OTL logfile created on: 03/12/2014 20:46:23 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\laurent\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17420) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 1,61 Gb Available Physical Memory | 53,53% Memory free 6,00 Gb Paging File | 4,12 Gb Available in Paging File | 68,70% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 931,41 Gb Total Space | 776,32 Gb Free Space | 83,35% Space Free | Partition Type: NTFS Drive E: | 206,60 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive F: | 298,09 Gb Total Space | 55,27 Gb Free Space | 18,54% Space Free | Partition Type: NTFS Computer Name: LAURENT-PC | User Name: laurent | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014/12/03 20:44:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\laurent\Desktop\OTL.exe PRC - [2014/11/25 11:19:31 | 003,898,360 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe PRC - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe PRC - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe PRC - [2014/11/21 06:12:46 | 007,229,752 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe PRC - [2014/11/14 22:38:20 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2014/11/14 21:47:35 | 000,356,128 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe PRC - [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2014/11/07 08:21:08 | 003,882,576 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe PRC - [2014/10/15 16:26:12 | 002,117,448 | ---- | M] (CybelSoft) -- C:\Program Files\ma-config.com\MaConfigAgent.exe PRC - [2014/09/12 19:14:55 | 013,559,056 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer.exe PRC - [2014/09/12 19:14:55 | 004,799,760 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe PRC - [2014/09/12 19:00:53 | 000,229,648 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\tv_w32.exe PRC - [2014/09/12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2014/08/19 22:15:38 | 001,795,872 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe PRC - [2014/05/13 20:25:28 | 001,013,616 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe PRC - [2014/01/08 14:12:54 | 000,251,096 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe PRC - [2013/11/07 10:17:30 | 000,269,848 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe PRC - [2013/10/24 17:45:04 | 007,842,664 | ---- | M] (Acronis) -- C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe PRC - [2013/10/22 20:30:48 | 007,151,024 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe PRC - [2013/10/10 12:41:36 | 001,104,320 | ---- | M] (Acronis International GmbH) -- C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe PRC - [2013/07/18 11:57:32 | 000,380,456 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe PRC - [2013/07/18 11:50:44 | 000,777,800 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe PRC - [2012/01/18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe PRC - [2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010/04/09 02:42:28 | 000,163,944 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe PRC - [2010/03/16 02:09:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014/11/14 03:42:37 | 003,649,648 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013/10/24 17:06:16 | 000,028,992 | ---- | M] () -- C:\Program Files\Common Files\Acronis\Home\thread_pool.dll MOD - [2013/10/24 17:06:10 | 000,036,672 | ---- | M] () -- C:\Program Files\Acronis\TrueImageHome\qt_icontray_ex.dll MOD - [2013/10/10 12:02:34 | 000,013,120 | ---- | M] () -- C:\Program Files\Common Files\Acronis\TibMounter\icudt38.dll MOD - [2013/10/01 11:00:14 | 000,022,336 | ---- | M] () -- C:\Program Files\Acronis\TrueImageHome\ti_managers_proxy_stub.dll MOD - [2013/10/01 10:29:54 | 002,633,576 | ---- | M] () -- C:\Program Files\Acronis\TrueImageHome\tishell.dll MOD - [2013/09/05 00:14:10 | 004,300,456 | ---- | M] () -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf MOD - [2012/08/17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll MOD - [2011/06/17 11:46:04 | 008,626,176 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtGui4.dll MOD - [2011/06/17 11:46:02 | 002,408,448 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtCore4.dll MOD - [2011/06/17 11:46:02 | 000,212,992 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll MOD - [2006/12/03 14:53:06 | 000,126,464 | ---- | M] () -- C:\Program Files\WinRAR\rarext.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2014/11/26 12:32:08 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014/11/25 11:19:31 | 003,898,360 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv) SRV - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2014/11/14 22:39:32 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService) SRV - [2014/11/14 21:47:35 | 000,356,128 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe -- (AVP) SRV - [2014/11/14 03:42:30 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014/10/15 16:26:12 | 002,117,448 | ---- | M] (CybelSoft) [Auto | Running] -- C:\Program Files\ma-config.com\MaConfigAgent.exe -- (MaConfigAgent) SRV - [2014/09/12 19:14:55 | 004,799,760 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9) SRV - [2014/09/12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2014/04/03 19:21:48 | 000,315,008 | ---- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2014/01/08 14:12:54 | 000,251,096 | ---- | M] (Realtek Semiconductor) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe -- (RtkAudioService) SRV - [2013/12/19 00:41:02 | 030,814,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2013/10/22 20:30:48 | 007,151,024 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe -- (syncagentsrv) SRV - [2013/07/18 11:50:44 | 000,777,800 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc) SRV - [2013/05/27 05:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV - [2013/02/11 18:48:56 | 000,311,184 | ---- | M] (Nuance Communications, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Nuance\dgnsvc.exe -- (DragonSvc) SRV - [2012/01/18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv) SRV - [2010/03/16 02:09:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009/07/14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU) DRV - [2014/12/03 20:38:06 | 000,114,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy) DRV - [2014/11/25 11:19:32 | 000,234,752 | ---- | M] (Acronis) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\afcdp.sys -- (afcdp) DRV - [2014/11/25 11:19:27 | 000,889,888 | ---- | M] (Acronis International GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tdrpman.sys -- (tdrpman) DRV - [2014/11/25 11:19:25 | 000,143,648 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tib_mounter.sys -- (tib_mounter) DRV - [2014/11/25 11:19:23 | 000,736,192 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tib.sys -- (tib) DRV - [2014/11/25 11:19:20 | 000,116,000 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vididr.sys -- (vididr) DRV - [2014/11/25 11:19:18 | 000,085,280 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vidsflt.sys -- (vidsflt) DRV - [2014/11/25 11:19:16 | 000,185,120 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\snapman.sys -- (snapman) DRV - [2014/11/25 11:19:14 | 000,086,304 | ---- | M] (Acronis International GmbH) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\fltsrv.sys -- (fltsrv) DRV - [2014/11/21 06:14:20 | 000,051,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl) DRV - [2014/11/21 06:14:06 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2014/11/14 22:51:10 | 000,145,040 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps) DRV - [2014/11/14 22:51:10 | 000,044,000 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi) DRV - [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt) DRV - [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klkbdflt.sys -- (klkbdflt) DRV - [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6) DRV - [2014/11/14 22:51:09 | 000,597,600 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF) DRV - [2014/11/14 22:51:09 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1) DRV - [2014/10/01 05:19:10 | 000,115,240 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\idmwfp.sys -- (IDMWFP) DRV - [2014/08/19 22:16:18 | 000,162,592 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2014/02/24 17:33:46 | 000,016,160 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\ma-config_x86.sys -- (ma-config_x86) DRV - [2012/01/18 06:44:52 | 004,332,960 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC) DRV - [2012/01/18 06:44:28 | 000,312,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS) DRV - [2010/11/20 22:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2010/11/20 22:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010/11/20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010/11/20 22:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub) DRV - [2010/11/20 22:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV - [2010/11/20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc) DRV - [2010/11/20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010/11/20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2010/11/20 22:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD) DRV - [2010/11/20 22:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt) DRV - [2010/11/20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010/11/20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2010/04/09 02:32:56 | 000,215,656 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32) DRV - [2010/04/09 02:32:54 | 000,139,368 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvrd32.sys -- (nvrd32) DRV - [2010/03/22 18:29:08 | 000,018,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu) DRV - [2010/03/15 23:52:00 | 011,573,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2010/03/04 18:26:56 | 000,296,936 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmf6232.sys -- (NVNET) DRV - [2009/07/14 00:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial) DRV - [2009/07/13 23:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD) [color=#E56717]========== Standard Registry (All) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\..\SearchScopes\{7EC3A7BC-618C-4BA8-B84F-39F5B4FF3AAE}: "URL" = https://www.google.com/search?q={searchTerms} IE - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: mozilla_cc%40internetdownloadmanager.com:7.3.89 FF - prefs.js..extensions.enabledAddons: leethax%40leethax.net:2014.10.15 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:33.1.1 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\nuance.com/DragonRIAPlugin: C:\PROGRA~1\Nuance\NATURA~1\Program\npDgnRia.dll (Nuance Communications Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com [2014/11/14 22:51:21 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com [2014/11/14 22:51:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com [2014/11/14 22:51:20 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack: C:\Program Files\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2013/02/11 18:44:08 | 000,136,309 | ---- | M] () FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.1.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.1.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\laurent\AppData\Roaming\IDM\idmmzcc5 [2014/11/14 21:23:01 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\laurent\AppData\Roaming\IDM\idmmzcc5 [2014/11/14 21:23:01 | 000,000,000 | ---D | M] [2014/11/15 00:54:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\Extensions [2014/12/01 15:25:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\Firefox\Profiles\wlzed5ya.default\extensions [2014/11/16 11:56:01 | 000,021,590 | ---- | M] () (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\firefox\profiles\wlzed5ya.default\extensions\leethax@leethax.net.xpi [2014/11/16 11:40:09 | 000,979,699 | ---- | M] () (No name found) -- C:\Users\laurent\AppData\Roaming\mozilla\firefox\profiles\wlzed5ya.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014/11/15 00:54:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions [2014/11/15 00:54:14 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2014/11/14 21:23:01 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\LAURENT\APPDATA\ROAMING\IDM\IDMMZCC5 [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: (Enabled) CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - homepage: https://www.google.fr/?gws_rd=ssl CHR - plugin: Error reading preferences file CHR - Extension: Google Slides = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.8_0\ CHR - Extension: Google Docs = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\ CHR - Extension: Google Drive = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\ CHR - Extension: WOT = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\2.5.16_0\ CHR - Extension: YouTube = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Recherche Google = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Screen Capture = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpngackimfmofbokmjmljamhdncknpmg\233\ CHR - Extension: Flash Saving = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlbemabjbfhjcccahjioenmkgimjbbkd\194\ CHR - Extension: Google Sheets = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\ CHR - Extension: Readium = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl\2.15.2_0\ CHR - Extension: IDM Integration Module = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn\6.21.14_0\ CHR - Extension: Kaspersky Protection = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh\2.3.0.43_1\ CHR - Extension: Dragon NaturallySpeaking Rich Internet Application Support = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\mikhcaiakabeeokmenglcdebplfdjicn\1.0_0\ CHR - Extension: Ghostery = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.4.1_0\ CHR - Extension: Google Wallet = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: Real-Debrid extension = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefkkgfcahbeccgckjgbnfclcmnjgidg\0.9_0\ CHR - Extension: Gmail = C:\Users\laurent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2014/11/25 11:20:23 | 000,000,861 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activation.acronis.com O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Safe Money Plugin) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis) O4 - HKLM..\Run: [AcronisTibMounterMonitor] C:\Program Files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis International GmbH) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe (Hewlett-Packard) O4 - HKLM..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\isuspm.exe (Flexera Software LLC.) O4 - HKLM..\Run: [NvBackend] C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) O4 - HKLM..\Run: [NVRaidService] C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe (NVIDIA Corporation) O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Oracle Corporation) O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.) O4 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company) O4 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - Startup: C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 2620 series.lnk = C:\Windows\System32\rundll32.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPath = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17 O7 - HKU\S-1-5-21-3442904766-2047362556-3054083087-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0 O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Télécharger tous les liens avec Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm () O9 - Extra Button: Clavier virtuel - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard) O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard) O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Analyse des liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation) O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{00D0D9BA-3A70-40B1-9D7D-A3EC3360F101}: DhcpNameServer = 192.168.0.254 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation) O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2014/12/03 16:24:17 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ] O32 - AutoRun File - [1997/08/15 16:30:06 | 000,000,030 | RH-- | M] () - E:\AUTORUN.INF -- [ CDFS ] O32 - AutoRun File - [2014/12/03 16:24:17 | 000,000,000 | RHSD | M] - F:\Autorun.inf -- [ NTFS ] O33 - MountPoints2\{0cae6368-6c34-11e4-bb66-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{0cae6368-6c34-11e4-bb66-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Installe.exe -- [1997/06/06 18:27:50 | 000,059,904 | R--- | M] (InstallShield Software Corporation) O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpReg: [b]BCSSync[/b] - hkey= - key= - C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) MsConfig - StartUpReg: [b]CCleaner Monitoring[/b] - hkey= - key= - C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd) MsConfig - StartUpReg: [b]DNS7reminder[/b] - hkey= - key= - C:\Program Files\Nuance\NaturallySpeaking12\Ereg\Ereg.exe (Nuance Communications, Inc.) MsConfig - StartUpReg: [b]ISUSPM[/b] - hkey= - key= - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Flexera Software LLC.) MsConfig - State: "startup" - 2 MsConfig - State: "services" - 2 SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe" ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4903D172-DCCB-392F-93A3-34CA9D47FE3D} - .NET Framework ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\39.0.2171.65\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.pspgru - C:\Windows\System32\PSPGRU.acm (Philips Austria GmbH - Speech Processing) Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.i420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.) PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin CREATERESTOREPOINT Restore point Set: OTL Restore Point [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014/12/03 20:43:59 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\laurent\Desktop\OTL.exe [2014/12/03 17:02:08 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\urgences s4 [2014/12/03 16:24:17 | 000,000,000 | RHSD | C] -- C:\Autorun.inf [2014/12/03 16:22:09 | 000,000,000 | ---D | C] -- C:\UsbFix [2014/12/03 12:15:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP [2014/12/03 12:15:14 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag [2014/12/03 12:15:14 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\ZHP [2014/12/02 23:57:58 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller [2014/12/02 23:37:02 | 000,052,440 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\greg.sys [2014/12/02 20:05:49 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2014/12/02 14:40:31 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\NVIDIA [2014/12/01 16:30:52 | 000,000,000 | ---D | C] -- C:\ESD [2014/12/01 11:24:34 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\1DC149D7.sys [2014/11/30 17:35:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2014/11/30 17:35:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2014/11/30 17:33:03 | 000,758,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\cohelper.dll [2014/11/30 17:32:10 | 000,000,000 | ---D | C] -- C:\NVIDIA [2014/11/30 16:28:57 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Ashampoo [2014/11/30 16:28:36 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\ashampoo [2014/11/30 16:28:36 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo [2014/11/30 16:28:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo [2014/11/30 16:28:31 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo [2014/11/30 16:23:51 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\ImgBurn [2014/11/28 04:48:35 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Microsoft Games [2014/11/27 12:12:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\FileViewPro [2014/11/27 12:12:08 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\IsolatedStorage [2014/11/27 12:12:08 | 000,000,000 | ---D | C] -- C:\ProgramData\IsolatedStorage [2014/11/27 12:11:11 | 000,000,000 | ---D | C] -- C:\Spacekace [2014/11/25 14:29:20 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\629 [2014/11/25 11:22:48 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Acronis [2014/11/25 11:19:32 | 000,234,752 | ---- | C] (Acronis) -- C:\Windows\System32\drivers\afcdp.sys [2014/11/25 11:19:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Acronis [2014/11/25 11:19:27 | 000,889,888 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\tdrpman.sys [2014/11/25 11:19:25 | 000,143,648 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib_mounter.sys [2014/11/25 11:19:23 | 000,736,192 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib.sys [2014/11/25 11:19:20 | 000,116,000 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\vididr.sys [2014/11/25 11:19:18 | 000,085,280 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\vidsflt.sys [2014/11/25 11:19:16 | 000,185,120 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\snapman.sys [2014/11/25 11:19:14 | 000,086,304 | ---- | C] (Acronis International GmbH) -- C:\Windows\System32\drivers\fltsrv.sys [2014/11/25 11:19:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis [2014/11/25 11:18:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Acronis [2014/11/25 11:18:54 | 000,000,000 | ---D | C] -- C:\Program Files\Acronis [2014/11/25 03:08:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2014/11/23 17:24:14 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\4D946C0E.sys [2014/11/23 15:57:00 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT [2014/11/22 18:24:31 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\41A64C10.sys [2014/11/22 15:21:54 | 000,000,000 | ---D | C] -- C:\ProgramData\gpggiciloackpfcihnnbnffbfffmocmh [2014/11/22 15:15:28 | 000,000,000 | ---D | C] -- C:\ProgramData\flamhmgifljieaepeijcdojafjeclepc [2014/11/22 15:06:54 | 000,000,000 | ---D | C] -- C:\ProgramData\ekmjhknldapbobpdieiadaannnjedgha [2014/11/22 15:03:04 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\FDRLab [2014/11/22 15:02:41 | 000,000,000 | ---D | C] -- C:\Program Files\FDRLab [2014/11/22 14:08:13 | 000,000,000 | ---D | C] -- C:\Program Files\Rene.E Laboratory [2014/11/18 16:15:07 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\My Cheat Tables [2014/11/18 16:14:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3 [2014/11/18 16:14:57 | 000,000,000 | ---D | C] -- C:\Program Files\Cheat Engine 6.3 [2014/11/18 14:12:07 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\dossier médical Laurent [2014/11/17 10:12:22 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\EmieUserList [2014/11/17 10:12:22 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\EmieBrowserModeList [2014/11/17 10:12:21 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\EmieSiteList [2014/11/16 13:53:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware [2014/11/16 13:53:02 | 000,075,480 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys [2014/11/16 13:53:01 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys [2014/11/16 13:53:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware [2014/11/16 13:52:23 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2014/11/16 13:52:23 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Malwarebytes [2014/11/16 13:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2014/11/16 13:52:13 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2014/11/16 13:52:13 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2014/11/16 12:53:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Borland Shared [2014/11/16 12:53:00 | 000,000,000 | ---D | C] -- C:\Program Files\ZebHelpProcess [2014/11/16 03:06:26 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll [2014/11/15 18:35:41 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\FLEXnet [2014/11/15 18:35:40 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Nuance [2014/11/15 18:35:14 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2014/11/15 18:34:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 12.0 [2014/11/15 18:33:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\IVA [2014/11/15 18:33:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nuance [2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Nuance [2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\Program Files\Nuance [2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Macrovision [2014/11/15 18:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet [2014/11/15 18:28:07 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0 [2014/11/15 17:13:49 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe [2014/11/15 17:13:46 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2014/11/15 17:13:44 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2014/11/15 17:13:43 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYAK.DLL [2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAT.DLL [2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU1.DLL [2014/11/15 17:13:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL [2014/11/15 17:13:42 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU.DLL [2014/11/15 17:13:35 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2014/11/15 17:13:33 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2014/11/15 17:05:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd [2014/11/15 17:00:56 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Skype [2014/11/15 17:00:54 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Skype [2014/11/15 17:00:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2014/11/15 17:00:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2014/11/15 17:00:41 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2014/11/15 17:00:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2014/11/15 16:54:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack [2014/11/15 16:54:03 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2014/11/15 15:51:13 | 000,000,000 | ---D | C] -- C:\ProgramData\vsosdk [2014/11/15 15:37:31 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Macromedia [2014/11/15 15:37:31 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Macromedia [2014/11/15 15:35:42 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\TeamViewer [2014/11/15 15:35:37 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer [2014/11/15 15:31:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2014/11/15 15:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2014/11/15 15:31:31 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2014/11/15 15:31:27 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2014/11/15 15:31:27 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe [2014/11/15 15:31:27 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll [2014/11/15 15:31:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2014/11/15 15:31:18 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2014/11/15 15:30:10 | 000,701,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2014/11/15 15:30:10 | 000,071,344 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2014/11/15 15:30:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed [2014/11/15 15:15:51 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\DVDFab9 [2014/11/15 15:15:51 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\DVDFab9 [2014/11/15 15:15:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9 [2014/11/15 15:15:36 | 000,000,000 | ---D | C] -- C:\Program Files\DVDFab 9 [2014/11/15 15:15:30 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Programs [2014/11/15 15:02:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pochette Express 2 [2014/11/15 15:02:01 | 000,000,000 | ---D | C] -- C:\Program Files\Pochette Express 2 [2014/11/15 15:00:13 | 000,000,000 | ---D | C] -- C:\ProgramData\DVD Shrink [2014/11/15 15:00:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Shrink [2014/11/15 15:00:12 | 000,000,000 | ---D | C] -- C:\Program Files\DVD Shrink [2014/11/15 14:59:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn [2014/11/15 14:59:30 | 000,000,000 | ---D | C] -- C:\Program Files\ImgBurn [2014/11/15 14:32:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint [2014/11/15 14:32:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2014/11/15 14:32:07 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services [2014/11/15 14:31:49 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2014/11/15 14:31:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework [2014/11/15 14:31:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition [2014/11/15 14:30:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8 [2014/11/15 14:29:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services [2014/11/15 14:29:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Microsoft Help [2014/11/15 14:29:16 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2014/11/15 14:29:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2014/11/15 14:29:04 | 000,000,000 | RH-D | C] -- C:\MSOCache [2014/11/15 14:27:43 | 000,000,000 | ---D | C] -- C:\FFOutput [2014/11/15 14:27:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory [2014/11/15 14:27:05 | 000,000,000 | ---D | C] -- C:\Program Files\FreeTime [2014/11/15 14:14:54 | 000,000,000 | ---D | C] -- C:\Program Files\LightScribe Template Labeler [2014/11/15 14:10:47 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe [2014/11/15 14:09:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LightScribe [2014/11/15 14:05:38 | 000,000,000 | ---D | C] -- C:\Users\laurent\Documents\LightScribe [2014/11/15 13:58:57 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling [2014/11/15 13:58:53 | 000,000,000 | ---D | C] -- C:\Program Files\LightScribe [2014/11/15 13:43:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2014/11/15 13:43:48 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2014/11/15 13:43:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2014/11/15 13:41:58 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Adobe [2014/11/15 13:39:39 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\OpenOffice [2014/11/15 13:29:16 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt [2014/11/15 13:22:25 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 [2014/11/15 13:21:48 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice 4 [2014/11/15 00:54:25 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Mozilla [2014/11/15 00:54:25 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Mozilla [2014/11/15 00:54:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2014/11/15 00:54:16 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service [2014/11/15 00:54:12 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2014/11/15 00:50:27 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Adobe [2014/11/15 00:43:49 | 000,000,000 | --SD | C] -- C:\Windows\System32\CompatTel [2014/11/15 00:37:35 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2014/11/14 23:46:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2014/11/14 23:46:46 | 000,000,000 | ---D | C] -- C:\Windows\Migration [2014/11/14 23:10:12 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll [2014/11/14 23:10:10 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll [2014/11/14 23:10:10 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll [2014/11/14 23:08:57 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\infocardapi.dll [2014/11/14 23:08:56 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardres.dll [2014/11/14 23:08:53 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardagt.exe [2014/11/14 23:08:51 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsWpfWrp.exe [2014/11/14 23:04:22 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe [2014/11/14 22:50:30 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL [2014/11/14 22:39:32 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2014/11/14 22:39:32 | 002,051,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2014/11/14 22:39:32 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2014/11/14 22:39:32 | 000,708,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2014/11/14 22:39:32 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2014/11/14 22:39:32 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2014/11/14 22:39:32 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll [2014/11/14 22:39:32 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2014/11/14 22:39:32 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2014/11/14 22:39:32 | 000,341,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2014/11/14 22:39:32 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2014/11/14 22:39:32 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2014/11/14 22:39:32 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2014/11/14 22:39:32 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2014/11/14 22:39:32 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2014/11/14 22:39:32 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2014/11/14 22:39:32 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2014/11/14 22:39:32 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2014/11/14 22:39:32 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2014/11/14 22:39:32 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe [2014/11/14 22:39:32 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2014/11/14 22:39:32 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2014/11/14 22:39:32 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2014/11/14 22:39:32 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll [2014/11/14 22:39:32 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2014/11/14 22:39:32 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll [2014/11/14 22:39:32 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2014/11/14 22:39:32 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2014/11/14 22:39:32 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2014/11/14 22:39:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll [2014/11/14 22:39:31 | 004,298,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2014/11/14 22:39:31 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll [2014/11/14 22:39:31 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2014/11/14 22:39:31 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2014/11/14 22:39:31 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2014/11/14 22:39:31 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2014/11/14 22:39:31 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2014/11/14 22:39:31 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll [2014/11/14 22:39:31 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2014/11/14 22:39:31 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2014/11/14 22:39:31 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2014/11/14 22:39:31 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2014/11/14 22:38:54 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll [2014/11/14 22:38:54 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll [2014/11/14 22:38:20 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe [2014/11/14 22:36:16 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2014/11/14 22:36:16 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2014/11/14 22:36:16 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2014/11/14 22:36:16 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2014/11/14 22:36:16 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2014/11/14 22:36:16 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2014/11/14 22:36:16 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2014/11/14 22:36:16 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2014/11/14 22:36:16 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2014/11/14 22:36:16 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2014/11/14 22:36:16 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2014/11/14 22:36:16 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2014/11/14 22:36:16 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2014/11/14 22:36:16 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2014/11/14 22:36:16 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2014/11/14 22:36:16 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2014/11/14 22:36:16 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2014/11/14 22:36:16 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2014/11/14 22:36:16 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2014/11/14 22:35:00 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2014/11/14 22:30:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT [2014/11/14 22:25:45 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2014/11/14 22:25:45 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2014/11/14 22:25:44 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\objsel.dll [2014/11/14 22:25:44 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cngprovider.dll [2014/11/14 22:25:44 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adprovider.dll [2014/11/14 22:25:44 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capiprovider.dll [2014/11/14 22:25:44 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpapiprovider.dll [2014/11/14 22:25:44 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dimsroam.dll [2014/11/14 22:25:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wincredprovider.dll [2014/11/14 22:25:33 | 000,919,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll [2014/11/14 22:25:32 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll [2014/11/14 22:25:32 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll [2014/11/14 22:25:32 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll [2014/11/14 22:25:32 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll [2014/11/14 22:25:32 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe [2014/11/14 22:25:26 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll [2014/11/14 22:25:26 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll [2014/11/14 22:25:24 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll [2014/11/14 22:25:24 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs [2014/11/14 22:25:24 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs [2014/11/14 22:25:24 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs [2014/11/14 22:25:24 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs [2014/11/14 22:25:24 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs [2014/11/14 22:25:24 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs [2014/11/14 22:25:24 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs [2014/11/14 22:25:24 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs [2014/11/14 22:25:24 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs [2014/11/14 22:25:24 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs [2014/11/14 22:25:23 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll [2014/11/14 22:25:23 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs [2014/11/14 22:25:23 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs [2014/11/14 22:25:23 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs [2014/11/14 22:25:23 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs [2014/11/14 22:25:18 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll [2014/11/14 22:25:08 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll [2014/11/14 22:25:08 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll [2014/11/14 22:25:05 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys [2014/11/14 22:25:01 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys [2014/11/14 22:25:00 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll [2014/11/14 22:24:26 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll [2014/11/14 22:24:26 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll [2014/11/14 22:24:25 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll [2014/11/14 22:24:19 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll [2014/11/14 22:24:13 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll [2014/11/14 22:24:11 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe [2014/11/14 22:24:11 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll [2014/11/14 22:24:07 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osk.exe [2014/11/14 22:24:05 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe [2014/11/14 22:23:56 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll [2014/11/14 22:23:50 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll [2014/11/14 22:23:50 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll [2014/11/14 22:23:50 | 000,101,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe [2014/11/14 22:23:44 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys [2014/11/14 22:23:44 | 000,187,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2014/11/14 22:23:43 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe [2014/11/14 22:23:37 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe [2014/11/14 22:23:28 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll [2014/11/14 22:23:28 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll [2014/11/14 22:23:27 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll [2014/11/14 22:23:27 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll [2014/11/14 22:23:27 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll [2014/11/14 22:23:27 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll [2014/11/14 22:23:27 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll [2014/11/14 22:23:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll [2014/11/14 22:23:24 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll [2014/11/14 22:23:24 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL [2014/11/14 22:23:22 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys [2014/11/14 22:23:22 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys [2014/11/14 22:23:21 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll [2014/11/14 22:23:05 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll [2014/11/14 22:23:05 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll [2014/11/14 22:23:05 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax [2014/11/14 22:22:59 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll [2014/11/14 22:22:59 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\generaltel.dll [2014/11/14 22:22:59 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll [2014/11/14 22:22:48 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll [2014/11/14 22:22:46 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AUDIOKSE.dll [2014/11/14 22:22:46 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll [2014/11/14 22:22:46 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDump.dll [2014/11/14 22:22:46 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll [2014/11/14 22:22:43 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll [2014/11/14 22:22:38 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll [2014/11/14 22:22:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll [2014/11/14 22:22:36 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl [2014/11/14 22:22:35 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe [2014/11/14 22:22:35 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2014/11/14 22:22:35 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll [2014/11/14 22:22:35 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll [2014/11/14 22:22:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll [2014/11/14 22:22:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll [2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll [2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll [2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll [2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll [2014/11/14 22:22:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll [2014/11/14 22:22:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll [2014/11/14 22:22:33 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll [2014/11/14 22:22:33 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll [2014/11/14 22:22:33 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll [2014/11/14 22:22:33 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll [2014/11/14 22:22:33 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll [2014/11/14 22:22:33 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll [2014/11/14 22:22:32 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL [2014/11/14 22:22:31 | 000,219,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys [2014/11/14 22:22:31 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2014/11/14 22:22:29 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll [2014/11/14 22:22:27 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2014/11/14 22:22:26 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys [2014/11/14 22:22:26 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys [2014/11/14 22:22:26 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2014/11/14 22:22:26 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2014/11/14 22:22:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll [2014/11/14 22:22:25 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll [2014/11/14 22:22:18 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll [2014/11/14 22:22:16 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys [2014/11/14 22:22:16 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys [2014/11/14 22:22:16 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iologmsg.dll [2014/11/14 22:22:14 | 002,379,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2014/11/14 22:22:13 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe [2014/11/14 22:22:12 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll [2014/11/14 22:22:08 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll [2014/11/14 22:22:08 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax [2014/11/14 22:22:07 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll [2014/11/14 22:22:06 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll [2014/11/14 22:22:05 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll [2014/11/14 22:22:03 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe [2014/11/14 22:21:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys [2014/11/14 22:21:56 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10K.DLL [2014/11/14 22:21:53 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll [2014/11/14 22:21:50 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll [2014/11/14 22:21:48 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll [2014/11/14 22:17:35 | 000,681,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll [2014/11/14 22:17:35 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll [2014/11/14 22:17:35 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll [2014/11/14 22:17:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2014/11/14 22:14:47 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe [2014/11/14 22:14:47 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe [2014/11/14 22:14:47 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe [2014/11/14 22:14:47 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe [2014/11/14 22:14:47 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll [2014/11/14 22:14:47 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll [2014/11/14 22:14:47 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll [2014/11/14 22:14:47 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll [2014/11/14 22:14:46 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll [2014/11/14 22:06:17 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys [2014/11/14 22:06:17 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll [2014/11/14 22:06:15 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys [2014/11/14 22:06:15 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys [2014/11/14 22:06:13 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe [2014/11/14 21:59:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\NVIDIA [2014/11/14 21:53:01 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard [2014/11/14 21:52:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Visan [2014/11/14 21:52:57 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Photo Creations [2014/11/14 21:52:57 | 000,000,000 | ---D | C] -- C:\Program Files\HP Photo Creations [2014/11/14 21:52:37 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\HpUpdate [2014/11/14 21:52:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP [2014/11/14 21:50:04 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2014/11/14 21:49:49 | 000,000,000 | ---D | C] -- C:\Temp [2014/11/14 21:49:39 | 000,062,936 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvshext.dll [2014/11/14 21:49:29 | 000,000,000 | ---D | C] -- C:\ProgramData\HP [2014/11/14 21:49:04 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2014/11/14 21:49:00 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation [2014/11/14 21:48:52 | 000,000,000 | ---D | C] -- C:\Program Files\HP [2014/11/14 21:48:22 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\HP [2014/11/14 21:43:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2014/11/14 21:43:47 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2014/11/14 21:40:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\SRSLabs [2014/11/14 21:40:11 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2014/11/14 21:39:57 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll [2014/11/14 21:39:57 | 000,185,584 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll [2014/11/14 21:39:57 | 000,173,296 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll [2014/11/14 21:39:57 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll [2014/11/14 21:39:56 | 001,892,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2014/11/14 21:39:56 | 000,214,368 | ---- | C] (Synopsys, Inc.) -- C:\Windows\System32\SFNHK.dll [2014/11/14 21:39:56 | 000,214,352 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXProc.dll [2014/11/14 21:39:56 | 000,078,672 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXComm.dll [2014/11/14 21:39:56 | 000,074,080 | ---- | C] (Synopsys, Inc.) -- C:\Windows\System32\SFCOM.dll [2014/11/14 21:39:56 | 000,074,064 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXSAPO.dll [2014/11/14 21:39:56 | 000,074,064 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXHAPO.dll [2014/11/14 21:39:56 | 000,074,064 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\System32\SFFXDAPO.dll [2014/11/14 21:39:56 | 000,068,960 | ---- | C] (Synopsys, Inc.) -- C:\Windows\System32\SFAPO.dll [2014/11/14 21:39:55 | 002,566,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll [2014/11/14 21:39:55 | 000,916,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInstII.dll [2014/11/14 21:39:55 | 000,782,040 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll [2014/11/14 21:39:55 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32A.dll [2014/11/14 21:39:55 | 000,013,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoLDR.dll [2014/11/14 21:39:54 | 002,474,200 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RltkAPO.dll [2014/11/14 21:39:54 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DHT32.dll [2014/11/14 21:39:54 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RP3DAA32.dll [2014/11/14 21:39:54 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32A.dll [2014/11/14 21:39:54 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32A.dll [2014/11/14 21:39:54 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32A.dll [2014/11/14 21:39:53 | 060,636,160 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat [2014/11/14 21:39:49 | 002,421,792 | ---- | C] (Fortemedia Corporation) -- C:\Windows\System32\FMAPO.dll [2014/11/14 21:39:49 | 000,182,472 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll [2014/11/14 21:39:49 | 000,095,840 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll [2014/11/14 21:39:49 | 000,092,584 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [2014/11/14 21:39:49 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information [2014/11/14 21:39:49 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2014/11/14 21:39:47 | 002,080,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2014/11/14 21:39:47 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2014/11/14 21:39:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield [2014/11/14 21:35:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com [2014/11/14 21:35:29 | 000,000,000 | ---D | C] -- C:\ProgramData\ma-config.com [2014/11/14 21:35:29 | 000,000,000 | ---D | C] -- C:\Program Files\ma-config.com [2014/11/14 21:26:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2014/11/14 21:25:19 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2014/11/14 21:25:16 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Google [2014/11/14 21:25:09 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Deployment [2014/11/14 21:25:09 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Apps [2014/11/14 21:20:54 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\IDM [2014/11/14 21:20:54 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM [2014/11/14 21:20:54 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\DMCache [2014/11/14 21:20:52 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager [2014/11/14 21:20:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager [2014/11/14 21:20:51 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager [2014/11/14 21:13:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2013 [2014/11/14 21:13:20 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP [2014/11/14 21:13:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2014/11/14 21:13:17 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab [2014/11/14 21:13:11 | 000,074,848 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klflt.sys [2014/11/14 21:13:10 | 000,597,600 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klif.sys [2014/11/14 21:13:02 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2014/11/14 21:11:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2014/11/14 21:11:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2014/11/14 21:11:16 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2014/11/14 21:08:59 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\log [2014/11/14 21:08:58 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\mes DEB [2014/11/14 21:08:58 | 000,000,000 | ---D | C] -- C:\Users\laurent\Desktop\factures [2014/11/14 20:56:58 | 000,229,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2014/11/14 20:48:28 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll [2014/11/14 20:33:21 | 002,425,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll [2014/11/14 20:33:21 | 000,045,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll [2014/11/14 20:33:16 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll [2014/11/14 20:33:16 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll [2014/11/14 20:33:16 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll [2014/11/14 20:33:16 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2014/11/14 20:33:16 | 000,000,000 | R--D | C] -- C:\Users\laurent\Searches [2014/11/14 20:33:16 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2014/11/14 20:33:16 | 000,000,000 | -H-D | C] -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned [2014/11/14 20:32:29 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll [2014/11/14 20:32:29 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe [2014/11/14 20:32:21 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Identities [2014/11/14 20:32:19 | 000,000,000 | R--D | C] -- C:\Users\laurent\Contacts [2014/11/14 20:32:14 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\VirtualStore [2014/11/14 20:32:13 | 000,000,000 | --SD | C] -- C:\Users\laurent\AppData\Roaming\Microsoft [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Videos [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Saved Games [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Pictures [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Music [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Links [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Favorites [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Downloads [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Documents [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\Desktop [2014/11/14 20:32:13 | 000,000,000 | R--D | C] -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Voisinage réseau [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Voisinage d'impression [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\Temporary Internet Files [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\SendTo [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Recent [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Modèles [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Documents\Mes vidéos [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Documents\Mes images [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Mes documents [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Menu Démarrer [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Documents\Ma musique [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Local Settings [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\Historique [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Cookies [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\Application Data [2014/11/14 20:32:13 | 000,000,000 | -HSD | C] -- C:\Users\laurent\AppData\Local\Application Data [2014/11/14 20:32:13 | 000,000,000 | -H-D | C] -- C:\Users\laurent\AppData [2014/11/14 20:32:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Temp [2014/11/14 20:32:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Local\Microsoft [2014/11/14 20:32:13 | 000,000,000 | ---D | C] -- C:\Users\laurent\AppData\Roaming\Media Center Programs [2014/11/14 20:32:00 | 000,000,000 | -HSD | C] -- C:\Recovery [2014/11/14 20:32:00 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs [2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles [2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes vidéos [2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes images [2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer [2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Ma musique [2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoris [2014/11/14 20:31:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau [2014/11/14 20:31:55 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2014/11/14 20:26:00 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2014/11/14 20:25:18 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2014/11/07 08:21:40 | 000,115,240 | ---- | C] (Tonec Inc.) -- C:\Windows\System32\drivers\idmwfp.sys [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014/12/03 20:49:50 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2014/12/03 20:44:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\laurent\Desktop\OTL.exe [2014/12/03 20:38:06 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2014/12/03 20:32:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014/12/03 20:30:05 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014/12/03 18:47:48 | 000,026,544 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014/12/03 18:47:48 | 000,026,544 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014/12/03 18:47:02 | 000,746,916 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2014/12/03 18:47:02 | 000,653,526 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2014/12/03 18:47:02 | 000,149,440 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2014/12/03 18:47:02 | 000,121,398 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2014/12/03 18:41:05 | 000,001,998 | ---- | M] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 2620 series.lnk [2014/12/03 18:41:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014/12/03 18:40:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014/12/03 18:40:24 | 2415,304,704 | -HS- | M] () -- C:\hiberfil.sys [2014/12/03 16:40:47 | 000,013,545 | ---- | M] () -- C:\Users\laurent\Desktop\Capture 2.PNG [2014/12/03 16:36:04 | 000,033,612 | ---- | M] () -- C:\Users\laurent\Desktop\Capture.PNG [2014/12/03 16:22:12 | 000,001,448 | ---- | M] () -- C:\Users\laurent\Desktop\UsbFix.lnk [2014/12/03 16:15:41 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2014/12/03 12:35:41 | 000,001,795 | ---- | M] () -- C:\Users\laurent\AppData\Roaming\SAS7_000.DAT [2014/12/03 12:18:56 | 000,000,999 | ---- | M] () -- C:\Users\Public\Desktop\ZHP.lnk [2014/12/03 12:17:40 | 000,000,000 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin [2014/12/03 12:15:16 | 000,001,937 | ---- | M] () -- C:\Users\laurent\Desktop\ZHPFix.lnk [2014/12/03 12:15:16 | 000,001,810 | ---- | M] () -- C:\Users\laurent\Desktop\ZHPDiag.lnk [2014/12/02 23:58:01 | 000,034,808 | ---- | M] () -- C:\Windows\System32\drivers\TrueSight.sys [2014/12/02 23:37:02 | 000,052,440 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\greg.sys [2014/12/02 22:14:54 | 000,001,064 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2014/12/01 16:03:20 | 000,001,270 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2014/12/01 16:03:20 | 000,001,158 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014/12/01 16:03:20 | 000,001,011 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014/12/01 16:03:19 | 000,001,246 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014/12/01 11:24:34 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\1DC149D7.sys [2014/11/30 16:28:35 | 000,002,248 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Ashampoo Burning Studio 6.lnk [2014/11/30 16:28:35 | 000,002,224 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 6.lnk [2014/11/26 14:39:36 | 000,134,442 | ---- | M] () -- C:\Users\laurent\Desktop\Mobile_Bouyguestelecom_Facture_Octobre2014.pdf [2014/11/26 12:32:08 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2014/11/26 12:32:08 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2014/11/25 11:19:32 | 000,234,752 | ---- | M] (Acronis) -- C:\Windows\System32\drivers\afcdp.sys [2014/11/25 11:19:27 | 000,889,888 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\tdrpman.sys [2014/11/25 11:19:25 | 000,143,648 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib_mounter.sys [2014/11/25 11:19:23 | 000,736,192 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\tib.sys [2014/11/25 11:19:20 | 000,116,000 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\vididr.sys [2014/11/25 11:19:18 | 000,085,280 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\vidsflt.sys [2014/11/25 11:19:16 | 000,185,120 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\snapman.sys [2014/11/25 11:19:14 | 000,086,304 | ---- | M] (Acronis International GmbH) -- C:\Windows\System32\drivers\fltsrv.sys [2014/11/25 11:19:06 | 000,001,163 | ---- | M] () -- C:\Users\Public\Desktop\Acronis True Image 2014.lnk [2014/11/25 03:31:44 | 000,428,016 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2014/11/24 09:41:11 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\4D946C0E.sys [2014/11/22 18:24:31 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\41A64C10.sys [2014/11/21 06:14:20 | 000,051,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys [2014/11/21 06:14:10 | 000,075,480 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys [2014/11/21 06:14:06 | 000,023,256 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2014/11/18 16:14:59 | 000,001,047 | ---- | M] () -- C:\Users\laurent\Desktop\Cheat Engine.lnk [2014/11/16 04:01:11 | 000,002,503 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2014/11/15 18:34:23 | 000,002,787 | ---- | M] () -- C:\Users\Public\Desktop\Dragon NaturallySpeaking 12.0.lnk [2014/11/15 15:35:40 | 000,001,124 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk [2014/11/15 15:31:19 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2014/11/15 15:31:19 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2014/11/15 15:31:19 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe [2014/11/15 15:31:19 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll [2014/11/15 15:15:46 | 000,000,981 | ---- | M] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 9.lnk [2014/11/15 15:15:46 | 000,000,957 | ---- | M] () -- C:\Users\Public\Desktop\DVDFab 9.lnk [2014/11/15 15:02:08 | 000,001,017 | ---- | M] () -- C:\Users\Public\Desktop\Pochette Express 2.lnk [2014/11/15 15:00:12 | 000,000,957 | ---- | M] () -- C:\Users\laurent\Desktop\DVD Shrink 3.2.lnk [2014/11/15 14:59:31 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\ImgBurn.lnk [2014/11/15 14:27:21 | 000,001,160 | ---- | M] () -- C:\Users\laurent\Desktop\Format Factory.lnk [2014/11/15 14:22:52 | 000,001,647 | ---- | M] () -- C:\Users\laurent\Desktop\TemplateLabeler.lnk [2014/11/15 14:09:58 | 000,002,007 | ---- | M] () -- C:\Users\Public\Desktop\LightScribe.lnk [2014/11/15 13:44:01 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2014/11/15 13:22:25 | 000,001,034 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk [2014/11/14 22:51:10 | 000,145,040 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\kneps.sys [2014/11/14 22:51:10 | 000,044,000 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\kltdi.sys [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klmouflt.sys [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klkbdflt.sys [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klim6.sys [2014/11/14 22:51:09 | 000,597,600 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klif.sys [2014/11/14 22:51:09 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\kl1.sys [2014/11/14 22:51:09 | 000,074,848 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\System32\drivers\klflt.sys [2014/11/14 22:39:32 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2014/11/14 22:39:32 | 002,051,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2014/11/14 22:39:32 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll [2014/11/14 22:39:32 | 000,708,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2014/11/14 22:39:32 | 000,688,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2014/11/14 22:39:32 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll [2014/11/14 22:39:32 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2014/11/14 22:39:32 | 000,418,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2014/11/14 22:39:32 | 000,341,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2014/11/14 22:39:32 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2014/11/14 22:39:32 | 000,285,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2014/11/14 22:39:32 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2014/11/14 22:39:32 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll [2014/11/14 22:39:32 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2014/11/14 22:39:32 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2014/11/14 22:39:32 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2014/11/14 22:39:32 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2014/11/14 22:39:32 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2014/11/14 22:39:32 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe [2014/11/14 22:39:32 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2014/11/14 22:39:32 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2014/11/14 22:39:32 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2014/11/14 22:39:32 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll [2014/11/14 22:39:32 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2014/11/14 22:39:32 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll [2014/11/14 22:39:32 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2014/11/14 22:39:32 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2014/11/14 22:39:32 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2014/11/14 22:39:32 | 000,016,284 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2014/11/14 22:39:32 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll [2014/11/14 22:39:31 | 004,298,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2014/11/14 22:39:31 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll [2014/11/14 22:39:31 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2014/11/14 22:39:31 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2014/11/14 22:39:31 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2014/11/14 22:39:31 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2014/11/14 22:39:31 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2014/11/14 22:39:31 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll [2014/11/14 22:39:31 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2014/11/14 22:39:31 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2014/11/14 22:39:31 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2014/11/14 22:39:31 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2014/11/14 22:38:54 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll [2014/11/14 22:38:54 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll [2014/11/14 22:38:20 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe [2014/11/14 22:36:16 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2014/11/14 22:36:16 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2014/11/14 22:36:16 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2014/11/14 22:36:16 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2014/11/14 22:36:16 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2014/11/14 22:36:16 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2014/11/14 22:36:16 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2014/11/14 22:36:16 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2014/11/14 22:36:16 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2014/11/14 22:36:16 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2014/11/14 22:36:16 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll [2014/11/14 22:36:16 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll [2014/11/14 22:36:16 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll [2014/11/14 22:36:16 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll [2014/11/14 22:36:16 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll [2014/11/14 22:36:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll [2014/11/14 22:36:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll [2014/11/14 22:36:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll [2014/11/14 22:36:16 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll [2014/11/14 22:35:00 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2014/11/14 21:52:20 | 000,002,236 | ---- | M] () -- C:\Users\Public\Desktop\HP Officejet 2620 series.lnk [2014/11/14 21:48:43 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini [2014/11/14 21:43:48 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2014/11/14 21:20:52 | 000,000,983 | ---- | M] () -- C:\Users\laurent\Desktop\Internet Download Manager.lnk [2014/11/14 21:13:35 | 000,001,081 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk [2014/11/14 20:29:31 | 000,214,678 | ---- | M] () -- C:\Windows\System32\license.rtf [2014/11/14 20:27:29 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014/11/06 03:51:33 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe [2014/11/05 18:50:47 | 000,254,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\generaltel.dll [2014/11/05 18:50:28 | 000,203,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll [2014/11/05 18:47:40 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll [2014/11/04 14:30:58 | 000,229,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014/12/03 20:49:50 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin [2014/12/03 16:40:47 | 000,013,545 | ---- | C] () -- C:\Users\laurent\Desktop\Capture 2.PNG [2014/12/03 16:36:04 | 000,033,612 | ---- | C] () -- C:\Users\laurent\Desktop\Capture.PNG [2014/12/03 16:22:12 | 000,001,448 | ---- | C] () -- C:\Users\laurent\Desktop\UsbFix.lnk [2014/12/03 12:18:56 | 000,000,999 | ---- | C] () -- C:\Users\Public\Desktop\ZHP.lnk [2014/12/03 12:17:40 | 000,000,000 | ---- | C] () -- C:\PhysicalDisk0_MBR.bin [2014/12/03 12:15:16 | 000,001,937 | ---- | C] () -- C:\Users\laurent\Desktop\ZHPFix.lnk [2014/12/03 12:15:16 | 000,001,810 | ---- | C] () -- C:\Users\laurent\Desktop\ZHPDiag.lnk [2014/12/02 23:58:01 | 000,034,808 | ---- | C] () -- C:\Windows\System32\drivers\TrueSight.sys [2014/11/30 17:33:03 | 000,010,084 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin [2014/11/30 16:28:35 | 000,002,248 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Ashampoo Burning Studio 6.lnk [2014/11/30 16:28:35 | 000,002,224 | ---- | C] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 6.lnk [2014/11/26 14:39:46 | 000,134,442 | ---- | C] () -- C:\Users\laurent\Desktop\Mobile_Bouyguestelecom_Facture_Octobre2014.pdf [2014/11/25 11:19:06 | 000,001,163 | ---- | C] () -- C:\Users\Public\Desktop\Acronis True Image 2014.lnk [2014/11/18 16:14:59 | 000,001,047 | ---- | C] () -- C:\Users\laurent\Desktop\Cheat Engine.lnk [2014/11/16 13:52:14 | 000,001,064 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2014/11/16 12:54:28 | 000,013,030 | ---- | C] () -- C:\PDOXUSRS.NET [2014/11/16 12:53:14 | 000,183,808 | ---- | C] () -- C:\Windows\System32\BDEADMIN.CPL [2014/11/15 18:39:56 | 000,001,795 | ---- | C] () -- C:\Users\laurent\AppData\Roaming\SAS7_000.DAT [2014/11/15 18:34:23 | 000,002,787 | ---- | C] () -- C:\Users\Public\Desktop\Dragon NaturallySpeaking 12.0.lnk [2014/11/15 17:00:42 | 000,002,503 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2014/11/15 16:54:08 | 000,218,712 | ---- | C] () -- C:\Windows\System32\unrar.dll [2014/11/15 15:35:40 | 000,001,136 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk [2014/11/15 15:35:40 | 000,001,124 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk [2014/11/15 15:30:10 | 000,001,002 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014/11/15 15:15:46 | 000,000,981 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 9.lnk [2014/11/15 15:15:46 | 000,000,957 | ---- | C] () -- C:\Users\Public\Desktop\DVDFab 9.lnk [2014/11/15 15:02:08 | 000,001,017 | ---- | C] () -- C:\Users\Public\Desktop\Pochette Express 2.lnk [2014/11/15 15:00:12 | 000,000,957 | ---- | C] () -- C:\Users\laurent\Desktop\DVD Shrink 3.2.lnk [2014/11/15 14:59:31 | 000,001,827 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk [2014/11/15 14:59:31 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\ImgBurn.lnk [2014/11/15 14:27:21 | 000,001,160 | ---- | C] () -- C:\Users\laurent\Desktop\Format Factory.lnk [2014/11/15 14:22:52 | 000,001,647 | ---- | C] () -- C:\Users\laurent\Desktop\TemplateLabeler.lnk [2014/11/15 14:09:58 | 000,002,007 | ---- | C] () -- C:\Users\Public\Desktop\LightScribe.lnk [2014/11/15 13:44:01 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2014/11/15 13:44:01 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2014/11/15 13:22:25 | 000,001,034 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk [2014/11/15 00:54:18 | 000,001,023 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2014/11/15 00:54:18 | 000,001,011 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014/11/14 23:10:10 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf [2014/11/14 22:39:32 | 000,016,284 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2014/11/14 22:06:16 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf [2014/11/14 21:56:23 | 000,001,998 | ---- | C] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 2620 series.lnk [2014/11/14 21:52:20 | 000,002,236 | ---- | C] () -- C:\Users\Public\Desktop\HP Officejet 2620 series.lnk [2014/11/14 21:49:39 | 003,826,628 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin [2014/11/14 21:48:43 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini [2014/11/14 21:43:48 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2014/11/14 21:39:54 | 001,099,203 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2014/11/14 21:26:08 | 000,001,270 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2014/11/14 21:26:08 | 000,001,246 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014/11/14 21:25:23 | 000,001,058 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014/11/14 21:25:22 | 000,001,054 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014/11/14 21:20:52 | 000,000,983 | ---- | C] () -- C:\Users\laurent\Desktop\Internet Download Manager.lnk [2014/11/14 21:15:07 | 000,001,158 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014/11/14 21:13:45 | 000,001,081 | ---- | C] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk [2014/11/14 21:05:16 | 000,340,998 | ---- | C] () -- C:\Users\laurent\Documents\microbiologie 1.jpeg [2014/11/14 21:05:16 | 000,331,207 | ---- | C] () -- C:\Users\laurent\Documents\mutuelle + CV.jpeg [2014/11/14 21:05:16 | 000,312,224 | ---- | C] () -- C:\Users\laurent\Documents\note d'honoraires.jpeg [2014/11/14 21:05:16 | 000,228,838 | ---- | C] () -- C:\Users\laurent\Documents\microbiologie 2.jpeg.jpeg [2014/11/14 20:33:17 | 000,001,164 | ---- | C] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2014/11/14 20:32:13 | 000,000,290 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2014/11/14 20:32:13 | 000,000,272 | ---- | C] () -- C:\Users\laurent\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2014/11/14 20:29:17 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2014/11/14 20:29:10 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2014/11/14 20:27:29 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014/11/14 20:26:00 | 2415,304,704 | -HS- | C] () -- C:\hiberfil.sys [color=#E56717]========== ZeroAccess Check ==========[/color] [2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014/06/25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2014/11/25 14:29:20 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\629 [2014/11/25 11:22:48 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Acronis [2014/11/30 16:28:57 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Ashampoo [2014/12/03 18:39:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DMCache [2014/11/15 15:15:56 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DVDFab9 [2014/11/22 15:03:04 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\FDRLab [2014/11/15 14:08:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IDM [2014/12/01 14:20:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ImgBurn [2014/11/27 12:12:08 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IsolatedStorage [2014/11/15 18:35:40 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Nuance [2014/11/15 13:39:39 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\OpenOffice [2014/11/26 22:56:14 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\TeamViewer [2014/12/03 12:18:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ZHP [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color] [color=#A23BEC]< %APPDATA%\*. >[/color] [2014/11/25 14:29:20 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\629 [2014/11/25 11:22:48 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Acronis [2014/11/15 13:52:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Adobe [2014/11/30 16:28:57 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Ashampoo [2014/12/03 18:39:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DMCache [2014/11/15 15:15:56 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\DVDFab9 [2014/11/22 15:03:04 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\FDRLab [2014/11/15 18:35:41 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\FLEXnet [2014/11/21 22:22:10 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\HpUpdate [2014/11/14 20:32:21 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Identities [2014/11/15 14:08:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IDM [2014/12/01 14:20:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ImgBurn [2014/11/27 12:12:08 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\IsolatedStorage [2014/11/15 15:37:31 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Macromedia [2014/11/16 13:53:05 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Malwarebytes [2011/04/12 02:44:38 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Media Center Programs [2014/11/27 12:19:56 | 000,000,000 | --SD | M] -- C:\Users\laurent\AppData\Roaming\Microsoft [2014/11/15 00:54:28 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Mozilla [2014/11/15 18:35:40 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Nuance [2014/12/02 14:40:31 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\NVIDIA [2014/11/15 13:39:39 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\OpenOffice [2014/12/02 21:31:59 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\Skype [2014/11/26 22:56:14 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\TeamViewer [2014/12/03 12:18:13 | 000,000,000 | ---D | M] -- C:\Users\laurent\AppData\Roaming\ZHP [color=#A23BEC]< %APPDATA%\*.exe /s >[/color] [2014/11/14 21:22:47 | 006,339,648 | ---- | M] (Tonec Inc.) -- C:\Users\laurent\AppData\Roaming\IDM\idmupdt.exe [2014/11/15 14:05:38 | 000,281,894 | R--- | M] () -- C:\Users\laurent\AppData\Roaming\Microsoft\Installer\{6BD97765-3ABB-4025-8F71-FAF86E57DD35}\ARPPRODUCTICON.exe [color=#A23BEC]< %temp%\*.exe /s >[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\consrv.dll >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [2009/07/14 02:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\LocationApi.dll [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [2014/11/14 22:51:09 | 000,135,776 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kl1.sys [2014/11/14 22:51:09 | 000,074,848 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klflt.sys [2014/11/14 22:51:09 | 000,597,600 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klif.sys [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klim6.sys [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klkbdflt.sys [2014/11/14 22:51:10 | 000,025,696 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klmouflt.sys [2014/11/14 22:51:10 | 000,044,000 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kltdi.sys [2014/11/14 22:51:10 | 000,145,040 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kneps.sys [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color] [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2011/02/26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe [2010/11/20 22:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe [2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe [2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color] [2009/07/14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\System32\services.exe [2009/07/14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color] [2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe [2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe [2014/11/21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2010/11/20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe [2010/11/20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [color=#A23BEC]< MD5 for: WININIT.EXE >[/color] [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2014/07/16 03:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe [2014/07/17 02:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe [2014/07/17 02:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe [2014/11/21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe [2010/11/20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe [2014/03/04 10:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe [2014/03/04 11:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s >[/color] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >[/color] [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color] "Debug" = "" = mnmsrvc "Kmode" = \SystemRoot\System32\win32k.sys "Optional" = Posix [binary data] "Posix" = %SystemRoot%\system32\psxss.exe "Required" = DebugWindows [binary data] "Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\CSRSS] "CsrSrvSharedSectionBase" = 2137980928 [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s >[/color] "ProfilesDirectory" = %SystemDrive%\Users -- [2014/11/14 20:32:10 | 000,000,000 | R--D | M] "Default" = %SystemDrive%\Users\Default -- [2014/11/14 20:31:59 | 000,000,000 | RH-D | M] "Public" = %SystemDrive%\Users\Public -- [2014/11/15 14:08:37 | 000,000,000 | R--D | M] "ProgramData" = %SystemDrive%\ProgramData -- [2014/12/02 23:57:58 | 000,000,000 | -H-D | M] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18] "Flags" = 12 "State" = 0 "RefCount" = 1 "Sid" = 01 01 00 00 00 00 00 05 12 00 00 00 [binary data] "ProfileImagePath" = %systemroot%\system32\config\systemprofile -- [2014/11/17 00:21:47 | 000,000,000 | ---D | M] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19] "ProfileImagePath" = C:\Windows\ServiceProfiles\LocalService -- [2014/12/01 10:45:26 | 000,000,000 | ---D | M] "Flags" = 0 "State" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20] "ProfileImagePath" = C:\Windows\ServiceProfiles\NetworkService -- [2014/12/01 10:45:26 | 000,000,000 | ---D | M] "Flags" = 0 "State" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3442904766-2047362556-3054083087-1001] "ProfileImagePath" = C:\Users\laurent -- [2014/11/14 20:33:16 | 000,000,000 | ---D | M] "Flags" = 0 "State" = 0 "Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 BE 8E 36 CD FC 45 08 7A 0F 9C 09 B6 E9 03 00 00 [binary data] "ProfileLoadTimeLow" = 0 "ProfileLoadTimeHigh" = 0 "RefCount" = 4 "RunLogonScriptSync" = 0 [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color] HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation) [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color] HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2014/11/14 05:22:22 | 000,906,088 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2014/11/14 03:42:14 | 000,275,568 | ---- | M] (Mozilla Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2014/11/14 22:15:26 | 000,856,904 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide [2014/11/14 22:39:32 | 000,683,008 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2014/11/14 22:39:32 | 000,815,280 | ---- | M] (Microsoft Corporation) [color=#A23BEC]< nslookup google.fr /c >[/color] Serveur : UnKnown Address: 192.168.0.254 Nom : GOOGLE.FR Addresses: 2a00:1450:400c:c02::5e 74.125.133.94 [color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color] [C:\Windows\AppPatch\nbin] -> -> Unknown point type [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\note d'honoraires.jpeg:3or4kl4x13tuuug3Byamue2s4b @Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\mutuelle + CV.jpeg:3or4kl4x13tuuug3Byamue2s4b @Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\microbiologie 2.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b @Alternate Data Stream - 164 bytes -> C:\Users\laurent\Documents\microbiologie 1.jpeg:3or4kl4x13tuuug3Byamue2s4b @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:7FFED16F < End of report >