤¤¤¤¤ | Services

    Supprimé avec succès : HKLM\..\ControlSet001\Services\savesenselivem : C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe /medsvc
    Supprimé avec succès : HKLM\..\ControlSet004\Services\savesenselivem : C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe /medsvc

    ¤¤¤¤¤¤¤¤¤¤ | Hosts

    C:\Windows\System32\Drivers\etc\hosts : Remis a zéro avec succès

    ¤¤¤¤¤¤¤¤¤¤ | Registre

    Supprimé avec succès : HKLM\Software\Classes\iLivid.torrent
    Supprimé avec succès : HKLM\Software\Classes\protector_dll.Protector
    Supprimé avec succès : HKLM\Software\Classes\protector_dll.Protector.1
    Supprimé avec succès : HKLM\Software\Classes\protector_dll.ProtectorLib.1
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLive.OneClickCtrl.9
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLive.OneClickProcessLauncherMachine.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CoCreateAsync
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CoreClass
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CoreClass.1
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CoreMachineClass.1
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CredentialDialogMachine.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachine.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.OnDemandCOMClassSvc.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.ProcessLauncher.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3COMClassService.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3WebMachine.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3WebMachineFallback.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3WebSvc.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.ASUController
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.ASUController.1
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.CoCreateAsync.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.CoreMachineClass.1
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.CredentialDialogMachine.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.OnDemandCOMClassMachineFallback.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.OnDemandCOMClassSvc.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.ProcessLauncher.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3COMClassService.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3WebMachine.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3WebMachineFallback.1.0
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3WebSvc.1.0
    Supprimé avec succès : HKLM\Software\Classes\protector_dll.ProtectorLib
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLive.OneClickProcessLauncherMachine
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CoCreateAsync.1.0
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CredentialDialogMachine
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.ProcessLauncher
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3WebMachine
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3WebSvc
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.CoCreateAsync
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.CredentialDialogMachine
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.OnDemandCOMClassSvc
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3COMClassService
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3WebMachineFallback
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{08230486-CBAF-4000-8036-447C3852D034} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{1070C156-160B-47A0-B7D9-1860396BAB57} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{13809C03-DE3B-47E5-96A3-2D8F83693A50} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{27CE191D-733B-4450-AFCD-096D105288C3} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{39A29266-D3E4-462D-AB05-F93B1053F6CF} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{3B96B5D3-4A8D-42DC-9CDE-E9B94B3CFE5D} : C:\Program Files\Software\Update\1.3.25.0\npSoftwareUpdate3.dll
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{3D976BD4-0B6A-4757-9D2B-65AA20F4B4EA} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{73192D81-6D24-4C40-BF7B-2507C6FA0B1A} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{76894207-241A-473B-B111-FAA75608F1D9} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{88C606E7-BA26-41CB-8CC3-D1E313E34E75} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{93D3100A-BBB6-456C-96FC-82CAC5F383AC} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2} : C:\Program Files\SaveSenseLive\Update\1.3.23.0\psmachine.dll
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{9E0546FF-D44F-4FE4-A324-995FCACB8D33} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546} : C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{ACCC747B-2A59-4F30-BA7C-D26333DE65F5} : C:\Program Files\Software\Update\1.3.25.0\npSoftwareUpdate3.dll
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{AE2506E3-0F75-44EE-B552-CFF3BFF4D50F} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{AF0C0AA7-AFBA-46a0-A394-B1E1345FD936} : "C:\Program Files\OfferBox\OfferBox.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{B6CD3C31-ABF4-4C7A-8CB7-29960BC7017C} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44} : C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A} : C:\Program Files\SaveSenseLive\Update\1.3.23.0\psmachine.dll
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{C24C3824-63D8-42CD-BB5A-77631072FDB2} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{CDDAB3A4-E64D-4AE0-9E1D-F3132F5F913F} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{E66A759D-367F-433E-85C6-ED7F040BCC32} : "C:\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{EB41B92A-3A76-4237-9E6B-A5DDC2EAA771} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateOnDemand.exe"
    Supprimé avec succès : HKLM\Software\Classes\CLSID\{F9A8326E-9C90-4BF2-ACC7-D0883D16AA82} : "C:\Program Files\Software\Update\1.3.25.0\SoftwareUpdateBroker.exe"
    Supprimé avec succès : HKLM\Software\Classes\AppID\{6A070EEA-E3F8-411E-9D3A-F3814ED6D1A8} : SoftwareUpdateApp
    Supprimé avec succès : HKLM\Software\Classes\AppID\{96FBC13C-8214-4100-88E0-FF74D7A1CB4D} : protector_dll
    Supprimé avec succès : HKLM\Software\Classes\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{0BD19251-4B4B-4B94-AB16-617106245BB7} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{3281114F-BCAB-45E3-80D9-A6CD64D4E636} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{44533FCB-F9FB-436A-8B6B-CF637B2D465A} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{44B29DDD-CF7A-454A-A275-A322A398D93F} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{AA0F50A8-2618-4AE4-A779-9F7378555A8F} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{B2DB115C-8278-4947-9A07-57B53D1C4215} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{B97FC455-DB33-431D-84DB-6F1514110BD5} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{E72E9312-0367-4216-BFC7-21485FA8390B} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{F6CCB6C9-127E-44AE-8552-B94356F39FFE} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\Classes\Interface\{FFD25630-2734-4AE9-88E6-21BF6525F3FE} : {FBC322D5-407E-4854-8C0B-555B951FD8E3}
    Supprimé avec succès : HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=3 :  : C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll
    Supprimé avec succès : HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=9 :  : C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll
    Supprimé avec succès : HKLM\SOFTWARE\omiga-plusSoftware
    Supprimé avec succès : HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\ilividmoviestoolbarha
    Supprimé avec succès : HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\SaveSense
    Supprimé avec succès : HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\AppDataLow\Software\ilividmoviestoolbarha
    Supprimé avec succès : HKU\S-1-5-18\Software\AppDataLow\Software\LyricsMonkey-15
    Supprimé avec succès : HKU\S-1-5-18\Software\AppDataLow\Software\Plus-HD-1.3
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011441179} : C:\Program Files\Giant Savings
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61} : C:\Program Files\Allin1Convert_8h\bar\1.bin
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6811FD91-72F1-4E02-AE2B-C3FC9876360A} : C:\PROGRA~1\MOVIES~1\Datamngr\SRTOOL~1\IE
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046} : C:\Program Files\Allin1Convert_8h\bar\1.bin
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da} : C:\Program Files\Allin1Convert_8h\bar\1.bin
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A18D16ED-27B2-4B83-B70C-15E73F099546} : C:\Program Files\SaveSenseLive\Update
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44} : C:\Program Files\SaveSenseLive\Update\1.3.23.0
    Supprimé avec succès : HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f671c1b3-9776-426d-a350-55fb2d9b53f7} : C:\Program Files\Allin1Convert_8h\bar\1.bin
    Supprimé avec succès : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B96B5D3-4A8D-42DC-9CDE-E9B94B3CFE5D}
    Supprimé avec succès : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A18D16ED-27B2-4B83-B70C-15E73F099546}
    Supprimé avec succès : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ACCC747B-2A59-4F30-BA7C-D26333DE65F5}
    Supprimé avec succès : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
    Supprimé avec succès : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B96B5D3-4A8D-42DC-9CDE-E9B94B3CFE5D}
    Supprimé avec succès : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{ACCC747B-2A59-4F30-BA7C-D26333DE65F5}
    Supprimé avec succès : HKU\S-1-5-21-1501028913-147664836-3955362586-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7208284E-2149-4EAA-BDB7-BD68482F3F52} : Mysearchdial
    ¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module | g3n-h@ckm@n | 23.02.2014.4

    ¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤ - Start 23:48:05 - 23/02/2014

    Mis à jour le : 23/02/2014 | 21.35 par g3n-h@ckm@n

    Contact : http://www.sosvirus.net

    Boot : Normal  

    Système : Windows Vista (TM) Home Premium (32 bits) HomePremium Service Pack 2

    Mémoire RAM = Total (MB) : 3140 | Libre (MB) : 1688
    Pagefile = Total (MB) : 6486 | Libre (MB) : 4988
    Virtuelle = Total (MB) : 2097 | Libre (MB) : 1983


    Registre sauvegardé , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

    ¤¤¤¤¤¤¤¤¤¤ | Mises à jour Windows

    Dernière(s) détection(s) : 2014-02-23 17:40:05
    Dernières Téléchargées : 2014-02-11 19:52:37
    Dernières installées : 2014-02-12 12:24:13
    Prochaine recherche : 2014-02-24 13:34:19

    ¤¤¤¤¤¤¤¤¤¤ | Processus tués

    1020 | C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (.Microsoft Corporation - PresentationFontCache.exe.) - (3.0.6920.4000) - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
    1180 | C:\Windows\system32\Ati2evxx.exe (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - (6.14.10.4190) - C:\Windows\system32\Ati2evxx.exe
    1416 | C:\Windows\system32\SLsvc.exe (.Microsoft Corporation - Service de gestion des licences Microsoft.) - (6.0.6002.18005) - C:\Windows\system32\SLsvc.exe
    1632 | C:\Windows\system32\Ati2evxx.exe (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - (6.14.10.4190) - Ati2evxx.exe -Client
    2036 | C:\Windows\System32\spoolsv.exe (.Microsoft Corporation - Application sous-système spouleur.) - (6.0.6002.18294) - C:\Windows\System32\spoolsv.exe
    1176 | C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) - "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe"
    1560 | C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (.Apple Inc. - YSLoader.exe.) - (17.327.4.11) - "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
    868 | C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe (.Microsoft Corporation. - BingBar Service.) - (7.3.124.0) - "c:\program files\microsoft\bingbar\7.3.124.0\bbsvc.exe"
    2064 | C:\Program Files\Bonjour\mDNSResponder.exe (.Apple Inc. - Bonjour Service.) - (3.0.0.10) - "C:\Program Files\Bonjour\mDNSResponder.exe"
    2084 | C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (.TOSHIBA CORPORATION - Service of ConfigFree..) - (7.0.1.6) - "C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe"
    2120 | C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) - "C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe"
    2264 | C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (.Symantec Corporation - Symantec Service Framework.) - (11.2.3.6) - "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe" /s "NAV" /m "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\diMaster.dll" /prefetch:1
    2284 | C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (.O2Micro International - O2 Flash Memory Service.) - (1.0.0.3) - "C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe"
    2388 | C:\Program Files\Toshiba TEMPRO\TempoSVC.exe (.Toshiba Europe GmbH - Toshiba TEMPRO.) - (1.1.0.0) - "C:\Program Files\Toshiba TEMPRO\TempoSVC.exe"
    2572 | C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (.TOSHIBA Corporation - TOSHIBA Navi Support Service.) - (1.0.0.3) - "C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe"
    2616 | C:\Windows\system32\TODDSrv.exe (.TOSHIBA Corporation - TDCSrv Application.) - (1.0.0.5) - C:\Windows\system32\TODDSrv.exe
    2648 | C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (.TOSHIBA Corporation - TOSHIBA Power Saver.) - (1.0.0.1) - "C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe"
    2708 | C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe (.TOSHIBA Corporation - TosIPCSrv.exe.) - (1.0.0.1) - "C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe"
    2740 | C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (.Ulead Systems, Inc. - ULCDRSvr.) - (1.0.0.4) - "C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
    2808 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - (7.250.4232.0) - "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
    2824 | C:\Windows\system32\SearchIndexer.exe (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.6002.18005) - C:\Windows\system32\SearchIndexer.exe /Embedding
    2864 | C:\Windows\System32\WUDFHost.exe (.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes en mode utilisateur.) - (6.2.9200.16384) - "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e16d1807-441b-4a5c-a8da-2f5877fd4dd0 -SystemEventPortName:HostProcess-8e251c7a-1fcd-4ec8-8975-990d81f5ad1c -IoCancelEventPortName:HostProcess-8a4155bb-5389-46aa-93e2-c20eaed37121 -NonStateChangingEventPortName:HostProcess-e2209a28-fe58-464e-abe8-2fee98d52fa4 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c19152ff-bf3d-4117-96b9-bafb01ef3d7e -DeviceGroupId:WpdFsGroup
    2916 | C:\Windows\system32\DRIVERS\xaudio.exe (.Conexant Systems, Inc. - Modem Audio Service.) - (1.0.15.0) - C:\Windows\system32\DRIVERS\xaudio.exe
    3072 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.0.6002.18342) - taskeng.exe {A37EF951-4E31-4A89-BF3E-19DF6B2E4B48}
    3676 | C:\Windows\system32\SearchProtocolHost.exe (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.6002.18005) - "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
    2804 | C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe (.Toshiba - Service for SmartFaceV.) - (2.0.2.0) - "C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe"
    3504 | C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) - "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    2104 | C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (.Symantec Corporation - Symantec Service Framework.) - (11.2.3.6) - "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe" /c /a /s UserSession
    3456 | C:\Windows\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.0.6002.18005) - C:\Windows\Explorer.EXE
    4000 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.0.6002.18342) - taskeng.exe {F1144E35-43A2-41B1-A06C-B3D34BDE5F92}
    Avatar du membre

    Re: [Résolu] infection cle usb et ordinateur affichant racco

    par nat
    -  lun. 24 févr. 2014 01:10 #107613
    voici le rapport

    desolée mais ce fut compliqué!!!!

    3872 | C:\Program Files\Glary Utilities 4\SoftwareUpdate.exe (.Glarysoft Ltd - SoftwareUpdate.) - (4.0.0.223) - "C:\Program Files\Glary Utilities 4\SoftwareUpdate.exe" -autorun
    4120 | C:\Program Files\Google\Update\GoogleUpdate.exe (.Google Inc. - Programme d'installation de Google.) - (1.2.183.9) - "C:\Program Files\Google\Update\GoogleUpdate.exe" /c
    4176 | C:\Program Files\Toshiba\ConfigFree\NDSTray.exe (.TOSHIBA CORPORATION - ConfigFree(TM) Task tray menu.) - (7.0.1.12) - "C:\Program Files\Toshiba\ConfigFree\NDSTray.exe"
    4764 | C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (.Google - Google Desktop.) - (5.9.1005.12335) - "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    4712 | C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe (.Toshiba Europe GmbH - Toshiba TEMPRO.) - (1.1.0.0) - "C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe"
    4928 | C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe (.TOSHIBA - TOSHIBA Online Product Information.) - (1.0.0.0) - "C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe" -startup
    5968 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) - (10.1.7.0) - "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
    6032 | C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (.Chicony - traybar.) - (1.5.4002.79) - "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
    6048 | C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (.TOSHIBA Corporation - TOSHIBA Power Saver.) - (1.0.0.1) - "C:\Program Files\Toshiba\Power Saver\TPwrMain.exe"
    4240 | C:\Program Files\Toshiba\SmoothView\SmoothView.exe (.TOSHIBA Corporation - SmoothView.) - (3.0.8.32) - "C:\Program Files\Toshiba\SmoothView\SmoothView.exe"
    4272 | C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (.TOSHIBA Corporation - TOSHIBA Flash Cards.) - (2.0.0.6) - "C:\Program Files\Toshiba\FlashCards\TCrdMain.exe"
    4360 | C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (.TOSHIBA Corporation. - HDMICtrlMan.exe.) - (1.6.0.0) - "C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe"
    4524 | C:\Program Files\Common Files\Java\Java Update\jusched.exe (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) - (2.0.3.1) - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    1284 | C:\Program Files\iTunes\iTunesHelper.exe (.Apple Inc. - iTunesHelper.) - (10.7.0.21) - "C:\Program Files\iTunes\iTunesHelper.exe"
    4924 | C:\Program Files\Windows Sidebar\sidebar.exe (.Microsoft Corporation - Volet Windows.) - (6.0.6002.18005) - "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
    5012 | C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) - (2.2.0.1) - "C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe"
    5024 | C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) - (2.0.0.0) - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM"
    5060 | C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.Microsoft Corporation - Windows Live Messenger.) - (15.4.3555.308) - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    5232 | C:\Windows\ehome\ehtray.exe (.Microsoft Corporation - Media Center Tray Applet.) - (6.0.6001.18000) - "C:\Windows\ehome\ehtray.exe"
    5300 | C:\Program Files\Windows Media Player\wmpnscfg.exe (.Microsoft Corporation - Application de configuration du service Partage réseau du Lecteur Windows Media.) - (11.0.6001.7000) - "C:\Program Files\Windows Media Player\wmpnscfg.exe"
    5472 | C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (.McAfee, Inc. - McAfee Security Scanner Scheduler.) - (3.8.141.0) - "C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe"
    5568 | C:\Program Files\Glary Utilities 4\Integrator.exe (.Glarysoft Ltd - Glary Utilities 4.) - (4.5.0.89) - "C:\Program Files\Glary Utilities 4\Integrator.exe" /autostart
    5704 | C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe (. - .) - (1.7.8000.528) - "C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe" NoShow
    4700 | C:\Windows\ehome\ehmsas.exe (.Microsoft Corporation - Media Center Media Status Aggregator Service.) - (6.0.6001.18000) - C:\Windows\ehome\ehmsas.exe -Embedding
    4568 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) - (11.0.6001.7000) - "C:\Program Files\Windows Media Player\wmpnetwk.exe"
    4196 | C:\Windows\system32\wbem\unsecapp.exe (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.0.6002.18005) - C:\Windows\system32\wbem\unsecapp.exe -Embedding
    5672 | C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe (.TOSHIBA CORPORATION - ConfigFree Switch Manager.) - (7.0.1.8) - "C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe"
    4208 | C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe (.TOSHIBA Corporation. - SoundChanger.exe.) - (1.6.0.0) - "C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe" /SPEAKER
    5208 | C:\Program Files\iPod\bin\iPodService.exe (.Apple Inc. - iPodService Module (32-bit).) - (10.7.0.21) - "C:\Program Files\iPod\bin\iPodService.exe"
    3428 | C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) - (2.0.0.0) - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
    4432 | C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (.Synaptics, Inc. - Synaptics Pointing Device Helper.) - (10.1.7.0) - "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
    4976 | C:\Windows\system32\SearchFilterHost.exe (.Microsoft Corporation - Microsoft Windows Search Filter Host.) - (7.0.6002.18005) - "C:\Windows\system32\SearchFilterHost.exe" 0 620 624 632 65536 628

    ¤¤¤¤¤¤¤¤¤¤ | Services


    ¤¤¤¤¤¤¤¤¤¤ | Hosts

    C:\Windows\System32\Drivers\etc\hosts : Remis a zéro avec succès

    ¤¤¤¤¤¤¤¤¤¤ | Registre

    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLive.Update3WebControl.3
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachine
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3COMClassService
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.CoreMachineClass
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.ProcessLauncher
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3WebSvc
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.CoreMachineClass
    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.Update3WebMachineFallback
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.OnDemandCOMClassMachineFallback
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\3902CF1234E6B0649B0BF5A53AB5BBF0 : C:\Users\nat\AppData\Local\Temp\IXP815.TMP\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\46B5A9879DD95AB419A50FCFA0B1B7EF : C:\Users\nat\AppData\Local\Temp\IXP539.TMP\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\5F84FFBEAFC3F634F85D49BF103D0A7A : C:\Users\ADMINI~1\AppData\Local\Temp\{A563939B-78CA-44A4-92CF-2FEC2D8C46C8}\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\6786F6F0433677945BDDFC1CE2914302 : C:\Users\nat\AppData\Local\Temp\IXP539.TMP\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\9CE2AD5624609E74AA2E5B62A71AD457 : C:\Users\ADMINI~1\AppData\Local\Temp\miaEFDA.tmp\data\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\B024059C2814AE9458A06A2ABA0FC6B6 : C:\Users\ADMINI~1\AppData\Local\Temp\_is908C\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\B2F5519759897D9468219D52080EEDB5 : C:\Users\nat\AppData\Local\Temp\IXP539.TMP\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\c1c4f01781cc94c4c8fb1542c0981a2a : C:\Windows\TEMP\IXP000.TMP\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\DD6A3E018D48A8D4BB11E53541CB7ADF : C:\Users\nat\AppData\Local\Temp\IXP815.TMP\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\E8D7C56ED681B484EB8AED0F33C16E00 : C:\Users\ADMINI~1\AppData\Local\Temp\{2A790ED8-ADB4-416D-978A-4CC43AF4464C}\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\EEB0D5D09ABF82945AD0C6FDBA287755 : C:\Users\ADMINI~1\AppData\Local\Temp\{5671694F-D7F9-497D-8371-43C2FD682DC0}\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\F20E0AD5B079B424FB1415A305814E0C : C:\Users\ADMINI~1\AppData\Local\Temp\_isA449\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\60BBB56BE8F15F84A8450B429A1EF5FD : C:\Users\ADMINI~1\AppData\Local\Temp\_is1054\
    Supprimé avec succès : HKLM\Software\Classes\Installer\Products\C24E037CA539BB540A5C735E32D411B1 : C:\Windows\TEMP\{EB413614-39AA-49F4-AF26-DFE97BA74899}\
    Supprimé avec succès : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467] : 01:\Software\Smartbar\version
    Supprimé avec succès : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7C8BBFE1B6F508C478E5CD66A3378F92] : 02:\Software\Microsoft\MSN\Toolbar\Version
    Supprimé avec succès : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9F3A106491E58A40805ADDF99C7CC93] : 02:\Software\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f}
    Supprimé avec succès : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Allin1Convert_8hbar Uninstall Internet Explorer : rundll32 "C:\Program Files\Allin1Convert_8h\bar\1.bin\8hBar.dll",O mindsparktoolbarkey="Allin1Convert_8h" uninstalltype="IE"
    Supprimé avec succès : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbarhaFF : C:\PROGRA~1\MOVIES~1\Datamngr\SRTOOL~1\FF\uninstall.exe /UN=FF /PID=^AG6
    Supprimé avec succès : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbarhaIE : C:\PROGRA~1\MOVIES~1\Datamngr\SRTOOL~1\IE\uninstall.exe /UN=IE /PID=^AG6
    Supprimé avec succès : HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense : C:\Users\nat\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe /Uninstall
    Supprimé avec succès : [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]|[EPSON Stylus DX3800 Series] : C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /F "C:\Windows\TEMP\E_SD410.tmp" /EF "HKLM"

    ¤¤¤¤¤¤¤¤¤¤ | IFEO


    ¤¤¤¤¤¤¤¤¤¤ | Dossiers

    Supprimé avec succès : C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
    Supprimé avec succès : C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
    Supprimé avec succès : C:\Windows\Tasks\SoftwareUpdateGU4.job
    Supprimé avec succès : C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
    Supprimé avec succès : C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
    Supprimé avec succès : C:\Windows\System32\Tasks\SoftwareUpdateGU4
    Supprimé avec succès : C:\Windows\System32\Tasks\Apple\AppleSoftwareUpdate
    Supprimé avec succès : C:\ProgramData\Datamngr
    Supprimé avec succès : C:\Users\nat\Downloads\Allin1Convert.exe
    Supprimé avec succès : C:\Users\nat\Downloads\iLividSetup-r418-n-bf.exe
    Supprimé avec succès : C:\Program Files\ToolbarInstaller
    Supprimé avec succès : C:\Users\nat\AppData\Local\Plus-HD-1.3
    Supprimé avec succès : C:\Users\nat\AppData\Local\{E7337E8A-20EC-4F0E-AE5B-A933C9F82903}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{B365AF63-7EB3-49A4-8337-F1E985D88DD2}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{E2EDAF90-473F-4563-8E8A-75F8B0571337}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{919F77D6-3379-41E6-A1E1-AE165629F138}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{A7337624-59C7-4835-907C-D07F5E4DCFE0}
    ¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module | g3n-h@ckm@n | 23.02.2014.4

    ¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤ - Start 00:13:40 - 24/02/2014

    Mis à jour le : 23/02/2014 | 21.35 par g3n-h@ckm@n

    Contact : http://www.sosvirus.net

    Boot : Normal

    Système : Windows Vista (TM) Home Premium (32 bits) HomePremium Service Pack 2

    Mémoire RAM = Total (MB) : 3140 | Libre (MB) : 1762
    Pagefile = Total (MB) : 6490 | Libre (MB) : 5179
    Virtuelle = Total (MB) : 2097 | Libre (MB) : 1983


    Registre sauvegardé , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

    ¤¤¤¤¤¤¤¤¤¤ | Mises à jour Windows

    Dernière(s) détection(s) : 2014-02-23 17:40:05
    Dernières Téléchargées : 2014-02-11 19:52:37
    Dernières installées : 2014-02-12 12:24:13
    Prochaine recherche : 2014-02-24 13:34:19

    ¤¤¤¤¤¤¤¤¤¤ | Processus tués

    952 | C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (.Microsoft Corporation - PresentationFontCache.exe.) - (3.0.6920.4000) - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
    1124 | C:\Windows\system32\Ati2evxx.exe (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - (6.14.10.4190) - C:\Windows\system32\Ati2evxx.exe
    1356 | C:\Windows\system32\SLsvc.exe (.Microsoft Corporation - Service de gestion des licences Microsoft.) - (6.0.6002.18005) - C:\Windows\system32\SLsvc.exe
    1532 | C:\Windows\system32\Ati2evxx.exe (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - (6.14.10.4190) - Ati2evxx.exe -Client
    1956 | C:\Windows\System32\spoolsv.exe (.Microsoft Corporation - Application sous-système spouleur.) - (6.0.6002.18294) - C:\Windows\System32\spoolsv.exe
    1692 | C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) - "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe"
    1456 | C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (.Apple Inc. - YSLoader.exe.) - (17.327.4.11) - "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
    748 | C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe (.Microsoft Corporation. - BingBar Service.) - (7.3.124.0) - "c:\program files\microsoft\bingbar\7.3.124.0\bbsvc.exe"
    1344 | C:\Program Files\Bonjour\mDNSResponder.exe (.Apple Inc. - Bonjour Service.) - (3.0.0.10) - "C:\Program Files\Bonjour\mDNSResponder.exe"
    1400 | C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (.TOSHIBA CORPORATION - Service of ConfigFree..) - (7.0.1.6) - "C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe"
    2060 | C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (.Symantec Corporation - Symantec Service Framework.) - (11.2.3.6) - "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe" /s "NAV" /m "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\diMaster.dll" /prefetch:1
    2152 | C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (.O2Micro International - O2 Flash Memory Service.) - (1.0.0.3) - "C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe"
    2308 | C:\Program Files\Toshiba TEMPRO\TempoSVC.exe (.Toshiba Europe GmbH - Toshiba TEMPRO.) - (1.1.0.0) - "C:\Program Files\Toshiba TEMPRO\TempoSVC.exe"
    2396 | C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (.TOSHIBA Corporation - TOSHIBA Navi Support Service.) - (1.0.0.3) - "C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe"
    2420 | C:\Windows\system32\TODDSrv.exe (.TOSHIBA Corporation - TDCSrv Application.) - (1.0.0.5) - C:\Windows\system32\TODDSrv.exe
    2452 | C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (.TOSHIBA Corporation - TOSHIBA Power Saver.) - (1.0.0.1) - "C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe"
    2468 | C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe (.TOSHIBA Corporation - TosIPCSrv.exe.) - (1.0.0.1) - "C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe"
    2568 | C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (.Ulead Systems, Inc. - ULCDRSvr.) - (1.0.0.4) - "C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
    2620 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - (7.250.4232.0) - "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
    2668 | C:\Windows\system32\SearchIndexer.exe (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.6002.18005) - C:\Windows\system32\SearchIndexer.exe /Embedding
    2768 | C:\Windows\System32\WUDFHost.exe (.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes en mode utilisateur.) - (6.2.9200.16384) - "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ba4ae5b9-ad41-408f-8110-1b707eb72ce6 -SystemEventPortName:HostProcess-1edf8c83-e40a-4978-8678-6ab1b556e889 -IoCancelEventPortName:HostProcess-b2fe0282-67d0-4280-b7e3-77134a4065ea -NonStateChangingEventPortName:HostProcess-1fb8be3f-28a0-45d8-80a9-923c8637d720 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d3ba3417-f6d3-430a-be92-3c30f611ccbc -DeviceGroupId:WpdFsGroup
    2828 | C:\Windows\system32\DRIVERS\xaudio.exe (.Conexant Systems, Inc. - Modem Audio Service.) - (1.0.15.0) - C:\Windows\system32\DRIVERS\xaudio.exe
    3860 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.0.6002.18342) - taskeng.exe {6A88CBEF-AB6D-4C50-95FB-47D20CD586E7}
    3988 | C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe (.Toshiba - Service for SmartFaceV.) - (2.0.2.0) - "C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe"
    2564 | C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe (.Symantec Corporation - Symantec Service Framework.) - (11.2.3.6) - "C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe" /c /a /s UserSession
    3160 | C:\Windows\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.0.6002.18005) - C:\Windows\Explorer.EXE
    3864 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.0.6002.18342) - taskeng.exe {252F2BBE-11D2-4AD1-A56C-AF007E0F9BDF}
    3308 | C:\Program Files\Google\Update\GoogleUpdate.exe (.Google Inc. - Programme d'installation de Google.) - (1.2.183.9) - "C:\Program Files\Google\Update\GoogleUpdate.exe" /c
    1024 | C:\Program Files\Toshiba\ConfigFree\NDSTray.exe (.TOSHIBA CORPORATION - ConfigFree(TM) Task tray menu.) - (7.0.1.12) - "C:\Program Files\Toshiba\ConfigFree\NDSTray.exe"
    1176 | C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (.Google - Google Desktop.) - (5.9.1005.12335) - "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    3768 | C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe (.Toshiba Europe GmbH - Toshiba TEMPRO.) - (1.1.0.0) - "C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe"
    3156 | C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe (.TOSHIBA - TOSHIBA Online Product Information.) - (1.0.0.0) - "C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe" -startup
    2724 | C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) - (2.0.0.0) - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM"
    1660 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) - (10.1.7.0) - "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
    3892 | C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (.Chicony - traybar.) - (1.5.4002.79) - "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
    2912 | C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (.TOSHIBA Corporation - TOSHIBA Power Saver.) - (1.0.0.1) - "C:\Program Files\Toshiba\Power Saver\TPwrMain.exe"
    3936 | C:\Program Files\Toshiba\SmoothView\SmoothView.exe (.TOSHIBA Corporation - SmoothView.) - (3.0.8.32) - "C:\Program Files\Toshiba\SmoothView\SmoothView.exe"
    4112 | C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (.TOSHIBA Corporation - TOSHIBA Flash Cards.) - (2.0.0.6) - "C:\Program Files\Toshiba\FlashCards\TCrdMain.exe"
    4152 | C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (.TOSHIBA Corporation. - HDMICtrlMan.exe.) - (1.6.0.0) - "C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe"
    4296 | C:\Program Files\Common Files\Java\Java Update\jusched.exe (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) - (2.0.3.1) - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    4464 | C:\Program Files\iTunes\iTunesHelper.exe (.Apple Inc. - iTunesHelper.) - (10.7.0.21) - "C:\Program Files\iTunes\iTunesHelper.exe"
    4496 | C:\Windows\system32\wbem\unsecapp.exe (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.0.6002.18005) - C:\Windows\system32\wbem\unsecapp.exe -Embedding
    5020 | C:\Program Files\Windows Sidebar\sidebar.exe (.Microsoft Corporation - Volet Windows.) - (6.0.6002.18005) - "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
    5672 | C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) - (2.2.0.1) - "C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe"
    5872 | C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.Microsoft Corporation - Windows Live Messenger.) - (15.4.3555.308) - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    6104 | C:\Windows\ehome\ehtray.exe (.Microsoft Corporation - Media Center Tray Applet.) - (6.0.6001.18000) - "C:\Windows\ehome\ehtray.exe"
    4176 | C:\Program Files\Windows Media Player\wmpnscfg.exe (.Microsoft Corporation - Application de configuration du service Partage réseau du Lecteur Windows Media.) - (11.0.6001.7000) - "C:\Program Files\Windows Media Player\wmpnscfg.exe"
    4192 | C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe (. - .) - (1.7.8000.528) - "C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe" NoShow
    4292 | C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (.McAfee, Inc. - McAfee Security Scanner Scheduler.) - (3.8.141.0) - "C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe"
    5028 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) - (11.0.6001.7000) - "C:\Program Files\Windows Media Player\wmpnetwk.exe"
    5908 | C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe (.TOSHIBA CORPORATION - ConfigFree Switch Manager.) - (7.0.1.8) - "C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe"
    4452 | C:\Windows\ehome\ehmsas.exe (.Microsoft Corporation - Media Center Media Status Aggregator Service.) - (6.0.6001.18000) - C:\Windows\ehome\ehmsas.exe -Embedding
    4512 | C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe (.TOSHIBA Corporation. - SoundChanger.exe.) - (1.6.0.0) - "C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe" /SPEAKER
    4996 | C:\Program Files\iPod\bin\iPodService.exe (.Apple Inc. - iPodService Module (32-bit).) - (10.7.0.21) - "C:\Program Files\iPod\bin\iPodService.exe"
    4792 | C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) - (2.0.0.0) - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
    3000 | C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (.Synaptics, Inc. - Synaptics Pointing Device Helper.) - (10.1.7.0) - "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"

    ¤¤¤¤¤¤¤¤¤¤ | Services


    ¤¤¤¤¤¤¤¤¤¤ | Hosts

    C:\Windows\System32\Drivers\etc\hosts : Remis a zéro avec succès

    ¤¤¤¤¤¤¤¤¤¤ | Registre

    Supprimé avec succès : HKLM\Software\Classes\SaveSenseLiveUpdate.OnDemandCOMClassSvc
    Supprimé avec succès : HKLM\Software\Classes\SoftwareUpdate.Update3WebMachine

    ¤¤¤¤¤¤¤¤¤¤ | IFEO


    ¤¤¤¤¤¤¤¤¤¤ | Dossiers

    Supprimé avec succès : C:\Users\nat\AppData\Local\{F337BF2A-0851-46E6-BF89-9CB8DE5D82A3}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{A48ADA92-3337-405B-9110-209F7143C37A}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{BA6BF468-7655-4C12-9D49-E6132CE23371}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{FB6D6A14-8CE4-4FE8-AD12-3376F5DF12B7}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{06988E4B-BE30-4497-BC80-A92337017C9A}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{C8C678F3-3726-4337-B0E6-8887691C31CF}
    Supprimé avec succès : C:\Users\nat\AppData\Local\{721ABD38-8EC0-46A1-9A88-3C44D0988337}
    Supprimé avec succès : C:\Users\nat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff
    Supprimé avec succès : C:\Users\nat\AppData\Local\Microsoft\Toolbar
    Supprimé avec succès : C:\Users\nat\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\nat\AppData\Local\LyricsMonkey-15
    Supprimé avec succès : C:\Users\nat\AppData\Local\Mozilla\Firefox\Profiles\xd7vgin1.default\Cache\B\36\33783d01
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\1\bin\Dealply
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\1\bin\feven
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\1\bin\Iminent
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\1\bin\Pricepeep2
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\bin\Boxore
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\bin\Dealply
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\bin\feven
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\bin\Iminent
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\bin\OptimizerPro
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\bin\Pricepeep2
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\Setup(3).exe\218ed282719c4ec281e8d49064001c69\bin\SpeedUpMyPc
    Supprimé avec succès : C:\Users\nat\AppData\LocalLow\DataMngr
    Supprimé avec succès : C:\Users\nat\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk
    Supprimé avec succès : C:\Windows\System32\Config\Systemprofile\AppData\Local\CrashDumps\OfferBoxUpdateService.exe.1540.dmp
    Supprimé avec succès : C:\Windows\System32\Config\Systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\kmmfibf4.default\extensions\df228366-e2c4-46b8-90a5-7f788732f45e@ef1368ad-a4cd-43ec-9ff9-a16207813324.com\skin\crossrider_statusbar.png
    Supprimé avec succès : C:\Users\nat\AppData\Local\Temp\{337B111F-166E-4A6C-8BA7-FF4B9A0EB914}
    Supprimé avec succès : C:\Users\nat\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\QCZ36TN9\giantsavings-a.akamaihd.net
    Supprimé avec succès : C:\Users\nat\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#giantsavings-a.akamaihd.net

    ¤¤¤¤¤¤¤¤¤¤ | Détournements de raccourcis


    ¤¤¤¤¤¤¤¤¤¤ | Détournement internet Explorer

    Réparé : [HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : http://www.bing.com - http://www.google.com/
    Réparé : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.symantec.com/redirects/secur ... =19.9.1.14 - http://www.google.com/
    Réparé : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.symantec.com/redirects/secur ... =19.9.1.14 - http://www.google.com/
    Réparé : [HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.google.com - http://www.google.com/
    Réparé : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.symantec.com/redirects/secur ... =19.9.1.14 - http://www.google.com/
    Réparé : [HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://www.bing.com/search?q={searchTer ... ORM=IE10SR - http://www.microsoft.com/isapi/redir.dl ... r=iesearch
    Réparé : [HKLM\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : http://ie.search.msn.com/{SUB_RFC1766}/ ... chcust.htm - http://www.google.com/ie
    Réparé : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.google.com - http://go.microsoft.com/fwlink/?LinkId=69157
    Réparé : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://www.google.com - http://go.microsoft.com/fwlink/?LinkId=54896
    Réparé : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://www.microsoft.com/isapi/redir.dl ... ar=msnhome - http://go.microsoft.com/fwlink/?LinkId=69157
    Réparé : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://www.google.com - http://go.microsoft.com/fwlink/?LinkId=54896
    Réparé : [HKLM\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : http://www.google.com - res://ieframe.dll/tabswelcome.htm
    Réparé : [HKU\S-1-5-21-1501028913-147664836-3955362586-1000\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 - 1

    ¤¤¤¤¤¤¤¤¤¤ | Détournement Google Chrome

    [nat] Remis a zéro avec succès : SearchURL
    [nat] Remis a zéro avec succès : Preferences

    ¤¤¤¤¤¤¤¤¤¤ | Détournement Firefox

    [nat] Supprimé avec succès : C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\sessionstore.js
    [nat] Supprimé avec succès : user_pref("Datamngr.Updater.Enabled", "true");
    [nat] Supprimé avec succès : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.name", "Plus-HD-1.3");
    [nat] Supprimé avec succès : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.publisher", "Plus HD");
    [nat] Supprimé avec succès : user_pref("extensions.dealply.channel", "dpknlgadk");
    [nat] Supprimé avec succès : user_pref("extensions.dealply.installId", "v24872178390369478821562013111320141428");
    [nat] Supprimé avec succès : user_pref("extensions.dealply.installIdSource", "inst");
    [nat] Supprimé avec succès : user_pref("extensions.dealply.partner", "dpknlg");
    [nat] Supprimé avec succès : user_pref("extensions.dealply.sampleGroup", "8");
    [nat] Supprimé avec succès : user_pref("extensions.savesense.channel", "ironppi19012014");
    [nat] Supprimé avec succès : user_pref("extensions.savesense.partner", "ironppi");

    ¤¤¤¤¤¤¤¤¤¤ | Détournement des clés StartMenuInternet

    Réparé : [HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : C:\Program Files\Internet Explorer\iexplore.exe - "C:\Program Files\Internet Explorer\iexplore.exe"
    Réparé : [HKLM\Software\Clients\StartMenuInternet\Safari.exe\shell\open\command] : C:\Program Files\Safari\Safari.exe - "C:\Program Files\Safari\Safari.exe"

    ¤¤¤¤¤¤¤¤¤¤ | AppInit_DLLs


    Réparé : [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[AppInit_DLLS] : c:\progra~1\movies~1\datamngr\mgrldr.dll -
    [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1

    ¤¤¤¤¤¤¤¤¤¤ | Détournement Javascript


    ¤¤¤¤¤¤¤¤¤¤ | Firewall

    Réparé : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]|[EnableFirewall] : 1 - 0
    Réparé : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]|[EnableFirewall] : 1 - 0
    Réparé : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]|[EnableFirewall] : 1 - 0

    Supprimé avec succès : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]|[{BDD695FB-4C27-440C-81B0-7267F2F5497D}] : v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtUser.exe|Name=Movies Toolbar (Dist. by Bandoo Media, Inc.) DTX Broker|Edge=FALSE|
    Supprimé avec succès : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]|[{4B84F1E4-DF84-4A36-9DE6-FEBE702C7544}] : v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=C:\Users\nat\AppData\Local\iLivid\iLivid.exe|Name=iLivid|Edge=FALSE|

    ¤¤¤¤¤¤¤¤¤¤ | Fichiers temporaires

    [All Users] Fichiers temporaires Supprimés : 0 Ko
    [Default User] Fichiers temporaires Supprimés : 0 Ko
    [Default] Fichiers temporaires Supprimés : 0 Ko
    [Public] Fichiers temporaires Supprimés : 0 Ko
    [nat] Fichiers temporaires Supprimés : 138070 Ko


    ¤¤¤¤¤¤¤¤¤¤ |EOF| ¤¤¤¤¤¤¤¤¤¤ | 00:53:58
    Avatar du membre

    Re: [Résolu] infection cle usb et ordinateur affichant racco

    par g3n-h@ckm@n
    -  lun. 24 févr. 2014 01:25 #107614
    c'est vraiment la plus grosse poubelle numérique que j'ai jamais vu sur internet

    desinstalle mcafee securityScan ca vaut rien
    desinstalle glary utilities c'est un fracasse système

    faut arrêter de télécharger n importe quoi , n'importe où ( softonic , 01net, telecharger.com , pd-file.net et tous ces sites pourris mettent des adwares dans les installeurs des programmes

    ==
    • Télécharge MalwareBytes Anti-Malware
    • Installe le. Décoche "Activer l'essai gratuit de Malwarebytes Anti-Malware PRO"
    • Lance Malwarebytes' Anti-Malware.
    • Clic sur l'onglet "Mises à jours" puis sur "Rechercher des mises à jours"
    • Clic sur l'onglet "Recherche", coche "éxécuter un examen complet" puis clic sur Rechercher

      Image
    • A la fin de l'analyse, si MBAM n'a rien trouvé :
      • Clic sur OK, le rapport s'ouvre spontanément
      • Si des menaces ont été détectées :
        • Clic sur OK puis "Afficher les résultats"
        • Choisis l'option "Supprimer la sélection"
        • Si MBAM demande le redémarrage de Windows : Clic sur "Oui"
        • Une fois le PC redémarré, le rapport se trouve dans l'onglet "Rapports/Logs"
        • Sinon le rapport s'ouvre automatiquement après la suppression
        • Poste le rapport dans ta prochaine réponse
        Image
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par nat
        -  lun. 24 févr. 2014 07:04 #107631
        voici le rapport

        desolée mais ce fut compliqué!!!!

        Malwarebytes Anti-Malware (Essai) 1.75.0.1300
        http://www.malwarebytes.org

        Version de la base de données: v2014.02.24.01

        Windows Vista Service Pack 2 x86 NTFS
        Internet Explorer 9.0.8112.16421
        nat :: PC-DE-NAT [administrateur]

        Protection: Désactivé

        24/02/2014 01:42:41
        mbam-log-2014-02-24 (01-42-41).txt

        Type d'examen: Examen complet (C:\|E:\|)
        Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
        Options d'examen désactivées: P2P
        Elément(s) analysé(s): 387062
        Temps écoulé: 3 heure(s), 27 minute(s), 35 seconde(s)

        Processus mémoire détecté(s): 0
        (Aucun élément nuisible détecté)

        Module(s) mémoire détecté(s): 0
        (Aucun élément nuisible détecté)

        Clé(s) du Registre détectée(s): 5
        HKCR\AppID\{A2D3FB7A-6873-45E8-AF96-57092D721828} (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        HKCR\CLSID\{A2D3FB7A-6873-45E8-AF96-57092D721828} (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        HKCR\Typelib\{FBC322D5-407E-4854-8C0B-555B951FD8E3} (PUP.Optional.MySearchDial.A) - Aucune action effectuée.
        HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9BC500CF-4965-341C-26BD-321A1C30BDD8} (PUP.Optional.MultiPlug.A) - Aucune action effectuée.
        HKCR\AppID\SaveSenseLive.exe (PUP.Optional.SaveSense.A) - Aucune action effectuée.

        Valeur(s) du Registre détectée(s): 0
        (Aucun élément nuisible détecté)

        Elément(s) de données du Registre détecté(s): 0
        (Aucun élément nuisible détecté)

        Dossier(s) détecté(s): 0
        (Aucun élément nuisible détecté)

        Fichier(s) détecté(s): 42
        C:\AdwCleaner\Quarantine\C\Program Files\LyricsMonkey-15\LyricsMonkey-15-buttonutil.dll.vir (PUP.Optional.CrossRider) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\LyricsMonkey-15\LyricsMonkey-15-helper.exe.vir (PUP.Optional.CrossRider) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\LyricsMonkey-15\Uninstall.exe.vir (PUP.Optional.CrossRider) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\LyricsMonkey-15\utils.exe.vir (PUP.Optional.TubeSing.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\Datamngr.dll.vir (PUP.Optional.Bandoo.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\IEBHO.dll.vir (PUP.Optional.Bandoo.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\FF\uninstall.exe.vir (PUP.Optional.MoviesToolBar.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Movies Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe.vir (PUP.Optional.MoviesToolBar.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Mysearchdial\1.8.21.0\mysearchdialApp.dll.vir (PUP.Optional.MySearchDial.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Mysearchdial\1.8.21.0\mysearchdialEng.dll.vir (PUP.Optional.MySearchDial.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Mysearchdial\1.8.21.0\mysearchdialsrv.exe.vir (PUP.Optional.MySearchDial.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\Mysearchdial\1.8.21.0\mysearchdialTlbr.dll.vir (PUP.Optional.MySearchDial.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\goopdate.dll.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\psmachine.dll.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\psuser.dll.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLive.exe.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveHandler.exe.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Program Files\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe.vir (PUP.Optional.SaveSense.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\ProgramData\BoxUpdChk\updchk.exe.vir (PUP.Optional.Boxore) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\ProgramData\CouolSaleCoupon\zjC_.exe.vir (PUP.Optional.MultiPlug.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\ProgramData\ssurfkeePito\oAi5PsT.exe.vir (PUP.Optional.MultiPlug.A) - Aucune action effectuée.
        C:\AdwCleaner\Quarantine\C\Users\nat\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.vir (PUP.Optional.SmartBar.A) - Aucune action effectuée.
        C:\Program Files\FlvPlayer\FLVPlayerApp.exe (PUP.Optional.InstallCore) - Aucune action effectuée.
        C:\ProgramData\PePT2PNuG\LjbO.exe (PUP.Optional.MultiPlug.A) - Aucune action effectuée.
        C:\Shortcut_Module\Quarantine\C\Users\nat\Downloads\Allin1Convert.exe.S_M (PUP.Optional.FunWebProducts.A) - Aucune action effectuée.
        C:\Shortcut_Module\Quarantine\C\Users\nat\Downloads\iLividSetup-r418-n-bf.exe.S_M (PUP.Optional.Bandoo) - Aucune action effectuée.
        C:\Users\nat\Downloads\FlvPlayerSetup(2).exe (PUP.Optional.InstallCore) - Aucune action effectuée.
        C:\Users\nat\Downloads\ITunes.exe (PUP.Optional.InstallCore) - Aucune action effectuée.
        C:\Users\nat\Downloads\WiseConvert_1.5.exe (PUP.Optional.Conduit.A) - Aucune action effectuée.
        C:\Users\nat\Downloads\avast!%20Free%20Antivirus(1).exe (PUP.Optional.Bundler) - Aucune action effectuée.
        C:\Users\nat\Downloads\avast!%20Free%20Antivirus.exe (PUP.Optional.Bundler) - Aucune action effectuée.
        C:\Users\nat\Downloads\QuickTimeInstaller.exe (PUP.Optional.InstallCore) - Aucune action effectuée.
        C:\Users\nat\Downloads\rcpafterdownloadcm_ad_18171_cm2.exe (PUP.Optional.RegCleanerPro) - Aucune action effectuée.
        C:\Users\nat\Downloads\Setup(1).exe (PUP.Optional.Firseria) - Aucune action effectuée.
        C:\Users\nat\Downloads\Setup(3).exe (PUP.Optional.BundleInstaller.A) - Aucune action effectuée.
        C:\Users\nat\Downloads\Setup(4).exe (PUP.Optional.OptimumInstaller.A) - Aucune action effectuée.
        C:\Users\nat\Downloads\setup.exe (PUP.Optional.AirInstaller) - Aucune action effectuée.
        C:\Users\nat\Downloads\installer_avast_French.exe (PUP.Optional.InstallCore.A) - Aucune action effectuée.
        C:\Users\nat\Downloads\install_flashplayer11x32_mssd_aih_other.exe (PUP.Optional.Freemium.A) - Aucune action effectuée.
        C:\Windows\Installer\d9e94e.msi (PUP.Optional.SmartBar) - Aucune action effectuée.

        (fin)
        Avatar du membre

        infection cle usb et ordinateur affichant raccourci

        par g3n-h@ckm@n
        -  lun. 24 févr. 2014 10:21 #107659
        par contre pour faire n'importe quoi avec ton pc , installer n'importe quoi , cliquer sur n'importe quoi,télécharger n'importe quoi et n'importe ou , là , c'est pas compliqué hein !!

           
        •    
        • Copie le script ci dessous :

             
          HKCU\Software
              HKLM\Software
              HKCU\Software\Microsoft\Command Processor /s
              HKLM\Software\Microsoft\Command Processor /s
              %Homedrive%\*
              %Homedrive%\*.
              %Userprofile%\*
              %Userprofile%\*.
              %Allusersprofile%\*
              %Allusersprofile%\*.
              %LocalAppData%\*
              %LocalAppData%\*.
              %Userprofile%\Local Settings\Application Data\*
              %Userprofile%\Local Settings\Application Data\*.
              %programFiles%\*
              %programfiles%\Google\Desktop\Install /s
              %programFiles%\*.
              %Systemroot%\Installer\*.
              %Systemroot%\Temp\*.exe /s
              %systemroot%\system32\*.dll /lockedfiles
              %systemroot%\system32\*.exe /lockedfiles
              %systemroot%\system32\*.in*
              %systemroot%\Tasks\*
              %systemroot%\Tasks\*.
              %systemroot%\system32\Tasks\*
              %systemroot%\system32\Tasks\*.
              %systemroot%\system32\drivers\*.sy* /lockedfiles
              %systemroot%\system32\config\*.exe /s
              %Systemroot%\ServiceProfiles\*.exe /s
              %systemroot%\system32\*.sys
              dir %Homedrive%\* /S /A:L /C
              msconfig
              activex
              /md5start
              explorer.exe
              winlogon.exe
              wininit.exe
              volsnap.sys
              atapi.sys
              ndis.sys
              cdrom.sys
              i8042prt.sys
              iastor.sys
              tdx.sys
              netbt.sys
              afd.sys
              /md5stop
              netsvcs
              safebootminimal
              safebootnetwork
              CREATERESTOREPOINT

             
        • Télécharge OTL (by OldTimer) sur ton bureau.
             
        • Lance OTL,  exécuter en tant qu'administrateur sous Windows : 7/8 et Vista


             
        • Coche/Sélectionne les cases comme l'image ci dessous


             
        • Colle le Script copié plus haut  dans la partie inférieure d'OTL "Personnalisation"

             
        • Clique sur Analyse

             Image


             
        • Une fois le scan terminé 1 ou 2 rapports vont s'ouvrir OTL.txt et Extras.txt.
             
        • Héberge les rapports OTL.txt et Extras.txt sur SosUpload, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum

             Note : Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

             En cas de problème avec SOSUpload, utiliser Cjoint
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par nat
        -  lun. 24 févr. 2014 21:14 #107869
        bonsoir voici le rapport



        kOTL logfile created on: 24/02/2014 20:56:41 - Run 1
        OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\nat\Downloads
        Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
        Internet Explorer (Version = 9.0.8112.16421)
        Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

        2,99 Gb Total Physical Memory | 1,38 Gb Available Physical Memory | 46,15% Memory free
        6,19 Gb Paging File | 4,49 Gb Available in Paging File | 72,60% Paging File free
        Paging file location(s): ?:\pagefile.sys [binary data]

        %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
        Drive C: | 150,66 Gb Total Space | 76,46 Gb Free Space | 50,75% Space Free | Partition Type: NTFS
        Drive D: | 14,55 Gb Total Space | 12,79 Gb Free Space | 87,88% Space Free | Partition Type: FAT32
        Drive E: | 145,97 Gb Total Space | 0,01 Gb Free Space | 0,00% Space Free | Partition Type: NTFS

        Computer Name: PC-DE-NAT | User Name: nat | Logged in as Administrator.
        Boot Mode: Normal | Scan Mode: Current user
        Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

        ========== Processes (All) ==========

        PRC - [2014/02/24 20:50:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\nat\Downloads\OTL.exe
        PRC - [2014/02/19 21:02:18 | 003,767,096 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
        PRC - [2014/02/19 21:02:18 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
        PRC - [2014/02/15 22:29:35 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
        PRC - [2014/01/07 02:32:26 | 000,043,336 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
        PRC - [2013/12/21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
        PRC - [2013/12/16 19:34:22 | 000,247,968 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.EXE
        PRC - [2013/12/16 19:34:22 | 000,193,696 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.EXE
        PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
        PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
        PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
        PRC - [2013/03/09 02:28:08 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
        PRC - [2012/09/09 23:30:34 | 000,421,776 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exe
        PRC - [2012/09/09 23:30:22 | 000,821,648 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe
        PRC - [2012/07/26 04:21:03 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe
        PRC - [2012/06/16 03:24:19 | 000,138,272 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccsvchst.exe
        PRC - [2012/03/08 17:50:28 | 004,280,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        PRC - [2011/11/16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
        PRC - [2011/08/30 23:05:02 | 000,390,504 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
        PRC - [2011/03/28 20:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
        PRC - [2011/03/28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
        PRC - [2010/12/14 15:49:23 | 001,169,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
        PRC - [2010/11/04 17:34:06 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
        PRC - [2010/10/29 13:49:28 | 000,249,064 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
        PRC - [2010/08/17 15:11:37 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
        PRC - [2010/06/26 06:47:26 | 000,030,192 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        PRC - [2010/02/06 21:18:34 | 000,135,664 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\GoogleUpdate.exe
        PRC - [2009/04/11 07:28:15 | 000,247,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\WmiPrvSE.exe
        PRC - [2009/04/11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
        PRC - [2009/04/11 07:28:08 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\unsecapp.exe
        PRC - [2009/04/11 07:28:03 | 001,233,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Sidebar\sidebar.exe
        PRC - [2009/04/11 07:27:59 | 000,441,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
        PRC - [2009/04/11 07:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe
        PRC - [2009/04/11 07:27:59 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe
        PRC - [2009/04/11 07:27:58 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
        PRC - [2009/04/11 07:27:49 | 003,408,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe
        PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
        PRC - [2009/04/11 07:27:33 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
        PRC - [2009/02/18 19:39:20 | 000,043,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
        PRC - [2008/07/18 20:39:30 | 000,083,312 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
        PRC - [2008/05/08 10:11:58 | 004,787,712 | ---- | M] () -- C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
        PRC - [2008/04/29 10:33:28 | 000,417,792 | ---- | M] (Chicony) -- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
        PRC - [2008/04/26 15:57:06 | 000,716,800 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
        PRC - [2008/04/24 18:35:46 | 000,073,728 | ---- | M] (Toshiba) -- C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe
        PRC - [2008/04/24 12:03:12 | 000,430,080 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
        PRC - [2008/04/24 09:22:10 | 000,103,824 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
        PRC - [2008/04/24 09:21:56 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
        PRC - [2008/04/17 10:39:02 | 000,667,648 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
        PRC - [2008/04/16 23:21:24 | 001,056,768 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
        PRC - [2008/04/16 23:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
        PRC - [2008/04/16 23:19:16 | 000,405,504 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
        PRC - [2008/04/07 20:57:42 | 000,667,648 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\Ati2evxx.exe
        PRC - [2008/03/19 13:35:42 | 000,716,800 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
        PRC - [2008/01/25 13:33:50 | 000,509,816 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
        PRC - [2008/01/21 03:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe
        PRC - [2008/01/21 03:25:33 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe
        PRC - [2008/01/21 03:25:11 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehtray.exe
        PRC - [2008/01/21 03:25:11 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehmsas.exe
        PRC - [2008/01/21 03:24:54 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
        PRC - [2008/01/21 03:23:44 | 000,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
        PRC - [2008/01/21 03:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
        PRC - [2008/01/17 16:27:52 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
        PRC - [2008/01/17 16:27:34 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
        PRC - [2007/12/03 17:03:52 | 000,126,976 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe
        PRC - [2007/11/29 17:59:00 | 000,095,528 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        PRC - [2007/11/29 17:58:52 | 001,029,416 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        PRC - [2007/11/21 16:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe
        PRC - [2007/10/17 06:37:04 | 000,386,560 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\XAudio.exe
        PRC - [2007/07/17 11:13:56 | 000,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
        PRC - [2007/07/17 11:13:34 | 000,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
        PRC - [2007/07/10 08:24:10 | 000,581,632 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
        PRC - [2007/02/12 15:43:44 | 000,065,536 | ---- | M] (O2Micro International) -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
        PRC - [2006/08/23 15:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe


        ========== Modules (All) ==========

        MOD - [2014/02/24 20:50:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\nat\Downloads\OTL.exe
        MOD - [2014/02/24 09:43:13 | 000,037,984 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\defs\14022400\uiext.dll
        MOD - [2014/02/19 21:02:48 | 004,456,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\mfc110u.dll
        MOD - [2014/02/19 21:02:48 | 000,875,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\msvcr110.dll
        MOD - [2014/02/19 21:02:48 | 000,535,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\msvcp110.dll
        MOD - [2014/02/19 21:02:46 | 000,164,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\atl110.dll
        MOD - [2014/02/19 21:02:39 | 000,164,144 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswJsFlt.dll
        MOD - [2014/02/19 21:02:37 | 001,176,064 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\AVAST Software\Avast\libeay32.dll
        MOD - [2014/02/19 21:02:37 | 000,272,800 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\snxhk.dll
        MOD - [2014/02/19 21:02:37 | 000,269,312 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\AVAST Software\Avast\ssleay32.dll
        MOD - [2014/02/19 21:02:31 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
        MOD - [2014/02/19 21:02:25 | 006,289,024 | ---- | M] (The ICU Project) -- C:\Program Files\AVAST Software\Avast\icudt.dll
        MOD - [2014/02/19 21:02:24 | 001,080,656 | ---- | M] (Microsoft Corporation) -- C:\Program Files\AVAST Software\Avast\dbghelp.dll
        MOD - [2014/02/19 21:02:23 | 000,544,744 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswSqLt.dll
        MOD - [2014/02/19 21:02:23 | 000,403,640 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswCommChannel.dll
        MOD - [2014/02/19 21:02:23 | 000,323,312 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswData.dll
        MOD - [2014/02/19 21:02:23 | 000,241,936 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswLog.dll
        MOD - [2014/02/19 21:02:23 | 000,212,048 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswProperty.dll
        MOD - [2014/02/19 21:02:23 | 000,070,944 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswResourceLib.dll
        MOD - [2014/02/19 21:02:23 | 000,069,384 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastIP.dll
        MOD - [2014/02/19 21:02:23 | 000,062,728 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswEngLdr.dll
        MOD - [2014/02/19 21:02:23 | 000,044,152 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswUtil.dll
        MOD - [2014/02/19 21:02:23 | 000,025,616 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswRemoteCache.dll
        MOD - [2014/02/19 21:02:22 | 000,944,920 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswAux.dll
        MOD - [2014/02/19 21:02:22 | 000,361,416 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswCmnBS.dll
        MOD - [2014/02/19 21:02:22 | 000,270,264 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswCmnIS.dll
        MOD - [2014/02/19 21:02:22 | 000,124,528 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswCmnOS.dll
        MOD - [2014/02/19 21:02:21 | 000,630,264 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\ashBase.dll
        MOD - [2014/02/19 21:02:21 | 000,333,600 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\ashTask.dll
        MOD - [2014/02/19 21:02:21 | 000,259,464 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\ashShell.dll
        MOD - [2014/02/19 21:02:21 | 000,078,696 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\ashTaskEx.dll
        MOD - [2014/02/19 21:02:20 | 003,796,984 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\CommonRes.dll
        MOD - [2014/02/19 21:02:18 | 003,767,096 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
        MOD - [2014/02/19 21:02:18 | 001,458,408 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\Aavm4h.dll
        MOD - [2014/02/19 21:02:18 | 000,168,776 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AavmRpch.dll
        MOD - [2014/02/19 21:02:17 | 000,334,624 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\1036\uiLangRes.dll
        MOD - [2014/02/19 21:02:17 | 000,102,856 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\1036\Base.dll
        MOD - [2014/02/19 21:02:09 | 000,055,464 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastGUIProxy.dll
        MOD - [2014/02/19 21:02:07 | 001,440,832 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswAra.dll
        MOD - [2014/02/19 21:00:44 | 003,167,112 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\HTMLayout.dll
        MOD - [2014/02/15 22:29:36 | 000,272,496 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\browser\components\browsercomps.dll
        MOD - [2014/02/15 22:29:35 | 003,494,512 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\gkmedias.dll
        MOD - [2014/02/15 22:29:35 | 000,307,824 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\freebl3.dll
        MOD - [2014/02/15 22:29:35 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
        MOD - [2014/02/15 22:29:31 | 003,578,992 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
        MOD - [2014/02/15 22:29:31 | 000,142,960 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozglue.dll
        MOD - [2014/02/15 22:29:31 | 000,017,008 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozalloc.dll
        MOD - [2014/02/15 22:29:30 | 001,786,480 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nss3.dll
        MOD - [2014/02/15 22:29:29 | 000,398,960 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssckbi.dll
        MOD - [2014/02/15 22:29:29 | 000,092,784 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssdbm3.dll
        MOD - [2014/02/15 22:29:25 | 000,152,688 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\softokn3.dll
        MOD - [2014/02/15 22:29:22 | 022,776,944 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xul.dll
        MOD - [2014/02/12 14:19:28 | 001,711,616 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\c9044e65851c7afcb53597157c76446f\Microsoft.VisualBasic.ni.dll
        MOD - [2014/02/12 14:18:50 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\c5213af29d521ee19cc55983f8c2037c\System.Management.ni.dll
        MOD - [2014/02/12 14:09:50 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\73726634ae4a00a21279a6a66b081301\System.ServiceProcess.ni.dll
        MOD - [2014/02/12 14:09:41 | 011,909,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\2183861863b3c98036f0d75f303d2a65\System.Web.ni.dll
        MOD - [2014/02/12 14:09:27 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e3ab5ab0fbb86c36425e6902e54a547b\System.Runtime.Remoting.ni.dll
        MOD - [2014/02/12 13:53:19 | 000,978,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\d17ceca243fabda73eefb21d9bd072df\System.Configuration.ni.dll
        MOD - [2014/02/12 13:51:52 | 005,462,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f87e71868aedbc6c4e8fe7160d17c4ab\System.Xml.ni.dll
        MOD - [2014/02/12 13:51:35 | 012,434,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2b605fc7deda872727d1ed37710420e\System.Windows.Forms.ni.dll
        MOD - [2014/02/12 13:51:26 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8e6265a54260bddfc05951e764f5bc48\System.Drawing.ni.dll
        MOD - [2014/02/12 13:50:42 | 012,218,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\07d57714fff9db216537473f4a777f22\PresentationCore.ni.dll
        MOD - [2014/02/12 13:50:28 | 003,325,440 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d981bccab40fbbdc1d35bf2a58c947b7\WindowsBase.ni.dll
        MOD - [2014/02/12 13:50:25 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\957628d9dd7b3bf370a56dca7835a997\System.ni.dll
        MOD - [2014/02/12 13:50:17 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\694a37a84dee2cd2609a1dfab27c0433\mscorlib.ni.dll
        MOD - [2014/02/06 00:52:52 | 000,073,544 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
        MOD - [2014/02/06 00:52:34 | 000,510,792 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Apple Application Support\SQLite3.dll
        MOD - [2014/02/06 00:52:34 | 000,162,120 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll
        MOD - [2014/02/06 00:52:34 | 000,059,208 | ---- | M] (Open Source Software community LGPL) -- C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll
        MOD - [2014/02/06 00:52:32 | 001,044,808 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
        MOD - [2014/02/06 00:52:30 | 001,315,656 | ---- | M] (The ICU Project) -- C:\Program Files\Common Files\Apple\Apple Application Support\libicuin.dll
        MOD - [2014/02/06 00:52:30 | 001,016,648 | ---- | M] (The ICU Project) -- C:\Program Files\Common Files\Apple\Apple Application Support\libicuuc.dll
        MOD - [2014/02/06 00:52:30 | 000,075,080 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll
        MOD - [2014/02/06 00:52:28 | 019,102,536 | ---- | M] (The ICU Project) -- C:\Program Files\Common Files\Apple\Apple Application Support\icudt49.dll
        MOD - [2014/02/06 00:52:18 | 001,663,816 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll
        MOD - [2014/02/06 00:52:14 | 002,010,440 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Apple Application Support\CFNetwork.dll
        MOD - [2014/02/06 00:52:12 | 000,062,792 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll
        MOD - [2014/02/05 09:58:27 | 012,345,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
        MOD - [2014/02/05 09:56:17 | 001,806,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
        MOD - [2014/02/05 09:53:14 | 009,739,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
        MOD - [2014/02/05 09:51:01 | 001,105,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
        MOD - [2014/02/05 09:50:39 | 001,129,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
        MOD - [2014/02/05 09:48:02 | 001,796,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
        MOD - [2014/01/07 02:32:46 | 001,626,952 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll
        MOD - [2013/12/05 03:12:37 | 001,248,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
        MOD - [2013/11/08 03:01:47 | 000,653,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll
        MOD - [2013/11/08 03:01:47 | 000,569,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll
        MOD - [2013/10/23 23:55:54 | 005,922,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
        MOD - [2013/10/22 08:19:59 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
        MOD - [2013/10/15 18:59:10 | 000,770,384 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\msvcr100.dll
        MOD - [2013/10/15 18:59:10 | 000,421,200 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\msvcp100.dll
        MOD - [2013/10/11 03:07:57 | 000,596,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
        MOD - [2013/10/03 13:45:50 | 000,297,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
        MOD - [2013/10/03 13:45:45 | 000,993,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
        MOD - [2013/09/11 21:21:54 | 000,505,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
        MOD - [2013/08/27 03:47:50 | 001,029,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
        MOD - [2013/08/27 03:47:50 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
        MOD - [2013/08/27 03:47:50 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
        MOD - [2013/08/27 03:47:50 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
        MOD - [2013/08/27 02:52:08 | 001,172,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
        MOD - [2013/08/27 02:50:40 | 000,486,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
        MOD - [2013/08/27 02:32:20 | 000,683,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
        MOD - [2013/08/27 02:28:36 | 001,069,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
        MOD - [2013/07/10 10:47:00 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
        MOD - [2013/07/09 13:10:36 | 001,205,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
        MOD - [2013/07/08 05:20:04 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
        MOD - [2013/07/08 05:16:55 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptnet.dll
        MOD - [2013/07/04 05:21:02 | 000,532,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18879_none_88f80d1769beeaec\comctl32.dll
        MOD - [2013/06/19 18:44:54 | 001,366,656 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\OFFICE11\msxml5.dll
        MOD - [2013/04/19 23:49:36 | 001,736,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
        MOD - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
        MOD - [2013/04/04 14:50:30 | 002,191,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll
        MOD - [2013/04/04 14:50:30 | 000,527,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
        MOD - [2013/04/04 14:50:30 | 000,080,968 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
        MOD - [2013/04/03 04:56:06 | 001,748,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18813_none_9e51e050ca1696a4\GdiPlus.dll
        MOD - [2013/03/06 18:30:14 | 003,282,768 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\NCW.dll
        MOD - [2013/02/05 15:17:48 | 000,966,552 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\MUI\19.9.1.14\0c\01\cltres.loc
        MOD - [2013/02/02 05:18:55 | 000,731,984 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\uialert.dll
        MOD - [2013/02/02 05:18:46 | 000,698,704 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\npcstats.dll
        MOD - [2013/02/02 05:18:46 | 000,419,664 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\npctray.dll
        MOD - [2013/02/02 05:18:42 | 000,114,512 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\navshext.dll
        MOD - [2013/02/02 05:18:41 | 000,409,936 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\nahelper.dll
        MOD - [2013/02/02 05:18:39 | 000,297,808 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\mcstatus.dll
        MOD - [2013/02/02 05:18:37 | 001,222,480 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\isdatapr.dll
        MOD - [2013/02/02 05:18:31 | 000,370,512 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\fwsesal.dll
        MOD - [2013/02/02 05:18:27 | 000,317,776 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\avscntsk.dll
        MOD - [2013/02/02 05:18:26 | 000,419,152 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\avpapp32.dll
        MOD - [2013/02/02 05:18:24 | 000,473,424 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\avifc.dll
        MOD - [2012/11/22 04:54:36 | 000,353,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
        MOD - [2012/11/20 05:22:50 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
        MOD - [2012/11/08 04:48:38 | 001,314,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
        MOD - [2012/11/02 11:19:34 | 001,400,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
        MOD - [2012/10/05 11:58:55 | 000,364,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
        MOD - [2012/09/28 17:11:03 | 000,892,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
        MOD - [2012/09/25 17:19:41 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
        MOD - [2012/09/10 00:06:48 | 000,050,064 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.dll
        MOD - [2012/09/09 23:30:36 | 000,048,528 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll
        MOD - [2012/09/09 23:30:34 | 000,421,776 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exe
        MOD - [2012/09/09 23:30:34 | 000,156,560 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.dll
        MOD - [2012/09/04 19:09:51 | 000,790,512 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\cltlms.dll
        MOD - [2012/09/04 19:09:40 | 001,556,464 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\cltaldis.dll
        MOD - [2012/09/04 19:09:39 | 000,365,040 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\cltpe.dll
        MOD - [2012/07/06 03:17:58 | 000,419,808 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\srtsp32.dll
        MOD - [2012/06/29 17:01:42 | 000,467,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
        MOD - [2012/06/16 03:31:03 | 000,678,352 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccl110u.dll
        MOD - [2012/06/16 03:24:32 | 000,292,816 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccgevt.dll
        MOD - [2012/06/16 03:24:31 | 000,396,752 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccjobmgr.dll
        MOD - [2012/06/16 03:24:29 | 000,161,232 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccipc.dll
        MOD - [2012/06/16 03:24:20 | 000,085,456 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccvrtrst.dll
        MOD - [2012/06/16 03:24:19 | 000,138,272 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccsvchst.exe
        MOD - [2012/06/16 03:24:18 | 000,146,896 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccsvc.dll
        MOD - [2012/06/16 03:24:17 | 000,323,024 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccset.dll
        MOD - [2012/06/08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
        MOD - [2012/06/02 01:04:25 | 000,278,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
        MOD - [2012/05/25 22:10:58 | 000,052,120 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\userctxt.dll
        MOD - [2012/05/22 02:37:12 | 000,085,968 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\efacli.dll
        MOD - [2012/03/09 13:38:04 | 000,169,912 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\sdkcmn.dll
        MOD - [2012/03/08 17:50:28 | 004,280,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        MOD - [2012/03/08 17:50:28 | 000,540,024 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\vvpltfrm.dll
        MOD - [2012/03/08 17:50:28 | 000,187,768 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\shareanything.dll
        MOD - [2012/03/08 17:50:28 | 000,049,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sirenacm.dll
        MOD - [2012/03/08 17:23:30 | 000,889,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\PresenceIM.dll
        MOD - [2012/03/08 17:23:30 | 000,651,664 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\livetransport.dll
        MOD - [2012/03/08 17:23:30 | 000,396,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\ObjectStore.dll
        MOD - [2012/03/08 17:23:30 | 000,292,752 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\liveNatTrav.dll
        MOD - [2012/03/08 17:17:38 | 000,551,784 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Installer\wlshim.dll
        MOD - [2012/03/08 16:50:20 | 003,160,424 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\uxctl.dll
        MOD - [2012/03/08 16:50:20 | 002,817,896 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\wlidux.dll
        MOD - [2012/03/08 16:50:20 | 002,457,960 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\uxcore.dll
        MOD - [2012/03/08 16:50:20 | 000,592,744 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\uxcontacts.dll
        MOD - [2012/03/08 16:50:20 | 000,104,296 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\uxcalendar.dll
        MOD - [2012/03/08 16:50:20 | 000,071,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\wldcore.dll
        MOD - [2012/03/08 16:50:20 | 000,040,296 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\wldlog.dll
        MOD - [2011/12/14 17:17:47 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
        MOD - [2011/12/12 06:38:42 | 002,760,120 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\symhtml.dll
        MOD - [2011/11/16 17:23:44 | 000,377,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
        MOD - [2011/11/16 17:23:08 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
        MOD - [2011/10/14 17:03:25 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
        MOD - [2011/08/30 23:05:04 | 000,073,064 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
        MOD - [2011/08/30 23:05:02 | 000,121,704 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mdnsNSP.dll
        MOD - [2011/08/25 17:14:01 | 000,563,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
        MOD - [2011/08/25 17:14:01 | 000,238,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
        MOD - [2011/06/16 02:01:39 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\mfc80FRA.dll
        MOD - [2011/06/16 02:01:38 | 001,101,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80.dll
        MOD - [2011/06/16 02:01:37 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll
        MOD - [2011/06/15 17:12:11 | 000,182,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
        MOD - [2011/05/03 21:16:10 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
        MOD - [2011/05/02 18:16:14 | 000,739,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
        MOD - [2011/03/28 20:33:28 | 000,856,984 | ---- | M] (Microsoft Corp.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\wlidcli.dll
        MOD - [2011/03/10 18:03:51 | 001,136,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
        MOD - [2011/03/02 16:44:26 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
        MOD - [2011/02/19 23:03:12 | 000,421,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp100.dll
        MOD - [2011/02/19 00:40:50 | 000,773,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr100.dll
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par nat
        -  lun. 24 févr. 2014 21:17 #107870
        bonsoir voici le rapport

        MOD - [2011/01/20 17:08:16 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
        MOD - [2011/01/20 17:07:42 | 000,258,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
        MOD - [2011/01/20 17:07:16 | 000,586,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
        MOD - [2011/01/20 17:07:03 | 001,075,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
        MOD - [2011/01/20 17:06:38 | 002,873,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
        MOD - [2011/01/20 17:04:54 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll
        MOD - [2011/01/20 15:14:03 | 000,261,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
        MOD - [2010/12/28 16:55:03 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
        MOD - [2010/12/14 15:49:23 | 001,169,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
        MOD - [2010/11/04 19:55:38 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
        MOD - [2010/11/04 17:34:06 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
        MOD - [2010/10/29 13:49:28 | 000,249,064 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
        MOD - [2010/09/13 01:24:04 | 003,258,632 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\uccapi.dll
        MOD - [2010/09/13 01:24:02 | 005,914,888 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\rtmpltfm.dll
        MOD - [2010/09/13 01:20:56 | 000,196,416 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Shared\sqmapi.dll
        MOD - [2010/08/31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll
        MOD - [2010/07/11 14:47:40 | 000,453,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
        MOD - [2010/06/28 18:00:21 | 001,316,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
        MOD - [2010/06/26 06:47:26 | 002,057,728 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleServices.dll
        MOD - [2010/06/26 06:47:26 | 000,581,120 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopResources_fr.dll
        MOD - [2010/06/26 06:47:26 | 000,480,256 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopAPI2.dll
        MOD - [2010/06/26 06:47:26 | 000,273,920 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopCommon.dll
        MOD - [2010/06/26 06:47:26 | 000,129,024 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopHyper.dll
        MOD - [2010/06/26 06:47:26 | 000,034,816 | ---- | M] () -- C:\Program Files\Google\Google Desktop Search\gzlib.dll
        MOD - [2010/06/26 06:47:26 | 000,030,192 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        MOD - [2010/06/18 18:31:29 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
        MOD - [2010/05/04 20:13:07 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
        MOD - [2010/04/16 17:46:48 | 000,502,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
        MOD - [2010/04/05 18:01:01 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
        MOD - [2010/01/21 16:05:44 | 000,062,464 | ---- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
        MOD - [2009/12/04 19:28:51 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
        MOD - [2009/12/04 19:27:12 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
        MOD - [2009/11/08 09:55:32 | 000,297,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
        MOD - [2009/10/23 18:10:19 | 000,714,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
        MOD - [2009/10/01 02:02:17 | 002,537,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdshext.dll
        MOD - [2009/10/01 02:02:04 | 000,334,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
        MOD - [2009/10/01 02:02:02 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
        MOD - [2009/10/01 02:01:59 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
        MOD - [2009/10/01 02:01:47 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Portable Devices\sqmapi.dll
        MOD - [2009/09/25 03:10:10 | 000,974,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
        MOD - [2009/09/25 03:07:08 | 000,189,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
        MOD - [2009/09/25 03:04:32 | 000,321,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
        MOD - [2009/09/04 12:41:59 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
        MOD - [2009/07/17 14:54:43 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
        MOD - [2009/07/11 20:01:41 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
        MOD - [2009/06/15 15:52:42 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
        MOD - [2009/06/15 15:51:38 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
        MOD - [2009/06/10 12:41:46 | 002,386,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
        MOD - [2009/04/11 07:28:28 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\zipfldr.dll
        MOD - [2009/04/11 07:28:26 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscntfy.dll
        MOD - [2009/04/11 07:28:26 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
        MOD - [2009/04/11 07:28:25 | 001,077,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
        MOD - [2009/04/11 07:28:25 | 000,876,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
        MOD - [2009/04/11 07:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
        MOD - [2009/04/11 07:28:25 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
        MOD - [2009/04/11 07:28:25 | 000,250,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
        MOD - [2009/04/11 07:28:25 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll
        MOD - [2009/04/11 07:28:25 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
        MOD - [2009/04/11 07:28:25 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wmiutils.dll
        MOD - [2009/04/11 07:28:25 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemsvc.dll
        MOD - [2009/04/11 07:28:25 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemprox.dll
        MOD - [2009/04/11 07:28:25 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll
        MOD - [2009/04/11 07:28:25 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
        MOD - [2009/04/11 07:28:24 | 002,205,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
        MOD - [2009/04/11 07:28:24 | 001,591,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
        MOD - [2009/04/11 07:28:24 | 001,576,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
        MOD - [2009/04/11 07:28:24 | 000,466,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
        MOD - [2009/04/11 07:28:24 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll
        MOD - [2009/04/11 07:28:24 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
        MOD - [2009/04/11 07:28:24 | 000,203,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
        MOD - [2009/04/11 07:28:24 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
        MOD - [2009/04/11 07:28:24 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sendmail.dll
        MOD - [2009/04/11 07:28:24 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
        MOD - [2009/04/11 07:28:23 | 003,174,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
        MOD - [2009/04/11 07:28:23 | 002,226,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkexplorer.dll
        MOD - [2009/04/11 07:28:23 | 001,823,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
        MOD - [2009/04/11 07:28:23 | 001,541,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onex.dll
        MOD - [2009/04/11 07:28:23 | 001,381,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Query.dll
        MOD - [2009/04/11 07:28:23 | 000,825,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdlg.dll
        MOD - [2009/04/11 07:28:23 | 000,754,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
        MOD - [2009/04/11 07:28:23 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
        MOD - [2009/04/11 07:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLC.dll
        MOD - [2009/04/11 07:28:23 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
        MOD - [2009/04/11 07:28:23 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
        MOD - [2009/04/11 07:28:23 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
        MOD - [2009/04/11 07:28:22 | 000,805,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
        MOD - [2009/04/11 07:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
        MOD - [2009/04/11 07:28:22 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
        MOD - [2009/04/11 07:28:22 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
        MOD - [2009/04/11 07:28:22 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll
        MOD - [2009/04/11 07:28:21 | 002,241,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
        MOD - [2009/04/11 07:28:21 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimtf.dll
        MOD - [2009/04/11 07:28:20 | 002,012,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\milcore.dll
        MOD - [2009/04/11 07:28:20 | 000,807,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
        MOD - [2009/04/11 07:28:20 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
        MOD - [2009/04/11 07:28:20 | 000,378,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
        MOD - [2009/04/11 07:28:20 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
        MOD - [2009/04/11 07:28:20 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
        MOD - [2009/04/11 07:28:20 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprapi.dll
        MOD - [2009/04/11 07:28:20 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
        MOD - [2009/04/11 07:28:20 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
        MOD - [2009/04/11 07:28:20 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
        MOD - [2009/04/11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\fastprox.dll
        MOD - [2009/04/11 07:28:19 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
        MOD - [2009/04/11 07:28:19 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll
        MOD - [2009/04/11 07:28:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
        MOD - [2009/04/11 07:28:19 | 000,153,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
        MOD - [2009/04/11 07:28:19 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll
        MOD - [2009/04/11 07:28:19 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
        MOD - [2009/04/11 07:28:19 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehSSO.dll
        MOD - [2009/04/11 07:28:19 | 000,114,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorShell.dll
        MOD - [2009/04/11 07:28:19 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
        MOD - [2009/04/11 07:28:19 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
        MOD - [2009/04/11 07:28:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
        MOD - [2009/04/11 07:28:18 | 001,985,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
        MOD - [2009/04/11 07:28:18 | 001,788,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
        MOD - [2009/04/11 07:28:18 | 001,324,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browseui.dll
        MOD - [2009/04/11 07:28:18 | 001,112,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
        MOD - [2009/04/11 07:28:18 | 000,971,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptui.dll
        MOD - [2009/04/11 07:28:18 | 000,450,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
        MOD - [2009/04/11 07:28:18 | 000,323,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll
        MOD - [2009/04/11 07:28:18 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
        MOD - [2009/04/11 07:28:18 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
        MOD - [2009/04/11 07:28:18 | 000,178,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credui.dll
        MOD - [2009/04/11 07:28:18 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
        MOD - [2009/04/11 07:28:18 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
        MOD - [2009/04/11 07:28:18 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authz.dll
        MOD - [2009/04/11 07:28:18 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
        MOD - [2009/04/11 07:28:18 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
        MOD - [2009/04/11 07:28:17 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
        MOD - [2009/04/11 07:28:17 | 000,199,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsldpc.dll
        MOD - [2009/04/11 07:28:17 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
        MOD - [2009/04/11 07:28:08 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\unsecapp.exe
        MOD - [2009/04/11 07:28:03 | 001,233,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Sidebar\sidebar.exe
        MOD - [2009/04/11 07:27:58 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
        MOD - [2009/04/11 07:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
        MOD - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
        MOD - [2009/04/11 07:27:33 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
        MOD - [2009/04/11 07:27:17 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
        MOD - [2009/04/11 07:27:12 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
        MOD - [2009/04/11 07:27:12 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
        MOD - [2009/04/11 07:27:12 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
        MOD - [2009/03/30 05:42:27 | 000,430,080 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.resources.dll
        MOD - [2009/03/30 05:42:26 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
        MOD - [2009/03/30 05:42:14 | 000,074,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
        MOD - [2009/03/01 16:16:21 | 001,679,360 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3019.36912__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:21 | 000,364,544 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3019.37109__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:21 | 000,253,952 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3019.36870__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:21 | 000,196,608 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3019.36924__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:21 | 000,077,824 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3019.37100__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:21 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3019.37065__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:21 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3019.36904__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:21 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3019.37022__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:21 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3019.36890__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:20 | 000,483,328 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3019.37131__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:05 | 000,802,816 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3019.37030__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:05 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3019.37092__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:05 | 000,352,256 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3019.37072__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:05 | 000,147,456 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3019.37130__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:05 | 000,135,168 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3019.37137__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:05 | 000,090,112 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3019.37079__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:05 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3019.36884__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:05 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3019.37029__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:05 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3019.37071__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:05 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3019.37129__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:04 | 000,901,120 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3019.37102__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,585,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3019.36936__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,479,232 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3019.37023__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,446,464 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3019.37015__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,438,272 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3019.36891__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3019.37058__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,307,200 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3019.36943__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
        MOD - [2009/03/01 16:16:04 | 000,217,088 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3019.36930__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,118,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3019.37044__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
        MOD - [2009/03/01 16:16:04 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3019.37022__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:04 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3019.36942__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:04 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3019.37029__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:04 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3019.37044__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:04 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3019.37058__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
        MOD - [2009/03/01 16:16:04 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
        MOD - [2009/03/01 16:16:04 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2939.23679__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
        MOD - [2009/03/01 16:16:04 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2939.23767__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
        MOD - [2009/03/01 16:16:04 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2939.23710__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
        MOD - [2009/03/01 16:16:04 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2939.23768__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
        MOD - [2009/03/01 16:16:04 | 000,006,656 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
        MOD - [2009/03/01 16:16:03 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.2939.23668__90ba9c70f846762e\CLI.Foundation.dll
        MOD - [2009/03/01 16:16:03 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
        MOD - [2009/03/01 16:16:03 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.2939.23662__90ba9c70f846762e\LOG.Foundation.dll
        MOD - [2009/03/01 16:16:03 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2939.23802__90ba9c70f846762e\CLI.Foundation.XManifest.dll
        MOD - [2009/03/01 16:16:03 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2939.23667__90ba9c70f846762e\NEWAEM.Foundation.dll
        MOD - [2009/03/01 16:16:03 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2939.23717__90ba9c70f846762e\DEM.OS.I0602.dll
        MOD - [2009/03/01 16:16:03 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2939.23693__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
        MOD - [2009/03/01 16:16:03 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2939.23687__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
        MOD - [2009/03/01 16:16:03 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2939.23679__90ba9c70f846762e\CLI.Component.Client.Shared.dll
        MOD - [2009/03/01 16:16:03 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.2939.23707__90ba9c70f846762e\MOM.Foundation.dll
        MOD - [2009/03/01 16:16:03 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS\2.0.2939.23717__90ba9c70f846762e\DEM.OS.dll
        MOD - [2009/03/01 16:16:03 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
        MOD - [2009/03/01 16:16:03 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.2939.23718__90ba9c70f846762e\DEM.Graphics.dll
        MOD - [2009/03/01 16:16:03 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
        MOD - [2009/03/01 16:16:03 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2939.23688__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
        MOD - [2009/03/01 16:16:03 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2939.23734__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2965.22300__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2939.23689__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2939.23743__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2939.23740__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2939.23764__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2939.23708__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.2939.23763__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2939.23735__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2939.23741__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:02 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2939.23718__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
        MOD - [2009/03/01 16:16:01 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2939.23739__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:01 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2939.23738__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:01 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2939.23742__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:01 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:01 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2939.23711__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
        MOD - [2009/03/01 16:16:01 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Foundation\2.0.2939.23665__90ba9c70f846762e\AEM.Foundation.dll
        MOD - [2009/03/01 16:16:01 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
        MOD - [2009/03/01 16:16:01 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.2939.23709__90ba9c70f846762e\APM.Foundation.dll
        MOD - [2009/03/01 16:16:01 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Server.Shared.dll
        MOD - [2009/03/01 16:15:56 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3019.36897__90ba9c70f846762e\CLI.Component.Wizard.dll
        MOD - [2009/03/01 16:15:56 | 000,102,400 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3019.37122__90ba9c70f846762e\MOM.Implementation.dll
        MOD - [2009/03/01 16:15:56 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3019.36862__90ba9c70f846762e\CLI.Component.Runtime.dll
        MOD - [2009/03/01 16:15:56 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3019.37121__90ba9c70f846762e\LOG.Foundation.Implementation.dll
        MOD - [2009/03/01 16:15:56 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2939.23713__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
        MOD - [2009/03/01 16:15:56 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2939.23678__90ba9c70f846762e\CLI.Foundation.Private.dll
        MOD - [2009/03/01 16:15:56 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3019.37147__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
        MOD - [2009/03/01 16:15:56 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2939.23679__90ba9c70f846762e\LOG.Foundation.Private.dll
        MOD - [2009/03/01 16:15:56 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2939.23694__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
        MOD - [2009/03/01 16:15:56 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2939.23712__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
        MOD - [2009/03/01 16:15:56 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2939.23711__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
        MOD - [2009/03/01 16:15:56 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOCALIZATION.Foundation.Private\2.0.2939.23677__90ba9c70f846762e\LOCALIZATION.Foundation.Private.dll
        MOD - [2009/03/01 16:15:56 | 000,006,656 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3019.36862__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
        MOD - [2009/03/01 16:15:55 | 001,511,424 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3019.36878__90ba9c70f846762e\CLI.Component.Dashboard.dll
        MOD - [2009/03/01 16:15:55 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ATIDEMOS\2.0.3019.36863__90ba9c70f846762e\ATIDEMOS.dll
        MOD - [2009/03/01 16:15:55 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3019.36861__90ba9c70f846762e\APM.Server.dll
        MOD - [2009/03/01 16:15:55 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3019.36862__90ba9c70f846762e\AEM.Server.dll
        MOD - [2009/03/01 16:15:55 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2939.23689__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
        MOD - [2009/03/01 16:15:55 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3019.37122__90ba9c70f846762e\CCC.Implementation.dll
        MOD - [2009/03/01 16:15:55 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
        MOD - [2009/03/01 16:15:55 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2939.23746__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
        MOD - [2008/07/27 19:03:16 | 000,037,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
        MOD - [2008/05/08 10:11:58 | 004,787,712 | ---- | M] () -- C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
        MOD - [2008/04/30 15:38:46 | 000,117,248 | ---- | M] (Chicony) -- C:\Program Files\Camera Assistant Software for Toshiba\ceccmdll.dll
        MOD - [2008/04/29 10:33:28 | 000,417,792 | ---- | M] (Chicony) -- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
        MOD - [2008/04/26 15:57:06 | 000,716,800 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
        MOD - [2008/04/24 12:03:12 | 000,430,080 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
        MOD - [2008/04/24 09:22:36 | 000,046,464 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\fr\Toshiba.Tempo.UI.Common.resources.dll
        MOD - [2008/04/24 09:22:10 | 000,103,824 | ---- | M] (Toshiba Europe
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par nat
        -  lun. 24 févr. 2014 21:19 #107872
        bonsoir voici le rapport

        MOD - [2008/04/24 09:22:10 | 000,103,824 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
        MOD - [2008/04/24 09:22:02 | 005,854,592 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.Common.dll
        MOD - [2008/04/24 09:22:00 | 000,042,368 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.Common.dll
        MOD - [2008/04/18 15:53:24 | 000,061,440 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFWlApi.dll
        MOD - [2008/04/17 10:39:02 | 000,667,648 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
        MOD - [2008/04/16 23:21:24 | 001,056,768 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
        MOD - [2008/04/16 23:19:16 | 000,405,504 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
        MOD - [2008/04/16 23:16:22 | 001,884,160 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSParts.dll
        MOD - [2008/04/16 23:15:46 | 000,069,632 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\OpenProp.dll
        MOD - [2008/04/16 23:15:38 | 000,061,440 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFP2API.dll
        MOD - [2008/04/16 23:14:04 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFUPNP.dll
        MOD - [2008/04/16 23:13:38 | 000,266,240 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSAPI.dll
        MOD - [2008/04/16 23:13:02 | 000,022,016 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSNLS.dll
        MOD - [2008/04/16 23:12:30 | 000,086,016 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\IpAdrSet.dll
        MOD - [2008/04/16 15:21:22 | 000,086,016 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\HDMICtrlMan\HDMIEDID.dll
        MOD - [2008/04/07 20:59:42 | 000,372,736 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIDEMGX.dll
        MOD - [2008/04/07 20:59:30 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
        MOD - [2008/04/07 20:59:20 | 000,315,392 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
        MOD - [2008/04/07 20:45:36 | 003,074,560 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdag.dll
        MOD - [2008/04/07 20:31:50 | 004,088,832 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdva.dll
        MOD - [2008/04/07 18:26:04 | 000,098,304 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnF8Dll.dll
        MOD - [2008/03/19 13:35:42 | 000,716,800 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
        MOD - [2008/03/14 10:02:10 | 000,040,960 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnF5.dll
        MOD - [2008/03/06 10:14:54 | 005,121,912 | ---- | M] () -- C:\Program Files\Toshiba\FlashCards\BlackPng.dll
        MOD - [2008/02/29 14:43:06 | 000,090,112 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnSpace.dll
        MOD - [2008/01/25 13:33:50 | 000,509,816 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
        MOD - [2008/01/22 14:22:22 | 000,102,400 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\FnSticky.dll
        MOD - [2008/01/21 03:25:33 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe
        MOD - [2008/01/21 03:25:33 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnssci.dll
        MOD - [2008/01/21 03:25:29 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
        MOD - [2008/01/21 03:25:26 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
        MOD - [2008/01/21 03:25:25 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
        MOD - [2008/01/21 03:25:18 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
        MOD - [2008/01/21 03:25:15 | 000,244,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodev.dll
        MOD - [2008/01/21 03:25:15 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMASF.DLL
        MOD - [2008/01/21 03:25:11 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehtray.exe
        MOD - [2008/01/21 03:25:11 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehmsas.exe
        MOD - [2008/01/21 03:25:02 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
        MOD - [2008/01/21 03:25:01 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
        MOD - [2008/01/21 03:25:01 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
        MOD - [2008/01/21 03:25:00 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
        MOD - [2008/01/21 03:24:57 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
        MOD - [2008/01/21 03:24:56 | 000,326,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
        MOD - [2008/01/21 03:24:56 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
        MOD - [2008/01/21 03:24:54 | 000,397,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
        MOD - [2008/01/21 03:24:54 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
        MOD - [2008/01/21 03:24:54 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll
        MOD - [2008/01/21 03:24:54 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
        MOD - [2008/01/21 03:24:54 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
        MOD - [2008/01/21 03:24:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
        MOD - [2008/01/21 03:24:48 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
        MOD - [2008/01/21 03:24:48 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
        MOD - [2008/01/21 03:24:47 | 000,403,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
        MOD - [2008/01/21 03:24:47 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
        MOD - [2008/01/21 03:24:47 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
        MOD - [2008/01/21 03:24:46 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll
        MOD - [2008/01/21 03:24:46 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
        MOD - [2008/01/21 03:24:45 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ddraw.dll
        MOD - [2008/01/21 03:24:44 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
        MOD - [2008/01/21 03:24:41 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oledlg.dll
        MOD - [2008/01/21 03:24:37 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
        MOD - [2008/01/21 03:24:37 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
        MOD - [2008/01/21 03:24:31 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
        MOD - [2008/01/21 03:24:29 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
        MOD - [2008/01/21 03:24:29 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
        MOD - [2008/01/21 03:24:28 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msoert2.dll
        MOD - [2008/01/21 03:24:27 | 000,155,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dssenh.dll
        MOD - [2008/01/21 03:24:26 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
        MOD - [2008/01/21 03:24:26 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
        MOD - [2008/01/21 03:24:25 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\activeds.dll
        MOD - [2008/01/21 03:24:25 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
        MOD - [2008/01/21 03:24:24 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
        MOD - [2008/01/21 03:24:23 | 000,237,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netprofm.dll
        MOD - [2008/01/21 03:24:15 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc_os.dll
        MOD - [2008/01/21 03:24:13 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
        MOD - [2008/01/21 03:24:12 | 000,816,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dim700.dll
        MOD - [2008/01/21 03:24:11 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
        MOD - [2008/01/21 03:24:07 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxva2.dll
        MOD - [2008/01/21 03:24:06 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mydocs.dll
        MOD - [2008/01/21 03:24:06 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devenum.dll
        MOD - [2008/01/21 03:24:06 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
        MOD - [2008/01/21 03:24:04 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
        MOD - [2008/01/21 03:24:04 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
        MOD - [2008/01/21 03:24:02 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
        MOD - [2008/01/21 03:23:56 | 002,643,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
        MOD - [2008/01/21 03:23:54 | 000,798,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
        MOD - [2008/01/21 03:23:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
        MOD - [2008/01/21 03:23:53 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
        MOD - [2008/01/21 03:23:52 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
        MOD - [2008/01/21 03:23:50 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
        MOD - [2008/01/21 03:23:50 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
        MOD - [2008/01/21 03:23:45 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
        MOD - [2008/01/21 03:23:44 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
        MOD - [2008/01/21 03:23:43 | 000,240,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
        MOD - [2008/01/21 03:23:39 | 001,298,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TMM.dll
        MOD - [2008/01/21 03:23:39 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syncui.dll
        MOD - [2008/01/21 03:23:27 | 000,730,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
        MOD - [2008/01/18 11:35:32 | 000,016,384 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll
        MOD - [2008/01/17 16:27:52 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
        MOD - [2008/01/11 10:57:18 | 000,028,672 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TPwrFunc.dll
        MOD - [2008/01/11 10:57:18 | 000,025,600 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TPwrReg.dll
        MOD - [2008/01/09 13:51:32 | 000,010,240 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\ConfigFree\notify\NotifyCFF86.dll
        MOD - [2008/01/09 13:49:58 | 000,196,608 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TFunc2.dll
        MOD - [2008/01/08 14:43:16 | 000,196,608 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\T1394Pwr.dll
        MOD - [2008/01/08 14:43:14 | 000,196,608 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TCooling.dll
        MOD - [2008/01/08 14:43:14 | 000,009,728 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TPwrSrv.dll
        MOD - [2008/01/08 14:43:10 | 000,217,088 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TOddPwr.dll
        MOD - [2008/01/08 14:43:08 | 000,204,800 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TFunctab.dll
        MOD - [2008/01/08 14:43:04 | 000,208,896 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TtosFunc.dll
        MOD - [2008/01/08 14:43:00 | 000,196,608 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TSDPwr.dll
        MOD - [2007/12/26 16:44:06 | 000,069,632 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnF67.dll
        MOD - [2007/12/25 12:03:40 | 000,015,184 | ---- | M] () -- C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll
        MOD - [2007/12/14 21:40:00 | 000,090,112 | ---- | M] () -- C:\Program Files\Toshiba\FlashCards\TWarnMsg\TWarnMsg.dll
        MOD - [2007/12/03 16:57:24 | 000,131,072 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Windows\System32\TosBdAPI.dll
        MOD - [2007/11/29 17:59:00 | 000,095,528 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        MOD - [2007/11/29 17:58:52 | 001,029,416 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        MOD - [2007/11/29 17:30:24 | 000,147,456 | ---- | M] (Synaptics, Inc.) -- C:\Windows\System32\SynTPAPI.dll
        MOD - [2007/11/29 17:18:20 | 000,163,840 | ---- | M] (Synaptics, Inc.) -- C:\Windows\System32\SynCOM.dll
        MOD - [2007/11/16 19:10:14 | 000,172,032 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Windows\System32\TosBtAPI.dll
        MOD - [2007/10/29 14:56:20 | 000,016,384 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll
        MOD - [2007/07/31 10:59:32 | 000,053,248 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnF3.dll
        MOD - [2007/07/31 10:58:36 | 000,053,248 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnF4.dll
        MOD - [2007/07/17 11:13:56 | 000,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
        MOD - [2007/07/17 11:13:34 | 000,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
        MOD - [2007/07/10 08:24:16 | 000,212,992 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\Toshiba Online Product Information\fr\TOPI.resources.dll
        MOD - [2007/07/10 08:24:10 | 000,581,632 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
        MOD - [2007/05/11 11:00:00 | 000,194,680 | ---- | M] (TOSHIBA Corp.) -- C:\Program Files\Toshiba\Utilities\NotifyX.dll
        MOD - [2007/03/08 16:18:46 | 000,154,112 | ---- | M] (Chicony) -- C:\Program Files\Camera Assistant Software for Toshiba\hookdll.dll
        MOD - [2007/03/01 12:28:52 | 000,010,240 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\SmoothView\NotifyTZU.dll
        MOD - [2007/01/11 19:24:00 | 000,118,784 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\TCrdMain.dll
        MOD - [2007/01/11 19:24:00 | 000,061,440 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\TCrdEvnt.dll
        MOD - [2006/12/14 17:44:00 | 000,053,248 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnF1.dll
        MOD - [2006/12/01 17:55:42 | 000,009,216 | ---- | M] () -- C:\Program Files\Toshiba\TBS\NotifyTBS.dll
        MOD - [2006/11/09 16:13:00 | 000,061,440 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnF9.dll
        MOD - [2006/11/09 16:10:00 | 000,053,248 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\Hotkey\FnESC.dll
        MOD - [2006/11/02 13:35:33 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehProxy.dll
        MOD - [2006/11/02 13:34:50 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
        MOD - [2006/11/02 13:34:48 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
        MOD - [2006/11/02 13:34:33 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
        MOD - [2006/11/02 10:46:14 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
        MOD - [2006/11/02 10:46:13 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll
        MOD - [2006/11/02 10:46:13 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll
        MOD - [2006/11/02 10:46:13 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
        MOD - [2006/11/02 10:46:13 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
        MOD - [2006/11/02 10:46:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shfolder.dll
        MOD - [2006/11/02 10:46:13 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc.dll
        MOD - [2006/11/02 10:46:12 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll
        MOD - [2006/11/02 10:46:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qmgrprxy.dll
        MOD - [2006/11/02 10:46:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
        MOD - [2006/11/02 10:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
        MOD - [2006/11/02 10:46:12 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
        MOD - [2006/11/02 10:46:12 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensApi.dll
        MOD - [2006/11/02 10:46:07 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
        MOD - [2006/11/02 10:46:07 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
        MOD - [2006/11/02 10:46:05 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
        MOD - [2006/11/02 10:46:05 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
        MOD - [2006/11/02 10:46:04 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
        MOD - [2006/11/02 10:46:03 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
        MOD - [2006/11/02 10:46:02 | 000,737,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
        MOD - [2006/11/02 10:46:02 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx4.dll
        MOD - [2006/11/02 10:44:49 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vidcap.ax
        MOD - [2006/11/02 10:44:49 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msgsm32.acm
        MOD - [2006/11/02 10:44:49 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msadp32.acm
        MOD - [2006/11/02 10:44:49 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imaadp32.acm
        MOD - [2006/11/02 10:44:49 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msg711.acm
        MOD - [2006/11/02 10:42:17 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcint.dll
        MOD - [2006/11/02 09:48:55 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\INETRES.dll
        MOD - [2006/11/02 09:33:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll
        MOD - [2006/11/02 09:22:06 | 006,237,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
        MOD - [2006/10/10 10:44:16 | 000,009,728 | ---- | M] () -- C:\Program Files\Toshiba\TOSHIBA Assist\NotifyX.dll
        MOD - [2006/10/07 11:57:04 | 000,053,248 | ---- | M] () -- C:\Program Files\Toshiba\TOSHIBA Disc Creator\NotifyTDC.dll
        MOD - [2006/08/23 15:39:40 | 000,032,768 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm


        ========== Services (All) ==========

        SRV - File not found [Auto | Stopped] -- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
        SRV - [2014/02/21 23:21:44 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
        SRV - [2014/02/19 21:02:18 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
        SRV - [2014/02/15 22:29:32 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
        SRV - [2014/01/07 02:32:26 | 000,043,336 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
        SRV - [2013/12/21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
        SRV - [2013/12/16 19:34:22 | 000,247,968 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.EXE -- (BBUpdate)
        SRV - [2013/12/16 19:34:22 | 000,193,696 | ---- | M] (Microsoft Corporation.) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.EXE -- (BBSvc)
        SRV - [2013/10/11 03:08:02 | 000,444,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\IKEEXT.DLL -- (IKEEXT)
        SRV - [2013/09/11 22:33:40 | 000,139,856 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing)
        SRV - [2013/09/11 22:33:40 | 000,139,856 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpActivator)
        SRV - [2013/09/11 22:33:40 | 000,139,856 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetPipeActivator)
        SRV - [2013/09/11 22:33:40 | 000,139,856 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetMsmqActivator)
        SRV - [2013/09/11 21:21:54 | 000,770,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
        SRV - [2013/09/11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
        SRV - [2013/09/11 21:21:54 | 000,046,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
        SRV - [2013/08/27 02:28:35 | 000,798,208 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\FntCache.dll -- (FontCache)
        SRV - [2013/07/08 05:16:55 | 000,133,120 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\cryptsvc.dll -- (CryptSvc)
        SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
        SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
        SRV - [2012/09/09 23:30:22 | 000,821,648 | ---- | M] (Apple Inc.) [On_Demand | Running] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
        SRV - [2012/08/12 09:22:46 | 000,194,032 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
        SRV - [2012/07/26 04:20:40 | 000,073,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\WUDFSvc.dll -- (wudfsvc)
        SRV - [2012/06/16 03:24:19 | 000,138,272 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ccSvcHst.exe -- (NAV)
        SRV - [2012/06/02 23:19:17 | 001,933,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wuaueng.dll -- (wuauserv)
        SRV - [2012/03/08 17:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
        SRV - [2011/11/16 17:23:44 | 000,377,344 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\winhttp.dll -- (WinHttpAutoProxySvc)
        SRV - [2011/11/16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsass.exe -- (SamSs)
        SRV - [2011/11/16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lsass.exe -- (ProtectedStorage)
        SRV - [2011/11/16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lsass.exe -- (Netlogon)
        SRV - [2011/11/16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\lsass.exe -- (KeyIso)
        SRV - [2011/08/30 23:05:02 | 000,390,504 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
        SRV - [2011/07/20 05:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)
        SRV - [2011/03/28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
        SRV - [2011/03/02 16:44:27 | 000,086,528 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dnsrslvr.dll -- (Dnscache)
        SRV - [2010/11/04 19:55:12 | 000,601,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\schedsvc.dll -- (Schedule)
        SRV - [2010/09/22 15:33:04 | 000,051,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
        SRV - [2010/09/06 17:20:29 | 000,125,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\srvsvc.dll -- (LanmanServer)
        SRV - [2010/08/17 15:11:37 | 000,128,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\spoolsv.exe -- (Spooler)
        SRV - [2010/06/26 06:47:26 | 000,030,192 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager-051210-111108)
        SRV - [2010/02/18 14:30:03 | 000,200,704 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\iphlpsvc.dll -- (iphlpsvc)
        SRV - [2010/02/06 21:18:34 | 000,135,664 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdatem)
        SRV - [2010/02/06 21:18:34 | 000,135,664 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate)
        SRV - [2009/10/09 22:56:18 | 001,181,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WsmSvc.dll -- (WinRM)
        SRV - [2009/10/09 22:55:52 | 000,146,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wecsvc.dll -- (Wecsvc)
        SRV - [2009/10/01 02:01:54 | 000,081,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wpdbusenum.dll -- (WPDBusEnum)
        SRV - [2009/07/11 20:01:42 | 000,513,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wlansvc.dll -- (Wlansvc)
        SRV - [2009/07/10 12:47:42 | 000,247,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\shsvcs.dll -- (Themes)
        SRV - [2009/07/10 12:47:42 | 000,247,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\shsvcs.dll -- (ShellHWDetection)
        SRV - [2009/06/10 12:42:23 | 000,160,256 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wkssvc.dll -- (LanmanWorkstation)
        SRV - [2009/04/11 07:28:26 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wscsvc.dll -- (wscsvc)
        SRV - [2009/04/11 07:28:25 | 001,017,856 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wevtsvc.dll -- (Eventlog)
        SRV - [2009/04/11 07:28:25 | 000,453,120 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wiaservc.dll -- (stisvc)
        SRV - [2009/04/11 07:28:25 | 000,413,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wcncsvc.dll -- (wcncsvc)
        SRV - [2009/04/11 07:28:25 | 000,282,624 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\w32time.dll -- (W32Time)
        SRV - [2009/04/11 07:28:25 | 000,222,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpnpmgr.dll -- (PlugPlay)
        SRV - [2009/04/11 07:28:25 | 000,199,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\WebClnt.dll -- (WebClient)
        SRV - [2009/04/11 07:28:25 | 000,162,304 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wbem\WMIsvc.dll -- (Winmgmt)
        SRV - [2009/04/11 07:28:25 | 000,140,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wpcsvc.dll -- (WPCSvc)
        SRV - [2009/04/11 07:28:25 | 000,126,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wersvc.dll -- (WerSvc)
        SRV - [2009/04/11 07:28:25 | 000,029,184 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\uxsms.dll -- (UxSms)
        SRV - [2009/04/11 07:28:24 | 000,558,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\sysmain.dll -- (SysMain)
        SRV - [2009/04/11 07:28:24 | 000,550,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\rpcss.dll -- (RpcSs)
        SRV - [2009/04/11 07:28:24 | 000,550,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\rpcss.dll -- (DcomLaunch)
        SRV - [2009/04/11 07:28:24 | 000,449,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\termsrv.dll -- (TermService)
        SRV - [2009/04/11 07:28:24 | 000,311,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\swprv.dll -- (swprv)
        SRV - [2009/04/11 07:28:24 | 000,262,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\rasmans.dll -- (RasMan)
        SRV - [2009/04/11 07:28:24 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\tapisrv.dll -- (TapiSrv)
        SRV - [2009/04/11 07:28:24 | 000,107,008 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\regsvc.dll -- (RemoteRegistry)
        SRV - [2009/04/11 07:28:24 | 000,095,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\SCardSvr.dll -- (SCardSvr)
        SRV - [2009/04/11 07:28:24 | 000,060,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\SLUINotify.dll -- (SLUINotify)
        SRV - [2009/04/11 07:28:23 | 000,758,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\qmgr.dll -- (BITS)
        SRV - [2009/04/11 07:28:23 | 000,644,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\p2psvc.dll -- (PNRPsvc)
        SRV - [2009/04/11 07:28:23 | 000,644,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\p2psvc.dll -- (PNRPAutoReg)
        SRV - [2009/04/11 07:28:23 | 000,644,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\p2psvc.dll -- (p2psvc)
        SRV - [2009/04/11 07:28:23 | 000,644,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\p2psvc.dll -- (p2pimsvc)
        SRV - [2009/04/11 07:28:23 | 000,302,592 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\QAGENTRT.DLL -- (napagent)
        SRV - [2009/04/11 07:28:23 | 000,153,088 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\profsvc.dll -- (ProfSvc)
        SRV - [2009/04/11 07:28:20 | 000,407,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\MPSSVC.dll -- (MpsSvc)
        SRV - [2009/04/11 07:28:20 | 000,364,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\IPSECSVC.DLL -- (PolicyAgent)
        SRV - [2009/04/11 07:28:19 | 000,576,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\gpsvc.dll -- (gpsvc)
        SRV - [2009/04/11 07:28:19 | 000,564,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\emdmgmt.dll -- (EMDMgmt)
        SRV - [2009/04/11 07:28:19 | 000,268,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\es.dll -- (EventSystem)
        SRV - [2009/04/11 07:28:19 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\hidserv.dll -- (hidserv)
        SRV - [2009/04/11 07:28:18 | 000,334,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\BFE.DLL -- (BFE)
        SRV - [2009/04/11 07:28:18 | 000,315,392 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\audiosrv.dll -- (Audiosrv)
        SRV - [2009/04/11 07:28:18 | 000,315,392 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\audiosrv.dll -- (AudioEndpointBuilder)
        SRV - [2009/04/11 07:28:18 | 000,204,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcsvc.dll -- (Dhcp)
        SRV - [2009/04/11 07:28:18 | 000,175,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dot3svc.dll -- (dot3svc)
        SRV - [2009/04/11 07:28:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\certprop.dll -- (SCPolicySvc)
        SRV - [2009/04/11 07:28:18 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\certprop.dll -- (CertPropSvc)
        SRV - [2009/04/11 07:28:15 | 000,137,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbem\WmiApSrv.exe -- (wmiApSrv)
        SRV - [2009/04/11 07:28:10 | 001,055,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\VSSVC.exe -- (VSS)
        SRV - [2009/04/11 07:28:09 | 000,385,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\vds.exe -- (vds)
        SRV - [2009/04/11 07:28:07 | 000,039,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\servicing\TrustedInstaller.exe -- (TrustedInstaller)
        SRV - [2009/04/11 07:27:59 | 000,441,344 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SearchIndexer.exe -- (WSearch)
        SRV - [2009/04/11 07:27:49 | 003,408,896 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SLsvc.exe -- (slsvc)
        SRV - [2009/04/11 07:27:45 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\msiexec.exe -- (msiserver)
        SRV - [2009/04/11 07:27:31 | 002,092,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dfsr.exe -- (DFSR)
        SRV - [2009/03/30 05:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
        SRV - [2009/02/18 19:39:20 | 000,043,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
        SRV - [2009/02/18 19:38:42 | 000,879,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
        SRV - [2008/07/18 20:39:30 | 000,083,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
        SRV - [2008/04/24 18:35:46 | 000,073,728 | ---- | M] (Toshiba) [On_Demand | Running] -- C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe -- (SmartFaceVWatchSrv)
        SRV - [2008/04/24 09:21:56 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files\Toshiba TEMPRO\TempoSVC.exe -- (TempoMonitoringService)
        SRV - [2008/04/16 23:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
        SRV - [2008/04/07 20:57:42 | 000,667,648 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\Windows\System32\Ati2evxx.exe -- (Ati External Event Utility)
        SRV - [2008/01/21 03:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
        SRV - [2008/01/21 03:25:11 | 000,053,760 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\Mcx2Svc.dll -- (Mcx2Svc)
        SRV - [2008/01/21 03:25:09 | 000,292,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
        SRV - [2008/01/21 03:25:05 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\sstpsvc.dll -- (SstpSvc)
        SRV - [2008/01/21 03:25:01 | 000,057,344 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\eapsvc.dll -- (EapHost)
        SRV - [2008/01/21 03:25:00 | 000,188,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lltdsvc.dll -- (lltdsvc)
        SRV - [2008/01/21 03:24:55 | 000,084,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\SessEnv.dll -- (SessionEnv)
        SRV - [2008/01/21 03:24:54 | 000,045,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\mmcss.dll -- (THREADORDER)
        SRV - [2008/01/21 03:24:54 | 000,045,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\mmcss.dll -- (MMCSS)
        SRV - [2008/01/21 03:24:49 | 000,155,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ssdpsrv.dll -- (SSDPSRV)
        SRV - [2008/01/21 03:24:47 | 000,018,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\nsisvc.dll -- (nsi)
        SRV - [2008/01/21 03:24:44 | 000,047,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\Sens.dll -- (SENS)
        SRV - [2008/01/21 03:24:37 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\wdi.dll -- (WdiSystemHost)
        SRV - [2008/01/21 03:24:37 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wdi.dll -- (WdiServiceHost)
        SRV - [2008/01/21 03:24:36 | 000,081,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\browser.dll -- (Browser)
        SRV - [2008/01/21 03:24:35 | 000,134,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dps.dll -- (DPS)
        SRV - [2008/01/21 03:24:35 | 000,019,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\seclogon.dll -- (seclogon)
        SRV - [2008/01/21 03:24:30 | 000,068,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\KMSVC.DLL -- (hkmsvc)
        SRV - [2008/01/21 03:24:30 | 000,056,320 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\tbssvc.dll -- (TBS)
        SRV - [2008/01/21 03:24:23 | 000,237,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\netprofm.dll -- (netprofm)
        SRV - [2008/01/21 03:24:21 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\fdPHost.dll -- (fdPHost)
        SRV - [2008/01/21 03:24:20 | 000,068,608 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\mprdim.dll -- (RemoteAccess)
        SRV - [2008/01/21 03:24:19 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\rasauto.dll -- (RasAuto)
        SRV - [2008/01/21 03:24:18 | 000,344,576 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\msdtckrm.dll -- (KtmRm)
        SRV - [2008/01/21 03:24:18 | 000,105,984 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\msdtc.exe -- (MSDTC)
        SRV - [2008/01/21 03:24:18 | 000,074,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IPBusEnum.dll -- (IPBusEnum)
        SRV - [2008/01/21 03:24:17 | 000,033,280 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appinfo.dll -- (Appinfo)
        SRV - [2008/01/21 03:24:14 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\alg.exe -- (ALG)
        SRV - [2008/01/21 03:24:11 | 000,274,432 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netman.dll -- (Netman)
        SRV - [2008/01/21 03:24:09 | 000,288,256 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\ipnathlp.dll -- (SharedAccess)
        SRV - [2008/01/21 03:24:08 | 000,035,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\UI0Detect.exe -- (UI0Detect)
        SRV - [2008/01/21 03:24:05 | 000,075,264 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\trkwks.dll -- (TrkWks)
        SRV - [2008/01/21 03:24:04 | 000,259,072 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\upnphost.dll -- (upnphost)
        SRV - [2008/01/21 03:24:03 | 001,502,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pla.dll -- (pla)
        SRV - [2008/01/21 03:23:53 | 000,062,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wercplsupport.dll -- (wercplsupport)
        SRV - [2008/01/21 03:23:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\iscsiexe.dll -- (MSiSCSI)
        SRV - [2008/01/21 03:23:44 | 000,168,448 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\nlasvc.dll -- (NlaSvc)
        SRV - [2008/01/21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
        SRV - [2008/01/21 03:23:31 | 000,243,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\qwave.dll -- (QWAVE)
        SRV - [2008/01/21 03:23:29 | 000,037,888 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\pcasvc.dll -- (PcaSvc)
        SRV - [2008/01/21 03:23:27 | 000,104,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sdrsvc.dll -- (SDRSVC)
        SRV - [2008/01/17 16:27:34 | 000,431,456 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
        SRV - [2007/12/03 17:03:52 | 000,126,976 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service)
        SRV - [2007/11/21 16:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
        SRV - [2007/10/17 06:37:04 | 000,386,560 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\System32\drivers\XAudio.exe -- (XAudioService)
        SRV - [2007/02/12 15:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Running] -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)
        SRV - [2006/11/02 13:35:29 | 000,131,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehsched.exe -- (ehSched)
        SRV - [2006/11/02 13:35:29 | 000,013,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\ehome\ehstart.dll -- (ehstart)
        SRV - [2006/11/02 13:35:24 | 000,068,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\TabSvc.dll -- (TabletInputService)
        SRV - [2006/11/02 10:46:13 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WcsPlugInService.dll -- (WcsPlugInService)
        SRV - [2006/11/02 10:46:05 | 000,018,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lmhsvc.dll -- (lmhosts)
        SRV - [2006/11/02 10:46:04 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FDResPub.dll -- (FDResPub)
        SRV - [2006/11/02 10:46:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\aelupsvc.dll -- (AeLookupSvc)
        SRV - [2006/11/02 10:45:46 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\snmptrap.exe -- (SNMPTRAP)
        SRV - [2006/11/02 10:45:21 | 000,007,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Locator.exe -- (RpcLocator)
        SRV - [2006/11/02 10:45:02 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dllhost.exe -- (COMSysApp)
        SRV - [2006/10/26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
        SRV - [2006/08/23 15:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running]
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par NAT
        -  lun. 24 févr. 2014 21:21 #107873
        bonsoir voici le rapport

        C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
        SRV - [2005/04/03 23:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)


        ========== Driver Services (All) ==========

        DRV - File not found [Kernel | On_Demand | Stopped] -- -- (Tosrfcom)
        DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
        DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
        DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
        DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
        DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\igdkmd32.sys -- (igfx)
        DRV - [2014/02/19 21:02:38 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
        DRV - [2014/02/19 21:02:38 | 000,410,784 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
        DRV - [2014/02/19 21:02:38 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
        DRV - [2014/02/19 21:02:38 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
        DRV - [2014/02/19 21:02:37 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
        DRV - [2014/02/19 21:02:37 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
        DRV - [2014/02/19 21:02:37 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
        DRV - [2014/02/02 23:22:56 | 001,612,376 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20140222.007\NAVEX15.SYS -- (NAVEX15)
        DRV - [2014/02/02 23:22:56 | 000,093,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20140222.007\NAVENG.SYS -- (NAVENG)
        DRV - [2014/01/19 00:26:02 | 000,394,456 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20140221.002\IDSvix86.sys -- (IDSVix86)
        DRV - [2013/12/22 00:50:23 | 000,376,920 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
        DRV - [2013/12/18 01:32:11 | 001,098,968 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20140214.001\BHDrvx86.sys -- (BHDrvx86)
        DRV - [2013/11/22 20:56:52 | 000,108,120 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
        DRV - [2013/08/01 04:16:32 | 000,638,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dxgkrnl.sys -- (DXGKrnl)
        DRV - [2013/07/12 10:04:32 | 000,134,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbvideo.sys -- (usbvideo)
        DRV - [2013/07/05 05:53:33 | 000,905,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tcpip.sys -- (Tcpip6)
        DRV - [2013/07/05 05:53:33 | 000,905,664 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tcpip.sys -- (Tcpip)
        DRV - [2013/07/03 03:33:45 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbscan.sys -- (usbscan)
        DRV - [2013/06/29 03:07:15 | 000,197,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbhub.sys -- (usbhub)
        DRV - [2013/06/29 03:07:04 | 000,073,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbccgp.sys -- (usbccgp)
        DRV - [2013/06/27 00:01:59 | 000,527,064 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\Wdf01000.sys -- (Wdf01000)
        DRV - [2013/06/15 12:23:33 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tssecsrv.sys -- (tssecsrv)
        DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
        DRV - [2013/03/03 20:07:52 | 001,082,232 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\ntfs.sys -- (Ntfs)
        DRV - [2012/08/21 13:01:22 | 000,026,840 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
        DRV - [2012/08/21 12:47:42 | 000,224,640 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volsnap.sys -- (volsnap)
        DRV - [2012/07/26 03:33:43 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WUDFPf.sys -- (WudfPf)
        DRV - [2012/07/26 03:32:51 | 000,155,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WUDFRd.sys -- (WUDFRd)
        DRV - [2012/07/09 13:42:56 | 000,044,032 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbaapl.sys -- (USBAAPL)
        DRV - [2012/07/06 03:17:57 | 000,574,112 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\NAV\1309010.00E\srtsp.sys -- (SRTSP)
        DRV - [2012/07/06 03:17:57 | 000,032,928 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1309010.00E\srtspx.sys -- (SRTSPX)
        DRV - [2012/06/07 05:43:43 | 000,132,768 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1309010.00E\ccsetx86.sys -- (ccSet_NAV)
        DRV - [2012/06/04 16:26:04 | 000,440,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ksecdd.sys -- (KSecDD)
        DRV - [2012/05/22 02:37:12 | 000,924,320 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NAV\1309010.00E\symefa.sys -- (SymEFA)
        DRV - [2012/05/01 15:03:49 | 000,180,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpwd.sys -- (RDPWD)
        DRV - [2012/04/18 03:13:32 | 000,345,208 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1309010.00E\symtdiv.sys -- (SYMTDIv)
        DRV - [2012/04/18 02:42:14 | 000,149,624 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1309010.00E\ironx86.sys -- (SymIRON)
        DRV - [2012/03/27 18:14:53 | 000,141,944 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
        DRV - [2012/03/21 00:28:50 | 000,053,120 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\partmgr.sys -- (partmgr)
        DRV - [2012/03/08 17:32:24 | 000,039,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr)
        DRV - [2012/02/29 14:32:37 | 000,012,800 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\System32\drivers\fs_rec.sys -- (Fs_Rec)
        DRV - [2011/07/25 19:18:36 | 000,340,088 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NAV\1309010.00E\symds.sys -- (SymDS)
        DRV - [2011/07/06 16:31:47 | 000,214,016 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb10.sys -- (mrxsmb10)
        DRV - [2011/05/05 14:54:07 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbehci.sys -- (usbehci)
        DRV - [2011/05/05 14:54:07 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbuhci.sys -- (usbuhci)
        DRV - [2011/04/29 14:25:10 | 000,146,432 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srv2.sys -- (srv2)
        DRV - [2011/04/29 14:25:09 | 000,102,400 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srvnet.sys -- (srvnet)
        DRV - [2011/04/29 14:24:42 | 000,079,872 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb20.sys -- (mrxsmb20)
        DRV - [2011/04/29 14:24:40 | 000,106,496 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb.sys -- (mrxsmb)
        DRV - [2011/04/21 14:58:27 | 000,273,408 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\afd.sys -- (AFD)
        DRV - [2011/04/14 15:59:03 | 000,075,264 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\dfsc.sys -- (DfsC)
        DRV - [2011/02/22 14:23:55 | 000,069,632 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\bowser.sys -- (bowser)
        DRV - [2011/02/18 15:03:32 | 000,305,152 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srv.sys -- (srv)
        DRV - [2010/02/20 21:53:34 | 000,411,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\http.sys -- (HTTP)
        DRV - [2010/02/18 12:28:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tunnel.sys -- (tunnel)
        DRV - [2009/12/08 18:26:18 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tcpipreg.sys -- (tcpipreg)
        DRV - [2009/10/01 02:01:54 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WpdUsb.sys -- (WpdUsb)
        DRV - [2009/04/11 07:33:03 | 000,292,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgrx.sys -- (volmgrx)
        DRV - [2009/04/11 07:32:55 | 000,149,480 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pci.sys -- (pci)
        DRV - [2009/04/11 07:32:52 | 000,053,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\termdd.sys -- (TermDD)
        DRV - [2009/04/11 07:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ndis.sys -- (NDIS)
        DRV - [2009/04/11 07:32:46 | 000,265,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\acpi.sys -- (ACPI)
        DRV - [2009/04/11 07:32:46 | 000,245,736 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\clfs.sys -- (CLFS)
        DRV - [2009/04/11 07:32:46 | 000,190,424 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\fltMgr.sys -- (FltMgr)
        DRV - [2009/04/11 07:32:46 | 000,180,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\msiscsi.sys -- (iScsiPrt)
        DRV - [2009/04/11 07:32:46 | 000,161,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\msrpc.sys -- (MsRPC)
        DRV - [2009/04/11 07:32:43 | 000,141,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ecache.sys -- (Ecache)
        DRV - [2009/04/11 07:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\disk.sys -- (disk)
        DRV - [2009/04/11 07:32:31 | 000,048,104 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\mup.sys -- (Mup)
        DRV - [2009/04/11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\atapi.sys -- (atapi)
        DRV - [2009/04/11 05:46:40 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rassstp.sys -- (RasSstp)
        DRV - [2009/04/11 05:46:32 | 000,121,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndiswan.sys -- (NdisWan)
        DRV - [2009/04/11 05:46:30 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\raspppoe.sys -- (RasPppoe)
        DRV - [2009/04/11 05:45:56 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tdx.sys -- (tdx)
        DRV - [2009/04/11 05:45:51 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\pacer.sys -- (PSched)
        DRV - [2009/04/11 05:45:37 | 000,185,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\netbt.sys -- (netbt)
        DRV - [2009/04/11 05:45:22 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\smb.sys -- (Smb)
        DRV - [2009/04/11 05:43:28 | 000,148,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nwifi.sys -- (NativeWifiP)
        DRV - [2009/04/11 05:43:04 | 000,062,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ohci1394.sys -- (ohci1394)
        DRV - [2009/04/11 05:43:02 | 000,236,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HdAudio.sys -- (HdAudAddService)
        DRV - [2009/04/11 05:42:55 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\USBSTOR.SYS -- (USBSTOR)
        DRV - [2009/04/11 05:42:42 | 000,561,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hdaudbus.sys -- (HDAudBus)
        DRV - [2009/04/11 05:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\cdrom.sys -- (cdrom)
        DRV - [2009/04/11 05:39:13 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffp_sd.sys -- (sffp_sd)
        DRV - [2009/04/11 05:19:14 | 000,089,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\sdbus.sys -- (sdbus)
        DRV - [2009/04/11 05:14:40 | 000,114,688 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxdav.sys -- (MRxDAV)
        DRV - [2009/04/11 05:14:29 | 000,225,280 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\rdbss.sys -- (rdbss)
        DRV - [2009/04/11 05:14:01 | 000,035,328 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\npfs.sys -- (Npfs)
        DRV - [2009/04/11 05:13:59 | 000,226,816 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\udfs.sys -- (udfs)
        DRV - [2009/04/11 05:13:53 | 000,136,704 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\exfat.sys -- (exfat)
        DRV - [2009/04/11 05:13:52 | 000,142,848 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\fastfat.sys -- (fastfat)
        DRV - [2008/11/20 20:19:06 | 000,043,872 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pxhelp20.sys -- (PxHelp20)
        DRV - [2008/07/18 18:52:16 | 000,279,376 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32)
        DRV - [2008/04/28 05:29:26 | 003,658,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32)
        DRV - [2008/04/15 17:53:44 | 000,312,344 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaStor.sys -- (iaStor)
        DRV - [2008/04/15 09:13:14 | 000,051,160 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2media.sys -- (O2MDRDR)
        DRV - [2008/04/08 01:24:20 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
        DRV - [2008/04/04 10:57:00 | 000,310,272 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\yk60x86.sys -- (yukonwlh)
        DRV - [2008/03/25 14:41:30 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DPV.sys -- (HSF_DPV)
        DRV - [2008/03/25 14:39:20 | 000,207,872 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWAZL.sys -- (HSXHWAZL)
        DRV - [2008/03/25 14:38:32 | 000,661,504 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_CNXT.sys -- (winachsf)
        DRV - [2008/03/12 07:38:27 | 000,028,728 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\msahci.sys -- (msahci)
        DRV - [2008/03/04 09:32:00 | 000,188,416 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
        DRV - [2008/01/21 03:24:57 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\modem.sys -- (Modem)
        DRV - [2008/01/21 03:24:55 | 000,076,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rasl2tp.sys -- (Rasl2tp)
        DRV - [2008/01/21 03:24:55 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\raspptp.sys -- (PptpMiniport)
        DRV - [2008/01/21 03:24:55 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndisuio.sys -- (Ndisuio)
        DRV - [2008/01/21 03:24:51 | 000,006,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mstee.sys -- (MSTEE)
        DRV - [2008/01/21 03:24:51 | 000,005,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mspclock.sys -- (MSPCLOCK)
        DRV - [2008/01/21 03:24:51 | 000,005,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mspqm.sys -- (MSPQM)
        DRV - [2008/01/21 03:24:50 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vga.sys -- (VgaSave)
        DRV - [2008/01/21 03:24:50 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mskssrv.sys -- (MSKSSRV)
        DRV - [2008/01/21 03:24:50 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPENCDD.sys -- (RDPENCDD)
        DRV - [2008/01/21 03:24:47 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mpsdrv.sys -- (mpsdrv)
        DRV - [2008/01/21 03:24:47 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\nsiproxy.sys -- (nsiproxy)
        DRV - [2008/01/21 03:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ws2ifsl.sys -- (ws2ifsl)
        DRV - [2008/01/21 03:24:45 | 000,047,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ipfltdrv.sys -- (IpFilterDriver)
        DRV - [2008/01/21 03:24:37 | 000,084,480 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\System32\drivers\luafv.sys -- (luafv)
        DRV - [2008/01/21 03:24:37 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rspndr.sys -- (rspndr)
        DRV - [2008/01/21 03:24:37 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lltdio.sys -- (lltdio)
        DRV - [2008/01/21 03:24:25 | 000,100,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ipnat.sys -- (IPNAT)
        DRV - [2008/01/21 03:24:25 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\wanarp.sys -- (Wanarpv6)
        DRV - [2008/01/21 03:24:25 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wanarp.sys -- (Wanarp)
        DRV - [2008/01/21 03:24:25 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndproxy.sys -- (NDProxy)
        DRV - [2008/01/21 03:24:25 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndistapi.sys -- (NdisTapi)
        DRV - [2008/01/21 03:24:25 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TUNMP.SYS -- (tunmp)
        DRV - [2008/01/21 03:24:21 | 000,027,648 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\filetrace.sys -- (Filetrace)
        DRV - [2008/01/21 03:24:20 | 000,035,840 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\netbios.sys -- (NetBIOS)
        DRV - [2008/01/21 03:24:19 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\rasacd.sys -- (RasAcd)
        DRV - [2008/01/21 03:24:11 | 000,021,048 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\spldr.sys -- (spldr)
        DRV - [2008/01/21 03:24:08 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tdtcp.sys -- (TDTCP)
        DRV - [2008/01/21 03:24:08 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tdpipe.sys -- (TDPIPE)
        DRV - [2008/01/21 03:24:06 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPCDD.sys -- (RDPCDD)
        DRV - [2008/01/21 03:24:04 | 000,058,936 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\fileinfo.sys -- (FileInfo)
        DRV - [2008/01/21 03:24:04 | 000,017,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\asyncmac.sys -- (AsyncMac)
        DRV - [2008/01/21 03:23:54 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\irenum.sys -- (IRENUM)
        DRV - [2008/01/21 03:23:51 | 000,070,144 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\Windows\System32\drivers\cdfs.sys -- (cdfs)
        DRV - [2008/01/21 03:23:51 | 000,022,528 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\msfs.sys -- (Msfs)
        DRV - [2008/01/21 03:23:50 | 000,004,608 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\null.sys -- (Null)
        DRV - [2008/01/21 03:23:44 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\beep.sys -- (Beep)
        DRV - [2008/01/21 03:23:43 | 000,057,400 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\mountmgr.sys -- (MountMgr)
        DRV - [2008/01/21 03:23:31 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\qwavedrv.sys -- (QWAVEdrv)
        DRV - [2008/01/21 03:23:27 | 000,386,616 | ---- | M] (LSI Corporation, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\MegaSR.sys -- (MegaSR)
        DRV - [2008/01/21 03:23:27 | 000,149,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adpu320.sys -- (adpu320)
        DRV - [2008/01/21 03:23:27 | 000,031,288 | ---- | M] (LSI Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\megasas.sys -- (megasas)
        DRV - [2008/01/21 03:23:26 | 000,101,432 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adpu160m.sys -- (adpu160m)
        DRV - [2008/01/21 03:23:26 | 000,074,808 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sisraid4.sys -- (SiSRaid4)
        DRV - [2008/01/21 03:23:26 | 000,041,016 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sisraid2.sys -- (SiSRaid2)
        DRV - [2008/01/21 03:23:26 | 000,040,504 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\HpCISSs.sys -- (HpCISSs)
        DRV - [2008/01/21 03:23:26 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\circlass.sys -- (circlass)
        DRV - [2008/01/21 03:23:26 | 000,014,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CmBatt.sys -- (CmBatt)
        DRV - [2008/01/21 03:23:25 | 000,300,600 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adpahci.sys -- (adpahci)
        DRV - [2008/01/21 03:23:25 | 000,089,656 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\lsi_sas.sys -- (LSI_SAS)
        DRV - [2008/01/21 03:23:24 | 001,122,360 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ql2300.sys -- (ql2300)
        DRV - [2008/01/21 03:23:24 | 000,118,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60)
        DRV - [2008/01/21 03:23:24 | 000,079,928 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\arcsas.sys -- (arcsas)
        DRV - [2008/01/21 03:23:24 | 000,022,072 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\wd.sys -- (Wd)
        DRV - [2008/01/21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iaStorV.sys -- (iaStorV)
        DRV - [2008/01/21 03:23:23 | 000,130,616 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\vsmraid.sys -- (vsmraid)
        DRV - [2008/01/21 03:23:23 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ulsata2.sys -- (ulsata2)
        DRV - [2008/01/21 03:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\lsi_scsi.sys -- (LSI_SCSI)
        DRV - [2008/01/21 03:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\lsi_fc.sys -- (LSI_FC)
        DRV - [2008/01/21 03:23:23 | 000,079,416 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\arc.sys -- (arc)
        DRV - [2008/01/21 03:23:23 | 000,035,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\kbdclass.sys -- (kbdclass)
        DRV - [2008/01/21 03:23:23 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\kbdhid.sys -- (kbdhid)
        DRV - [2008/01/21 03:23:23 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffdisk.sys -- (sffdisk)
        DRV - [2008/01/21 03:23:23 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffp_mmc.sys -- (sffp_mmc)
        DRV - [2008/01/21 03:23:22 | 000,342,584 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\elxstor.sys -- (elxstor)
        DRV - [2008/01/21 03:23:22 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\IPMIDrv.sys -- (IPMIDRV)
        DRV - [2008/01/21 03:23:22 | 000,061,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\GAGP30KX.SYS -- (gagp30kx)
        DRV - [2008/01/21 03:23:22 | 000,059,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UAGP35.SYS -- (uagp35)
        DRV - [2008/01/21 03:23:22 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\monitor.sys -- (monitor)
        DRV - [2008/01/21 03:23:22 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\umbus.sys -- (umbus)
        DRV - [2008/01/21 03:23:22 | 000,024,632 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\crcdisk.sys -- (crcdisk)
        DRV - [2008/01/21 03:23:22 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbprint.sys -- (usbprint)
        DRV - [2008/01/21 03:23:21 | 000,422,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adp94xx.sys -- (adp94xx)
        DRV - [2008/01/21 03:23:21 | 000,102,968 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvraid.sys -- (nvraid)
        DRV - [2008/01/21 03:23:21 | 000,094,776 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\msdsm.sys -- (msdsm)
        DRV - [2008/01/21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvstor.sys -- (nvstor)
        DRV - [2008/01/21 03:23:21 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\drmkaud.sys -- (drmkaud)
        DRV - [2008/01/21 03:23:20 | 000,238,648 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\uliahci.sys -- (uliahci)
        DRV - [2008/01/21 03:23:20 | 000,105,016 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\mpio.sys -- (mpio)
        DRV - [2008/01/21 03:23:20 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\i8042prt.sys -- (i8042prt)
        DRV - [2008/01/21 03:23:20 | 000,034,360 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\mouclass.sys -- (mouclass)
        DRV - [2008/01/21 03:23:20 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\fdc.sys -- (fdc)
        DRV - [2008/01/21 03:23:20 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\flpydisk.sys -- (flpydisk)
        DRV - [2008/01/21 03:23:20 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sermouse.sys -- (sermouse)
        DRV - [2008/01/21 03:23:20 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\mouhid.sys -- (mouhid)
        DRV - [2008/01/21 03:23:02 | 000,030,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\i2omp.sys -- (i2omp)
        DRV - [2008/01/21 03:23:02 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vgapnp.sys -- (vga)
        DRV - [2008/01/21 03:23:01 | 000,248,832 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\rdpdr.sys -- (rdpdr)
        DRV - [2008/01/21 03:23:01 | 000,109,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NV_AGP.SYS -- (nv_agp)
        DRV - [2008/01/21 03:23:01 | 000,060,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ULIAGPKX.SYS -- (uliagpkx)
        DRV - [2008/01/21 03:23:01 | 000,057,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AMDAGP.SYS -- (amdagp)
        DRV - [2008/01/21 03:23:01 | 000,056,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VIAAGP.SYS -- (viaagp)
        DRV - [2008/01/21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGP440.sys -- (agp440)
        DRV - [2008/01/21 03:23:01 | 000,055,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SISAGP.SYS -- (sisagp)
        DRV - [2008/01/21 03:23:01 | 000,052,792 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgr.sys -- (volmgr)
        DRV - [2008/01/21 03:23:01 | 000,049,720 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\isapnp.sys -- (isapnp)
        DRV - [2008/01/21 03:23:01 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
        DRV - [2008/01/21 03:23:01 | 000,031,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mssmbios.sys -- (mssmbios)
        DRV - [2008/01/21 03:23:01 | 000,016,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\msisadrv.sys -- (msisadrv)
        DRV - [2008/01/21 03:23:01 | 000,015,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\swenum.sys -- (swenum)
        DRV - [2008/01/21 03:23:00 | 000,044,032 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\amdk8.sys -- (AmdK8)
        DRV - [2008/01/21 03:23:00 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\viac7.sys -- (ViaC7)
        DRV - [2008/01/21 03:23:00 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\intelppm.sys -- (intelppm)
        DRV - [2008/01/21 03:23:00 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\amdk7.sys -- (AmdK7)
        DRV - [2008/01/21 03:23:00 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\processr.sys -- (Processor)
        DRV - [2008/01/21 03:23:00 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\crusoe.sys -- (Crusoe)
        DRV - [2008/01/21 03:23:00 | 000,020,792 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\compbatt.sys -- (Compbatt)
        DRV - [2008/01/21 03:23:00 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\viaide.sys -- (viaide)
        DRV - [2008/01/21 03:23:00 | 000,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\cmdide.sys -- (cmdide)
        DRV - [2008/01/21 03:23:00 | 000,017,976 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\intelide.sys -- (intelide)
        DRV - [2008/01/21 03:23:00 | 000,017,976 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\amdide.sys -- (amdide)
        DRV - [2008/01/21 03:23:00 | 000,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\aliide.sys -- (aliide)
        DRV - [2008/01/21 03:23:00 | 000,016,440 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\pciide.sys -- (pciide)
        DRV - [2008/01/21 03:23:00 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wmiacpi.sys -- (WmiAcpi)
        DRV - [2008/01/21 03:23:00 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\errdev.sys -- (ErrDev)
        DRV - [2007/12/17 11:45:20 | 000,018,432 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
        DRV - [2007/11/29 17:58:56 | 000,196,144 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SynTP.sys -- (SynTP)
        DRV - [2007/11/09 14:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
        DRV - [2007/10/17 06:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
        DRV - [2007/04/09 16:13:00 | 000,008,192 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\QIOMem.sys -- (QIOMem)
        DRV - [2006/11/02 10:51:12 | 000,167,528 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\pcmcia.sys -- (pcmcia)
        DRV - [2006/11/02 10:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ql40xx.sys -- (ql40xx)
        DRV - [2006/11/02 10:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ulsata.sys -- (UlSata)
        DRV - [2006/11/02 10:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nfrd960.sys -- (nfrd960)
        DRV - [2006/11/02 10:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iirsp.sys -- (iirsp)
        DRV - [2006/11/02 10:50:16 | 000,076,392 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sbp2port.sys -- (sbp2port)
        DRV - [2006/11/02 10:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\djsvs.sys -- (aic78xx)
        DRV - [2006/11/02 10:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iteraid.sys -- (iteraid)
        DRV - [2006/11/02 10:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iteatapi.sys -- (iteatapi)
        DRV - [2006/11/02 10:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\symc8xx.sys -- (Symc8xx)
        DRV - [2006/11/02 10:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sym_u3.sys -- (Sym_u3)
        DRV - [2006/11/02 10:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\Mraid35x.sys -- (Mraid35x)
        DRV - [2006/11/02 10:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sym_hi.sys -- (Sym_hi)
        DRV - [2006/11/02 10:04:35 | 000,878,080 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\PEAuth.sys -- (PEAUTH)
        DRV - [2006/11/02 09:55:23 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\bthmodem.sys -- (BTHMODEM)
        DRV - [2006/11/02 09:55:22 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\hidbth.sys -- (HidBth)
        DRV - [2006/11/02 09:55:09 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\usbcir.sys -- (usbcir)
        DRV - [2006/11/02 09:55:05 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\usbohci.sys -- (usbohci)
        DRV - [2006/11/02 09:55:01 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\hidir.sys -- (HidIr)
        DRV - [2006/11/02 09:55:01 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\hidusb.sys -- (HidUsb)
        DRV - [2006/11/02 09:52:52 | 000,020,608 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\wacompen.sys -- (WacomPen)
        DRV - [2006/11/02 09:51:40 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sfloppy.sys -- (sfloppy)
        DRV - [2006/11/02 09:51:30 | 000,083,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
        DRV - [2006/11/02 09:51:30 | 000,079,360 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\parport.sys -- (Parport)
        DRV - [2006/11/02 09:51:25 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serenum.sys -- (Serenum)
        DRV - [2006/11/02 09:51:23 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\parvdm.sys -- (Parvdm)
        DRV - [2006/11/02 09:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\BrSerId.sys -- (Brserid)
        DRV - [2006/11/02 09:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrUsbSer.sys -- (BrUsbSer)
        DRV - [2006/11/02 09:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrFiltUp.sys -- (BrFiltUp)
        DRV - [2006/11/02 09:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrFiltLo.sys -- (BrFiltLo)
        DRV - [2006/11/02 09:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\BrSerWdm.sys -- (BrSerWdm)
        DRV - [2006/11/02 09:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\BrUsbMdm.sys -- (BrUsbMdm)
        DRV - [2006/11/02 08:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ntrigdigi.sys -- (ntrigdigi)
        DRV - [2006/11/02 08:10:22 | 000,002,864 | ---- | M] (Microsoft Corporation) [Adapter | On_Demand | Unknown] -- C:\Windows\System32\WINSOCK.DLL -- (Winsock)
        DRV - [2006/11/02 07:37:21 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv)
        DRV - [2006/10/23 15:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
        DRV - [2006/10/18 10:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
        DRV - [2006/06/18 05:26:58 | 000,012,672 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\mdmxsdk.sys -- (mdmxsdk)


        ========== Standard Registry (All) ==========


        ========== Internet Explorer ==========

        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = aboutNoAdd-ons
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = aboutSecurityRisk
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm
        IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
        IE - HKLM\..\SearchScopes,DefaultScope =
        IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}FORM=IE8SRC
        IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7

        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/
        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
        IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
        IE - HKCU\..\URLSearchHook: {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} - No CLSID value found
        IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
        IE - HKCU\..\SearchScopes,DefaultScope = {7208284E-2149-4EAA-BDB7-BD68482F3F52}
        IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
        IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7
        IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
        IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:56847

        ========== FireFox ==========

        FF - prefs.js..browser.search.defaultengine: "Google"
        FF - prefs.js..browser.search.order.1: "Google"
        FF - prefs.js..browser.search.selectedEngine: "Google"
        FF - prefs.js..browser.startup.homepage: "www.google.com"
        FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:9.0.2013.75
        FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
        FF - prefs.js..extensions.enabledItems: {f5373ed7-7599-f81d-7845-59c6806ef0d0}:1.0
        FF - prefs.js..extensions.enabledItems: {4be68a18-deba-49e0-9e09-ee7796f3b62a}:2.1.1.1
        FF - prefs.js..extensions.enabledItems: {33e0daa6-3af3-d8b5-6752-10e949c61516}:1.1
        FF - prefs.js..extensions.enabledItems: vinceturk@gmail.com:2.7.0.788
        FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1
        FF - prefs.js..extensions.enabledItems: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0
        FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
        FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.9
        FF - prefs.js..keyword.URL: "https://www.google.com/search"
        FF - prefs.js..network.proxy.no_proxies_on: "*.local"
        FF - user.js - File not found

        FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
        FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
        FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
        FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
        FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
        FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
        FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
        FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
        FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
        FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
        FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
        FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
        FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
        FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
        FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
        FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

        FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/06/25 18:22:56 | 000,000,000 | ---D | M]
        FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\IPSFF [2013/10/09 20:38:35 | 000,000,000 | ---D | M]
        FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/02/19 21:02:41 | 000,000,000 | ---D | M]
        FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014/02/15 22:29:00 | 000,000,000 | ---D | M]
        FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014/02/17 19:48:51 | 000,000,000 | ---D | M]
        FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013/09/21 19:21:21 | 000,000,000 | ---D | M]
        FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
        FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014/02/15 22:29:00 | 000,000,000 | ---D | M]
        FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014/02/17 19:48:51 | 000,000,000 | ---D | M]
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par nat
        -  lun. 24 févr. 2014 21:23 #107874
        bonsoir voici le rapport

        2009/07/04 08:46:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\nat\AppData\Roaming\Mozilla\Extensions
        [2009/07/04 08:46:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\nat\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
        [2014/02/23 21:43:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\extensions
        [2012/04/10 17:06:47 | 000,020,591 | ---- | M] () (No name found) -- C:\Users\nat\AppData\Roaming\Mozilla\Firefox\Profiles\xd7vgin1.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
        [2014/02/15 22:28:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
        [2014/02/15 22:29:36 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
        [2014/02/19 21:02:41 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
        [2010/06/26 06:47:26 | 000,119,808 | ---- | M] (Google) -- C:\Program Files\mozilla firefox\components\GoogleDesktopMozilla.dll
        [2011/02/02 20:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
        [2006/10/26 20:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL
        [2013/12/21 07:04:22 | 000,225,656 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
        [2013/09/21 19:21:16 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin.dll
        [2013/09/21 19:21:17 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll
        [2013/09/21 19:21:18 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll
        [2013/09/21 19:21:18 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll
        [2013/09/21 19:21:21 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll

        O1 HOSTS File: ([2010/12/23 20:08:04 | 000,000,780 | RHS- | M]) - C:\Windows\System32\drivers\etc\hosts
        O1 - Hosts: 127.0.0.1 localhost
        O1 - Hosts: ::1 localhost
        O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\19.9.1.14\ips\ipsbho.dll (Symantec Corporation)
        O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
        O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
        O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
        O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
        O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
        O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
        O2 - BHO: (no name) - {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} - No CLSID value found.
        O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
        O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
        O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
        O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
        O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
        O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
        O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
        O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
        O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
        O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
        O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
        O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
        O4 - HKLM..\Run: [cfFncEnabler.exe] cfFncEnabler.exe File not found
        O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
        O4 - HKLM..\Run: [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe ( )
        O4 - HKLM..\Run: [HDMICtrlMan] C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.)
        O4 - HKLM..\Run: [HSON] C:\Program Files\Toshiba\TBS\HSON.exe (TOSHIBA Corporation)
        O4 - HKLM..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START File not found
        O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
        O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
        O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
        O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
        O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
        O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
        O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
        O4 - HKLM..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
        O4 - HKLM..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe (Toshiba)
        O4 - HKLM..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe (Toshiba Europe GmbH)
        O4 - HKLM..\Run: [TPwrMain] C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
        O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
        O4 - HKCU..\Run: [ehTray.exe] C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
        O4 - HKCU..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
        O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
        O4 - HKCU..\Run: [TOSCDSPD] C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
        O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
        O4 - HKLM..\RunOnce: [20131224] C:\Program Files\AVAST Software\Avast\setup\emupdate\11295a32-6f84-4351-a888-8d9f705efdfe.exe (AVAST Software)
        O4 - Startup: C:\Users\nat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = File not found
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: BindDirectlyToPropertySetStorage = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
        O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
        O8 - Extra context menu item: Add to Google Photos Screensaver - C:\Windows\System32\GPhotos.scr (Google Inc.)
        O8 - Extra context menu item: Exporter vers Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
        O9 - Extra Button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
        O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
        O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
        O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
        O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
        O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
        O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
        O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
        O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
        O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
        O13 - gopher Prefix: missing
        O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
        O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
        O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
        O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_06)
        O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
        O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
        O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FFF0E9AB-F78B-4392-9595-BD163D99EF96}: DhcpNameServer = 192.168.1.254
        O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
        O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
        O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
        O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
        O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
        O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
        O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
        O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
        O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
        O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
        O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
        O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
        O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
        O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
        O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
        O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
        O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
        O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
        O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
        O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
        O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
        O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
        O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
        O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
        O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
        O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
        O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
        O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
        O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
        O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\Windows\System32\shell32.dll (Microsoft Corporation)
        O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\Windows\System32\sysdm.cpl (Microsoft Corporation)
        O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found
        O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll (Microsoft Corporation)
        O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\Windows\System32\browseui.dll (Microsoft Corporation)
        O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
        O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
        O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
        O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
        O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
        O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
        O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
        O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
        O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
        O31 - SafeBoot: AlternateShell - cmd.exe
        O32 - HKLM CDRom: AutoRun - 1
        O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
        O32 - AutoRun File - [2014/02/23 21:06:14 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ FAT32 ]
        O32 - AutoRun File - [2014/02/23 21:06:13 | 000,000,000 | RHSD | M] - E:\Autorun.inf -- [ NTFS ]
        O34 - HKLM BootExecute: (autocheck autochk *)
        O35 - HKLM\..comfile [open] -- "%1" %*
        O35 - HKLM\..exefile [open] -- "%1" %*
        O37 - HKLM\...com [@ = comfile] -- "%1" %*
        O37 - HKLM\...exe [@ = exefile] -- "%1" %*
        O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
        O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

        ========== Files/Folders - Created Within 30 Days ==========

        [2014/02/24 20:49:16 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{98B8D0A5-E01E-435B-9202-A586F078D800}
        [2014/02/24 01:39:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
        [2014/02/24 01:39:27 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
        [2014/02/24 01:39:27 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
        [2014/02/23 22:44:41 | 000,000,000 | ---D | C] -- C:\Shortcut_Module
        [2014/02/23 22:16:40 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{70F370BB-F0AE-4263-8336-72D10B257E2E}
        [2014/02/23 21:39:22 | 000,000,000 | ---D | C] -- C:\AdwCleaner
        [2014/02/23 20:13:51 | 000,000,000 | ---D | C] -- C:\UsbFix
        [2014/02/22 22:16:09 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{D97FF7AC-BE12-493C-864E-7C13C33C33EC}
        [2014/02/21 23:26:22 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{4CBFABA4-1099-4723-9DC3-A30E57B3C4B6}
        [2014/02/21 07:50:49 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{115EBFE1-A246-42CC-AD5E-0C5285170E10}
        [2014/02/20 19:35:59 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{215D095A-DE3B-4E5E-A326-FC4D8122E1B1}
        [2014/02/19 21:03:57 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Roaming\AVAST Software
        [2014/02/19 21:03:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
        [2014/02/19 21:02:51 | 000,775,952 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
        [2014/02/19 21:02:51 | 000,410,784 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
        [2014/02/19 21:02:51 | 000,057,672 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
        [2014/02/19 21:02:50 | 000,067,824 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
        [2014/02/19 21:02:50 | 000,054,832 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
        [2014/02/19 21:02:45 | 000,270,240 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
        [2014/02/19 21:02:33 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
        [2014/02/19 21:01:38 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
        [2014/02/19 20:52:14 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{DFBA3CA5-F425-42ED-8791-C70A3D0AAC36}
        [2014/02/18 23:54:32 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Roaming\Malwarebytes
        [2014/02/18 23:54:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
        [2014/02/18 22:13:22 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{C94475B2-FF73-4D66-844E-BE0CB563070B}
        [2014/02/17 19:16:07 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{2E1B6CAD-B884-483A-98AD-5819E09DB7A5}
        [2014/02/16 09:53:51 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{8E84AE76-124C-4F13-934C-73A8378639EB}
        [2014/02/15 22:28:56 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
        [2014/02/15 21:41:08 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{4349B4C9-089B-4EB7-8735-E1D604AEB1C7}
        [2014/02/14 19:34:44 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{A3B12248-928B-4560-A047-6C77D02132F5}
        [2014/02/13 22:50:01 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{5442199B-0534-42B2-9A6A-E4B50676CBE4}
        [2014/02/12 13:11:09 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
        [2014/02/12 13:11:07 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
        [2014/02/12 13:11:07 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
        [2014/02/12 13:11:06 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
        [2014/02/12 13:11:06 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
        [2014/02/12 13:11:04 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
        [2014/02/12 13:11:04 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
        [2014/02/12 13:10:48 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
        [2014/02/12 13:06:22 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{656610C0-7491-4FAD-8943-371E4291EF23}
        [2014/02/11 23:43:16 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Roaming\GlarySoft
        [2014/02/11 21:51:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
        [2014/02/11 21:46:34 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
        [2014/02/11 19:53:51 | 000,000,000 | ---D | C] -- C:\Users\nat\SyncFolder
        [2014/02/11 19:32:44 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{FEC11007-8503-4182-B5E2-DAC2B204D1F6}
        [2014/02/10 19:42:25 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{3B599B1F-C2A0-439E-AD33-2FCE48D50509}
        [2014/02/09 13:55:10 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{26F3092B-A105-47C4-A41A-5559879B3DF8}
        [2014/02/07 21:05:17 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{AD81EA3E-A653-4711-A9DE-1E847484D9E1}
        [2014/02/06 19:52:43 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{C56053A4-4A82-4C2F-88C9-15609F1049B1}
        [2014/02/05 20:57:05 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{0A9A08D6-154F-4967-93DD-4607F7878EE0}
        [2014/02/05 20:43:58 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{381699F4-E1EB-4098-BEEC-96873BB97003}
        [2014/02/05 20:26:35 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{8BBF5660-9A55-41A6-8457-A8F344B7DE3C}
        [2014/02/05 15:53:19 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{0A8FA163-447C-4CA4-99DD-1952469515FE}
        [2014/02/05 15:41:28 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{C0CD9BBE-AB34-4BF7-A80C-B0A1F1AFAE7A}
        [2014/02/05 13:11:36 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{E5CD79CF-B7C7-4D09-8370-B96695D19430}
        [2014/02/05 00:04:56 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{12BCE425-0862-466D-9FDB-3B6BC9E81A9D}
        [2014/02/04 12:04:42 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{2FA001ED-0CA2-486D-A222-49523294B58C}
        [2014/02/03 19:52:11 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{861844F3-3DBD-46E7-BA74-1B42578384F9}
        [2014/02/03 00:17:05 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{94E9D032-6FEC-4D41-ADBD-8E885FFF3847}
        [2014/02/02 12:16:52 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{DDCB4EE2-0C10-4C15-A811-4FD45B3B4287}
        [2014/02/02 03:55:20 | 000,000,000 | ---D | C] -- C:\ProgramData\PePT2PNuG
        [2014/02/02 03:55:19 | 000,000,000 | ---D | C] -- C:\ProgramData\amhlpkjkaknkniolmcacjldfobdpdbia
        [2014/02/01 23:13:10 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{DC0F49DB-65FA-4A98-BADC-5F69CDCAD4A2}
        [2014/01/31 20:55:10 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{73EDE529-B626-414A-9D61-8117DB8CE8B0}
        [2014/01/30 19:57:00 | 000,000,000 | ---D | C] -- C:\Windows\Migration
        [2014/01/30 19:46:06 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{FE697F99-E106-4CAB-82B1-E185690FD9F6}
        [2014/01/29 14:28:46 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{9A0894AD-8DC6-43AC-A3EB-EFFD319C6C39}
        [2014/01/28 21:18:10 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{F19744C4-165E-47B8-A6EA-7D454519FFC7}
        [2014/01/26 13:30:52 | 000,000,000 | ---D | C] -- C:\Users\nat\AppData\Local\{25602315-B808-481A-868B-4F040FF19DC6}
        [1 C:\Windows\*.tmp files - C:\Windows\*.tmp - ]
        [1 C:\Program Files\*.tmp files - C:\Program Files\*.tmp - ]

        ========== Files - Modified Within 30 Days ==========

        [2014/02/24 20:59:06 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
        [2014/02/24 20:52:00 | 000,000,508 | ---- | M] () -- C:\Users\nat\Desktop\OTL - Raccourci.lnk
        [2014/02/24 20:47:48 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
        [2014/02/24 20:37:46 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
        [2014/02/24 20:37:45 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
        [2014/02/24 20:37:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
        [2014/02/24 20:37:32 | 3215,831,040 | -HS- | M] () -- C:\hiberfil.sys
        [2014/02/24 05:29:43 | 000,002,264 | ---- | M] () -- C:\{36450E08-63E7-4D53-AB0D-F8291FECBD8F}
        [2014/02/24 05:21:41 | 000,002,264 | ---- | M] () -- C:\{6D9A7124-EA27-43DB-8CF8-1CF1DE4D05EC}
        [2014/02/24 03:35:18 | 000,002,176 | ---- | M] () -- C:\{C4AD9202-2867-43C4-A05D-F0571EDFE7F6}
        [2014/02/24 03:18:28 | 000,002,544 | ---- | M] () -- C:\{F06367DD-9C36-4279-9952-07079CB10733}
        [2014/02/24 01:39:29 | 000,000,871 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
        [2014/02/23 23:47:01 | 000,000,574 | ---- | M] () -- C:\Users\nat\Desktop\Shortcut_Module - Raccourci.lnk
        [2014/02/23 21:43:05 | 000,000,950 | ---- | M] () -- C:\Users\nat\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
        [2014/02/23 21:43:05 | 000,000,835 | ---- | M] () -- C:\Users\nat\Application Data\Microsoft\Internet Explorer\Quick Launch\Search.lnk
        [2014/02/23 21:43:05 | 000,000,835 | ---- | M] () -- C:\Users\nat\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
        [2014/02/23 21:43:05 | 000,000,811 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
        [2014/02/23 21:39:08 | 000,000,549 | ---- | M] () -- C:\Users\nat\Desktop\adwcleaner - Raccourci.lnk
        [2014/02/23 21:20:15 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
        [2014/02/23 21:04:43 | 000,001,405 | ---- | M] () -- C:\Users\nat\Desktop\UsbFix.lnk
        [2014/02/23 20:24:06 | 000,003,920 | ---- | M] () -- C:\{275CB784-DAF6-4D27-BBC9-74BA85BB2E4F}
        [2014/02/23 20:20:37 | 000,003,920 | ---- | M] () -- C:\{57600B53-469F-4801-BCCD-AF0A0FFFC9BC}
        [2014/02/23 20:19:29 | 000,003,080 | ---- | M] () -- C:\{4B118A99-9C25-4CEE-B378-2F42571E8805}
        [2014/02/21 23:21:43 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
        [2014/02/21 23:21:43 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
        [2014/02/19 21:03:38 | 000,001,878 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
        [2014/02/19 21:02:38 | 000,775,952 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
        [2014/02/19 21:02:38 | 000,410,784 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
        [2014/02/19 21:02:38 | 000,180,248 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
        [2014/02/19 21:02:38 | 000,057,672 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
        [2014/02/19 21:02:37 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
        [2014/02/19 21:02:37 | 000,054,832 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
        [2014/02/19 21:02:37 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
        [2014/02/19 21:02:33 | 000,270,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
        [2014/02/19 21:02:33 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
        [2014/02/17 19:48:53 | 000,001,897 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
        [2014/02/16 11:06:06 | 000,001,773 | ---- | M] () -- C:\Users\nat\Desktop\Search.lnk
        [2014/02/13 23:29:07 | 000,000,132 | ---- | M] () -- C:\Users\nat\AppData\Roaming\WB.CFG
        [2014/02/12 20:54:42 | 000,000,426 | ---- | M] () -- C:\AVScanner.ini
        [2014/02/12 13:14:45 | 000,722,488 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
        [2014/02/12 13:14:45 | 000,634,484 | ---- | M] () -- C:\Windows\System32\perfh009.dat
        [2014/02/12 13:14:45 | 000,146,290 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
        [2014/02/12 13:14:45 | 000,120,050 | ---- | M] () -- C:\Windows\System32\perfc009.dat
        [2014/02/11 23:30:32 | 000,001,464 | ---- | M] () -- C:\Users\nat\Desktop\FREE Games.url
        [2014/02/11 22:57:03 | 000,000,912 | ---- | M] () -- C:\Users\nat\Desktop\Launch Internet Explorer Browser.lnk
        [2014/02/11 22:54:18 | 000,001,998 | ---- | M] () -- C:\Users\nat\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
        [2014/02/11 21:52:20 | 000,000,864 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
        [2014/02/11 21:51:43 | 000,001,974 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
        [2014/02/11 19:49:50 | 000,029,266 | ---- | M] () -- C:\Users\nat\AppData\Roaming\wklnhst.dat
        [2014/02/05 15:58:50 | 000,000,000 | ---- | M] () -- C:\Users\nat\AppData\Local\{FDBF3215-3D06-4CED-8EDC-B9C33D7EE014}
        [2014/02/05 09:56:17 | 001,806,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
        [2014/02/05 09:49:56 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
        [2014/02/05 09:49:14 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
        [2014/02/05 09:48:56 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
        [2014/02/05 09:48:40 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
        [2014/02/05 09:47:57 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
        [2014/02/05 09:47:16 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
        [2014/02/05 09:46:50 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
        [2014/02/02 03:55:23 | 000,000,290 | RHS- | M] () -- C:\ProgramData\ntuser.pol
        [1 C:\Windows\*.tmp files - C:\Windows\*.tmp - ]
        [1 C:\Program Files\*.tmp files - C:\Program Files\*.tmp - ]

        ========== Files Created - No Company Name ==========

        [2014/02/24 20:52:00 | 000,000,508 | ---- | C] () -- C:\Users\nat\Desktop\OTL - Raccourci.lnk
        [2014/02/24 05:29:42 | 000,002,264 | ---- | C] () -- C:\{36450E08-63E7-4D53-AB0D-F8291FECBD8F}
        [2014/02/24 05:21:41 | 000,002,264 | ---- | C] () -- C:\{6D9A7124-EA27-43DB-8CF8-1CF1DE4D05EC}
        [2014/02/24 03:35:17 | 000,002,176 | ---- | C] () -- C:\{C4AD9202-2867-43C4-A05D-F0571EDFE7F6}
        [2014/02/24 03:18:27 | 000,002,544 | ---- | C] () -- C:\{F06367DD-9C36-4279-9952-07079CB10733}
        [2014/02/24 01:39:29 | 000,000,871 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
        [2014/02/24 01:28:17 | 000,000,426 | ---- | C] () -- C:\AVScanner.ini
        [2014/02/23 23:47:01 | 000,000,574 | ---- | C] () -- C:\Users\nat\Desktop\Shortcut_Module - Raccourci.lnk
        [2014/02/23 21:39:08 | 000,000,549 | ---- | C] () -- C:\Users\nat\Desktop\adwcleaner - Raccourci.lnk
        [2014/02/23 20:24:03 | 000,003,920 | ---- | C] () -- C:\{275CB784-DAF6-4D27-BBC9-74BA85BB2E4F}
        [2014/02/23 20:20:36 | 000,003,920 | ---- | C] () -- C:\{57600B53-469F-4801-BCCD-AF0A0FFFC9BC}
        [2014/02/23 20:19:28 | 000,003,080 | ---- | C] () -- C:\{4B118A99-9C25-4CEE-B378-2F42571E8805}
        [2014/02/23 20:13:59 | 000,001,405 | ---- | C] () -- C:\Users\nat\Desktop\UsbFix.lnk
        [2014/02/19 21:03:38 | 000,001,878 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
        [2014/02/19 21:02:51 | 000,180,248 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
        [2014/02/19 21:02:51 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
        [2014/02/17 19:48:51 | 000,001,897 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
        [2014/02/17 19:48:51 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
        [2014/02/11 23:30:32 | 000,001,464 | ---- | C] () -- C:\Users\nat\Desktop\FREE Games.url
        [2014/02/11 21:51:44 | 000,001,998 | ---- | C] () -- C:\Users\nat\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
        [2014/02/11 21:51:43 | 000,001,974 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
        [2014/02/05 15:58:50 | 000,000,000 | ---- | C] () -- C:\Users\nat\AppData\Local\{FDBF3215-3D06-4CED-8EDC-B9C33D7EE014}
        [2014/02/02 03:55:23 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
        [2013/12/19 00:43:04 | 000,000,132 | ---- | C] () -- C:\Users\nat\AppData\Roaming\WB.CFG
        [2013/11/13 20:38:11 | 000,017,136 | ---- | C] () -- C:\Windows\System32\sasnative32.exe
        [2010/08/20 18:50:21 | 000,298,550 | ---- | C] () -- C:\Users\nat\AppData\Local\pjdeya_nav.dat
        [2010/08/20 18:50:21 | 000,005,023 | ---- | C] () -- C:\Users\nat\AppData\Local\pjdeya_navps.dat
        [2010/08/20 18:50:20 | 000,004,274 | ---- | C] () -- C:\Users\nat\AppData\Local\pjdeya.dat
        [2010/04/19 20:57:19 | 000,328,505 | ---- | C] () -- C:\Users\nat\AppData\Local\ffeedcc_nav.dat
        [2010/04/09 18:57:30 | 000,328,173 | ---- | C] () -- C:\Users\nat\AppData\Local\xalux_nav.dat
        [2009/11/25 10:40:35 | 000,000,680 | ---- | C] () -- C:\Users\nat\AppData\Local\d3d9caps.dat
        [2009/09/08 12:01:16 | 000,000,371 | ---- | C] () -- C:\Users\nat\Images - Raccourci.lnk
        [2009/09/04 11:40:28 | 000,012,288 | ---- | C] () -- C:\Users\nat\cv.wps
        [2009/04/02 17:30:35 | 000,035,840 | ---- | C] () -- C:\Users\nat\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        [2009/03/10 19:22:28 | 000,000,087 | ---- | C] () -- C:\Users\nat\AppData\Local\aagkwyy.bat
        [2009/03/01 18:01:04 | 000,029,266 | ---- | C] () -- C:\Users\nat\AppData\Roaming\wklnhst.dat

        ========== ZeroAccess Check ==========

        [2006/11/02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

        [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

        [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

        [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
        "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
        "ThreadingModel" = Apartment

        [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par nat
        -  lun. 24 févr. 2014 21:26 #107876
        bonsoir voici le rapport

        -ACDA-D6A79037F57F}\InProcServer32]
        "" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
        "ThreadingModel" = Free

        [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
        "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
        "ThreadingModel" = Both

        ========== LOP Check ==========

        [2014/02/19 21:03:57 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\AVAST Software
        [2009/03/22 14:15:26 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\EPSON
        [2014/02/24 00:12:27 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\GlarySoft
        [2009/07/10 18:58:24 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\myphotobook
        [2009/03/02 20:09:01 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\Template
        [2011/09/16 14:58:37 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\Thunderbird
        [2010/05/27 04:13:00 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\Toshiba
        [2013/09/14 21:31:38 | 000,000,000 | ---D | M] -- C:\Users\nat\AppData\Roaming\Zotero

        ========== Purity Check ==========



        ========== Custom Scans ==========



        [HKEY_CURRENT_USER\Software\31257InstEnd]

        [HKEY_CURRENT_USER\Software\Adobe]

        [HKEY_CURRENT_USER\Software\AppDataLow]

        [HKEY_CURRENT_USER\Software\Apple Computer, Inc.]

        [HKEY_CURRENT_USER\Software\Apple Inc.]

        [HKEY_CURRENT_USER\Software\ATI]

        [HKEY_CURRENT_USER\Software\ATI Technologies Inc.]

        [HKEY_CURRENT_USER\Software\AVAST Software]

        [HKEY_CURRENT_USER\Software\CDDB]

        [HKEY_CURRENT_USER\Software\CEC_CM_SW]

        [HKEY_CURRENT_USER\Software\Clients]

        [HKEY_CURRENT_USER\Software\Ecommfactory]

        [HKEY_CURRENT_USER\Software\EPSON]

        [HKEY_CURRENT_USER\Software\Glarysoft]

        [HKEY_CURRENT_USER\Software\Google]

        [HKEY_CURRENT_USER\Software\IM Providers]

        [HKEY_CURRENT_USER\Software\JavaSoft]

        [HKEY_CURRENT_USER\Software\JEDI-VCL]

        [HKEY_CURRENT_USER\Software\Licenses]

        [HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications]

        [HKEY_CURRENT_USER\Software\Macromedia]

        [HKEY_CURRENT_USER\Software\Malwarebytes' Anti-Malware]

        [HKEY_CURRENT_USER\Software\Microsoft]

        [HKEY_CURRENT_USER\Software\Motive]

        [HKEY_CURRENT_USER\Software\Mozilla]

        [HKEY_CURRENT_USER\Software\MozillaPlugins]

        [HKEY_CURRENT_USER\Software\Netscape]

        [HKEY_CURRENT_USER\Software\Norton]

        [HKEY_CURRENT_USER\Software\ODBC]

        [HKEY_CURRENT_USER\Software\Policies]

        [HKEY_CURRENT_USER\Software\SEIKO EPSON]

        [HKEY_CURRENT_USER\Software\Sun Microsystems]

        [HKEY_CURRENT_USER\Software\SuperSoftwarePackage]

        [HKEY_CURRENT_USER\Software\Symantec]

        [HKEY_CURRENT_USER\Software\Synaptics]

        [HKEY_CURRENT_USER\Software\TeleCharger]

        [HKEY_CURRENT_USER\Software\TOSHIBA]

        [HKEY_CURRENT_USER\Software\Trolltech]

        [HKEY_CURRENT_USER\Software\Usbfix]

        [HKEY_CURRENT_USER\Software\VirginMega]

        [HKEY_CURRENT_USER\Software\Classes]


        "" =

        [HKEY_LOCAL_MACHINE\Software\Adobe]

        [HKEY_LOCAL_MACHINE\Software\AdwCleaner]

        [HKEY_LOCAL_MACHINE\Software\America Online]

        [HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.]

        [HKEY_LOCAL_MACHINE\Software\Apple Inc.]

        [HKEY_LOCAL_MACHINE\Software\ATI]

        [HKEY_LOCAL_MACHINE\Software\ATI Technologies]

        [HKEY_LOCAL_MACHINE\Software\AVAST Software]

        [HKEY_LOCAL_MACHINE\Software\BrowserChoice]

        [HKEY_LOCAL_MACHINE\Software\BVRP Software, Inc]

        [HKEY_LOCAL_MACHINE\Software\Chicony Electronics Co.,Ltd.]

        [HKEY_LOCAL_MACHINE\Software\Classes]

        [HKEY_LOCAL_MACHINE\Software\Clients]

        [HKEY_LOCAL_MACHINE\Software\Conexant]

        [HKEY_LOCAL_MACHINE\Software\Conexant Systems]

        [HKEY_LOCAL_MACHINE\Software\Conexant Systems Inc ]

        [HKEY_LOCAL_MACHINE\Software\CXT]

        [HKEY_LOCAL_MACHINE\Software\Debug]

        [HKEY_LOCAL_MACHINE\Software\DivXNetworks]

        [HKEY_LOCAL_MACHINE\Software\EPSON]

        [HKEY_LOCAL_MACHINE\Software\FlvPlayer]

        [HKEY_LOCAL_MACHINE\Software\GEAR Software]

        [HKEY_LOCAL_MACHINE\Software\GlarySoft]

        [HKEY_LOCAL_MACHINE\Software\Google]

        [HKEY_LOCAL_MACHINE\Software\InstalledOptions]

        [HKEY_LOCAL_MACHINE\Software\InstallShield]

        [HKEY_LOCAL_MACHINE\Software\Intel]

        [HKEY_LOCAL_MACHINE\Software\InterVideo]

        [HKEY_LOCAL_MACHINE\Software\JavaSoft]

        [HKEY_LOCAL_MACHINE\Software\JreMetrics]

        [HKEY_LOCAL_MACHINE\Software\Licenses]

        [HKEY_LOCAL_MACHINE\Software\Lucent]

        [HKEY_LOCAL_MACHINE\Software\Macromedia]

        [HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware]

        [HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware (Trial)]

        [HKEY_LOCAL_MACHINE\Software\Marvell]

        [HKEY_LOCAL_MACHINE\Software\McAfee.com]

        [HKEY_LOCAL_MACHINE\Software\mcafeeupdater]

        [HKEY_LOCAL_MACHINE\Software\Microsoft]

        [HKEY_LOCAL_MACHINE\Software\MimarSinan]

        [HKEY_LOCAL_MACHINE\Software\Motive]

        [HKEY_LOCAL_MACHINE\Software\Mozilla]

        [HKEY_LOCAL_MACHINE\Software\mozilla.org]

        [HKEY_LOCAL_MACHINE\Software\MozillaPlugins]

        [HKEY_LOCAL_MACHINE\Software\Norton]

        [HKEY_LOCAL_MACHINE\Software\ODBC]

        [HKEY_LOCAL_MACHINE\Software\OldTimer Tools]

        [HKEY_LOCAL_MACHINE\Software\Policies]

        [HKEY_LOCAL_MACHINE\Software\RegisteredApplications]

        [HKEY_LOCAL_MACHINE\Software\RtWLan]

        [HKEY_LOCAL_MACHINE\Software\Shortcut_Module]

        [HKEY_LOCAL_MACHINE\Software\Sonic]

        [HKEY_LOCAL_MACHINE\Software\Sun Microsystems]

        [HKEY_LOCAL_MACHINE\Software\Symantec]

        [HKEY_LOCAL_MACHINE\Software\SymNRT]

        [HKEY_LOCAL_MACHINE\Software\Synaptics]

        [HKEY_LOCAL_MACHINE\Software\Sys Modules]

        [HKEY_LOCAL_MACHINE\Software\Techcity]

        [HKEY_LOCAL_MACHINE\Software\TOSHIBA]

        [HKEY_LOCAL_MACHINE\Software\Toshiba Tempo]

        [HKEY_LOCAL_MACHINE\Software\Ulead Systems]

        [HKEY_LOCAL_MACHINE\Software\VideoLAN]

        [HKEY_LOCAL_MACHINE\Software\VideoPlayer]

        [HKEY_LOCAL_MACHINE\Software\VirginMega]

        [HKEY_LOCAL_MACHINE\Software\WholeSecurity]

        [HKEY_LOCAL_MACHINE\Software\Windows]

        [HKEY_LOCAL_MACHINE\Software\WOW6432Node]

        [HKEY_LOCAL_MACHINE\Software\zotero.org]


        "CompletionChar" = 9
        "DefaultColor" = 0
        "EnableExtensions" = 1
        "PathCompletionChar" = 9


        "CompletionChar" = 64
        "DefaultColor" = 0
        "EnableExtensions" = 1
        "PathCompletionChar" = 64


        [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
        [2014/02/12 20:54:42 | 000,000,426 | ---- | M] () -- C:\AVScanner.ini
        [2009/04/11 07:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr
        [2006/09/18 22:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
        [2014/02/24 20:37:32 | 3215,831,040 | -HS- | M] () -- C:\hiberfil.sys
        [2014/02/24 20:37:30 | 3529,433,088 | -HS- | M] () -- C:\pagefile.sys
        [2014/01/16 01:40:14 | 000,487,016 | ---- | M] (McAfee, Inc.) -- C:\SecurityScanner.dll
        [2008/09/11 07:13:48 | 000,000,176 | ---- | M] () -- C:\SWSTAMP.TXT
        [2014/02/23 20:42:14 | 000,041,795 | ---- | M] () -- C:\UsbFix [Clean 2] PC-DE-NAT.txt
        [2014/02/23 20:48:29 | 000,032,078 | ---- | M] () -- C:\UsbFix [Clean 4] PC-DE-NAT.txt
        [2014/02/23 20:52:49 | 000,032,048 | ---- | M] () -- C:\UsbFix [Clean 6] PC-DE-NAT.txt
        [2014/02/23 21:06:13 | 000,031,665 | ---- | M] () -- C:\UsbFix [Clean 8] PC-DE-NAT.txt
        [2014/02/23 20:18:35 | 000,024,802 | ---- | M] () -- C:\UsbFix [Scan 1] PC-DE-NAT.txt
        [2008/08/06 08:53:10 | 000,024,708 | ---- | M] () -- C:\_wdsuef.dmp
        [2014/02/23 20:24:06 | 000,003,920 | ---- | M] () -- C:\{275CB784-DAF6-4D27-BBC9-74BA85BB2E4F}
        [2014/02/24 05:29:43 | 000,002,264 | ---- | M] () -- C:\{36450E08-63E7-4D53-AB0D-F8291FECBD8F}
        [2014/02/23 20:19:29 | 000,003,080 | ---- | M] () -- C:\{4B118A99-9C25-4CEE-B378-2F42571E8805}
        [2014/02/23 20:20:37 | 000,003,920 | ---- | M] () -- C:\{57600B53-469F-4801-BCCD-AF0A0FFFC9BC}
        [2014/02/24 05:21:41 | 000,002,264 | ---- | M] () -- C:\{6D9A7124-EA27-43DB-8CF8-1CF1DE4D05EC}
        [2014/01/19 19:18:57 | 000,002,264 | ---- | M] () -- C:\{721BF829-2366-487A-BC73-E719B3019A31}
        [2013/12/11 21:11:20 | 000,002,264 | ---- | M] () -- C:\{7B6A146A-D604-4391-A5CD-E0A0E751B68F}
        [2013/12/04 03:39:42 | 000,002,416 | ---- | M] () -- C:\{87171109-27D1-4574-A3B8-A96C5A368B0E}
        [2013/12/13 20:22:49 | 000,002,264 | ---- | M] () -- C:\{9B7FFF00-92C6-4538-A59A-6A0CDAE74F89}
        [2013/12/22 16:55:00 | 000,002,416 | ---- | M] () -- C:\{AE409719-81F3-411B-9E7A-00985E4623B9}
        [2013/12/13 20:21:35 | 000,002,264 | ---- | M] () -- C:\{B49B9C42-12C5-4673-92BC-BF42BBCE39A7}
        [2014/02/24 03:35:18 | 000,002,176 | ---- | M] () -- C:\{C4AD9202-2867-43C4-A05D-F0571EDFE7F6}
        [2013/12/22 14:01:25 | 000,002,264 | ---- | M] () -- C:\{CC141258-E711-47DD-9E6C-9AB238FCD124}
        [2013/12/22 16:57:36 | 000,002,264 | ---- | M] () -- C:\{D90551E3-1D21-4CBE-8427-4115F1E6A5E8}
        [2014/02/24 03:18:28 | 000,002,544 | ---- | M] () -- C:\{F06367DD-9C36-4279-9952-07079CB10733}


        [2013/10/01 20:01:17 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
        [2014/02/23 21:44:32 | 000,000,000 | ---D | M] -- C:\AdwCleaner
        [2009/08/19 17:31:07 | 000,000,000 | -HSD | M] -- C:\Boot
        [2006/11/02 14:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
        [2008/07/03 15:36:18 | 000,000,000 | ---D | M] -- C:\Intel
        [2010/01/13 18:54:38 | 000,000,000 | RH-D | M] -- C:\MSOCache
        [2014/02/24 01:39:27 | 000,000,000 | ---D | M] -- C:\Program Files
        [2014/02/24 01:28:18 | 000,000,000 | -H-D | M] -- C:\ProgramData
        [2014/02/24 01:01:56 | 000,000,000 | ---D | M] -- C:\Shortcut_Module
        [2014/02/24 20:37:24 | 000,000,000 | -HSD | M] -- C:\System Volume Information
        [2011/05/30 19:16:12 | 000,000,000 | ---D | M] -- C:\Temp
        [2009/03/01 17:37:22 | 000,000,000 | ---D | M] -- C:\Toshiba
        [2014/02/23 21:06:58 | 000,000,000 | ---D | M] -- C:\UsbFix
        [2009/03/01 17:32:33 | 000,000,000 | ---D | M] -- C:\Users
        [2014/02/19 21:02:44 | 000,000,000 | ---D | M] -- C:\Windows
        [2008/07/03 16:35:24 | 000,000,000 | ---D | M] -- C:\Works


        [2009/09/04 11:40:28 | 000,012,288 | ---- | M] () -- C:\Users\nat\cv.wps
        [2009/09/08 12:01:16 | 000,000,371 | ---- | M] () -- C:\Users\nat\Images - Raccourci.lnk
        [2014/02/24 21:07:45 | 024,641,536 | -HS- | M] () -- C:\Users\nat\ntuser.dat
        [2014/02/24 21:07:45 | 000,262,144 | -H-- | M] () -- C:\Users\nat\ntuser.dat.LOG1
        [2009/03/01 17:32:34 | 000,000,000 | -H-- | M] () -- C:\Users\nat\ntuser.dat.LOG2
        [2014/02/24 07:05:38 | 000,065,536 | -HS- | M] () -- C:\Users\nat\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
        [2012/01/29 19:42:39 | 000,524,288 | -HS- | M] () -- C:\Users\nat\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
        [2014/02/24 07:05:38 | 000,524,288 | -HS- | M] () -- C:\Users\nat\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms
        [2009/03/01 17:32:34 | 000,000,020 | -HS- | M] () -- C:\Users\nat\ntuser.ini


        [2013/11/08 19:42:25 | 000,000,000 | -H-D | M] -- C:\Users\nat\AppData
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Application Data
        [2009/03/01 17:36:32 | 000,000,000 | R--D | M] -- C:\Users\nat\Contacts
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Cookies
        [2014/02/24 20:52:00 | 000,000,000 | R--D | M] -- C:\Users\nat\Desktop
        [2009/07/22 22:15:59 | 000,000,000 | R--D | M] -- C:\Users\nat\Documents
        [2014/02/24 20:50:42 | 000,000,000 | R--D | M] -- C:\Users\nat\Downloads
        [2009/05/10 09:44:08 | 000,000,000 | R--D | M] -- C:\Users\nat\Favorites
        [2009/03/01 17:36:43 | 000,000,000 | R--D | M] -- C:\Users\nat\Links
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Local Settings
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Menu Démarrer
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Mes documents
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Modèles
        [2013/11/06 20:57:30 | 000,000,000 | R--D | M] -- C:\Users\nat\Music
        [2013/12/23 12:48:18 | 000,000,000 | R--D | M] -- C:\Users\nat\Pictures
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Recent
        [2009/03/22 19:14:44 | 000,000,000 | R--D | M] -- C:\Users\nat\Saved Games
        [2009/03/01 17:36:43 | 000,000,000 | R--D | M] -- C:\Users\nat\Searches
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\SendTo
        [2014/02/11 19:53:51 | 000,000,000 | ---D | M] -- C:\Users\nat\SyncFolder
        [2014/02/24 20:48:31 | 000,000,000 | ---D | M] -- C:\Users\nat\Tracing
        [2009/03/01 17:36:42 | 000,000,000 | R--D | M] -- C:\Users\nat\Videos
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Voisinage d'impression
        [2009/03/01 17:32:34 | 000,000,000 | -HSD | M] -- C:\Users\nat\Voisinage réseau


        [2014/02/02 03:55:23 | 000,000,290 | RHS- | M] () -- C:\ProgramData\ntuser.pol


        [2012/11/17 10:50:39 | 000,000,000 | ---D | M] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
        [2014/02/17 19:52:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe
        [2014/02/19 00:00:13 | 000,000,000 | ---D | M] -- C:\ProgramData\amhlpkjkaknkniolmcacjldfobdpdbia
        [2014/02/11 22:34:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple
        [2009/05/15 20:38:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer
        [2006/11/02 14:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
        [2009/03/01 17:37:10 | 000,000,000 | ---D | M] -- C:\ProgramData\ATI
        [2014/02/19 21:00:49 | 000,000,000 | ---D | M] -- C:\ProgramData\AVAST Software
        [2009/03/01 17:28:52 | 000,000,000 | -HSD | M] -- C:\ProgramData\Bureau
        [2014/02/23 21:39:36 | 000,000,000 | ---D | M] -- C:\ProgramData\db108820ad481d4a
        [2006/11/02 14:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
        [2006/11/02 14:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
        [2013/11/06 20:59:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Downloaded Installations
        [2009/03/01 17:28:52 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoris
        [2006/11/02 14:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
        [2009/03/03 22:21:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Google
        [2014/02/18 23:54:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes
        [2013/10/15 19:10:55 | 000,000,000 | ---D | M] -- C:\ProgramData\McAfee
        [2009/03/01 17:28:52 | 000,000,000 | -HSD | M] -- C:\ProgramData\Menu Démarrer
        [2014/01/30 19:57:01 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft
        [2014/01/16 20:22:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft Help
        [2009/03/01 17:28:52 | 000,000,000 | -HSD | M] -- C:\ProgramData\Modèles
        [2009/03/01 18:44:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Motive
        [2013/10/15 18:59:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Mozilla
        [2012/02/22 14:07:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Norton
        [2011/06/11 19:03:11 | 000,000,000 | ---D | M] -- C:\ProgramData\NortonInstaller
        [2011/06/11 19:03:11 | 000,000,000 | ---D | M] -- C:\ProgramData\PCSettings
        [2014/02/19 00:20:06 | 000,000,000 | ---D | M] -- C:\ProgramData\PePT2PNuG
        [2013/11/13 17:24:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Real
        [2006/11/02 14:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
        [2010/04/28 11:34:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun
        [2011/06/11 19:06:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Symantec
        [2013/11/21 20:25:10 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP
        [2006/11/02 14:02:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
        [2009/03/01 16:24:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Toshiba
        [2009/03/01 17:33:00 | 000,000,000 | ---D | M] -- C:\ProgramData\ToshibaEurope
        [2009/03/01 18:29:32 | 000,000,000 | ---D | M] -- C:\ProgramData\UDL
        [2008/07/03 16:22:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Ulead Systems
        [2010/09/12 21:34:36 | 000,000,000 | ---D | M] -- C:\ProgramData\WindowsSearch
        [2008/07/03 16:42:52 | 000,000,000 | ---D | M] -- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
        [2010/04/28 11:31:15 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
        [2009/05/15 20:40:48 | 000,000,000 | ---D | M] -- C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}


        [2010/09/23 07:53:17 | 000,000,087 | ---- | M] () -- C:\Users\nat\AppData\Local\aagkwyy.bat
        [2014/01/16 20:06:48 | 000,000,680 | ---- | M] () -- C:\Users\nat\AppData\Local\d3d9caps.dat
        [2013/12/23 11:17:45 | 000,035,840 | ---- | M] () -- C:\Users\nat\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        [2010/04/19 20:56:48 | 000,328,505 | ---- | M] () -- C:\Users\nat\AppData\Local\ffeedcc_nav.dat
        [2011/05/03 21:45:23 | 000,115,752 | ---- | M] () -- C:\Users\nat\AppData\Local\GDIPFONTCACHEV1.DAT
        [2014/02/24 07:05:00 | 002,926,265 | -H-- | M] () -- C:\Users\nat\AppData\Local\IconCache.db
        [2010/09/24 07:59:01 | 000,004,274 | ---- | M] () -- C:\Users\nat\AppData\Local\pjdeya.dat
        [2010/09/23 07:53:28 | 000,298,550 | ---- | M] () -- C:\Users\nat\AppData\Local\pjdeya_nav.dat
        [2010/09/24 07:59:57 | 000,005,023 | ---- | M] () -- C:\Users\nat\AppData\Local\pjdeya_navps.dat
        [2010/04/11 19:04:31 | 000,328,173 | ---- | M] () -- C:\Users\nat\AppData\Local\xalux_nav.dat
        [2014/02/05 15:58:50 | 000,000,000 | ---- | M] () -- C:\Users\nat\AppData\Local\{FDBF3215-3D06-4CED-8EDC-B9C33D7EE014}

        ========== Alternate Data Streams ==========

        @Alternate Data Stream - 126 bytes - C:\ProgramData\TEMP:373E1720
        Avatar du membre

        Re: [Résolu] infection cle usb et ordinateur affichant racco

        par nat
        -  lun. 24 févr. 2014 21:28 #107877
        bonsoir voici le rapport


        OTL Extras logfile created on: 24/02/2014 20:56:41 - Run 1
        OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\nat\Downloads
        Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
        Internet Explorer (Version = 9.0.8112.16421)
        Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

        2,99 Gb Total Physical Memory | 1,38 Gb Available Physical Memory | 46,15% Memory free
        6,19 Gb Paging File | 4,49 Gb Available in Paging File | 72,60% Paging File free
        Paging file location(s): ?:\pagefile.sys [binary data]

        %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
        Drive C: | 150,66 Gb Total Space | 76,46 Gb Free Space | 50,75% Space Free | Partition Type: NTFS
        Drive D: | 14,55 Gb Total Space | 12,79 Gb Free Space | 87,88% Space Free | Partition Type: FAT32
        Drive E: | 145,97 Gb Total Space | 0,01 Gb Free Space | 0,00% Space Free | Partition Type: NTFS

        Computer Name: PC-DE-NAT | User Name: nat | Logged in as Administrator.
        Boot Mode: Normal | Scan Mode: Current user
        Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

        ========== Extra Registry (All) ==========


        ========== File Associations ==========

        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
        .bat [@ = batfile] -- "%1" %*
        .chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
        .cmd [@ = cmdfile] -- "%1" %*
        .com [@ = comfile] -- "%1" %*
        .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
        .exe [@ = exefile] -- "%1" %*
        .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
        .hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation)
        .html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
        .inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
        .ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
        .url [@ = InternetShortcut] -- C:\Windows\System32\rundll32.exe (Microsoft Corporation)
        .js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
        .jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
        .pif [@ = piffile] -- "%1" %*
        .reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
        .scr [@ = scrfile] -- "%1" /S
        .txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
        .vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
        .vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
        .wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
        .wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)

        [HKEY_CURRENT_USER\SOFTWARE\Classes\]
        .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

        ========== Shell Spawning ==========

        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
        batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
        batfile [open] -- "%1" %*
        batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
        chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
        cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
        cmdfile [open] -- "%1" %*
        cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
        comfile [open] -- "%1" %*
        cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
        exefile [open] -- "%1" %*
        helpfile [open] -- Reg Error: Key error.
        hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
        htafile [open] -- C:\Windows\system32\mshta.exe "%1" %* (Microsoft Corporation)
        htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
        htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
        htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
        htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
        http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
        https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
        inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
        inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
        inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
        inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
        inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
        InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
        InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
        jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
        jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
        jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
        jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
        jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
        jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
        piffile [open] -- "%1" %*
        regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
        regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
        regfile [merge] -- Reg Error: Key error.
        regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
        scrfile [config] -- "%1"
        scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
        scrfile [open] -- "%1" /S
        txtfile [edit] -- Reg Error: Key error.
        txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
        txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
        txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
        vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
        vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
        vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
        vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
        vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
        vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
        wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
        wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
        wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
        wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
        Unknown [openas] -- C:\Program Files\Advanced System Protector\filetypehelper.exe -scanunknown "%1"
        Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
        Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
        Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
        Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
        Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
        Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
        Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
        Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
        CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

        ========== Security Center Settings ==========

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
        "cval" = 1
        "UacDisableNotify" = 0
        "InternetSettingsDisableNotify" = 1
        "AutoUpdateDisableNotify" = 1

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
        "DisableMonitoring" = 1

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
        "DisableMonitoring" = 1

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
        "DisableMonitoring" = 1

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
        "DisableMonitoring" = 1

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
        "AntiVirusOverride" = 0
        "AntiSpywareOverride" = 0
        "FirewallOverride" = 0
        "VistaSp1" = Reg Error: Unknown registry data type -- File not found
        "VistaSp2" = Reg Error: Unknown registry data type -- File not found

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

        ========== Firewall Settings ==========

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
        "EnableFirewall" = 0
        "DisableNotifications" = 0

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
        "EnableFirewall" = 0
        "DisableNotifications" = 0

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
        "EnableFirewall" = 0
        "DisableNotifications" = 0

        ========== Authorized Applications List ==========


        ========== Vista Active Open Ports Exception List ==========

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
        "{04E93B6B-E0DD-41CD-AACB-48013A7AE743}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
        "{057FCE37-8419-4C8D-90A0-D88EF8737F2C}" = lport=2869 | protocol=6 | dir=in | app=system |
        "{341F709B-0F2F-4273-8E08-696662D44E72}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
        "{61264A15-E911-4064-A932-D4EBA9B10BCF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
        "{776D152A-614B-403B-B479-78E5D3C608C5}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
        "{7D83E2F7-566A-4090-8FE3-86147E7FB338}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
        "{919C2561-AF46-43B5-8903-E7609752652F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
        "{A63054DA-3796-47D0-8FD6-46117774ABC0}" = lport=10243 | protocol=6 | dir=in | app=system |
        "{B27C4B78-6CC7-4D40-B445-83F39E2BF8CA}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
        "{B5E5E9E5-360E-4088-825C-4696BD5EE01E}" = lport=2869 | protocol=6 | dir=in | app=system |
        "{E64BA17A-A6D1-49FD-A18F-7E1AB7CC76FC}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
        "{EC5E27C4-58B8-42F0-B683-3251968FDE98}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
        "{F0DD16A7-A976-4EB1-92B4-27C1A72D23CF}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
        "{FC03CE77-BA30-427E-AA3F-8A9AD930FAA0}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
        "{FFAB7C3F-6640-4040-9F0D-C284D504BA4A}" = rport=10243 | protocol=6 | dir=out | app=system |

        ========== Vista Active Application Exception List ==========

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
        "{16F825F0-27B4-41E9-88BE-216918805A1D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
        "{201F34B3-E3A2-4B9C-B5A4-1631BBD40CD1}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
        "{3935ED5C-6BAD-4B3D-871E-B8A21EE47407}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
        "{3D8061BB-A3E0-4394-9068-2600652B0C01}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
        "{45E2BF0D-4E54-460A-B327-887A3D1F3FAD}" = protocol=6 | dir=in | app=f:\data\eskernel.exe |
        "{4FAE8822-4066-4EAB-8B6B-4C523B2E96A6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
        "{657CB70C-8B8A-4498-A47A-5FF281457A61}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
        "{77881B42-FBCA-42D6-A15B-5BB67484E938}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
        "{77F3C249-F57D-4A9F-A642-380F8F67F6F4}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe |
        "{7B80A4E2-3E4D-480A-88A0-5233F3B744F2}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
        "{838FA373-B9A8-4CC5-8AA2-DE793C2EEF10}" = protocol=6 | dir=out | app=system |
        "{84C6CF3E-32B5-45C6-9273-FE704493ED10}" = protocol=17 | dir=in | app=f:\data\eskernel.exe |
        "{913FC6DD-39A7-4ED4-AAC7-7B7724BA4E97}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
        "{91F269F7-1C8A-4848-B393-BF4BE810C7B0}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
        "{947F0A96-6A31-46C3-B3CF-C4AB6D665C75}" = dir=in | app=c:\program files\itunes\itunes.exe |
        "{A8B460EE-2385-4581-825A-E9FE913BB13B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
        "{B5FFB7CF-74AE-4757-B5B7-1C2EA6F1A197}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
        "{B95DA8D5-9531-4AA1-8D13-406C20A0E657}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
        "{BC03E38F-E2FF-4E31-AF21-2CB725F03A8C}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
        "{C052D78C-12D8-4FB9-8F8A-40AD2A9E841E}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
        "{D73760B6-3AAF-4E12-AC60-8593C280A809}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
        "{DAE00D11-9989-40A9-BCE1-B1ECA3EBE248}" = protocol=17 | dir=in | app=c:\program files\movies toolbar\datamngr\srtool~1\ie\dtuser.exe |
        "{DBBD0093-6D38-4A59-9EAE-3B165C67271F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
        "{F558F27E-29DD-4211-A8CF-94F34D1AB6E3}" = protocol=17 | dir=in | app=c:\users\nat\appdata\local\ilivid\ilivid.exe |
        "TCP Query User{875AE22C-54BE-4E96-9340-A6B5653B73FF}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
        "TCP Query User{FE589EF9-05F0-47FE-B126-BCDFBD71B76C}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
        "UDP Query User{563E33B6-CF47-4F70-BE97-14302C6AAC9F}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
        "UDP Query User{93FD6583-DC8C-4B42-AD1B-E194B9B1C02E}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |

        ========== HKEY_LOCAL_MACHINE Uninstall List ==========

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
        "{03FAA727-E2B7-471C-AC41-2E1C7F29C7EA}" = Toshiba TEMPRO
        "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
        "{08233ADA-AA4C-A977-58FD-DB6C684BE010}" = Catalyst Control Center Localization Norwegian
        "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
        "{0B4C7D42-323A-F3FD-5B18-0222082E6FDD}" = Catalyst Control Center Localization Dutch
        "{0D348034-9CBE-19FC-19B0-B2CDC78E50F1}" = ccc-core-static
        "{0D5D0BEE-FBA9-4928-A50D-6CDFAB827755}" = TOSHIBA ConfigFree
        "{0E08BAC8-845B-4327-8CDB-4B0F8C9857A5}_is1" = FLV Media Player version 1.3
        "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
        "{0F6F6876-6334-4977-B5DD-CFC12E193420}" = iTunes
        "{10B35323-BE1A-61FB-C4D1-E88F24147617}" = Catalyst Control Center Localization Thai
        "{10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}" = Apple Mobile Device Support
        "{11FC2772-F7FD-21FD-614F-CE58BF52C398}" = Catalyst Control Center Localization Chinese Standard
        "{12911298-DDB4-AD44-E530-AEB8127503C9}" = CCC Help Italian
        "{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
        "{156E98D0-1AEC-4013-A41A-94A1A01BFD68}" = O2Micro Flash Memory Card Reader Driver (x86)
        "{1714616C-61CE-44D5-AF0B-53404D7FA83A}" = Catalyst Control Center Localization Korean
        "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
        "{18625A47-84A9-6F6C-3780-79221B6095C3}" = CCC Help Norwegian
        "{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
        "{1C3F57C7-8474-DF38-8F9F-0EBFB554FD56}" = Catalyst Control Center Localization Hungarian
        "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
        "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
        "{2070F79D-46BC-4EEA-8F02-9B4DCABAE7CB}" = iPod for Windows 2006-03-23
        "{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}" = Apple Application Support
        "{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
        "{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
        "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
        "{264324EA-35F7-AD77-CC96-F9F47A9A6284}" = Catalyst Control Center Localization Czech
        "{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 24
        "{2A6F930B-12DA-AD4F-C4A4-E008F73A8016}" = CCC Help English
        "{2AEC1EC0-0C01-8831-B04F-41FB4A92B677}" = Catalyst Control Center Localization Spanish
        "{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety
        "{31326B80-1D01-4DBA-1DCA-A0731182A2E6}" = CCC Help Korean
        "{31DD9FF4-23CD-7898-0305-70D806E2F7DB}" = CCC Help Japanese
        "{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
        "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
        "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
        "{33AC44A1-81C2-0A61-0EC0-59EFC503A1EA}" = Catalyst Control Center Localization Danish
        "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
        "{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
        "{3A2AF807-9F9F-43C9-A24A-17B617238B74}" = OpenOffice.org Installer 1.0
        "{3B160861-7250-451E-B5EE-8B92BF30A710}" = Microsoft Works
        "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
        "{3DFE65B6-3AC9-C44A-1160-A449E0DFFE94}" = CCC Help Greek
        "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra
        "{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
        "{405AE172-0CE0-E2A1-1693-1B120B71AF32}" = Catalyst Control Center Localization Japanese
        "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
        "{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
        "{491DD193-1B57-4D1C-8B14-18B96992A89F}" = TOSHIBA Supervisor Password
        "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
        "{4DC3B285-BE6C-E873-42A1-AE221B3BE4F2}" = CCC Help Hungarian
        "{52573F8D-F099-4CB5-9EDE-5C27ECB4A02B}" = TOSHIBA Hardware Setup
        "{54CAB637-25EA-33FE-2FF4-6F6182BCCF12}" = CCC Help Chinese Standard
        "{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
        "{567AE922-FB8D-943D-921E-B390A2FBD625}" = CCC Help Russian
        "{5788504C-08BC-E414-C019-60D8E2A2A1EB}" = CCC Help Portuguese
        "{5B0202A8-CC6B-4443-AD73-FE9DF1FC1622}" = Manuels TOSHIBA
        "{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
        "{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
        "{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
        "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
        "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
        "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
        "{69E5255D-9D43-4CFF-8984-843ABD7753B7}" = Catalyst Control Center - Branding
        "{6BCE01B8-333E-667E-0FC9-5070EA9B8108}" = Catalyst Control Center Localization Swedish
        "{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
        "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
        "{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
        "{6EA4F33E-8F12-AB92-D497-2D454E3C4BB7}" = CCC Help Polish
        "{6FB6D968-6E8D-3FCB-1F2D-7ED24FC1BA07}" = CCC Help Swedish
        "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
        "{7206AFB8-99ED-B788-3DE8-0AE3DBD97B24}" = Catalyst Control Center Localization French
        "{732662AE-82C0-9184-CE57-4257695EE1CE}" = CCC Help German
        "{754F90E7-DE41-0ADE-2E3F-2C269ED9C2EE}" = CCC Help Finnish
        "{76810709-A7D3-468D-9167-A1780C1E766C}" = Windows Live FolderShare
        "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
        "{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TRDCReminder
        "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
        "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
        "{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
        "{7B12F319-43E1-D2DD-ABFE-50E34F76A740}" = Catalyst Control Center Graphics Full New
        "{7CD8E2EF-AD40-7BD3-13E5-2B2847E568DD}" = ATI Catalyst Install Manager
        "{7E340EDB-9BF0-5CF2-C12D-7C31992070E3}" = CCC Help Turkish
        "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
        "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
        "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
        "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
        "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
        "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
        "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
        "{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
        "{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
        "{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
        "{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
        "{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
        "{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
        "{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
        "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
        "{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
        "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
        "{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
        "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
        "{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
        "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
        "{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
        "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
        "{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
        "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
        "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007
        "{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
        "{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}" = Microsoft Office 2007 Service Pack 3 (SP3)
        "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
        "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
        "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
        "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
        "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
        "{95140000-007A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
        "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
        "{9AF16DB8-2845-88FE-BDC2-EEF067F9B1EC}" = Catalyst Control Center Graphics Full Existing
        "{9BC500CF-4965-341C-26BD-321A1C30BDD8}" = PePT2PNuG
        "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
        "{9C05B2CC-68D0-4B46-A9C8-40CC4BF10C33}" = Windows Live Family Safety
        "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
        "{9E166691-B3ED-0F76-1FE9-AB3DBAAD75DD}" = CCC Help French
        "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
        "{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = Réducteur de bruit du lecteur de CD/DVD
        "{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
        "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
        "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
        "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
        "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
        "{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}" = Windows Live Messenger
        "{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources
        "{AC76BA86-7AD7-1036-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) - Français
        "{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
        "{AED994C5-E6CE-0377-09ED-C4000E4189BF}" = Catalyst Control Center Core Implementation
        "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
        "{AF899B9E-5842-8839-3EDB-AF9EADF52F45}" = ccc-utility
        "{B245D989-F88A-C2C3-1958-A91254DEC387}" = Catalyst Control Center Graphics Light
        "{B3D15F34-F377-26A0-4CCF-2CB47E5810CD}" = CCC Help Dutch
        "{B5359AD5-4950-174E-4070-CDB1881B161F}" = CCC Help Czech
        "{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
        "{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Disc Creator
        "{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
        "{B90450DF-E781-46FD-B1F1-0C86DA40E443}" = PIF DESIGNER
        "{C07CA803-141E-A7C3-13E0-AB99FC5DC7B4}" = Catalyst Control Center Localization Polish
        "{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
        "{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
        "{C7838AAD-8B29-86D3-6E04-417C7B7EE628}" = Catalyst Control Center Localization Greek
        "{C8585E46-A5C9-8E20-77CA-378D5C291B09}" = Catalyst Control Center Localization Finnish
        "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
        "{C92C2F87-1E84-A9E5-81F3-3B93DC991A4E}" = Catalyst Control Center Localization Chinese Traditional
        "{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
        "{CB01DA5C-48B7-D9A6-22DE-D678D6007C56}" = Catalyst Control Center Localization German
        "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
        "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
        "{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
        "{D05EB4EF-29BE-8031-9AF5-2DC9485D5870}" = Catalyst Control Center Localization Russian
        "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
        "{D7F069BF-7A9F-6A09-D5AE-E77F8B2E892F}" = CCC Help Danish
        "{DDC519DE-AC45-634C-C009-6FCE1EF313F3}" = Catalyst Control Center Localization Portuguese
        "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
        "{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources
        "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
        "{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Codeur Windows Media Série 9
        "{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
        "{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORDCLauncher
        "{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
        "{ED3C1C9D-0496-6884-8B32-8A2B73219C20}" = Catalyst Control Center Localization Italian
        "{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}" = VirginMega.Fr Premium
        "{F0A85260-5B90-4C0E-07FF-72A89AA18F77}" = Skins
        "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
        "{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
        "{F24E1A94-76DD-85BD-5B6C-6701CC4E8A0F}" = CCC Help Chinese Traditional
        "{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
        "{F4614173-1F8B-A19A-C2CC-57834FBCCE6C}" = CCC Help Spanish
        "{F81AB80B-5BB7-4E36-8BA5-E07541CE1BFC}" = HDMI Control Manager
        "{F89CF986-3AA7-8B20-390A-D5C09F27F85D}" = Catalyst Control Center Localization Turkish
        "{F8F37F88-4CB6-9162-AE65-7BBA7E476547}" = Catalyst Control Center Graphics Previews Vista
        "{FA4C2D53-205F-4245-9717-F3761154824D}" = Safari
        "{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
        "{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}" = Bing Bar
        "{FFF7CB0F-FA65-7115-2CEC-16C21037C88E}" = CCC Help Thai
        "aagkwyy" = Favorit
        "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
        "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
        "Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
        "Avast" = avast! Free Antivirus
        "CNXT_AUDIO_HDA" = Conexant HD Audio
        "CNXT_MODEM_HDAUDIO_VEN_14F1DEV_5051SUBSYS_1179" = HDAUDIO Soft Data Fax Modem with SmartCP
        "EPSON Printer and Utilities" = EPSON Logiciel imprimante
        "EPSON Scanner" = EPSON Scan
        "Flash Player Pro_is1" = Flash Player Pro V5.4
        "FlvPlayer" = FlvPlayer
        "Google Chrome" = Google Chrome
        "Google Desktop" = Google Desktop
        "InstallShield_{2070F79D-46BC-4EEA-8F02-9B4DCABAE7CB}" = iPod for Windows 2006-03-23
        "InstallShield_{491DD193-1B57-4D1C-8B14-18B96992A89F}" = TOSHIBA Supervisor Password
        "InstallShield_{52573F8D-F099-4CB5-9EDE-5C27ECB4A02B}" = TOSHIBA Hardware Setup
        "InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
        "InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TRDCReminder
        "InstallShield_{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
        "InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORDCLauncher
        "InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
        "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
        "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra
        "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
        "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
        "Mozilla Firefox 27.0.1 (x86 fr)" = Mozilla Firefox 27.0.1 (x86 fr)
        "Mozilla Thunderbird (6.0.2)" = Mozilla Thunderbird (6.0.2)
        "MozillaMaintenanceService" = Mozilla Maintenance Service
        "myphotobook" = myphotobook 3.6
        "NAV" = Norton AntiVirus
        "Picasa 3" = Picasa 3
        "PROPLUS" = Microsoft Office Professional Plus 2007
        "SynTPDeinstKey" = Synaptics Pointing Device Driver
        "Usbfix" = UsbFix
        "VideoPlayer" = VideoPlayer v2.0.6
        "VLC media player" = VLC media player 2.1.3
        "Windows Media Encoder 9" = Codeur Windows Media Série 9
        "WinLiveSuite" = Windows Live

        ========== Last 20 Event Log Errors ==========

        [ Application Events ]
        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 18:49:15 | Computer Name = PC-de-nat | Source = Windows Search Service | ID = 3013
        Description =

        Error - 23/02/2014 20:30:54 | Computer Name = PC-de-nat | Source = SideBySide | ID = 16842785
        Description = La création du contexte d’activation a échoué pour « C:\Users\nat\Downloads\iTunes64Setup.exe ».
        Assembly
        dépendant Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
        introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.

        [ System Events ]
        Error - 23/02/2014 19:13:43 | Computer Name = PC-de-nat | Source = Service Control Manager | ID = 7031
        Description =

        Error - 23/02/2014 19:13:43 | Computer Name = PC-de-nat | Source = Service Control Manager | ID = 7034
        Description =

        Error - 23/02/2014 19:13:46 | Computer Name = PC-de-nat | Source = Service Control Manager | ID = 7031
        Description =

        Error - 23/02/2014 19:58:24 | Computer Name = PC-de-nat | Source = Microsoft-Windows-TaskScheduler | ID = 412
        Description =

        Error - 23/02/2014 19:59:49 | Computer Name = PC-de-nat | Source = Service Control Manager | ID = 7000
        Description =

        Error - 23/02/2014 20:00:22 | Computer Name = PC-de-nat | Source = DCOM | ID = 10000
        Description =

        Error - 24/02/2014 02:05:46 | Computer Name = PC-de-nat | Source = DCOM | ID = 10010
        Description =

        Error - 24/02/2014 15:37:48 | Computer Name = PC-de-nat | Source = Microsoft-Windows-TaskScheduler | ID = 412
        Description =

        Error - 24/02/2014 15:39:02 | Computer Name = PC-de-nat | Source = Service Control Manager | ID = 7000
        Description =

        Error - 24/02/2014 15:48:13 | Computer Name = PC-de-nat | Source = DCOM | ID = 10000
        Description =
        Avatar du membre

        infection cle usb et ordinateur affichant raccourci

        par g3n-h@ckm@n
        -  lun. 24 févr. 2014 23:31 #107925
        ouais.... va falloir calmer les sites pornos si tu veux garder un pc sain...
        • Seuls ces liens sont officiels ne pas télécharger l'outil sur d'autres liens !

          Note : Pendant le scan le bureau peu disparaître à plusieurs reprises
        • Désactive toutes tes protections si possible, antivirus, sandbox, pare-feux ... ( Aide )
        • Télécharge Pre_Scan sur ton bureau !
        • Si le lien n'est pas fonctionnel :
          • #ICI (renommé winlogon)
          [*]Note : Si l'outil est relancé plusieurs fois, clique sur Scan|Kill

          Image


          [*]Si l'outil est bloqué par l'infection essaye avec d'autres exetensions :
            [*]#SCR
            [*]#PIF
            [*]#COM

            [*]Si des Proxy sont détectés et que tu n'en as pas installé :
              [*]Clique sur Supprimer le Proxy

              [*]A la fin du scan, rends toi à la racine de ton disque dur ( C:\ )
              [*]Héberge le rapport Pre_Scan¤¤¤¤¤¤¤¤¤.txt sur http://cjoint.com puis donne le lien
               Sujet verrouillé
               Retourner vers « Désinfection »
              How do I choose the right expert for OTHM assignment help?

              Choosing the right expert for writing your OTHM as[…]

              FLTL_READ_MORE
              Game

              Late one evening, my friend in Lahore mentioned a […]

              FLTL_READ_MORE
              How to reduce stress at work

              To succeed in crossy road , This necessity for […]

              FLTL_READ_MORE
              Besoin de conseils

              Bonjour à tous. Je voudrais essayer les par[…]

              FLTL_READ_MORE
              FLTL_VIEW_MORE_TOPICS