cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 02/01/2014 16:21:45 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Pierre\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

6.99 Gb Total Physical Memory | 3.53 Gb Available Physical Memory | 50.57% Memory free
13.98 Gb Paging File | 9.83 Gb Available in Paging File | 70.37% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 446.13 Gb Total Space | 173.47 Gb Free Space | 38.88% Space Free | Partition Type: NTFS
Drive D: | 465.76 Gb Total Space | 243.57 Gb Free Space | 52.30% Space Free | Partition Type: NTFS

Computer Name: PIERRE-DELL | User Name: Pierre | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - C:\Users\Pierre\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe (Trusteer Ltd.)
PRC - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
PRC - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis)
PRC - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (Orange)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
PRC - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.)
PRC - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Motorola Solutions, Inc.)
PRC - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.)
PRC - C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Motorola Solutions, Inc.)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (SoftThinks SAS)
PRC - C:\Program Files (x86)\Dell Stage\Dell Stage\stage_secondary.exe ()
PRC - C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (SoftThinks - Dell)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe ()
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (SoftThinks - Dell)
PRC - C:\Windows\SysWOW64\NLSSRV32.EXE (Nalpeiron Ltd.)
PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\WiselinkPro.exe ()
PRC - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\http_ss_win_pro.exe ()
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Users\Pierre\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll ()
MOD - C:\Users\Pierre\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Pierre\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
MOD - C:\Users\Pierre\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll ()
MOD - C:\Users\Pierre\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll ()
MOD - C:\Users\Pierre\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll ()
MOD - C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportMS.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\c94852f43f7ac59fcbe4c54b119788d2\System.ServiceModel.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\96afc74588c6581e299884469ea0dced\System.Xml.Linq.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\a42743bb1ed71d59b6594b67cf6c9384\System.IdentityModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\4774201dc923674852e089053f76e76e\System.ServiceModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\8f5b881951592b2fd05f710650bf7e04\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bcf51dc88597d0835c819a2d5a755b74\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\51478a61dbd40488e320a0061e23c4df\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\4eef5a3a4d0ed6d6fd882947a70df530\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\c5f2c02bd940c74019ed4a183c7830c0\System.WorkflowServices.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e043ad64456256a8ee5b934e227d9782\System.Runtime.Serialization.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\1327ad2637aab17189c5461fbf30dc19\SMDiagnostics.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a2920ed81e097f8551231a9350697bbd\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Program Files (x86)\Dell Stage\Dell Stage\stage_secondary.exe ()
MOD - C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
MOD - C:\Program Files (x86)\Dell Stage\Dell Stage\QtGui4.dll ()
MOD - C:\Program Files (x86)\Dell Stage\Dell Stage\QtCore4.dll ()
MOD - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_fr_b77a5c561934e089\System.Runtime.Serialization.resources.dll ()


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NisSrv) -- C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (MsMpSvc) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (maconfservice) -- C:\Program Files\ma-config.com\x64\maconfservice.exe (CybelSoft)
SRV:[b]64bit:[/b] - (NitroReaderDriverReadSpool2) -- C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe (Nitro PDF Software)
SRV:[b]64bit:[/b] - (EvtEng) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV:[b]64bit:[/b] - (MyWiFiDHCPDNS) -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV:[b]64bit:[/b] - (RegSrvc) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV:[b]64bit:[/b] - (BTHSSecurityMgr) -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation)
SRV:[b]64bit:[/b] - (AMPPALR3) -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation)
SRV:[b]64bit:[/b] - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation)
SRV:[b]64bit:[/b] - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (NitroDriverReadSpool) -- C:\Program Files\Common Files\Nitro PDF\Professional\6.0\NitroPDFDriverServicex64.exe (Nitro PDF Software)
SRV:[b]64bit:[/b] - (AERTFilters) -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Andrea Electronics Corporation)
SRV:[b]64bit:[/b] - (lxdx_device) -- C:\Windows\SysNative\lxdxcoms.exe ( )
SRV - (afcdpsrv) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (RapportMgmtService) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
SRV - (syncagentsrv) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis)
SRV - (Garmin Core Update Service) -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe (Garmin Ltd or its subsidiaries)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (AcrSch2Svc) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (TomTomHOMEService) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (Bluetooth OBEX Service) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.)
SRV - (Bluetooth Media Service) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Motorola Solutions, Inc.)
SRV - (Bluetooth Device Monitor) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.)
SRV - (SftService) -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (SoftThinks SAS)
SRV - (nlsX86cc) -- C:\Windows\SysWOW64\NLSSRV32.EXE (Nalpeiron Ltd.)
SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (SamsungAllShare) -- C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\WiselinkPro.exe ()
SRV - (SimpleSlideShowServer) -- C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe (Samsung Electronics)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (RoxWatch12) -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe (Sonic Solutions)
SRV - (RoxMediaDB12OEM) -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe (Sonic Solutions)
SRV - (AdobeActiveFileMonitor9.0) -- c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (NOBU) -- C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (Dell, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - (afcdp) -- C:\Windows\SysNative\drivers\afcdp.sys (Acronis)
DRV:[b]64bit:[/b] - (tdrpman) -- C:\Windows\SysNative\drivers\tdrpman.sys (Acronis International GmbH)
DRV:[b]64bit:[/b] - (tib_mounter) -- C:\Windows\SysNative\drivers\tib_mounter.sys (Acronis International GmbH)
DRV:[b]64bit:[/b] - (snapman) -- C:\Windows\SysNative\drivers\snapman.sys (Acronis International GmbH)
DRV:[b]64bit:[/b] - (fltsrv) -- C:\Windows\SysNative\drivers\fltsrv.sys (Acronis International GmbH)
DRV:[b]64bit:[/b] - (RapportKE64) -- C:\Windows\SysNative\drivers\RapportKE64.sys (Trusteer Ltd.)
DRV:[b]64bit:[/b] - (NisDrv) -- C:\Windows\SysNative\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (dg_ssudbus) -- C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:[b]64bit:[/b] - (taphss6) -- C:\Windows\SysNative\drivers\taphss6.sys (Anchorfree Inc.)
DRV:[b]64bit:[/b] - (tib) -- C:\Windows\SysNative\drivers\tib.sys (Acronis International GmbH)
DRV:[b]64bit:[/b] - (vididr) -- C:\Windows\SysNative\drivers\vididr.sys (Acronis International GmbH)
DRV:[b]64bit:[/b] - (vidsflt) -- C:\Windows\SysNative\drivers\vidsflt.sys (Acronis International GmbH)
DRV:[b]64bit:[/b] - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:[b]64bit:[/b] - (ssudmdm) -- C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:[b]64bit:[/b] - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:[b]64bit:[/b] - (NvStUSB) -- C:\Windows\SysNative\drivers\nvstusb.sys (NVIDIA Corporation)
DRV:[b]64bit:[/b] - (usb_rndisx) -- C:\Windows\SysNative\drivers\usb8023x.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (NETwNs64) -- C:\Windows\SysNative\drivers\Netwsw00.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (ibtfltcoex) -- C:\Windows\SysNative\drivers\iBtFltCoex.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (ss_bmdm) -- C:\Windows\SysNative\drivers\ss_bmdm.sys (MCCI Corporation)
DRV:[b]64bit:[/b] - (ss_bbus) -- C:\Windows\SysNative\drivers\ss_bbus.sys (MCCI)
DRV:[b]64bit:[/b] - (ss_bmdfl) -- C:\Windows\SysNative\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV:[b]64bit:[/b] - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (btmhsf) -- C:\Windows\SysNative\drivers\btmhsf.sys (Motorola Solutions, Inc.)
DRV:[b]64bit:[/b] - (btmaux) -- C:\Windows\SysNative\drivers\btmaux.sys (Motorola Solutions, Inc.)
DRV:[b]64bit:[/b] - (btmaudio) -- C:\Windows\SysNative\drivers\btmaud.sys (Motorola Solutions, Inc.)
DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (taphss) -- C:\Windows\SysNative\drivers\taphss.sys (AnchorFree Inc)
DRV:[b]64bit:[/b] - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (AMPPALP) -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows (R) Win 7 DDK provider)
DRV:[b]64bit:[/b] - (AMPPAL) -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows (R) Win 7 DDK provider)
DRV:[b]64bit:[/b] - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:[b]64bit:[/b] - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:[b]64bit:[/b] - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:[b]64bit:[/b] - (JMCR) -- C:\Windows\SysNative\drivers\jmcr.sys (JMicron Technology Corporation)
DRV:[b]64bit:[/b] - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:[b]64bit:[/b] - (driverhardwarev2x64) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys (CybelSoft)
DRV:[b]64bit:[/b] - (CtClsFlt) -- C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:[b]64bit:[/b] - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys (Intel(R) Corporation)
DRV:[b]64bit:[/b] - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:[b]64bit:[/b] - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (qicflt) -- C:\Windows\SysNative\drivers\qicflt.sys (Quanta Computer)
DRV:[b]64bit:[/b] - (UnlockerDriver5) -- C:\Program Files\Unlocker\UnlockerDriver5.sys ()
DRV:[b]64bit:[/b] - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:[b]64bit:[/b] - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (RapportPG64) -- C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys (Trusteer Ltd.)
DRV - (RapportEI64) -- C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys (Trusteer Ltd.)
DRV - (RapportCerberus_59849) -- C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys ()
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope =
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{977E91EB-D6F9-42ED-BF36-5FC2E8D26BE9}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page =
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{977E91EB-D6F9-42ED-BF36-5FC2E8D26BE9}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page =
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{23953575-5B98-4872-852E-A3C90161FE36}: "URL" = http://www.google.com
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1;localhost;10.*;192.168.*;127.0.0.1:895;127.0.0.1:896;<local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:8555;https=127.0.0.1:8555

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..network.proxy.type:
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@lastpass.com/NPLastPass: C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\x64\nphardwaredetection.dll (Cybelsoft)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@lastpass.com/NPLastPass: C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@palmsource.com/installer,version=1.0: C:\PROGRA~2\Palm\PACKAG~1\NPInstal.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Pierre\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Pierre\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013/04/08 14:59:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2013/08/12 10:48:00 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013/04/08 14:59:23 | 000,000,000 | ---D | M]

[2012/11/14 21:17:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pierre\AppData\Roaming\Mozilla\Extensions
[2012/11/14 21:17:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pierre\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
[2014/01/02 16:04:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\rkk57gh9.default-1376294257159\extensions
[2014/01/02 16:18:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\und1beun.default-1386069036875\extensions
[2014/01/02 16:18:35 | 000,000,000 | ---D | M] (Menu Contextuel Orange) -- C:\Users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\und1beun.default-1386069036875\extensions\menu_contextuel_orange@orange.fr
[2013/08/12 08:05:06 | 000,824,302 | ---- | M] () (No name found) -- C:\Users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\rkk57gh9.default-1376294257159\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013/12/03 12:38:02 | 000,915,554 | ---- | M] () (No name found) -- C:\Users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\und1beun.default-1386069036875\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013/12/22 11:44:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/12/22 11:44:29 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2014/01/02 13:51:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/12/22 11:44:51 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/07/14 18:13:19 | 000,000,970 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\encyclopedie.xml

[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - Extension: Documents Google = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Googleu00A0Drive = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: Smart Saver = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfipfkeoidmndggnnpobeenlamiclald\213\
CHR - Extension: YouTube = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Recherche Google = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: greatsaveru = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\eopcmaiaibhmlghbampcnelcalopjbcn\2.7\
CHR - Extension: LastPass = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd\3.0.22_0\
CHR - Extension: Portail Orange = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\jafdhbipfdlldljdanpnlipdinjcjjid\1.0_0\
CHR - Extension: No name found = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkhkpigfchkpdbklkdfjdajmjaogklm\1.1\
CHR - Extension: YoutubeAdblocker = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcejjfodmppdmbfanokeifppmgghfpia\1.0\
CHR - Extension: Menu Contextuel Orange = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkdglgjjpicgkbfdflchobhdiblbjgf\1.0_1\
CHR - Extension: Googleu00A0Wallet = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Gmail = C:\Users\Pierre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2014/01/01 12:13:51 | 000,000,063 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activation.acronis.com
O2:[b]64bit:[/b] - BHO: (suRf andd keEep) - {00EA693E-D2BE-E956-88D1-007F360E9926} - C:\Program Files (x86)\suRf andd keEep\i.x64.dll File not found
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (LastPass Vault) - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
O2:[b]64bit:[/b] - BHO: (YoutubeAdblocker) - {A9F0A0A7-0987-877F-12C8-2CD0FD99F62A} - C:\Program Files (x86)\YoutubeAdblocker\PRcPvR.x64.dll File not found
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (YoutubeAdblocker) - {E60C5AA4-DA78-5D13-D3AA-7DD550A9D536} - C:\Program Files (x86)\YoutubeAdblocker\_96AxG.x64.dll File not found
O2:[b]64bit:[/b] - BHO: (graeatsavver) - {ECF1DCC0-3148-5314-7B1B-116ADA1C77EF} - C:\Program Files (x86)\graeatsavver\Qxg.x64.dll ()
O2 - BHO: (LastPass Vault) - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (LastPass Toolbar) - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (LastPass Toolbar) - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
O4:[b]64bit:[/b] - HKLM..\Run: [BLEServicesCtrl] C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Motorola Solutions, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [DellStage] C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft Device Center\ipoint.exe (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IntelliType Pro] c:\Program Files\Microsoft Device Center\itype.exe (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Dell, Inc.)
O4 - HKCU..\Run: [OrangeInside] C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (Orange)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:[b]64bit:[/b] - Extra context menu item: Ajouter à vos favoris Orange - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\AddFavorites_html\AddFavorites.html ()
O8:[b]64bit:[/b] - Extra context menu item: Envoyer à Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Envoyer le texte sélectionné par sms - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html ()
O8:[b]64bit:[/b] - Extra context menu item: Envoyer par sms - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\sendsms_html\sendsms.html ()
O8:[b]64bit:[/b] - Extra context menu item: Envoyer un mail - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\sendmail_html\sendmail.html ()
O8:[b]64bit:[/b] - Extra context menu item: LastPass - file://C:\Users\Pierre\AppData\LocalLow\LastPass\context.html?cmd=lastpass File not found
O8:[b]64bit:[/b] - Extra context menu item: LastPass Fill Forms - file://C:\Users\Pierre\AppData\LocalLow\LastPass\context.html?cmd=fillforms File not found
O8:[b]64bit:[/b] - Extra context menu item: orange.fr - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\orange_html\orange.html ()
O8:[b]64bit:[/b] - Extra context menu item: Rechercher le texte sélectionné - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html ()
O8:[b]64bit:[/b] - Extra context menu item: Traduire le texte sélectionné - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Ajouter à vos favoris Orange - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\AddFavorites_html\AddFavorites.html ()
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm ()
O8 - Extra context menu item: Envoyer le texte sélectionné par sms - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html ()
O8 - Extra context menu item: Envoyer par sms - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\sendsms_html\sendsms.html ()
O8 - Extra context menu item: Envoyer un mail - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\sendmail_html\sendmail.html ()
O8 - Extra context menu item: LastPass - file://C:\Users\Pierre\AppData\LocalLow\LastPass\context.html?cmd=lastpass File not found
O8 - Extra context menu item: LastPass Fill Forms - file://C:\Users\Pierre\AppData\LocalLow\LastPass\context.html?cmd=fillforms File not found
O8 - Extra context menu item: orange.fr - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\orange_html\orange.html ()
O8 - Extra context menu item: Rechercher le texte sélectionné - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html ()
O8 - Extra context menu item: Traduire le texte sélectionné - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html ()
O9:[b]64bit:[/b] - Extra Button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
O9 - Extra 'Tools' menuitem : LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: dell.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{491C398C-E409-466C-9B28-4F627816287A}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A26F9343-230D-44A5-AF3F-3110365C4AAD}: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)


MsConfig:64bit - StartUpFolder: C:^Users^Pierre^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^bm.lnk - - File not found
MsConfig:64bit - StartUpFolder: C:^Users^Pierre^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk - C:\Users\Pierre\AppData\Roaming\Dropbox\bin\Dropbox.exe - (Dropbox, Inc.)
MsConfig:64bit - StartUpReg: [b]Acronis Scheduler2 Service[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
MsConfig:64bit - StartUpReg: [b]AcronisTibMounterMonitor[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis International GmbH)
MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]AllShareAgent[/b] - hkey= - key= - C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe (Samsung)
MsConfig:64bit - StartUpReg: [b]BCSSync[/b] - hkey= - key= - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: [b]BitTorrent Sync[/b] - hkey= - key= - File not found
MsConfig:64bit - StartUpReg: [b]Desktop Disc Tool[/b] - hkey= - key= - C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
MsConfig:64bit - StartUpReg: [b]GarminExpressTrayApp[/b] - hkey= - key= - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe (Garmin Ltd or its subsidiaries)
MsConfig:64bit - StartUpReg: [b]KiesAirMessage[/b] - hkey= - key= - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe (Samsung Electronics)
MsConfig:64bit - StartUpReg: [b]KiesPreload[/b] - hkey= - key= - C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung)
MsConfig:64bit - StartUpReg: [b]MyTomTomSA.exe[/b] - hkey= - key= - C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe (TomTom)
MsConfig:64bit - StartUpReg: [b]Orange Installer[/b] - hkey= - key= - C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe ()
MsConfig:64bit - StartUpReg: [b]OrangeInside[/b] - hkey= - key= - C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (Orange)
MsConfig:64bit - StartUpReg: [b]Philips Intelligent Agent[/b] - hkey= - key= - C:\Program Files (x86)\Philips Intelligent Agent\Philips Intelligent Agent.exe (Philips Consumer Electronics)
MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: [b]Start_OrangeWifi_{9d78a505-6248-4d1b-81b6-df69655beccf}[/b] - hkey= - key= - C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\OrangeWifi.exe ()
MsConfig:64bit - StartUpReg: [b]Start_Update_{9d78a505-6248-4d1b-81b6-df69655beccf}[/b] - hkey= - key= - C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\UpdteApp.exe ()
MsConfig:64bit - StartUpReg: [b]TrueImageMonitor.exe[/b] - hkey= - key= - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "bootini" - Reg Error: Key error.

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37} - .NET Framework
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2014/01/02 15:49:07 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/01/02 12:14:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
[2014/01/02 12:14:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Seagate
[2014/01/02 11:49:29 | 000,000,000 | ---D | C] -- C:\Program Files\CrystalDiskMark
[2014/01/02 11:07:25 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2014/01/02 07:42:36 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{0B29F184-06EB-45A7-AC02-C46E252F29DF}
[2014/01/01 18:54:25 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{A92BAA2E-354D-4611-9767-B78E46BB92FD}
[2014/01/01 18:20:07 | 000,000,000 | ---D | C] -- C:\Program Files\ReviverSoft
[2014/01/01 18:19:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CrystalDiskInfo
[2014/01/01 12:58:43 | 000,367,200 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\afcdp.sys
[2014/01/01 12:58:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Acronis
[2014/01/01 12:58:34 | 000,198,432 | ---- | C] (Acronis International GmbH) -- C:\Windows\SysNative\drivers\tib_mounter.sys
[2014/01/01 06:54:09 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{145F4EB9-F045-4432-AF62-506205A10328}
[2013/12/31 11:17:56 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Roaming\73EA6BD1-AC9F-4B5D-B27F-281E7B0D20F1
[2013/12/31 06:28:31 | 000,000,000 | ---D | C] -- C:\ProgramData\graeatsavver
[2013/12/31 06:28:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\graeatsavver
[2013/12/31 06:28:11 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\Comodo
[2013/12/31 06:20:30 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{2D408E2D-B269-4B5D-B74D-36D8C45381CC}
[2013/12/30 09:18:39 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{5E8E07DB-86C4-488F-B7A7-D087981C616C}
[2013/12/29 21:09:31 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{7EF1F516-B269-4B13-BAF1-21AE842FC7FE}
[2013/12/29 07:18:54 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{28E0535C-04AB-429A-9D59-3AEB985895ED}
[2013/12/28 18:32:08 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{00CEAA79-F8C8-4454-AF15-7731EABFB751}
[2013/12/28 06:31:32 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{6C5460DC-99CB-49B1-AF19-3EEF03089B2E}
[2013/12/27 08:10:37 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{56E493F6-AD3E-4CF4-84BB-9FA774B63B39}
[2013/12/26 20:06:28 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{1B870AB1-10B9-4857-916B-04D7DA075918}
[2013/12/26 07:57:06 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{19C17EFC-4D99-45A4-BC05-57CE3CE31921}
[2013/12/25 19:56:50 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{C2ADFF12-FEB8-41B4-B811-D1B5DA8F3D87}
[2013/12/25 07:48:38 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{05760DF5-D597-423A-8E88-B93D53E44834}
[2013/12/24 19:48:23 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{876B9905-1EB6-417C-B7A8-6248FFD03ECC}
[2013/12/24 07:00:41 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{B5488B47-E396-4498-9013-5A1C82CF866A}
[2013/12/23 10:22:27 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{775A67B4-E0B6-46D3-9BB7-52E5216BD2FE}
[2013/12/22 22:13:02 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{40A57BD4-4FA4-4DEE-BF17-85F8F1210851}
[2013/12/22 11:44:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013/12/22 08:52:58 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{C7141A08-ADEB-4086-AAF5-BEDB73F4F630}
[2013/12/21 10:44:04 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{B0ECC227-D6FA-48BB-A0DF-985FDC02106A}
[2013/12/20 22:39:24 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{3CA714D4-F1D7-4971-8CEE-3A0B2CD62C3F}
[2013/12/20 13:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013/12/20 07:58:03 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{9D9D66FC-CD13-4E96-9B65-06CC051AC03C}
[2013/12/19 21:04:24 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{04B73DE6-13D5-4659-AD7E-5866F4CA971A}
[2013/12/19 07:31:57 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{5BF88FD1-5E3D-4360-9CA9-3CD0FEEA4738}
[2013/12/18 19:27:06 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{98DBB46C-9CAA-410F-A373-69DB3C06712E}
[2013/12/18 06:59:44 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{EDD04E39-153F-4E57-919A-6F33B4D7344C}
[2013/12/17 07:55:07 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{6EAF7740-C3E4-4210-9D03-F7DB1EFEE3DD}
[2013/12/16 19:17:26 | 000,000,000 | R--D | C] -- C:\Users\Pierre\Desktop\Culture
[2013/12/16 09:11:21 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{815D23B3-7E42-41C4-8D43-44E9F823B5C2}
[2013/12/15 20:58:28 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{0246B770-9E01-42B9-9A5E-EA04A3FD9BD7}
[2013/12/15 08:24:52 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{B4BE6588-BA8F-4790-AB4C-056726A27FF2}
[2013/12/14 08:15:23 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{9820120B-F2B6-4944-9FB4-472732B92CFA}
[2013/12/13 20:06:57 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{B170F2E4-C17C-4A27-98CE-A73091A423ED}
[2013/12/13 08:04:05 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{F1C8FF76-80C7-4F95-A7A3-8C8A7BDC07B8}
[2013/12/12 21:18:56 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2013/12/12 21:18:56 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2013/12/12 21:18:55 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2013/12/12 21:18:54 | 014,631,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2013/12/12 21:16:08 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2013/12/12 21:16:07 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013/12/12 21:16:07 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013/12/12 21:16:06 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013/12/12 21:16:06 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013/12/12 21:16:06 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013/12/12 21:16:06 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013/12/12 21:16:05 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2013/12/12 21:16:05 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2013/12/12 21:16:05 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2013/12/12 21:16:04 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013/12/12 21:16:04 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2013/12/12 21:16:04 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013/12/12 21:16:01 | 001,995,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013/12/12 21:16:01 | 001,928,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013/12/12 21:15:57 | 005,769,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/12/12 17:33:16 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2013/12/12 17:33:16 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2013/12/12 17:33:14 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013/12/12 17:33:14 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013/12/12 17:33:12 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2013/12/12 17:33:00 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys
[2013/12/12 17:33:00 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys
[2013/12/12 17:32:59 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll
[2013/12/12 17:32:59 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll
[2013/12/12 17:32:59 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe
[2013/12/12 17:32:59 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx
[2013/12/12 17:32:59 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe
[2013/12/12 17:32:59 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx
[2013/12/12 17:28:32 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{08DA2C09-13D0-463F-9EE8-F41C3D886E7F}
[2013/12/11 20:54:21 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{855269C9-A9F6-4704-83F3-7F9BC75EA566}
[2013/12/11 08:33:18 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{87877ABA-ECFB-4555-8B92-44B21BC7A282}
[2013/12/10 22:22:04 | 000,028,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEUDINIT.EXE
[2013/12/10 22:17:28 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013/12/10 22:17:28 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013/12/10 22:17:16 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll
[2013/12/10 22:17:16 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013/12/10 22:17:15 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013/12/10 22:17:15 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/12/10 22:17:14 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013/12/10 22:17:14 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013/12/10 22:17:14 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013/12/10 22:17:14 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013/12/10 22:17:14 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013/12/10 22:17:14 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/12/10 22:17:14 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2013/12/10 22:17:14 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/12/10 22:17:14 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013/12/10 22:17:13 | 001,051,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013/12/10 22:17:13 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013/12/10 22:17:13 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013/12/10 22:17:13 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013/12/10 22:17:13 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013/12/10 22:17:13 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013/12/10 22:17:12 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/12/10 22:17:12 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013/12/10 22:17:12 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013/12/10 22:17:12 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013/12/10 22:17:12 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013/12/10 22:17:12 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2013/12/10 22:17:12 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2013/12/10 22:17:12 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013/12/10 22:17:11 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/12/10 22:17:11 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/12/10 22:17:11 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013/12/10 22:17:10 | 000,942,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll
[2013/12/10 22:17:10 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013/12/10 22:17:10 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/12/10 22:17:09 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013/12/10 22:17:09 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013/12/10 22:17:09 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/12/10 22:17:09 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013/12/10 22:17:09 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013/12/10 22:17:09 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013/12/10 22:17:09 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013/12/10 22:17:08 | 001,228,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013/12/10 22:17:08 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013/12/10 22:17:08 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013/12/10 22:17:08 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013/12/10 22:17:08 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013/12/10 22:17:08 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013/12/10 22:17:08 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013/12/10 22:17:08 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2013/12/10 22:17:07 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/12/10 22:17:07 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013/12/10 22:17:07 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013/12/10 22:17:07 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013/12/10 22:17:07 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013/12/10 22:17:07 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013/12/10 22:17:07 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013/12/10 22:17:06 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/12/10 22:17:06 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013/12/10 22:17:06 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013/12/10 22:17:06 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2013/12/10 22:17:06 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013/12/10 22:17:06 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013/12/10 22:17:06 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013/12/10 20:31:23 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{C83AC04F-AC71-40AC-89DF-F7B579B1E58F}
[2013/12/10 06:42:43 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{02355457-201A-425C-96F1-EA400ADDD7A2}
[2013/12/09 09:37:14 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{E71C5C89-D15C-4BBC-B52E-9714E8C994D7}
[2013/12/08 21:14:20 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{46B01DF1-7E46-4F2E-AE8E-A2D0C0D91D2F}
[2013/12/08 09:03:27 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{05F98000-85A1-462A-A577-3E68D11F68D0}
[2013/12/07 20:44:46 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{5A534CE5-7E09-4CC9-A92E-5101B2A195F8}
[2013/12/07 18:26:42 | 000,212,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RICHTX32.OCX
[2013/12/07 18:26:42 | 000,124,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWINSCK.OCX
[2013/12/07 18:26:25 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Démarrage
[2013/12/07 18:26:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Démarrage
[2013/12/07 18:20:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrestoNotes
[2013/12/07 17:50:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ord-ixSofts
[2013/12/07 17:32:19 | 000,000,000 | ---D | C] -- C:\Users\Pierre\Documents\PS Freebie Notes
[2013/12/07 17:32:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Power Soft
[2013/12/07 17:32:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Power Soft
[2013/12/07 08:04:06 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{037509D0-DFF6-4210-BC92-29E4C1AD2ADE}
[2013/12/06 09:31:44 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{D343866B-2D61-4BB2-BAB0-44775E1C7983}
[2013/12/05 21:31:19 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{A77D2918-2C5E-4ADE-8183-3562D1850AFA}
[2013/12/05 08:01:59 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{98E6D6E8-C63A-4D15-87DD-7B65ACA9F39F}
[2013/12/04 21:18:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dream Aquarium
[2013/12/04 20:32:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2014
[2013/12/04 20:30:01 | 000,000,000 | -HSD | C] -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
[2013/12/04 08:46:58 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{8641B70F-3D92-4B17-9291-44884E27F838}
[2013/12/03 20:32:52 | 000,000,000 | ---D | C] -- C:\Users\Pierre\AppData\Local\{91601C6F-8D37-4F8D-A82C-71C1FE8B8961}
[2013/04/08 17:22:18 | 013,024,768 | ---- | C] (LastPass) -- C:\Program Files (x86)\Common Files\lpuninstall.exe
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2014/01/02 16:25:32 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014/01/02 16:18:51 | 000,028,352 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/01/02 16:18:51 | 000,028,352 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/01/02 16:16:54 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/02 16:08:37 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/01/02 16:07:53 | 000,000,450 | -H-- | M] () -- C:\Windows\tasks\SK.Enhancer-S-161304646.job
[2014/01/02 16:06:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/01/02 16:04:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/01/02 15:50:00 | 000,001,082 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2299110952-3777586522-4180002589-1000UA.job
[2014/01/02 11:12:32 | 001,691,664 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/01/02 11:12:32 | 000,747,894 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2014/01/02 11:12:32 | 000,654,464 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/01/02 11:12:32 | 000,150,386 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2014/01/02 11:12:32 | 000,122,336 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/01/02 11:10:40 | 001,644,590 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014/01/02 10:52:05 | 006,555,763 | ---- | M] () -- C:\Users\Pierre\Desktop\LIBERATION DU 02.01.2014.pdf
[2014/01/02 10:44:06 | 000,002,047 | ---- | M] () -- C:\Users\Pierre\Desktop\Fortuneo LIVE TRADER.lnk
[2014/01/02 07:43:52 | 005,159,978 | ---- | M] () -- C:\Users\Pierre\Desktop\M.QP2.pdf
[2014/01/01 12:58:43 | 000,367,200 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\afcdp.sys
[2014/01/01 12:58:36 | 001,464,096 | ---- | M] (Acronis International GmbH) -- C:\Windows\SysNative\drivers\tdrpman.sys
[2014/01/01 12:58:34 | 000,198,432 | ---- | M] (Acronis International GmbH) -- C:\Windows\SysNative\drivers\tib_mounter.sys
[2014/01/01 12:58:17 | 000,001,207 | ---- | M] () -- C:\Users\Public\Desktop\Acronis True Image 2014.lnk
[2014/01/01 07:20:03 | 000,407,607 | ---- | M] () -- C:\Users\Pierre\Desktop\2013-12 B.pdf
[2013/12/31 17:50:00 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2299110952-3777586522-4180002589-1000Core.job
[2013/12/31 17:18:16 | 000,002,116 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk
[2013/12/31 17:18:15 | 013,024,768 | ---- | M] (LastPass) -- C:\Program Files (x86)\Common Files\lpuninstall.exe
[2013/12/31 17:18:12 | 000,001,192 | ---- | M] () -- C:\Users\Pierre\Application Data\Microsoft\Internet Explorer\Quick Launch\My LastPass Vault.lnk
[2013/12/31 17:18:10 | 000,002,116 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
[2013/12/31 17:17:32 | 000,001,192 | ---- | M] () -- C:\Users\Public\Desktop\My LastPass Vault.lnk
[2013/12/31 11:17:46 | 000,269,600 | ---- | M] (Acronis International GmbH) -- C:\Windows\SysNative\drivers\snapman.sys
[2013/12/31 11:17:44 | 000,116,000 | ---- | M] (Acronis International GmbH) -- C:\Windows\SysNative\drivers\fltsrv.sys
[2013/12/20 17:52:23 | 000,002,378 | ---- | M] () -- C:\Users\Pierre\Desktop\Google Chrome.lnk
[2013/12/20 13:19:32 | 000,002,214 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013/12/12 21:32:05 | 000,496,624 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/12/10 22:17:28 | 000,940,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013/12/10 22:17:28 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013/12/10 22:17:16 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll
[2013/12/10 22:17:16 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013/12/10 22:17:15 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013/12/10 22:17:15 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/12/10 22:17:14 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013/12/10 22:17:14 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013/12/10 22:17:14 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013/12/10 22:17:14 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013/12/10 22:17:14 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013/12/10 22:17:14 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/12/10 22:17:14 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2013/12/10 22:17:14 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/12/10 22:17:14 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013/12/10 22:17:14 | 000,016,284 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2013/12/10 22:17:13 | 001,051,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013/12/10 22:17:13 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013/12/10 22:17:13 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013/12/10 22:17:13 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013/12/10 22:17:13 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013/12/10 22:17:13 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013/12/10 22:17:12 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/12/10 22:17:12 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013/12/10 22:17:12 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013/12/10 22:17:12 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013/12/10 22:17:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013/12/10 22:17:12 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2013/12/10 22:17:12 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2013/12/10 22:17:12 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013/12/10 22:17:11 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/12/10 22:17:11 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/12/10 22:17:11 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013/12/10 22:17:10 | 000,942,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll
[2013/12/10 22:17:10 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013/12/10 22:17:10 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013/12/10 22:17:10 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/12/10 22:17:09 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013/12/10 22:17:09 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/12/10 22:17:09 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013/12/10 22:17:09 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013/12/10 22:17:09 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013/12/10 22:17:09 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013/12/10 22:17:08 | 001,228,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013/12/10 22:17:08 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013/12/10 22:17:08 | 000,453,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013/12/10 22:17:08 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013/12/10 22:17:08 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013/12/10 22:17:08 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013/12/10 22:17:08 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013/12/10 22:17:08 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2013/12/10 22:17:08 | 000,016,284 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2013/12/10 22:17:07 | 000,626,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/12/10 22:17:07 | 000,548,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013/12/10 22:17:07 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013/12/10 22:17:07 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013/12/10 22:17:07 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013/12/10 22:17:07 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013/12/10 22:17:07 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013/12/10 22:17:07 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013/12/10 22:17:06 | 000,774,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/12/10 22:17:06 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013/12/10 22:17:06 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2013/12/10 22:17:06 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013/12/10 22:17:06 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013/12/10 22:17:06 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013/12/10 21:13:49 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/12/10 21:13:49 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/12/10 09:08:41 | 000,001,072 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2014/01/02 10:51:57 | 006,555,763 | ---- | C] () -- C:\Users\Pierre\Desktop\LIBERATION DU 02.01.2014.pdf
[2014/01/02 07:42:11 | 005,159,978 | ---- | C] () -- C:\Users\Pierre\Desktop\M.QP2.pdf
[2014/01/01 12:58:17 | 000,001,207 | ---- | C] () -- C:\Users\Public\Desktop\Acronis True Image 2014.lnk
[2014/01/01 07:20:01 | 000,407,607 | ---- | C] () -- C:\Users\Pierre\Desktop\2013-12 B.pdf
[2013/12/31 17:18:16 | 000,002,116 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk
[2013/12/31 17:18:10 | 000,002,116 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
[2013/12/31 17:18:06 | 000,001,192 | ---- | C] () -- C:\Users\Pierre\Application Data\Microsoft\Internet Explorer\Quick Launch\My LastPass Vault.lnk
[2013/12/31 17:17:32 | 000,001,192 | ---- | C] () -- C:\Users\Public\Desktop\My LastPass Vault.lnk
[2013/12/20 17:45:36 | 000,001,082 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2299110952-3777586522-4180002589-1000UA.job
[2013/12/20 17:45:35 | 000,001,030 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2299110952-3777586522-4180002589-1000Core.job
[2013/12/20 13:19:32 | 000,002,214 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2013/12/10 22:17:14 | 000,016,284 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2013/12/10 22:17:08 | 000,016,284 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2013/09/22 08:55:56 | 009,199,981 | ---- | C] () -- C:\Users\Pierre\AppData\Local\SelfExtractible.zip
[2013/08/07 08:52:28 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/08/07 08:52:28 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/08/07 08:52:28 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/08/07 08:52:28 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/08/07 08:52:28 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013/08/01 09:41:02 | 000,002,491 | ---- | C] () -- C:\Users\Pierre\AppData\Local\recently-used.xbel
[2013/07/27 15:27:37 | 000,362,029 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll
[2013/07/20 18:07:00 | 000,004,608 | ---- | C] () -- C:\Users\Pierre\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/04/29 19:09:47 | 000,110,592 | ---- | C] () -- C:\Windows\SysWow64\FsUsbExDevice.Dll
[2013/01/22 17:51:17 | 000,000,263 | ---- | C] () -- C:\Users\Pierre\.swfinfo
[2012/10/08 10:57:08 | 000,000,025 | ---- | C] () -- C:\Users\Pierre\intlname.ols
[2012/09/26 20:57:16 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012/09/26 20:57:14 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012/09/26 20:57:14 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012/09/26 20:57:14 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012/09/26 20:57:14 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2012/07/09 07:42:28 | 000,000,017 | ---- | C] () -- C:\Users\Pierre\AppData\Local\resmon.resmoncfg
[2012/07/07 07:51:08 | 001,720,320 | ---- | C] () -- C:\Windows\SysWow64\beconvlib.dll
[2012/07/07 07:51:08 | 000,282,624 | ---- | C] () -- C:\Windows\SysWow64\bprgcomm.dll
[2012/07/07 07:51:07 | 000,131,072 | ---- | C] () -- C:\Windows\SysWow64\CSVSpecialProcessing.dll
[2012/07/07 07:51:07 | 000,000,530 | ---- | C] () -- C:\Windows\SysWow64\tx15_ic.ini
[2012/07/07 07:51:06 | 000,221,184 | ---- | C] () -- C:\Windows\SysWow64\SII_PDF.dll
[2012/07/07 07:51:06 | 000,102,400 | ---- | C] () -- C:\Windows\SysWow64\SARzilla.dll
[2012/07/07 07:51:06 | 000,098,304 | ---- | C] () -- C:\Windows\SysWow64\DVM.dll
[2012/07/07 07:51:01 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\RegisterExe.exe
[2012/07/05 16:33:27 | 000,182,143 | ---- | C] () -- C:\Windows\hpoins44.dat.temp
[2012/07/05 14:40:05 | 000,000,586 | ---- | C] () -- C:\Windows\hpomdl44.dat.temp
[2012/07/05 14:27:03 | 000,176,372 | ---- | C] () -- C:\Windows\hpoins44.dat
[2012/06/08 13:13:15 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\cd.dat
[2012/04/30 13:32:37 | 000,000,382 | ---- | C] () -- C:\Windows\ODBC.INI
[2002/07/01 14:13:30 | 000,000,224 | -HS- | C] () -- C:\Users\Pierre\AppData\Roaming\maildriver32.dat

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2014/01/02 14:18:03 | 000,000,043 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2299110952-3777586522-4180002589-1000\$RJPY6B9\l
[2013/04/08 15:13:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/26 02:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/26 01:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 01:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 03:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 01:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
Invalid Environment Variable: alluserprofile
Invalid Environment Variable: alluserprofile

[color=#A23BEC]< %appdata%\*. >[/color]
[2013/12/31 11:17:56 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\73EA6BD1-AC9F-4B5D-B27F-281E7B0D20F1
[2012/07/11 07:54:56 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\8CF046DF-2DCD-4DC0-80F9-AD5EEB08D7D4
[2012/07/11 17:59:24 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\A890D3DA-DE6B-489B-8550-CF0BC572A00D
[2012/05/28 07:56:35 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Acronis
[2012/08/03 10:15:43 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Adobe
[2012/04/30 13:26:39 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Arcsoft
[2013/12/14 20:50:01 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Azureus
[2013/12/19 18:18:50 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\BitTorrent Sync
[2012/12/06 08:01:31 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\calibre
[2012/12/16 17:36:34 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Creative
[2013/04/08 15:01:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\DeepBurner
[2012/04/30 10:47:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Dell
[2013/09/29 07:40:21 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\DigitalVolcano
[2012/08/16 22:03:00 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\DM_Software
[2012/12/16 17:36:34 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Downloaded Installations
[2013/08/09 08:07:10 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Dropbox
[2013/09/28 08:03:38 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\dvdcss
[2012/12/30 20:43:37 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\EasyBurner
[2013/04/09 14:48:08 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\F33AC56E-02AF-4A18-837A-02A4D63121A6
[2012/09/12 15:26:00 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\FastStone
[2012/06/01 19:11:52 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\FileOpen
[2012/04/30 10:47:27 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Fingertapps
[2012/06/13 09:24:47 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Fortuneo
[2013/04/30 16:00:50 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Garmin
[2012/04/30 13:22:24 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\HotSync
[2012/07/05 16:37:02 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\HP
[2013/08/05 10:25:22 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\HpUpdate
[2013/08/12 10:05:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Identities
[2013/07/24 13:33:07 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\InfraRecorder
[2012/09/13 20:14:47 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\InstallShield
[2012/04/30 10:43:22 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Intel
[2013/01/07 14:20:20 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\IsolatedStorage
[2013/07/29 23:17:43 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Local
[2012/04/24 21:13:49 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Macromedia
[2012/12/20 13:40:45 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Macrovision
[2013/03/06 16:02:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\MagicMatch
[2012/10/13 15:01:17 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Malwarebytes
[2010/11/21 06:29:25 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Media Center Programs
[2013/08/12 10:42:13 | 000,000,000 | --SD | M] -- C:\Users\Pierre\AppData\Roaming\Microsoft
[2012/05/04 14:40:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Mozilla
[2012/10/24 15:53:32 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\MumboJumbo
[2013/07/01 20:20:42 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\MusicNet
[2012/06/19 06:20:31 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Nero
[2013/12/31 15:34:59 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Nitro PDF
[2012/05/22 16:26:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\NVIDIA
[2013/09/22 08:56:02 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Orange
[2012/05/24 18:09:14 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\PCDr
[2013/04/08 15:01:12 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\PhotoFiltre
[2012/05/24 08:43:33 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Reallusion
[2012/07/11 19:07:54 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Roxio
[2012/05/28 09:59:30 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Roxio Burn
[2013/10/28 21:05:44 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Samsung
[2013/03/06 16:02:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Saqqarah
[2014/01/02 14:23:45 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Skype
[2013/03/06 16:02:11 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\StoneLoops!
[2013/04/08 15:01:17 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Thunderbird
[2012/11/14 21:17:28 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\TomTom
[2013/12/04 20:32:46 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\TuneUp Software
[2012/06/26 09:19:42 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\URSoft
[2013/12/31 11:22:14 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\uTorrent
[2013/12/10 21:22:26 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\vlc
[2012/06/20 08:42:33 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\Windows Live Writer
[2012/06/14 15:54:38 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\WinRAR
[2012/05/22 16:16:24 | 000,000,000 | ---D | M] -- C:\Users\Pierre\AppData\Roaming\ZinioReader4

[color=#A23BEC]< %appdata%\*.exe /s >[/color]
[2013/07/27 15:18:00 | 004,177,856 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Azureus\plugins\azemp\vuzeplayer.exe
[2012/05/23 09:13:27 | 000,310,208 | ---- | M] (Georgia Institute of Technology) -- C:\Users\Pierre\AppData\Roaming\Azureus\plugins\mlab\ShaperProbeC.exe
[2013/12/14 09:48:31 | 008,876,576 | ---- | M] (Azureus Software, Inc.) -- C:\Users\Pierre\AppData\Roaming\Azureus\tmp\AZU5763179736303949205.tmp\Vuze_5.2.0.0b_win32.exe
[2013/06/05 17:28:40 | 027,370,808 | ---- | M] (Dropbox, Inc.) -- C:\Users\Pierre\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2013/06/05 17:28:50 | 000,229,288 | ---- | M] (Dropbox, Inc.) -- C:\Users\Pierre\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2013/06/05 17:28:42 | 000,919,048 | ---- | M] (Dropbox, Inc.) -- C:\Users\Pierre\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2013/03/04 10:35:25 | 000,010,134 | R--- | M] () -- C:\Users\Pierre\AppData\Roaming\Microsoft\Installer\{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}\ARPPRODUCTICON.exe
[2013/08/01 07:59:44 | 000,607,600 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\OrangeInstall.exe
[2013/09/22 08:56:06 | 000,162,482 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\uninstall.exe
[2012/11/16 07:57:12 | 000,175,104 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\install\Launch.exe
[2012/11/16 07:57:12 | 000,222,208 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\install\Uninstall.exe
[2013/09/11 07:28:34 | 001,530,008 | ---- | M] (Orange) -- C:\Users\Pierre\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
[2013/12/12 17:48:17 | 015,455,280 | ---- | M] (Dell Inc) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Binaries\patch_dsc_636148to642214_64_03.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\06be0c64-c23d-4c51-9c19-6c8ad68787e8\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\1aa2d895-a677-441b-8bbd-26ff89a75cb4\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2012/07/05 12:51:46 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\1f06df1f-8b84-45ed-a752-5f5e981d9cfc\appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\203003d3-7d6c-4eb4-a422-ae2812d0ee47\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\32a3f14a-7efd-4efc-94c2-17115fc00e05\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\420ad8d7-973e-4c8a-9c3b-417789c24c66\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\4325e6ce-f8cf-4cf7-9a2b-e544c55131be\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\44b64e2a-9080-4e35-8ac7-661794834f19\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\4813c526-38f8-49f2-86a6-e59cc7e449bf\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2012/07/05 12:51:46 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\4e0005b9-d6bb-439d-b9dd-68f96d36d1dd\appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\5d1aab77-d062-4b1e-84dd-00797745874b\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\74fa183a-36bc-4f9f-937e-bb55d633af8d\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\85064f8f-507a-4bc7-a2b4-438fca677e6b\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\907dfc70-94b1-42aa-bc09-395846ec3bdd\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\95cfa13a-299f-497c-8d00-5759005b5cff\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\9f8ad2b1-6511-4134-8ee8-dabad9215cfe\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\a1621c4f-2b18-4457-a1ac-784fe4893f56\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\b160cc6f-1800-470a-9074-e93bac68a6c4\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\bf6454be-6e9c-4a32-8a5a-1b204bd6f130\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\c46bf81d-c681-47a4-8db5-a6f20dd59421\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\d573e40f-5ab5-4e18-91f9-d7e205a349a8\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2012/07/05 12:51:46 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\d8d88e1a-ea68-4634-91a5-2dcbfdb108d6\appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\d8ef86d1-794e-4c6f-b26a-ef8e7b95981e\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\dcbf3037-8361-40f7-af18-a8b0f9c5802c\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\dec88d65-0431-4f81-a340-3cf854e25d56\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\e563a355-be02-4063-aa76-de7f2a034573\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2012/07/05 12:51:46 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\ee89ef49-360e-4ae1-a707-4ddc77fcd240\appupdaterrules_dell\AddCertificate.exe
[2013/07/24 20:54:48 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\Pierre\AppData\Roaming\PCDr\Update\Rules\f6ce126f-1b0d-482f-a169-7490b3589af8\PCDoctor_6219.34_windows_appupdaterrules_dell\AddCertificate.exe
[2013/05/12 09:23:38 | 000,061,328 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\AdminDelegator.exe
[2013/05/12 09:23:38 | 000,088,464 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\AgentInstaller.exe
[2013/05/12 09:23:38 | 000,077,704 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\AgentUpdate.exe
[2013/05/12 09:23:38 | 000,844,168 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\FirmwareUpdateTemp\AGENT\KiesPDLR.exe
[2012/12/20 09:44:26 | 001,476,104 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\Kies.exe
[2012/12/20 09:44:26 | 000,531,976 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\KiesAgent.exe
[2012/12/18 01:10:18 | 000,578,560 | ---- | M] (Samsung Electronics) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\KiesAirMessage.exe
[2012/12/20 09:44:30 | 000,278,024 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\KiesDriverInstaller.exe
[2012/12/20 09:44:28 | 000,310,280 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\KiesTrayAgent.exe
[2012/12/20 09:34:34 | 000,171,008 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\ConnectionManager.exe
[2012/12/20 09:37:18 | 000,332,800 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\DeviceDataService.exe
[2012/12/20 09:35:24 | 000,689,152 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\DeviceManager.exe
[2012/09/26 20:57:48 | 000,341,960 | ---- | M] (Teruten Inc) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\FsAdmin64.exe
[2012/09/26 20:57:46 | 000,020,480 | ---- | M] (Teruten Inc) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\FsExService64.exe
[2012/09/26 20:57:48 | 000,214,544 | ---- | M] (Teruten) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\FsUsbExAdmin.exe
[2012/09/26 20:57:46 | 000,217,088 | ---- | M] (Teruten) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\FsUsbExService.exe
[2012/12/20 09:44:30 | 000,068,104 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\Kies_Tutorial.exe
[2012/12/20 09:44:38 | 000,066,056 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\RegisterCOM.exe
[2012/12/18 01:07:40 | 000,060,888 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\AdminDelegator.exe
[2012/12/18 01:07:40 | 000,088,024 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\AgentInstaller.exe
[2012/12/18 01:07:40 | 000,077,264 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\AgentUpdate.exe
[2012/12/20 09:44:32 | 000,844,296 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\KiesPDLR.exe
[2012/12/20 09:44:34 | 003,768,368 | ---- | M] (Freeware) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\External\MediaModules\MyFreeCodecPack.exe
[2012/12/20 09:44:36 | 000,602,120 | ---- | M] (ml) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\Updater\Kies.Update.exe
[2012/10/24 08:36:00 | 014,754,704 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Backup\USB Driver\SAMSUNG_USB_Driver_for_Mobile_Phones.exe
[2013/04/23 04:48:12 | 001,561,968 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\Kies.exe
[2013/04/23 04:48:14 | 000,559,984 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesAgent.exe
[2013/04/18 10:10:38 | 000,578,560 | ---- | M] (Samsung Electronics) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesAirMessage.exe
[2013/04/23 04:48:16 | 000,277,872 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesDriverInstaller.exe
[2013/04/23 04:48:16 | 000,311,152 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesTrayAgent.exe
[2013/04/23 04:36:02 | 000,173,568 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\ConnectionManager.exe
[2013/04/23 04:38:58 | 000,344,576 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\DeviceDataService.exe
[2013/04/23 04:36:54 | 000,692,224 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\DeviceManager.exe
[2013/04/18 10:09:22 | 000,431,832 | ---- | M] (Teruten Inc) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\FsAdmin64.exe
[2013/04/18 10:09:20 | 000,021,504 | ---- | M] (Teruten Inc) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\FsExService64.exe
[2013/04/18 10:09:22 | 000,233,176 | ---- | M] (Teruten) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\FsUsbExAdmin.exe
[2013/04/18 10:09:20 | 000,233,472 | ---- | M] (Teruten) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\FsUsbExService.exe
[2013/04/23 04:48:18 | 000,067,952 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\Kies_Tutorial.exe
[2013/04/23 04:48:24 | 000,065,904 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\RegisterCOM.exe
[2013/04/18 10:08:48 | 000,061,328 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AdminDelegator.exe
[2013/04/18 10:08:48 | 000,088,464 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AgentInstaller.exe
[2013/04/18 10:08:48 | 000,077,704 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AgentUpdate.exe
[2013/04/23 04:48:20 | 000,844,144 | ---- | M] (Samsung) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\KiesPDLR.exe
[2013/04/23 04:48:22 | 003,768,712 | ---- | M] (Freeware) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\External\MediaModules\MyFreeCodecPack.exe
[2013/04/18 10:05:34 | 021,538,088 | ---- | M] () -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\StoryAlbumViewer\StoryAlbumViewer_setup.exe
[2013/04/23 04:48:22 | 000,602,992 | ---- | M] (ml) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\Updater\Kies.Update.exe
[2013/04/03 08:16:34 | 015,359,912 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\USB Driver\SAMSUNG_USB_Driver_for_Mobile_Phones.exe
[2012/12/20 09:44:36 | 000,602,120 | ---- | M] (ml) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Temp\Kies.Update.exe
[2013/04/23 04:48:22 | 000,602,992 | ---- | M] (ml) -- C:\Users\Pierre\AppData\Roaming\Samsung\Kies\UpdateTemp\Updater\Kies.Update.exe
[2013/12/01 19:24:02 | 001,142,864 | ---- | M] (BitTorrent Inc.) -- C:\Users\Pierre\AppData\Roaming\uTorrent\uTorrent.exe
[2013/12/01 19:24:02 | 001,142,864 | ---- | M] (BitTorrent Inc.) -- C:\Users\Pierre\AppData\Roaming\uTorrent\updates\3.3.2_30303.exe

[color=#A23BEC]< %systemdrive%\*. >[/color]
[2013/08/17 21:35:42 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2014/01/02 16:04:50 | 000,000,000 | ---D | M] -- C:\AdwCleaner
[2012/04/24 21:41:41 | 000,000,000 | ---D | M] -- C:\apps
[2014/01/02 16:06:23 | 000,000,000 | ---D | M] -- C:\Config.Msi
[2013/04/08 14:58:39 | 000,000,000 | ---D | M] -- C:\DELL
[2009/07/14 05:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2012/04/24 21:45:27 | 000,000,000 | ---D | M] -- C:\Drivers
[2012/07/15 17:07:55 | 000,000,000 | ---D | M] -- C:\DvdWin7
[2013/07/31 18:42:05 | 000,000,000 | ---D | M] -- C:\Log
[2012/12/20 15:32:47 | 000,000,000 | R--D | M] -- C:\MSOCache
[2009/07/14 03:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2014/01/02 11:49:29 | 000,000,000 | ---D | M] -- C:\Program Files
[2014/01/02 16:04:43 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2014/01/02 16:06:23 | 000,000,000 | ---D | M] -- C:\ProgramData
[2013/08/07 09:12:34 | 000,000,000 | ---D | M] -- C:\Qoobox
[2013/08/02 13:10:56 | 000,000,000 | ---D | M] -- C:\rsit
[2013/09/08 15:39:50 | 000,000,000 | ---D | M] -- C:\Shortcut_Module
[2012/04/30 10:49:08 | 000,000,000 | -HSD | M] -- C:\System Recovery
[2014/01/02 16:26:05 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2013/08/06 20:24:00 | 000,000,000 | ---D | M] -- C:\TDSSKiller_Quarantine
[2013/08/07 07:14:58 | 000,000,000 | ---D | M] -- C:\Temp
[2014/01/02 13:51:34 | 000,000,000 | ---D | M] -- C:\Users
[2014/01/02 11:07:25 | 000,000,000 | ---D | M] -- C:\Windows
[2013/08/09 10:46:53 | 000,000,000 | ---D | M] -- C:\ZHP
[2013/08/03 16:08:14 | 000,000,000 | ---D | M] -- C:\_OTL

[color=#A23BEC]< %systemdrive%\*.exe >[/color]

[color=#A23BEC]< %programfiles%\*. >[/color]
[2012/10/26 21:05:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\2BrightSparks
[2012/08/01 14:57:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Acronis
[2013/08/05 12:20:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ad-Remover
[2012/04/24 21:45:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2013/12/19 18:18:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BitTorrent Sync
[2013/11/13 20:52:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Calibre2
[2012/04/24 20:54:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cisco
[2013/08/12 10:47:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2013/10/26 06:52:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Convar
[2012/12/16 17:33:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative
[2012/12/20 13:39:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative Live! Cam
[2014/01/01 18:42:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CrystalDiskInfo
[2012/12/16 17:33:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cyberlink
[2012/12/16 17:34:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell
[2014/01/02 16:09:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell DataSafe Local Backup
[2012/04/24 21:52:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell Stage
[2012/04/24 21:26:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell Webcam
[2013/12/07 17:51:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dream Aquarium
[2013/09/29 07:40:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Duplicate Cleaner
[2013/09/27 19:30:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Duplicate Cleaner Pro
[2013/04/08 14:59:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EasyBurner
[2013/04/08 14:59:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\eBay
[2013/04/08 14:59:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FastStone Capture
[2012/07/13 10:27:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FinalWire
[2013/10/13 13:57:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Garmin
[2012/12/20 13:39:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2014/01/01 10:53:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\graeatsavver
[2013/12/20 17:44:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GUM30BA.tmp
[2013/04/08 14:59:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP
[2013/04/08 14:59:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Photo Creations
[2013/04/08 14:59:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\IcoSauve
[2013/07/24 13:32:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\InfraRecorder
[2013/12/07 18:38:28 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2013/01/18 21:43:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2013/12/12 21:28:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2013/06/20 10:58:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2013/12/31 17:20:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LastPass
[2013/05/02 10:40:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/12/16 17:34:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MarkAny
[2013/08/12 10:47:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\McAfee
[2012/12/15 21:38:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Analysis Services
[2013/01/13 22:45:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2013/11/14 20:49:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Security Client
[2013/10/10 19:17:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2013/01/13 21:10:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2013/01/13 21:10:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Sync Framework
[2013/01/13 22:27:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Synchronization Services
[2013/01/13 22:27:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2013/01/13 22:27:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2013/12/22 11:44:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2013/12/24 06:21:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013/04/08 14:59:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2012/12/16 17:34:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSECache
[2013/04/29 19:25:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MyFree Codec
[2013/04/08 14:59:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MyTomTom 3
[2012/12/01 18:53:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Nero
[2012/07/12 18:24:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Nitro PDF
[2012/12/16 17:34:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2012/06/13 09:21:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Oracle
[2013/09/22 08:57:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Orange
[2013/12/08 08:56:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ord-ixSofts
[2012/09/12 16:31:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OVH
[2013/08/12 10:47:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Palm
[2013/04/08 14:59:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PDFCreator
[2013/07/24 11:35:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Philips Intelligent Agent
[2013/04/08 14:59:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PhotoFiltre
[2013/12/07 17:32:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Power Soft
[2013/11/06 08:16:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PrivaZer
[2009/07/14 05:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2012/04/24 21:40:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Roxio
[2013/10/28 21:04:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Samsung
[2013/08/12 10:47:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SEAF
[2014/01/02 12:14:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Seagate
[2013/12/03 16:33:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Sk.Enhancer
[2013/07/23 17:44:04 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2012/04/24 21:15:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SmartSound Software
[2012/12/16 17:35:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SonY
[2013/07/01 20:37:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\splus
[2013/10/26 08:02:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Stellar Phoenix Photo Recovery
[2013/08/12 10:47:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\StuffPlug3
[2013/04/08 14:59:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TomTom HOME 2
[2012/12/16 17:35:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TomTom International B.V
[2013/08/02 13:10:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\trend micro
[2012/06/30 18:29:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Trusteer
[2013/12/04 20:44:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TuneUp Utilities 2014
[2012/05/23 09:06:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
[2013/07/27 15:14:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Vuze
[2013/07/11 07:12:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2012/12/20 13:39:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2013/04/08 15:06:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2013/12/12 21:28:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2012/12/16 17:35:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2013/04/08 15:05:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2013/04/08 15:06:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2013/04/08 15:06:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2013/04/08 15:00:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Your Uninstaller! 7
[2013/08/09 10:46:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ZHPDiag

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2012/04/24 22:15:12 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2012/04/24 22:15:12 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\erdnt\cache86\explorer.exe
[2012/04/24 22:15:12 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2012/04/24 22:15:12 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2012/04/24 22:15:12 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/21 03:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2012/04/24 22:15:12 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2012/04/24 22:15:12 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/21 03:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2010/11/21 03:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\erdnt\cache64\netlogon.dll
[2010/11/21 03:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010/11/21 03:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/21 03:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\erdnt\cache86\netlogon.dll
[2010/11/21 03:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010/11/21 03:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/21 03:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\erdnt\cache86\userinit.exe
[2010/11/21 03:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 03:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 03:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\erdnt\cache64\userinit.exe
[2010/11/21 03:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 03:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2010/11/21 03:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\erdnt\cache64\winlogon.exe
[2010/11/21 03:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010/11/21 03:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2013/04/04 12:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 745 bytes -> C:\Users\Pierre\Documents\Email Tel Appt Ciutad de.eml:OECustomProperty
@Alternate Data Stream - 177 bytes -> C:\ProgramData\Temp:1CE11B51
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:58DD92AC

< End of report >

Publicité


Signaler le contenu de ce document

Publicité