OTL logfile created on: 2014-03-12 14:24:27 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Utilisateur\Downloads
 Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd
 
1,97 Gb Total Physical Memory | 0,58 Gb Available Physical Memory | 29,54% Memory free
3,55 Gb Paging File | 1,38 Gb Available in Paging File | 38,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465,75 Gb Total Space | 131,17 Gb Free Space | 28,16% Space Free | Partition Type: NTFS
Drive D: | 1397,26 Gb Total Space | 902,97 Gb Free Space | 64,62% Space Free | Partition Type: NTFS
 
Computer Name: UTILISAT-8CD43B | User Name: Utilisateur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Users\Utilisateur\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (Adobe Systems, Inc.)
PRC - C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE (Microsoft Corporation)
PRC - C:\ProgramData\SearchDonkey\SearchDonkeyService.exe (WebAppTech Coding, LLC)
PRC - C:\ProgramData\SearchDonkey\SearchDonkey.exe (WebAppTech Coding, LLC)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe (Apple Inc.)
PRC - C:\Windows\System32\SkyDrive.exe (Microsoft Corporation)
PRC - C:\Users\Utilisateur\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
PRC - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
PRC - C:\Program Files\Common Files\Apple\Internet Services\AppleIEDAV.exe (Apple Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe (Apple Inc.)
PRC - C:\Windows\System32\taskhostex.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\InputMethod\KOR\KorIME.exe (Microsoft Corporation)
PRC - C:\Windows\System32\dasHost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
PRC - C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation)
PRC - C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe (Memeo)
PRC - C:\Program Files\Seagate\Seagate Dashboard\MemeoDashboard.exe (Memeo)
PRC - C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe (Memeo)
PRC - C:\Program Files\Memeo\AutoBackup\InstantBackup.exe ()
PRC - C:\Program Files\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Printer Pro Desktop\PrinterProDesktop.exe ()
PRC - C:\Program Files\Seagate\Seagate Dashboard\HipServAgent\HipServAgent.exe (Axentra Corporation)
PRC - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.)
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - c:\users\utilis~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxcl_o8.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
MOD - C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll ()
MOD - C:\Windows\System32\SearchDonkey.E3E38E2B3C8C.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Users\Utilisateur\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Users\Utilisateur\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\Plugins\Memeo.Dashboard.SeagateSharePlusPlugin.dll ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\Plugins\fr-FR\Memeo.Dashboard.VideoTutorialsPlugin.resources.dll ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\Plugins\fr-FR\Memeo.Dashboard.TroubleshootingPlugin.resources.dll ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\Plugins\fr-FR\Memeo.Dashboard.SeagateSharePlusPlugin.resources.dll ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\Memeo.Progress.dll ()
MOD - C:\Program Files\Memeo\AutoBackup\fr-FR\InstantBackup.resources.dll ()
MOD - C:\Program Files\Memeo\AutoBackup\fr-FR\Memeo.Client.UI.resources.dll ()
MOD - C:\Program Files\Memeo\AutoBackup\Memeo.Client.UI.dll ()
MOD - C:\Program Files\Memeo\AutoBackup\Memeo.Client.DriveDetection.dll ()
MOD - C:\Program Files\Memeo\AutoBackup\InstantBackup.exe ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\Plugins\Memeo.Dashboard.VideoTutorialsPlugin.dll ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\Plugins\Memeo.Dashboard.TroubleshootingPlugin.dll ()
MOD - C:\Program Files\Notepad++\NppShell_05.dll ()
MOD - C:\Program Files\Printer Pro Desktop\PrinterProDesktop.exe ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\HipServAgent\libxml2.dll ()
MOD - C:\Program Files\Seagate\Seagate Dashboard\HipServAgent\libupnp.dll ()
MOD - C:\Program Files\Memeo\AutoBackup\sqlite3.DLL ()
MOD - C:\PROGRA~1\COMMON~1\Memeo\ProfMan.dll ()
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (SearchDonkey) -- C:\ProgramData\SearchDonkey\SearchDonkeyService.exe (WebAppTech Coding, LLC)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (IEEtwCollectorService) -- C:\WINDOWS\System32\IEEtwCollector.exe (Microsoft Corporation)
SRV - (ClickToRunSvc) -- C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe (Microsoft Corporation)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (WSService) -- C:\Windows\System32\WSService.dll (Microsoft Corporation)
SRV - (BrokerInfrastructure) -- C:\Windows\System32\bisrv.dll (Microsoft Corporation)
SRV - (SystemEventsBroker) -- C:\Windows\System32\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV - (AppXSvc) -- C:\Windows\System32\AppXDeploymentServer.dll (Microsoft Corporation)
SRV - (workfolderssvc) -- C:\Windows\System32\workfolderssvc.dll (Microsoft Corporation)
SRV - (AppReadiness) -- C:\Windows\System32\AppReadiness.dll (Microsoft Corporation)
SRV - (wlidsvc) -- C:\Windows\System32\wlidsvc.dll (Microsoft Corporation)
SRV - (lfsvc) -- C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation)
SRV - (Wcmsvc) -- C:\Windows\System32\wcmsvc.dll (Microsoft Corporation)
SRV - (MsKeyboardFilter) -- C:\Windows\System32\KeyboardFilterSvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WdNisSvc) -- C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (PrintNotify) -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll (Microsoft Corporation)
SRV - (WEPHOSTSVC) -- C:\Windows\System32\wephostsvc.dll (Microsoft Corporation)
SRV - (EFS) -- C:\Windows\System32\efssvc.dll (Microsoft Corporation)
SRV - (WiaRpc) -- C:\Windows\System32\wiarpc.dll (Microsoft Corporation)
SRV - (StorSvc) -- C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (svsvc) -- C:\Windows\System32\svsvc.dll (Microsoft Corporation)
SRV - (fhsvc) -- C:\Windows\System32\fhsvc.dll (Microsoft Corporation)
SRV - (NcaSvc) -- C:\Windows\System32\NcaSvc.dll (Microsoft Corporation)
SRV - (vmicvss) -- C:\Windows\System32\icsvc.dll (Microsoft Corporation)
SRV - (vmictimesync) -- C:\Windows\System32\icsvc.dll (Microsoft Corporation)
SRV - (vmicshutdown) -- C:\Windows\System32\icsvc.dll (Microsoft Corporation)
SRV - (vmicrdv) -- C:\Windows\System32\icsvc.dll (Microsoft Corporation)
SRV - (vmickvpexchange) -- C:\Windows\System32\icsvc.dll (Microsoft Corporation)
SRV - (vmicheartbeat) -- C:\Windows\System32\icsvc.dll (Microsoft Corporation)
SRV - (vmicguestinterface) -- C:\Windows\System32\icsvc.dll (Microsoft Corporation)
SRV - (smphost) -- C:\Windows\System32\smphost.dll (Microsoft Corporation)
SRV - (ScDeviceEnum) -- C:\Windows\System32\ScDeviceEnum.dll (Microsoft Corporation)
SRV - (KeyIso) -- C:\Windows\System32\keyiso.dll (Microsoft Corporation)
SRV - (TimeBroker) -- C:\Windows\System32\TimeBrokerServer.dll (Microsoft Corporation)
SRV - (netprofm) -- C:\Windows\System32\netprofmsvc.dll (Microsoft Corporation)
SRV - (NcbService) -- C:\Windows\System32\ncbservice.dll (Microsoft Corporation)
SRV - (VaultSvc) -- C:\Windows\System32\vaultsvc.dll (Microsoft Corporation)
SRV - (DeviceAssociationService) -- C:\Windows\System32\das.dll (Microsoft Corporation)
SRV - (AudioEndpointBuilder) -- C:\Windows\System32\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV - (LSM) -- C:\Windows\System32\lsm.dll (Microsoft Corporation)
SRV - (DsmSvc) -- C:\Windows\System32\DeviceSetupManager.dll (Microsoft Corporation)
SRV - (NcdAutoSetup) -- C:\Windows\System32\NcdAutoSetup.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (TomTomHOMEService) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (SetupARService) -- C:\Program Files\Realtek\Audio\SetupAfterRebootService.exe ()
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (maconfservice) -- C:\Program Files\ma-config.com\maconfservice.exe (CybelSoft)
SRV - (SeagateDashboardService) -- C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe (Memeo)
SRV - (MemeoBackgroundService) -- C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe (Memeo)
SRV - (BrYNSvc) -- C:\Program Files\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (MpKsl646973d5) -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{70297EA9-0F0D-4236-BB92-025690B0D2B6}\MpKsl646973d5.sys File not found
DRV - (ssmdrv) -- C:\Windows\System32\Drivers\ssmdrv.sys (Avira GmbH)
DRV - (avipbb) -- C:\Windows\System32\Drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- C:\Windows\System32\Drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avkmgr) -- C:\Windows\System32\Drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (intelpep) -- C:\Windows\System32\Drivers\intelpep.sys (Microsoft Corporation)
DRV - (USBXHCI) -- C:\Windows\System32\Drivers\USBXHCI.SYS (Microsoft Corporation)
DRV - (pdc) -- C:\Windows\System32\Drivers\pdc.sys (Microsoft Corporation)
DRV - (SerCx2) -- C:\Windows\System32\Drivers\SerCx2.sys (Microsoft Corporation)
DRV - (WFPLWFS) -- C:\Windows\System32\Drivers\wfplwfs.sys (Microsoft Corporation)
DRV - (stornvme) -- C:\Windows\System32\Drivers\stornvme.sys (Microsoft Corporation)
DRV - (spaceport) -- C:\Windows\System32\Drivers\spaceport.sys (Microsoft Corporation)
DRV - (USBHUB3) -- C:\Windows\System32\Drivers\USBHUB3.SYS (Microsoft Corporation)
DRV - (VerifierExt) -- C:\Windows\System32\Drivers\VerifierExt.sys (Microsoft Corporation)
DRV - (kbldfltr) -- C:\Windows\System32\Drivers\kbldfltr.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\Drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (terminpt) -- C:\Windows\System32\Drivers\terminpt.sys (Microsoft Corporation)
DRV - (condrv) -- C:\Windows\System32\Drivers\condrv.sys (Microsoft Corporation)
DRV - (dam) -- C:\Windows\System32\Drivers\dam.sys (Microsoft Corporation)
DRV - (acpiex) -- C:\Windows\System32\Drivers\acpiex.sys (Microsoft Corporation)
DRV - (TPM) -- C:\Windows\System32\Drivers\tpm.sys (Microsoft Corporation)
DRV - (mvumis) -- C:\Windows\System32\Drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV - (msgpiowin32) -- C:\Windows\System32\Drivers\msgpiowin32.sys (Microsoft Corporation)
DRV - (GPIOClx0101) -- C:\Windows\System32\Drivers\msgpioclx.sys (Microsoft Corporation)
DRV - (LSI_SAS3) -- C:\Windows\System32\Drivers\lsi_sas3.sys (LSI Corporation)
DRV - (LSI_SSS) -- C:\Windows\System32\Drivers\lsi_sss.sys (LSI Corporation)
DRV - (3ware) -- C:\Windows\System32\Drivers\3ware.sys (LSI)
DRV - (ADP80XX) -- C:\Windows\System32\Drivers\adp80xx.sys (PMC-Sierra)
DRV - (EhStorTcgDrv) -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV - (EhStorClass) -- C:\Windows\System32\Drivers\EhStorClass.sys (Microsoft Corporation)
DRV - (VSTXRAID) -- C:\Windows\System32\Drivers\VSTXRAID.SYS (VIA Corporation)
DRV - (UCX01000) -- C:\Windows\System32\Drivers\UCX01000.SYS (Microsoft Corporation)
DRV - (storahci) -- C:\Windows\System32\Drivers\storahci.sys (Microsoft Corporation)
DRV - (sdstor) -- C:\Windows\System32\Drivers\sdstor.sys (Microsoft Corporation)
DRV - (SpbCx) -- C:\Windows\System32\Drivers\SpbCx.sys (Microsoft Corporation)
DRV - (SerCx) -- C:\Windows\System32\Drivers\SerCx.sys (Microsoft Corporation)
DRV - (UASPStor) -- C:\Windows\System32\Drivers\uaspstor.sys (Microsoft Corporation)
DRV - (cnghwassist) -- C:\Windows\System32\Drivers\cnghwassist.sys (Microsoft Corporation)
DRV - (wpcfltr) -- C:\Windows\System32\Drivers\wpcfltr.sys (Microsoft Corporation)
DRV - (CLFS) -- C:\Windows\System32\Drivers\clfs.sys (Microsoft Corporation)
DRV - (UEFI) -- C:\Windows\System32\Drivers\uefi.sys (Microsoft Corporation)
DRV - (WpdUpFltr) -- C:\Windows\System32\Drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV - (WdNisDrv) -- C:\Windows\System32\Drivers\WdNisDrv.sys (Microsoft Corporation)
DRV - (WdFilter) -- C:\Windows\System32\Drivers\WdFilter.sys (Microsoft Corporation)
DRV - (vmbus) -- C:\Windows\System32\Drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\Drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\Drivers\storvsc.sys (Microsoft Corporation)
DRV - (WdBoot) -- C:\Windows\System32\Drivers\WdBoot.sys (Microsoft Corporation)
DRV - (WSDPrintDevice) -- C:\Windows\System32\Drivers\WSDPrint.sys (Microsoft Corporation)
DRV - (ahcache) -- C:\Windows\System32\Drivers\ahcache.sys (Microsoft Corporation)
DRV - (WSDScan) -- C:\Windows\System32\Drivers\WSDScan.sys (Microsoft Corporation)
DRV - (BasicDisplay) -- C:\Windows\System32\Drivers\BasicDisplay.sys (Microsoft Corporation)
DRV - (BasicRender) -- C:\Windows\System32\Drivers\BasicRender.sys (Microsoft Corporation)
DRV - (HyperVideo) -- C:\Windows\System32\Drivers\HyperVideo.sys (Microsoft Corporation)
DRV - (mshidumdf) -- C:\Windows\System32\Drivers\mshidumdf.sys (Microsoft Corporation)
DRV - (acpitime) -- C:\Windows\System32\Drivers\acpitime.sys (Microsoft Corporation)
DRV - (acpipagr) -- C:\Windows\System32\Drivers\acpipagr.sys (Microsoft Corporation)
DRV - (npsvctrig) -- C:\Windows\System32\Drivers\npsvctrig.sys (Microsoft Corporation)
DRV - (BthAvrcpTg) -- C:\Windows\System32\Drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV - (kdnic) -- C:\Windows\System32\Drivers\kdnic.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\Drivers\vms3cap.sys (Microsoft Corporation)
DRV - (gencounter) -- C:\Windows\System32\Drivers\vmgencounter.sys (Microsoft Corporation)
DRV - (bthhfhid) -- C:\Windows\System32\Drivers\BthhfHid.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\Drivers\winusb.sys (Microsoft Corporation)
DRV - (BthHFEnum) -- C:\Windows\System32\Drivers\bthhfenum.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\System32\Drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (hyperkbd) -- C:\Windows\System32\Drivers\hyperkbd.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\Drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (hidi2c) -- C:\Windows\System32\Drivers\hidi2c.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\Drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (dmvsc) -- C:\Windows\System32\Drivers\dmvsc.sys (Microsoft Corporation)
DRV - (netvsc) -- C:\Windows\System32\Drivers\netvsc63.sys (Microsoft Corporation)
DRV - (NdisVirtualBus) -- C:\Windows\System32\Drivers\NdisVirtualBus.sys (Microsoft Corporation)
DRV - (NdisImPlatform) -- C:\Windows\System32\Drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV - (MsLldp) -- C:\Windows\System32\Drivers\mslldp.sys (Microsoft Corporation)
DRV - (Ndu) -- C:\Windows\System32\Drivers\Ndu.sys (Microsoft Corporation)
DRV - (FxPPM) -- C:\Windows\System32\Drivers\fxppm.sys (Microsoft Corporation)
DRV - (bcmfn2) -- C:\Windows\System32\Drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)
DRV - (iaStorAV) -- C:\Windows\System32\Drivers\iaStorAV.sys (Intel Corporation)
DRV - (iaioi2c) -- C:\Windows\System32\Drivers\iaioi2c.sys (Intel Corporation)
DRV - (GPIO) -- C:\Windows\System32\Drivers\iaiogpio.sys (Intel Corporation)
DRV - (RTL85n86) -- C:\Windows\System32\Drivers\RTL85n86.sys (Realtek Semiconductor Corporation                           )
DRV - (RTL8168) -- C:\Windows\System32\Drivers\Rt630x86.sys (Realtek                                            )
DRV - (MBAMProtector) -- C:\Windows\System32\Drivers\mbam.sys (Malwarebytes Corporation)
DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (CybelSoft)
DRV - (cmuda3) -- C:\Windows\System32\Drivers\cmudax3.sys (C-Media Inc)
DRV - (emAudio) -- C:\Windows\System32\Drivers\emAudio.sys (Pinnacle Systems GmbH)
DRV - (DCamUSBEMPIA) -- C:\Windows\System32\Drivers\emDevice.sys (eMPIA Technology, Inc.)
DRV - (FiltUSBEMPIA) -- C:\Windows\System32\Drivers\emFilter.sys (eMPIA Technology, Inc.)
DRV - (ScanUSBEMPIA) -- C:\Windows\System32\Drivers\emScan.sys (eMPIA Technology, Inc.)
DRV - (MarvinBus) -- C:\Windows\System32\Drivers\MarvinBus.sys (Pinnacle Systems GmbH)
DRV - (MTsensor) -- C:\Windows\System32\Drivers\ASACPI.sys ()
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.live.com/1rewlive4startup/home
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.fr.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-FR,fr-CA;q=0.7,fr;q=0.3
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 12 A6 5A A1 24 FB CD 01  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\..\SearchScopes\{202554A1-FC33-4968-9F00-E2D720D0D24D}: "URL" = http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MXGA_frCA523
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014-02-27 09:40:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2013-07-12 20:44:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Extensions
[2013-07-12 20:44:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2014-03-08 14:02:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\03uwaykz.default-1387466243260\extensions
[2014-03-10 21:07:18 | 000,000,000 | ---D | M] (SavingsBull) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\03uwaykz.default-1387466243260\extensions\SavingsBull@jetpack
[2014-03-08 14:02:00 | 000,957,290 | ---- | M] () (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\firefox\profiles\03uwaykz.default-1387466243260\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014-02-28 17:57:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
[2014-02-28 17:57:19 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com
CHR - plugin: Error reading preferences file
CHR - Extension: Documents Google = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: Documents Google = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: Google Drive = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\
CHR - Extension: YouTube = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: YouTube = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
CHR - Extension: Recherche Google = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Recherche Google = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: avast! Online Security = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2013.75_0\
CHR - Extension: Feedly - News, Blogs and Youtube = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob\18.2_0\
CHR - Extension: Fleurs pourpres = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgplpejojljhgndghinonhjpmbdmjamk\1.0.0.2_0\
CHR - Extension: Google Wallet = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Google Wallet = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Deezer = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\npfkoakaabdallkcdbpkkhfilkkngakh\1.3.2_0\
CHR - Extension: Picasa = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb\6.2.2_0\
CHR - Extension: Gmail = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Gmail = C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\
 
O1 HOSTS File: ([2013-08-22 02:13:55 | 000,000,824 | ---- | M]) - C:\Windows\System32\Drivers\etc\hosts
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation)
O4 - HKLM..\Run: [IntelliType Pro] c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Memeo AutoSync] C:\Program Files\Memeo\AutoSync\MemeoLauncher2.exe (Memeo Inc.)
O4 - HKLM..\Run: [Memeo Instant Backup] C:\Program Files\Memeo\AutoBackup\MemeoLauncher2.exe (Memeo Inc.)
O4 - HKLM..\Run: [Seagate Dashboard] C:\Program Files\Seagate\Seagate Dashboard\MemeoLauncher.exe ()
O4 - HKLM..\Run: [USB2Check] C:\WINDOWS\System32\PCLECoInst.dll (Pinnacle Systems)
O4 - HKCU..\Run: [AppleIEDAV] C:\Program Files\Common Files\Apple\Internet Services\AppleIEDAV.exe (Apple Inc.)
O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKCU..\Run: [GoogleChromeAutoLaunch_A616DDE2FA4E903E4B22BA1CBF106F1F] C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKCU..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKCU..\Run: [PrinterProDesktop] C:\Program Files\Printer Pro Desktop\PrinterProDesktop.exe ()
O4 - HKCU..\Run: [SkyDrive] C:\Users\Utilisateur\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - Startup: C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Utilisateur\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.10.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{78285D7C-E392-475C-BA10-F2F9FF184019}: DhcpNameServer = 192.168.10.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A66127CF-8C25-4BB7-A378-12C4800BD848}: DhcpNameServer = 192.168.10.1
O18 - Protocol\Handler\livecall - No CLSID value found
O18 - Protocol\Handler\msnim - No CLSID value found
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-06-01 12:03:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs: wlidsvc - C:\Windows\System32\wlidsvc.dll (Microsoft Corporation)
NetSvcs: lfsvc - C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation)
NetSvcs: DsmSvc - C:\Windows\System32\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs: NcaSvc - C:\Windows\System32\NcaSvc.dll (Microsoft Corporation)
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\WINDOWS\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
NetSvcs: MsKeyboardFilter - C:\Windows\System32\KeyboardFilterSvc.dll (Microsoft Corporation)
 
 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - U
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\33.0.1750.146\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {EC43E638-09F0-38CC-A585-72FCCDDF035C} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
 
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.I420 - C:\WINDOWS\System32\emYUV.dll (Microsoft Corporation)
Drivers32: vidc.mjpg - C:\WINDOWS\System32\pvmjpg30.dll (Pegasus Imaging Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-03-12 11:50:43 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-03-12 10:03:19 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Malwarebytes
[2014-03-12 10:03:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014-03-12 10:03:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014-03-12 10:03:01 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2014-03-12 10:03:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2014-03-10 21:45:00 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Memeo
[2014-03-10 21:44:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Memeo
[2014-03-10 21:44:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Memeo
[2014-03-08 15:00:55 | 000,000,000 | ---D | C] -- C:\images
[2014-03-08 15:00:55 | 000,000,000 | ---D | C] -- C:\cfg
[2014-03-08 15:00:55 | 000,000,000 | ---D | C] -- C:\application
[2014-03-08 15:00:54 | 000,000,000 | ---D | C] -- C:\META-INF
[2014-03-08 15:00:54 | 000,000,000 | ---D | C] -- C:\json
[2014-03-01 18:42:36 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014-03-01 12:31:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2014-03-01 12:24:39 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2014-03-01 12:23:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
[2014-03-01 12:21:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office 15
[2014-03-01 11:30:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014-02-28 17:57:22 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2014-02-28 16:42:48 | 000,000,000 | ---D | C] -- C:\Program Files\SavingsBull
[2014-02-28 16:42:41 | 000,000,000 | ---D | C] -- C:\temp
[2014-02-28 11:42:49 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Local\SearchDonkey
[2014-02-28 11:39:50 | 000,000,000 | ---D | C] -- C:\Program Files\WebSparkle
[2014-02-28 11:35:46 | 000,000,000 | ---D | C] -- C:\ProgramData\SearchDonkey
[2014-02-27 09:46:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2014-02-27 09:45:29 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2014-02-27 09:45:29 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2014-02-27 09:45:29 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2014-02-27 09:39:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2014-02-21 10:41:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
[2014-02-18 14:26:59 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rising Research
[2014-02-18 14:26:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rising Research
[2014-02-18 14:26:59 | 000,000,000 | ---D | C] -- C:\Program Files\Rising Research
[2014-02-18 14:09:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CardRecoveryPro
[2014-02-18 14:09:59 | 000,000,000 | ---D | C] -- C:\Program Files\CardRecoveryPro
[2014-02-16 21:07:21 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014-02-16 20:32:33 | 003,489,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
[2014-02-16 20:32:30 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncCore.dll
[2014-02-16 20:32:30 | 000,479,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncHost.exe
[2014-02-16 20:32:28 | 002,804,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msmpeg2vdec.dll
[2014-02-16 20:32:26 | 002,142,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfcore.dll
[2014-02-16 20:32:26 | 001,371,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\combase.dll
[2014-02-16 20:32:25 | 013,925,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.dll
[2014-02-16 20:32:20 | 002,295,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authui.dll
[2014-02-16 20:32:20 | 001,204,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmde.dll
[2014-02-16 20:32:19 | 001,155,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpmde.dll
[2014-02-16 20:32:18 | 000,669,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmpeg2srcsnk.dll
[2014-02-16 20:32:18 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bisrv.dll
[2014-02-16 20:32:17 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemEventsBrokerServer.dll
[2014-02-16 20:32:17 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ubpm.dll
[2014-02-16 20:32:16 | 000,663,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmp4srcsnk.dll
[2014-02-16 20:32:16 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfds.dll
[2014-02-16 20:32:16 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\psmsrv.dll
[2014-02-16 20:32:16 | 000,030,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ploptin.dll
[2014-02-16 20:32:15 | 000,980,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mispace.dll
[2014-02-16 20:32:15 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsGdiConverter.dll
[2014-02-16 20:32:15 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Graphics.dll
[2014-02-16 20:32:15 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\BtaMPM.sys
[2014-02-16 20:32:14 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\deviceregistration.dll
[2014-02-16 20:32:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bi.dll
[2014-02-12 09:50:36 | 011,702,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinui.dll
[2014-02-12 09:50:35 | 004,961,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Search.dll
[2014-02-12 09:50:32 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\pcaui.exe
[2014-02-12 09:50:31 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdrm.dll
[2014-02-12 09:50:11 | 003,936,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d2d1.dll
[2014-02-12 09:50:10 | 002,071,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d10warp.dll
[2014-02-12 09:50:07 | 003,482,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SyncEngine.dll
[2014-02-12 09:50:06 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SkyDrive.exe
[2014-02-12 09:50:06 | 000,628,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MrmCoreR.dll
[2014-02-12 09:50:06 | 000,588,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SkyDriveTelemetry.dll
[2014-02-12 09:50:05 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SkyDriveShell.dll
[2014-02-12 09:50:05 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winbici.dll
[2014-02-12 09:49:55 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
[2014-02-12 09:49:55 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieetwproxystub.dll
[2014-02-12 09:49:55 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iernonce.dll
[2014-02-12 09:49:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieetwcollectorres.dll
[2014-02-12 09:49:53 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9diag.dll
[2014-02-12 09:49:52 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieapfltr.dll
[2014-02-12 09:49:52 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieetwcollector.exe
[2014-02-12 09:49:52 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll
[2014-02-12 09:49:51 | 004,244,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9.dll
[2014-02-12 09:49:51 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieUnatt.exe
[2014-02-12 09:49:48 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtml.tlb
[2014-02-12 09:49:48 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
[2014-02-12 09:49:47 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrating.dll
[2014-02-12 09:49:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iesetup.dll
[2014-02-12 09:49:46 | 001,964,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl
[2014-02-11 18:49:40 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\Documents\Sylvain
[2014-02-11 13:40:22 | 000,000,000 | ---D | C] -- C:\Program Files\MunSoft
[2014-02-11 13:20:09 | 000,000,000 | ---D | C] -- C:\Program Files\EaseUS
[2014-02-11 13:02:18 | 000,000,000 | ---D | C] -- C:\Program Files\PhotoRescue PC
[2014-02-10 21:05:15 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\Documents\CardRecovery
[2014-02-10 21:03:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CardRecovery
[2014-02-10 21:03:44 | 000,000,000 | ---D | C] -- C:\Program Files\CardRecovery
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-03-12 14:27:29 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014-03-12 14:09:00 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014-03-12 13:57:02 | 000,001,098 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014-03-12 13:31:15 | 000,811,108 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2014-03-12 13:31:15 | 000,722,278 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014-03-12 13:31:15 | 000,159,206 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2014-03-12 13:31:15 | 000,135,394 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014-03-12 12:17:01 | 000,002,147 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014-03-12 12:14:16 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-03-12 12:12:49 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014-03-12 12:12:11 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2014-03-12 12:11:56 | 1688,719,360 | -HS- | M] () -- C:\hiberfil.sys
[2014-03-12 10:03:02 | 000,001,079 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014-03-12 09:11:13 | 000,577,296 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014-03-08 15:00:57 | 000,000,488 | ---- | M] () -- C:\Users\Public\Desktop\Éducathèque.lnk
[2014-03-08 15:00:19 | 000,142,336 | ---- | M] () -- C:\Éducathèque.exe
[2014-03-08 15:00:03 | 000,827,803 | ---- | M] () -- C:\Educatheque.swf
[2014-03-08 15:00:02 | 000,006,148 | ---- | M] () -- C:\.DS_Store
[2014-03-08 15:00:02 | 000,000,059 | ---- | M] () -- C:\mimetype
[2014-03-08 14:59:53 | 000,000,363 | ---- | M] () -- C:\Users\Utilisateur\AppData\Roaming\com.Educatheque.appli_state.xml
[2014-03-01 11:41:18 | 000,002,243 | ---- | M] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014-02-28 17:57:23 | 000,001,117 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014-02-27 09:46:22 | 000,001,765 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2014-02-27 09:39:53 | 000,001,827 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2014-02-18 15:51:46 | 000,019,968 | ---- | M] () -- C:\Users\Utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014-02-18 14:09:59 | 000,001,061 | ---- | M] () -- C:\Users\Public\Desktop\CardRecoveryPro.lnk
[2014-02-18 14:05:52 | 000,001,025 | ---- | M] () -- C:\Users\Public\Desktop\CardRecovery.lnk
[2014-02-17 17:00:34 | 000,693,240 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014-02-17 17:00:34 | 000,105,464 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2014-02-17 15:08:43 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2014-02-14 10:58:20 | 000,002,016 | ---- | M] () -- C:\Users\Public\Desktop\Google Slides.lnk
[2014-02-14 10:58:20 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Google Sheets.lnk
[2014-02-14 10:58:20 | 000,002,004 | ---- | M] () -- C:\Users\Public\Desktop\Google Docs.lnk
[2014-02-13 15:04:46 | 001,151,864 | ---- | M] () -- C:\WINDOWS\System32\SearchDonkey.E3E38E2B3C8C.dll
[2014-02-11 13:25:21 | 000,000,977 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-03-12 14:27:29 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014-03-12 10:03:02 | 000,001,079 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014-03-12 09:11:02 | 000,577,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014-03-08 15:00:19 | 000,142,336 | ---- | C] () -- C:\Éducathèque.exe
[2014-03-08 15:00:03 | 000,827,803 | ---- | C] () -- C:\Educatheque.swf
[2014-03-08 15:00:02 | 000,006,148 | ---- | C] () -- C:\.DS_Store
[2014-03-08 15:00:02 | 000,000,059 | ---- | C] () -- C:\mimetype
[2014-03-08 14:59:53 | 000,000,363 | ---- | C] () -- C:\Users\Utilisateur\AppData\Roaming\com.Educatheque.appli_state.xml
[2014-03-01 11:30:30 | 000,002,147 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014-02-28 17:57:23 | 000,001,129 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2014-02-28 17:57:23 | 000,001,117 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014-02-27 09:46:22 | 000,001,765 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2014-02-27 09:39:53 | 000,001,827 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2014-02-25 16:24:31 | 000,002,243 | ---- | C] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014-02-18 14:09:59 | 000,001,061 | ---- | C] () -- C:\Users\Public\Desktop\CardRecoveryPro.lnk
[2014-02-18 14:05:52 | 000,001,025 | ---- | C] () -- C:\Users\Public\Desktop\CardRecovery.lnk
[2014-02-16 20:32:13 | 000,385,614 | ---- | C] () -- C:\WINDOWS\System32\ApnDatabase.xml
[2014-02-13 15:04:46 | 001,151,864 | ---- | C] () -- C:\WINDOWS\System32\SearchDonkey.E3E38E2B3C8C.dll
[2014-02-12 09:50:34 | 000,009,701 | ---- | C] () -- C:\WINDOWS\System32\connectedsearch-results.searchconnector-ms
[2014-01-15 11:33:03 | 000,103,936 | ---- | C] () -- C:\WINDOWS\System32\OEMLicense.dll
[2013-11-06 08:20:30 | 000,000,650 | RHS- | C] () -- C:\Users\Utilisateur\ntuser.pol
[2013-11-05 23:15:21 | 000,021,680 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2013-09-29 23:48:23 | 000,811,108 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
[2013-09-29 23:48:23 | 000,350,772 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
[2013-09-29 23:48:23 | 000,159,206 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
[2013-09-29 23:48:23 | 000,040,528 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
[2013-08-22 04:19:09 | 000,722,278 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2013-08-22 04:19:09 | 000,296,742 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2013-08-22 04:19:09 | 000,135,394 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2013-08-22 04:19:09 | 000,033,362 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2013-08-22 04:17:31 | 000,000,389 | ---- | C] () -- C:\WINDOWS\System32\AutoWorkplace.exe.config
[2013-08-22 04:17:30 | 000,215,943 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2013-08-22 04:17:29 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\NOISE.DAT
[2013-08-22 03:24:03 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013-08-21 23:33:54 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\BthpanContextHandler.dll
[2013-08-21 23:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\BWContextHandler.dll
[2013-08-21 19:57:03 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2013-08-21 19:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2013-08-21 19:52:35 | 001,520,828 | ---- | C] () -- C:\WINDOWS\System32\WpcNBModel.bin
[2013-08-21 19:52:35 | 000,526,068 | ---- | C] () -- C:\WINDOWS\System32\staticurllist.bin
[2013-08-21 19:50:57 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\settings.dat
[2013-08-21 19:48:14 | 000,049,963 | ---- | C] () -- C:\WINDOWS\System32\srms.dat
[2013-07-18 10:43:18 | 000,000,035 | ---- | C] () -- C:\Users\Utilisateur\AppData\Roaming\iversion.ini
[2013-07-11 15:14:32 | 000,180,928 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2013-06-27 15:31:18 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
[2013-06-26 16:36:23 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSP.sys.sum
[2013-06-26 16:36:23 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
[2013-03-31 16:31:51 | 000,019,968 | ---- | C] () -- C:\Users\Utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-02-18 00:27:16 | 000,320,512 | ---- | C] () -- C:\WINDOWS\System32\w32mkde.exe
[2013-02-18 00:27:16 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\w32mkrc.dll
[2013-02-18 00:27:15 | 000,003,146 | ---- | C] () -- C:\WINDOWS\System32\vsort.com
[2013-02-13 18:06:02 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2013-02-13 15:22:05 | 000,000,060 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2013-01-30 03:11:23 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswnet.sys.sum
[2012-03-23 19:08:56 | 000,982,240 | ---- | C] () -- C:\WINDOWS\System32\igkrng500.bin
[2012-03-23 19:08:56 | 000,439,308 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng500.bin
[2012-03-23 19:08:56 | 000,092,356 | ---- | C] () -- C:\WINDOWS\System32\igfcg500m.bin
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-11-23 04:19:35 | 018,642,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2013-08-21 22:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2013-08-21 22:42:12 | 000,390,144 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2013-08-21 22:44:29 | 000,515,584 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\FirewallAPI.dll
[2014-01-09 03:18:00 | 003,482,112 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\SyncEngine.dll
 
[color=#A23BEC]< %systemroot%\system32\drivers\​*.sys /lockedfiles >[/color]
 
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
Invalid Environment Variable: alluserprofile
Invalid Environment Variable: alluserprofile
 
[color=#A23BEC]< %appdata%\*. >[/color]
[2014-01-12 22:49:09 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\ACD Systems
[2013-10-22 18:41:06 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Adobe
[2013-09-21 15:25:27 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Apple Computer
[2013-12-23 13:01:25 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Avira
[2013-12-18 15:40:22 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\AVS4YOU
[2013-10-06 18:53:57 | 000,000,000 | R--D | M] -- C:\Users\Utilisateur\AppData\Roaming\Brother
[2013-12-30 22:36:36 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\BSD Concept
[2013-04-24 14:44:58 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\calibre
[2014-03-12 13:37:56 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Canon
[2013-09-04 10:32:50 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\CD-LabelPrint
[2014-02-05 10:29:02 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\com.Educatheque.appli
[2014-03-12 14:08:39 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Dropbox
[2014-01-16 11:31:17 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\DropboxMaster
[2013-08-27 14:02:46 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\fr.edumedia.app.eBox.school
[2013-02-17 19:17:19 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Google
[2013-11-06 08:20:58 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Identities
[2013-09-30 18:19:02 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\InstallShield
[2013-11-20 11:41:41 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\log
[2013-01-25 13:49:02 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Macromedia
[2014-03-12 10:03:19 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Malwarebytes
[2014-03-10 21:49:18 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Memeo
[2013-11-06 08:22:58 | 000,000,000 | --SD | M] -- C:\Users\Utilisateur\AppData\Roaming\Microsoft
[2013-01-25 16:44:59 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Mozilla
[2014-02-04 14:20:40 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Notepad++
[2014-01-11 14:40:18 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\OpenOffice
[2013-02-19 20:12:33 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\OpenOffice.org
[2013-03-15 13:19:16 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Seagate
[2014-01-04 11:38:21 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Skype
[2013-02-07 19:54:54 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Sony Corporation
[2013-11-29 11:15:56 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\SumatraPDF
[2013-02-14 18:30:47 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\SystemRequirementsLab
[2013-02-13 18:27:18 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\TeamViewer
[2013-07-12 20:44:03 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\TomTom
[2014-01-26 10:35:37 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\vlc
[2013-03-15 12:18:57 | 000,000,000 | ---D | M] -- C:\Users\Utilisateur\AppData\Roaming\Windows Live Writer
 
[color=#A23BEC]< %appdata%\*.exe /s >[/color]
[2010-04-06 05:00:00 | 005,233,406 | ---- | M] (Macromedia, Inc.) -- C:\Users\Utilisateur\AppData\Roaming\BSD Concept\Heredis11\Arbre3D.exe
[2010-04-06 05:00:00 | 000,572,928 | ---- | M] () -- C:\Users\Utilisateur\AppData\Roaming\BSD Concept\Heredis11\HTML\h8html.exe
[2012-10-29 23:00:00 | 005,233,406 | ---- | M] (Macromedia, Inc.) -- C:\Users\Utilisateur\AppData\Roaming\BSD Concept\Heredis13\Arbre3D.exe
[2013-12-06 05:00:00 | 005,233,406 | ---- | M] (Macromedia, Inc.) -- C:\Users\Utilisateur\AppData\Roaming\BSD Concept\Heredis14\Arbre3D.exe
[2014-01-02 20:32:12 | 033,508,336 | ---- | M] (Dropbox, Inc.) -- C:\Users\Utilisateur\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2014-01-02 20:33:26 | 000,244,336 | ---- | M] (Dropbox, Inc.) -- C:\Users\Utilisateur\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2014-01-02 20:32:16 | 000,143,040 | ---- | M] (Dropbox, Inc.) -- C:\Users\Utilisateur\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2014-02-05 10:25:23 | 000,054,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Utilisateur\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2013-12-01 16:13:09 | 000,029,926 | R--- | M] () -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Installer\{5EB90C06-964F-4195-B83E-BD7E55C88415}\ARPPRODUCTICON.exe
[2014-01-13 20:40:36 | 000,071,894 | R--- | M] () -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Installer\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}\GPUploader.exe
[2013-12-27 12:44:26 | 000,071,894 | R--- | M] () -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Installer\{D4C4A751-F7F3-4DCA-B825-9AC391BFFC3F}\GPUploader.exe
[2013-02-18 12:51:55 | 000,010,134 | R--- | M] () -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Installer\{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}\ARPPRODUCTICON.exe
[2013-02-18 12:51:55 | 000,001,078 | R--- | M] () -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Installer\{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}\DocumentationShortcu_EDEA8AB776834ED2AA19E6C078064C0D.exe
[2013-07-12 20:45:50 | 030,898,008 | ---- | M] () -- C:\Users\Utilisateur\AppData\Roaming\TomTom\HOME\Profiles\fhns0b8x.default\Updates\v2_9_5_3093_win.exe
 
[color=#A23BEC]< %systemdrive%\*. >[/color]
[2013-11-20 11:54:32 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2012-06-01 14:09:26 | 000,000,000 | ---D | M] -- C:\1b5fcfac7e6970b7529757fd
[2012-06-03 17:14:20 | 000,000,000 | ---D | M] -- C:\2007_09_20
[2014-03-12 12:10:43 | 000,000,000 | ---D | M] -- C:\AdwCleaner
[2014-03-08 15:00:55 | 000,000,000 | ---D | M] -- C:\application
[2013-11-29 23:32:31 | 000,000,000 | ---D | M] -- C:\BigFishCache
[2013-11-05 22:26:44 | 000,000,000 | -HSD | M] -- C:\Boot
[2013-09-30 18:57:18 | 000,000,000 | ---D | M] -- C:\Brother
[2013-02-18 00:28:45 | 000,000,000 | ---D | M] -- C:\Brother's Keeper 6
[2014-03-08 15:00:55 | 000,000,000 | ---D | M] -- C:\cfg
[2012-06-03 17:02:15 | 000,000,000 | ---D | M] -- C:\Corel
[2012-06-03 17:02:28 | 000,000,000 | ---D | M] -- C:\Cosmi
[2013-08-22 03:23:42 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2012-10-01 12:28:58 | 000,000,000 | ---D | M] -- C:\Données EuroSoft Software Development
[2013-01-25 11:53:29 | 000,000,000 | RH-D | M] -- C:\ESD
[2013-10-01 09:32:43 | 000,000,000 | -HSD | M] -- C:\found.000
[2013-10-01 09:32:43 | 000,000,000 | -HSD | M] -- C:\found.001
[2013-10-01 09:32:44 | 000,000,000 | -HSD | M] -- C:\found.002
[2013-10-01 09:32:44 | 000,000,000 | -HSD | M] -- C:\found.003
[2013-10-01 09:32:44 | 000,000,000 | -HSD | M] -- C:\found.004
[2013-10-01 09:32:44 | 000,000,000 | -HSD | M] -- C:\found.005
[2013-10-01 09:32:44 | 000,000,000 | -HSD | M] -- C:\found.006
[2013-10-01 09:32:44 | 000,000,000 | -HSD | M] -- C:\found.007
[2014-03-08 15:00:55 | 000,000,000 | ---D | M] -- C:\images
[2012-06-01 12:34:42 | 000,000,000 | ---D | M] -- C:\Intel
[2014-03-08 15:00:55 | 000,000,000 | ---D | M] -- C:\json
[2013-04-13 11:04:56 | 000,000,000 | ---D | M] -- C:\La Bible en Mp3
[2014-03-08 15:00:54 | 000,000,000 | ---D | M] -- C:\META-INF
[2013-03-05 20:08:14 | 000,000,000 | ---D | M] -- C:\MiNi-Image
[2013-05-30 17:16:00 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2012-12-03 22:38:21 | 000,000,000 | ---D | M] -- C:\MyWorks
[2012-06-03 17:02:28 | 000,000,000 | ---D | M] -- C:\NVIDIA
[2013-08-22 03:50:47 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2014-03-12 11:54:29 | 000,000,000 | R--D | M] -- C:\Program Files
[2014-03-12 10:03:02 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2013-11-05 22:57:18 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012-06-01 16:45:15 | 000,000,000 | -HSD | M] -- C:\RECYCLER
[2014-03-12 14:28:00 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2014-02-28 16:42:46 | 000,000,000 | ---D | M] -- C:\temp
[2013-11-05 23:04:58 | 000,000,000 | R--D | M] -- C:\Users
[2014-03-12 12:35:55 | 000,000,000 | ---D | M] -- C:\Windows
 
[color=#A23BEC]< %systemdrive%\*.exe >[/color]
[2010-10-08 00:15:06 | 001,622,016 | ---- | M] () -- C:\minidir.exe
[2010-10-08 00:14:46 | 001,622,016 | ---- | M] () -- C:\miniima.exe
[2014-03-08 15:00:19 | 000,142,336 | ---- | M] () -- C:\Éducathèque.exe
 
[color=#A23BEC]< %programfiles%\*. >[/color]
[2014-01-15 10:58:42 | 000,000,000 | ---D | M] -- C:\Program Files\7-Zip
[2013-08-27 14:02:18 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2013-01-25 17:03:43 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2013-09-03 11:06:30 | 000,000,000 | ---D | M] -- C:\Program Files\Avery Dennison
[2013-12-23 12:52:49 | 000,000,000 | ---D | M] -- C:\Program Files\Avira
[2013-12-21 14:22:20 | 000,000,000 | ---D | M] -- C:\Program Files\AVS4YOU
[2013-02-18 12:51:31 | 000,000,000 | ---D | M] -- C:\Program Files\BCL Technologies
[2013-11-29 23:30:33 | 000,000,000 | ---D | M] -- C:\Program Files\bfgclient
[2013-01-25 13:56:32 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2013-09-30 18:57:19 | 000,000,000 | ---D | M] -- C:\Program Files\Brother
[2013-02-18 00:27:27 | 000,000,000 | ---D | M] -- C:\Program Files\Brother's Keeper 6
[2013-09-30 18:57:14 | 000,000,000 | ---D | M] -- C:\Program Files\Browny02
[2014-01-04 11:35:13 | 000,000,000 | ---D | M] -- C:\Program Files\BSD Concept
[2013-12-12 20:56:30 | 000,000,000 | ---D | M] -- C:\Program Files\Calibre2
[2013-09-03 19:38:04 | 000,000,000 | ---D | M] -- C:\Program Files\Canon
[2013-09-03 19:36:16 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ
[2014-02-18 14:05:52 | 000,000,000 | ---D | M] -- C:\Program Files\CardRecovery
[2014-02-18 14:14:04 | 000,000,000 | ---D | M] -- C:\Program Files\CardRecoveryPro
[2014-02-11 13:25:15 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2014-03-10 21:44:51 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2014-02-11 13:22:38 | 000,000,000 | ---D | M] -- C:\Program Files\EaseUS
[2013-08-27 14:02:22 | 000,000,000 | ---D | M] -- C:\Program Files\eduMedia
[2013-02-18 13:07:09 | 000,000,000 | ---D | M] -- C:\Program Files\Family Tree Maker 2009
[2013-01-25 10:14:04 | 000,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2014-03-01 11:39:56 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2014-02-28 11:55:43 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2013-02-13 18:34:26 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2014-02-12 23:55:58 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2014-02-27 09:45:29 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2014-03-10 21:07:51 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2014-01-19 14:14:50 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2013-02-13 18:29:38 | 000,000,000 | ---D | M] -- C:\Program Files\ma-config.com
[2014-03-12 10:03:03 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2014-03-10 21:49:07 | 000,000,000 | ---D | M] -- C:\Program Files\Memeo
[2013-02-14 18:26:40 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Mouse and Keyboard Center
[2014-03-01 12:24:39 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2014-03-01 12:21:55 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office 15
[2013-10-12 14:35:50 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2013-03-14 15:15:00 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SkyDrive
[2013-03-15 12:04:23 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2013-02-18 12:51:55 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft WSE
[2013-11-05 23:04:49 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2014-03-10 21:07:38 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2014-03-10 21:07:38 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2013-11-05 16:42:18 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2014-02-11 14:28:09 | 000,000,000 | ---D | M] -- C:\Program Files\MunSoft
[2014-02-04 14:19:26 | 000,000,000 | ---D | M] -- C:\Program Files\Notepad++
[2013-12-11 11:52:07 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice 4
[2014-02-11 14:28:28 | 000,000,000 | ---D | M] -- C:\Program Files\PhotoRescue PC
[2013-12-01 16:07:10 | 000,000,000 | ---D | M] -- C:\Program Files\Pinnacle
[2013-11-29 11:15:21 | 000,000,000 | ---D | M] -- C:\Program Files\Printer Pro Desktop
[2014-03-10 21:07:37 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2013-02-13 18:40:33 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2013-11-05 16:42:18 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2014-02-18 14:26:59 | 000,000,000 | ---D | M] -- C:\Program Files\Rising Research
[2014-03-10 21:07:35 | 000,000,000 | ---D | M] -- C:\Program Files\SavingsBull
[2013-03-15 12:50:56 | 000,000,000 | ---D | M] -- C:\Program Files\Seagate
[2013-01-28 05:00:45 | 000,000,000 | ---D | M] -- C:\Program Files\Siber Systems
[2013-02-14 18:30:50 | 000,000,000 | ---D | M] -- C:\Program Files\SystemRequirementsLab
[2013-02-14 22:15:08 | 000,000,000 | -H-D | M] -- C:\Program Files\Temp
[2013-07-12 20:41:40 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom DesktopSuite
[2013-07-12 20:47:59 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom HOME 2
[2013-07-12 20:43:26 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom International B.V
[2012-07-26 02:04:59 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2013-08-29 15:09:31 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2014-02-28 11:50:11 | 000,000,000 | ---D | M] -- C:\Program Files\WebSparkle
[2013-09-30 00:03:53 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2013-09-29 23:51:09 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2013-03-15 12:26:46 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2013-09-29 23:48:13 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2013-11-05 23:04:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2013-08-22 04:17:35 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Multimedia Platform
[2013-11-05 23:16:34 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2013-09-29 23:48:13 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2013-08-22 04:17:35 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2013-11-05 23:04:50 | 000,000,000 | -HSD | M] -- C:\Program Files\Windows Sidebar
[2014-03-12 13:00:41 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsApps
[2013-08-22 04:17:26 | 000,000,000 | ---D | M] -- C:\Program Files\WindowsPowerShell
[2013-02-11 10:12:49 | 000,000,000 | ---D | M] -- C:\Program Files\WordBiz
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2013-10-22 02:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) MD5=1A0BC9598E4A58FC84570FFF5A108E58 -- C:\Windows\explorer.exe
[2013-10-22 02:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) MD5=1A0BC9598E4A58FC84570FFF5A108E58 -- C:\Windows\WinSxS\x86_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16441_none_e67cac519538455b\explorer.exe
[2013-11-16 09:55:58 | 000,127,834 | ---- | M] () MD5=65DA43DAD356983D35208F726985E458 -- C:\Windows\WinSxS\x86_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16408_none_e6aeee07951186f8\explorer.exe
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2013-08-21 22:49:21 | 000,688,640 | ---- | M] (Microsoft Corporation) MD5=CEBE4E2D2C6F3D6E87201C21B877929C -- C:\Windows\System32\netlogon.dll
[2013-08-21 22:49:21 | 000,688,640 | ---- | M] (Microsoft Corporation) MD5=CEBE4E2D2C6F3D6E87201C21B877929C -- C:\Windows\WinSxS\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.3.9600.16384_none_92577bca53937d95\netlogon.dll
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2013-08-21 22:54:12 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=41636F77AD6D9A396EA34E4786B96F2B -- C:\Windows\System32\userinit.exe
[2013-08-21 22:54:12 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=41636F77AD6D9A396EA34E4786B96F2B -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.16384_none_70c87e9ced498d49\userinit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2013-08-21 22:48:19 | 000,458,752 | ---- | M] (Microsoft Corporation) MD5=94385F95EF948FB274A70DE3EDE5696D -- C:\Windows\System32\winlogon.exe
[2013-08-21 22:48:19 | 000,458,752 | ---- | M] (Microsoft Corporation) MD5=94385F95EF948FB274A70DE3EDE5696D -- C:\Windows\WinSxS\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.16384_none_0462c59df08b1133\winlogon.exe
[2013-04-04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 220 bytes -> C:\Users\Utilisateur\SkyDrive.old:ms-properties
@Alternate Data Stream - 162 bytes -> C:\Users\Utilisateur\SkyDrive:ms-properties
@Alternate Data Stream - 162 bytes -> C:\Users\Utilisateur\SkyDrive (2).old:ms-properties
@Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:993185CB
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:2CB9631F
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:426D1496

< End of report >