cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 24/05/2015 09:59:25 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\axiane\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17801)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

5,95 Gb Total Physical Memory | 3,52 Gb Available Physical Memory | 59,19% Memory free
11,90 Gb Paging File | 9,15 Gb Available in Paging File | 76,94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 678,24 Gb Total Space | 237,11 Gb Free Space | 34,96% Space Free | Partition Type: NTFS
Drive D: | 16,24 Gb Total Space | 1,73 Gb Free Space | 10,65% Space Free | Partition Type: NTFS
Drive E: | 3,96 Gb Total Space | 1,13 Gb Free Space | 28,55% Space Free | Partition Type: FAT32

Computer Name: AXIANE-HP | User Name: axiane | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2015/05/24 09:56:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\axiane\Downloads\OTL.exe
PRC - [2015/05/16 19:54:38 | 000,244,040 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
PRC - [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2015/04/09 08:29:39 | 000,367,016 | ---- | M] (IncrediMail, Ltd.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
PRC - [2015/04/09 08:29:39 | 000,264,616 | ---- | M] (IncrediMail, Ltd.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
PRC - [2015/04/03 15:42:26 | 000,814,880 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
PRC - [2015/03/30 14:51:06 | 000,108,032 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
PRC - [2015/03/28 12:58:42 | 000,089,840 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
PRC - [2015/01/06 15:40:36 | 000,409,376 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2015/01/06 15:40:34 | 000,158,496 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
PRC - [2014/05/30 04:46:30 | 003,592,120 | ---- | M] (Check Point Software Technologies Ltd.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
PRC - [2014/05/30 04:45:20 | 000,137,352 | ---- | M] (Check Point Software Technologies Ltd.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
PRC - [2014/05/29 06:01:56 | 000,090,936 | ---- | M] (Check Point Software Technologies, Ltd.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
PRC - [2014/04/02 09:35:54 | 000,287,592 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2014/04/02 09:35:54 | 000,015,720 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2013/08/14 15:19:22 | 000,039,056 | ---- | M] () -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
PRC - [2012/03/05 13:38:38 | 000,578,944 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2012/03/05 13:38:38 | 000,035,200 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2011/08/19 14:48:44 | 000,379,960 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
PRC - [2011/05/05 23:06:28 | 000,653,128 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
PRC - [2011/05/05 23:06:02 | 000,142,664 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
PRC - [2010/04/23 12:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010/04/23 12:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/05/13 18:48:46 | 001,281,864 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.65\libglesv2.dll
MOD - [2015/05/13 18:48:46 | 000,080,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.65\libegl.dll
MOD - [2015/05/13 17:38:30 | 001,071,104 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servf73e6522#\8d17de4cf6bd55506c509502178d2c20\System.ServiceModel.Web.ni.dll
MOD - [2015/05/13 17:38:25 | 019,547,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\a78078ff6ff0c28ef3bf65bd84e193f0\System.ServiceModel.ni.dll
MOD - [2015/05/13 10:21:16 | 002,964,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\dd7948371a8babd1bc4291924ec94d05\System.IdentityModel.ni.dll
MOD - [2015/05/13 10:07:51 | 012,897,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\a0b4e6b92d9c147d801a6f2e3a15080b\System.Windows.Forms.ni.dll
MOD - [2015/05/13 10:07:51 | 006,982,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\c61bafa9d029e3f2bf83bd5af3f1f5ac\System.Core.ni.dll
MOD - [2015/05/13 10:07:43 | 000,967,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\908075c4922acdf834c67ac802814c9d\System.Configuration.ni.dll
MOD - [2015/04/09 08:29:39 | 000,268,712 | ---- | M] () -- C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll
MOD - [2015/04/09 08:29:39 | 000,133,544 | ---- | M] () -- C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll
MOD - [2015/04/09 08:29:39 | 000,108,888 | ---- | M] () -- C:\Program Files (x86)\IncrediMail\Bin\PMC.dll
MOD - [2015/04/09 08:29:39 | 000,080,296 | ---- | M] () -- C:\Program Files (x86)\IncrediMail\Bin\ImAppRU.dll
MOD - [2015/04/09 08:29:39 | 000,072,104 | ---- | M] () -- C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll
MOD - [2015/04/09 08:29:39 | 000,033,128 | ---- | M] () -- C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll
MOD - [2015/02/06 23:17:52 | 010,069,504 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\d18e2115a3270f89663fce831547f534\System.ni.dll
MOD - [2015/02/06 23:17:15 | 000,118,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\93a0883923e78cc3e80b7ac4a9768c60\SMDiagnostics.ni.dll
MOD - [2015/02/06 09:13:53 | 001,873,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\1196cc375887ce75f134047505fe19bf\System.Xaml.ni.dll
MOD - [2015/02/06 09:13:20 | 002,855,424 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\187177229c00aec6dec613ea4b9ff209\System.Runtime.Serialization.ni.dll
MOD - [2015/02/06 09:13:18 | 000,790,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\14cc73701aac461eb89d6473a88fcd56\System.ServiceModel.Internals.ni.dll
MOD - [2015/02/06 09:12:34 | 001,642,496 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd2f9ea99ac0f984b9dc430824638c9f\System.Drawing.ni.dll
MOD - [2015/02/06 09:12:27 | 007,793,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\3d6ee4ffbd9a86ac1e7b01800b6fe9c7\System.Xml.ni.dll
MOD - [2015/02/06 09:11:27 | 017,207,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\d1265d6159ea876f9d63ea4c1361b587\mscorlib.ni.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2015/05/06 20:43:40 | 001,254,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2015/04/21 18:35:40 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2015/02/09 15:56:40 | 000,327,680 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Serviio\bin\ServiioService.exe -- (Serviio)
SRV:[b]64bit:[/b] - [2014/07/16 10:24:28 | 000,043,320 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:[b]64bit:[/b] - [2014/05/13 14:31:14 | 000,887,256 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2014/04/02 09:35:54 | 000,015,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV:[b]64bit:[/b] - [2014/03/25 00:50:50 | 000,357,144 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV:[b]64bit:[/b] - [2013/07/11 09:49:31 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2011/08/17 23:12:52 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2011/06/08 00:21:54 | 000,301,568 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:[b]64bit:[/b] - [2010/10/11 02:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
SRV:[b]64bit:[/b] - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2015/05/15 08:14:23 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/04/16 01:55:15 | 000,148,080 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/04/14 09:36:30 | 001,080,120 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2015/04/14 09:36:28 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2015/04/03 15:42:26 | 000,814,880 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe -- (AdvancedSystemCareService8)
SRV - [2015/03/30 14:51:06 | 000,108,032 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
SRV - [2015/03/28 12:58:42 | 000,089,840 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe -- (HPSupportSolutionsFrameworkService)
SRV - [2015/03/26 15:00:56 | 002,585,376 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2015/02/23 12:23:30 | 002,425,960 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
SRV - [2015/02/18 19:11:32 | 000,315,488 | ---- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2015/01/06 15:40:36 | 000,409,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2015/01/06 15:40:34 | 000,158,496 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
SRV - [2014/12/19 09:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/10/02 04:33:22 | 001,656,960 | ---- | M] () [Disabled | Stopped] -- C:\ProgramData\TVersity\Media Server\MediaServer.exe -- (TVersityMediaServer)
SRV - [2014/08/13 01:27:07 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2014/08/01 18:32:02 | 000,093,184 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
SRV - [2014/07/16 10:24:32 | 002,145,080 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2014/07/16 10:24:26 | 000,036,152 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2014/07/14 19:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014/07/14 19:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014/05/30 04:46:30 | 003,592,120 | ---- | M] (Check Point Software Technologies Ltd.) [Auto | Running] -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon)
SRV - [2014/05/29 06:01:56 | 000,090,936 | ---- | M] (Check Point Software Technologies, Ltd.) [Auto | Running] -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe -- (ZAPrivacyService)
SRV - [2014/04/12 00:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2013/11/08 19:08:08 | 000,009,216 | ---- | M] (Ellora Assets Corp.) [Disabled | Stopped] -- C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe -- (FreemakeVideoCapture)
SRV - [2013/08/27 16:57:34 | 000,093,072 | ---- | M] (TomTom) [Disabled | Stopped] -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2013/08/14 15:19:22 | 000,039,056 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013/07/04 17:55:26 | 004,177,408 | ---- | M] (Bouygues Telecom) [Auto | Stopped] -- C:\ProgramData\media center Bouygues Telecom\MediaServer.exe -- (media center Bouygues Telecom)
SRV - [2012/12/14 03:42:10 | 000,277,616 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012/03/05 13:38:38 | 000,035,200 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
SRV - [2011/09/13 16:49:46 | 001,098,296 | ---- | M] (Hewlett-Packard Development Company L.P.) [On_Demand | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe -- (hpCMSrv)
SRV - [2011/05/05 23:06:46 | 000,263,496 | ---- | M] (HP) [Auto | Stopped] -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe -- (FPLService)
SRV - [2010/12/28 10:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files (x86)\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
SRV - [2010/10/12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/06/29 17:22:18 | 001,081,384 | ---- | M] (Lavasoft AB) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe -- (AVKProxy)
SRV - [2010/06/29 17:16:06 | 000,624,064 | ---- | M] (Lavasoft AB) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe -- (GDScan)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys -- (driverhardwarev2x64)
DRV:[b]64bit:[/b] - [2015/05/22 01:03:11 | 000,136,408 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:[b]64bit:[/b] - [2015/05/02 04:27:19 | 000,359,128 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:[b]64bit:[/b] - [2015/04/30 20:51:09 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
DRV:[b]64bit:[/b] - [2015/04/14 09:37:56 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:[b]64bit:[/b] - [2015/04/14 09:37:42 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2015/01/15 14:42:24 | 000,977,624 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2015/01/07 09:51:25 | 000,454,416 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2015/01/07 09:49:10 | 002,472,136 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:[b]64bit:[/b] - [2015/01/06 15:40:34 | 000,129,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2014/06/16 08:01:38 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:[b]64bit:[/b] - [2014/06/16 08:01:38 | 000,110,336 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:[b]64bit:[/b] - [2014/06/04 15:17:30 | 000,021,184 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:[b]64bit:[/b] - [2014/05/30 03:35:18 | 000,450,968 | ---- | M] (Check Point Software Technologies Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vsdatant.sys -- (Vsdatant)
DRV:[b]64bit:[/b] - [2014/04/30 12:01:00 | 000,490,592 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:[b]64bit:[/b] - [2014/04/30 12:00:58 | 007,717,984 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1)
DRV:[b]64bit:[/b] - [2014/04/02 09:35:44 | 000,633,192 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:[b]64bit:[/b] - [2014/04/02 09:35:44 | 000,028,008 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorF.sys -- (iaStorF)
DRV:[b]64bit:[/b] - [2014/03/19 02:24:40 | 000,059,160 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:[b]64bit:[/b] - [2014/03/19 02:24:38 | 000,076,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:[b]64bit:[/b] - [2013/11/28 09:46:08 | 000,032,496 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV:[b]64bit:[/b] - [2013/10/02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2013/09/26 13:54:14 | 000,057,288 | ---- | M] (G Data Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PktIcpt.sys -- (GDPkIcpt)
DRV:[b]64bit:[/b] - [2013/09/26 13:53:39 | 000,040,392 | ---- | M] (G Data Software AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\GDBehave.sys -- (GDBehave)
DRV:[b]64bit:[/b] - [2013/09/26 13:51:17 | 000,049,096 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\HookCentre.sys -- (HookCentre)
DRV:[b]64bit:[/b] - [2013/09/26 13:51:16 | 000,085,960 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\MiniIcpt.sys -- (GDMnIcpt)
DRV:[b]64bit:[/b] - [2013/09/26 13:51:12 | 000,048,584 | ---- | M] (G DATA Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gdwfpcd64.sys -- (gdwfpcd)
DRV:[b]64bit:[/b] - [2013/09/15 15:50:00 | 000,030,752 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElRawDsk.sys -- (ElRawDisk)
DRV:[b]64bit:[/b] - [2013/06/21 03:09:46 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)
DRV:[b]64bit:[/b] - [2013/05/02 06:23:42 | 000,188,232 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:[b]64bit:[/b] - [2013/05/02 06:23:42 | 000,169,288 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
DRV:[b]64bit:[/b] - [2013/05/02 06:23:42 | 000,158,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
DRV:[b]64bit:[/b] - [2013/05/02 06:23:42 | 000,038,080 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
DRV:[b]64bit:[/b] - [2013/05/02 06:23:42 | 000,021,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV:[b]64bit:[/b] - [2013/04/29 09:17:34 | 000,047,632 | ---- | M] (Panda Security, S.L.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PSKMAD.sys -- (PSKMAD)
DRV:[b]64bit:[/b] - [2013/04/08 10:17:15 | 000,014,456 | ---- | M] (GFI Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\gfibto.sys -- (gfibto)
DRV:[b]64bit:[/b] - [2013/04/06 20:58:24 | 000,039,768 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:[b]64bit:[/b] - [2013/03/13 10:49:30 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb80236.sys -- (usbrndis6)
DRV:[b]64bit:[/b] - [2013/02/11 12:28:41 | 000,038,456 | ---- | M] (GFI Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\gfiark.sys -- (gfiark)
DRV:[b]64bit:[/b] - [2012/10/08 19:52:52 | 000,031,968 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apowersoft_AudioDevice.sys -- (Apowersoft_AudioDevice)
DRV:[b]64bit:[/b] - [2012/08/23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2012/08/23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2012/08/21 14:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012/01/09 18:59:30 | 000,011,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2)
DRV:[b]64bit:[/b] - [2011/10/14 04:37:44 | 000,396,848 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2011/08/18 02:40:56 | 009,981,952 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2011/08/17 22:34:48 | 000,310,272 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2011/08/09 09:32:02 | 012,289,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdpmd64.sys -- (intelkmd)
DRV:[b]64bit:[/b] - [2011/08/09 09:32:02 | 012,289,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2011/07/16 14:27:01 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011/07/16 14:27:01 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011/06/08 00:21:58 | 000,528,384 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:[b]64bit:[/b] - [2011/04/26 11:07:36 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010/07/29 00:25:10 | 000,029,720 | ---- | M] (Initio Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ivusb.sys -- (ivusb)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/07/14 02:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2009/07/14 02:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2009/07/14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:[b]64bit:[/b] - [2009/06/10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:38 | 001,311,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 22:32:37 | 001,627,520 | ---- | M] (NXP Semiconductors) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Ph3xIB64.sys -- (Ph3xIB64)
DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2014/12/31 11:48:08 | 000,026,528 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
DRV - [2014/03/26 09:03:04 | 000,014,112 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2013/02/05 10:54:40 | 000,037,344 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{A37E4D24-D27B-4851-A3DB-8004E9B14C66}: "URL" = http://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{c9ab6446-7efc-47fe-966c-dc54324eff9f}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/709-111075-12437-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{A37E4D24-D27B-4851-A3DB-8004E9B14C66}: "URL" = http://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/709-111075-12437-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-785782368-72873364-3399396315-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-785782368-72873364-3399396315-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_19&cd=2XzuyEtN2Y1L1Qzu0E0Czy0AyByEyEzzyCyBtAtAtBtC0AyEtN0D0Tzu0StCtBtBtDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0FtAtD0FyC0C0CtGyDtAtA0CtGzytByB0AtG0E0CtD0DtGyDzy0C0CyEyC0C0AyEyB0A0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0EyByC0ByByB0ByCtG0BtC0EyDtGyEtAzyyEtG0A0A0CyDtG0D0EyB0DtDyEtAzz0EyC0FyD2QtN0A0LzuyE&cr=576291308&ir=
IE - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..\SearchScopes\{c9ab6446-7efc-47fe-966c-dc54324eff9f}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-785782368-72873364-3399396315-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "FR"
FF - prefs.js..browser.search.hiddenOneOffs: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=198484"
FF - prefs.js..browser.search.region: "FR"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: web2pdfextension%40web2pdf.adobedotcom:2.0
FF - prefs.js..extensions.enabledAddons: %7B9051303c-7e41-4311-a783-d6fe5ef2832d%7D:39.5.1
FF - prefs.js..extensions.enabledAddons: %7BF003DA68-8256-4b37-A6C4-350FA04494DF%7D:6.5
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:37.0.2
FF - prefs.js..keyword.url: "http://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=902615&p="
FF - prefs.js..browser.startup.homepage: "http://fr.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_15_19&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dfr%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1Qzu0E0Czy0AyByEyEzzyCyBtAtAtBtC0AyEtN0D0Tzu0StCtBtBtDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StB0B0B0DyEyDtDzytG0DyDtAyCtG0CtByByCtGtDzz0AtDtGtByEtByD0Dzy0ByBzz0DyB0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0EyByC0ByByB0ByCtG0BtC0EyDtGyEtAzyyEtG0A0A0CyDtG0D0EyB0DtDyEtAzz0EyC0FyD2QtN0A0LzuyE%26cr%3D532831884%26a%3Dwny_ir_15_19%26os%3DWindows 7 Home Premium"
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0-git-20130801-0403: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect_x86_64: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Diginext.fr/VirtualGeoGP: C:\Program Files (x86)\VirtualGeo3-GP\WebPlugin\Win32\npQtAPI3DPlugin.dll (DIGINEXT)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\adslTV\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\adslTV\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files (x86)\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/09/07 18:24:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/09/07 18:24:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015/04/19 02:35:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F003DA68-8256-4b37-A6C4-350FA04494DF}: C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015/04/22 10:28:32 | 000,000,000 | ---D | M]

[2013/06/09 17:52:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Extensions
[2012/02/25 20:00:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
[2013/06/09 17:52:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Extensions\maxtv4@labs.max-tv.be
[2015/05/12 08:45:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
[2015/05/12 08:45:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\extensions
[2015/01/31 10:31:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\searchplugins
[2015/05/05 18:56:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\extensions\staged
[2015/05/21 18:16:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions
[2015/05/15 20:18:12 | 000,000,000 | ---D | M] (158d7cb370394a758e0b3bd0a464edd2) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions\{158d7cb3-7039-4a75-8e0b-3bd0a464edd2}
[2015/04/23 01:00:55 | 000,000,000 | ---D | M] ("Universal Downloader") -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions\{9051303c-7e41-4311-a783-d6fe5ef2832d}
[2013/08/05 18:24:45 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2015/05/21 23:41:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions\staged
[2015/05/05 07:02:07 | 000,006,635 | ---- | M] () (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\extensions\{ab1c2c48-eecd-4c1b-9fe0-91751144aa0f}.xpi
[2015/02/19 15:26:14 | 000,038,626 | ---- | M] () (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi
[2015/05/03 14:00:36 | 000,548,269 | ---- | M] () (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi
[2015/04/10 22:10:15 | 000,970,672 | ---- | M] () (No name found) -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015/05/03 13:53:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/05/03 13:53:48 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/04/19 02:35:43 | 000,000,000 | ---D | M] (Adobe Acrobat - Create PDF) -- C:\PROGRAM FILES (X86)\ADOBE\ACROBAT 11.0\ACROBAT\BROWSER\WCFIREFOXEXTN
[2015/04/22 10:28:32 | 000,000,000 | ---D | M] (Logitech SetPoint) -- C:\PROGRAM FILES\LOGITECH\SETPOINTP\LOGISMOOTHFIREFOXEXT

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\axiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\aobeeghhhohhefmlmbpmkcdndgebpfkf\1.6_0\
CHR - Extension: No name found = C:\Users\axiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.12_0\
CHR - Extension: No name found = C:\Users\axiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil\1.97.51_0\
CHR - Extension: No name found = C:\Users\axiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2015.506.11355_0\
CHR - Extension: No name found = C:\Users\axiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcelnbagfnckolcgablppdlgjnlfaleg\2.1_0\

O1 HOSTS File: ([2014/12/16 23:45:58 | 000,450,705 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 15474 more lines...
O2:[b]64bit:[/b] - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
O2:[b]64bit:[/b] - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Logitech SetPoint) - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
O2:[b]64bit:[/b] - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
O2 - BHO: (Evernote extension) - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
O2 - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Logitech SetPoint) - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe (Hewlett-Packard Development Company, L.P.)
O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [ZoneAlarm] C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies Ltd.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-785782368-72873364-3399396315-1000..\Run: [GoogleChromeAutoLaunch_13AE174F7E66A2C8DF1C3C6F0B29EC36] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-785782368-72873364-3399396315-1000..\RunOnce: [Application Restart #2] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = Reg Error: Unknown registry data type File not found
O8:[b]64bit:[/b] - Extra context menu item: Capture la sélection - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3 File not found
O8:[b]64bit:[/b] - Extra context menu item: Capturer cette page - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1 File not found
O8:[b]64bit:[/b] - Extra context menu item: Capturer l - Reg Error: Value error. File not found
O8:[b]64bit:[/b] - Extra context menu item: Capturer le favori - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0 File not found
O8:[b]64bit:[/b] - Extra context menu item: Capturer l'image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8:[b]64bit:[/b] - Extra context menu item: Capturer l'URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8:[b]64bit:[/b] - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O8:[b]64bit:[/b] - Extra context menu item: image' - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4 File not found
O8:[b]64bit:[/b] - Extra context menu item: Nouvelle note - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html ()
O8 - Extra context menu item: Capture la sélection - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3 File not found
O8 - Extra context menu item: Capturer cette page - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1 File not found
O8 - Extra context menu item: Capturer l - Reg Error: Value error. File not found
O8 - Extra context menu item: Capturer le favori - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0 File not found
O8 - Extra context menu item: Capturer l'image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
O8 - Extra context menu item: Capturer l'URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O8 - Extra context menu item: image' - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4 File not found
O8 - Extra context menu item: Nouvelle note - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html ()
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html ()
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\AddNote.html ()
O9:[b]64bit:[/b] - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
O9 - Extra 'Tools' menuitem : Console Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html ()
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:[b]64bit:[/b] - ..Trusted Domains: atos.net ([*.aw] http in Trusted sites)
O15:[b]64bit:[/b] - ..Trusted Domains: atosorigin.com ([*.aw] http in Trusted sites)
O15:[b]64bit:[/b] - ..Trusted Domains: geoportail.fr ([]http in Trusted sites)
O15:[b]64bit:[/b] - ..Trusted Domains: gouv.fr ([*.geoportail] http in Trusted sites)
O15:[b]64bit:[/b] - ..Trusted Domains: gouv.fr ([geoportail] http in Trusted sites)
O15 - HKLM\..Trusted Domains: atos.net ([*.aw] http in Trusted sites)
O15 - HKLM\..Trusted Domains: atosorigin.com ([*.aw] http in Trusted sites)
O15 - HKLM\..Trusted Domains: geoportail.fr ([]http in Trusted sites)
O15 - HKLM\..Trusted Domains: gouv.fr ([*.geoportail] http in Trusted sites)
O15 - HKLM\..Trusted Domains: gouv.fr ([geoportail] http in Trusted sites)
O15 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..Trusted Domains: atos.net ([*.aw] http in Trusted sites)
O15 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..Trusted Domains: atosorigin.com ([*.aw] http in Trusted sites)
O15 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..Trusted Domains: driversupport.com ([apps] http in Trusted sites)
O15 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..Trusted Domains: driversupport.com ([apps] https in Trusted sites)
O15 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..Trusted Domains: geoportail.fr ([]http in Trusted sites)
O15 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..Trusted Domains: gouv.fr ([*.geoportail] http in Trusted sites)
O15 - HKU\S-1-5-21-785782368-72873364-3399396315-1000\..Trusted Domains: gouv.fr ([geoportail] http in Trusted sites)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6E7C60F4-255C-4A96-B599-0215451BAF67}: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~3\{C4F62~1\1170~1.1\sode.dll) - File not found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
O27:[b]64bit:[/b] - HKLM IFEO\Acrobat.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\acrodist.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\devicesetup.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\devicesetuplauncher.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\formscentralforacrobat.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\googleearth.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\hp officejet 6500 e710n-z.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\hpqdtss.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\hpqlpvwr.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\hpscan.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\mediaserver.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\scantopcactivationapp.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\tomtomhome.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27:[b]64bit:[/b] - HKLM IFEO\uninst.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\Acrobat.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\acrodist.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\devicesetup.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\devicesetuplauncher.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\formscentralforacrobat.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\googleearth.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\hp officejet 6500 e710n-z.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\hpqdtss.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\hpqlpvwr.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\hpscan.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\mediaserver.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\scantopcactivationapp.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\tomtomhome.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O27 - HKLM IFEO\uninst.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/02/23 23:30:46 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)

MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^MediaServerTray.lnk - C:\Program Files (x86)\media center Bbox\media center\external\MediaServerTray.exe - ()
MsConfig:64bit - StartUpFolder: C:^Users^axiane^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hqghumeaylnlf.lnk - - File not found
MsConfig:64bit - StartUpFolder: C:^Users^axiane^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Serviio.lnk - C:\Program Files\Serviio\bin\ServiioConsole.exe - ()
MsConfig:64bit - StartUpReg: [b]Acrobat Assistant 8.0[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]AdobeAAMUpdater-1.0[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]ApnTBMon[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig:64bit - StartUpReg: [b]CCleaner Monitoring[/b] - hkey= - key= - C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
MsConfig:64bit - StartUpReg: [b]CD65EDDEB5B60F40DFB0A7D2D835C0B6C37A517A._service_run[/b] - hkey= - key= - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
MsConfig:64bit - StartUpReg: [b]DivXMediaServer[/b] - hkey= - key= - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
MsConfig:64bit - StartUpReg: [b]Glary Memory Optimizer[/b] - hkey= - key= - C:\Program Files (x86)\Glary Utilities 5\memdefrag.exe (Glarysoft Ltd)
MsConfig:64bit - StartUpReg: [b]GoogleChromeAutoLaunch_13AE174F7E66A2C8DF1C3C6F0B29EC36[/b] - hkey= - key= - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
MsConfig:64bit - StartUpReg: [b]GUDelayStartup[/b] - hkey= - key= - C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe (Glarysoft Ltd)
MsConfig:64bit - StartUpReg: [b]IJNetworkScannerSelectorEX[/b] - hkey= - key= - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (CANON INC.)
MsConfig:64bit - StartUpReg: [b]ISW[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig:64bit - StartUpReg: [b]SDTray[/b] - hkey= - key= - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: [b]TkBellExe[/b] - hkey= - key= - C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
MsConfig:64bit - StartUpReg: [b]VNT[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig:64bit - StartUpReg: [b]YouCam Service6[/b] - hkey= - key= - File not found
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.
MsConfig:64bit - State: "bootini" - Reg Error: Key error.

SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0001 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0002 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0003 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0004 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0005 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0006 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0007 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0008 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0009 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0010 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0011 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0012 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0013 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0014 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0015 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0016 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0017 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0018 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0019 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0020 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0021 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0022 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0023 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0024 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0025 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0026 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0027 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0028 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0029 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0030 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0031 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0032 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0033 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0034 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0035 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0036 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0037 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0038 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0039 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0040 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0041 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0042 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0043 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0044 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0045 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0046 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0047 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0048 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0049 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0050 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0051 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0052 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0053 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0054 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0055 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0056 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0057 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0058 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0059 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0060 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0061 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0062 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0063 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0064 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0065 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0066 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0067 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0068 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0069 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0070 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0071 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0072 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0073 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0074 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0075 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0076 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0077 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0078 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0079 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0080 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0081 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0082 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0083 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0084 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0085 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0086 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0087 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0088 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0089 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0090 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0091 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0092 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0093 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0094 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0095 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0096 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0097 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0098 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0099 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsSystem0100 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0001 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0002 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0003 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0004 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0005 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0006 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0007 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0008 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0009 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0010 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0011 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0012 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0013 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0014 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0015 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0016 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0017 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0018 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0019 - Service
SafeBootMin:[b]64bit:[/b] TweakingRunAsTrustedInstaller0020 - Service
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TweakingRunAsSystem0001 - Service
SafeBootMin: TweakingRunAsSystem0002 - Service
SafeBootMin: TweakingRunAsSystem0003 - Service
SafeBootMin: TweakingRunAsSystem0004 - Service
SafeBootMin: TweakingRunAsSystem0005 - Service
SafeBootMin: TweakingRunAsSystem0006 - Service
SafeBootMin: TweakingRunAsSystem0007 - Service
SafeBootMin: TweakingRunAsSystem0008 - Service
SafeBootMin: TweakingRunAsSystem0009 - Service
SafeBootMin: TweakingRunAsSystem0010 - Service
SafeBootMin: TweakingRunAsSystem0011 - Service
SafeBootMin: TweakingRunAsSystem0012 - Service
SafeBootMin: TweakingRunAsSystem0013 - Service
SafeBootMin: TweakingRunAsSystem0014 - Service
SafeBootMin: TweakingRunAsSystem0015 - Service
SafeBootMin: TweakingRunAsSystem0016 - Service
SafeBootMin: TweakingRunAsSystem0017 - Service
SafeBootMin: TweakingRunAsSystem0018 - Service
SafeBootMin: TweakingRunAsSystem0019 - Service
SafeBootMin: TweakingRunAsSystem0020 - Service
SafeBootMin: TweakingRunAsSystem0021 - Service
SafeBootMin: TweakingRunAsSystem0022 - Service
SafeBootMin: TweakingRunAsSystem0023 - Service
SafeBootMin: TweakingRunAsSystem0024 - Service
SafeBootMin: TweakingRunAsSystem0025 - Service
SafeBootMin: TweakingRunAsSystem0026 - Service
SafeBootMin: TweakingRunAsSystem0027 - Service
SafeBootMin: TweakingRunAsSystem0028 - Service
SafeBootMin: TweakingRunAsSystem0029 - Service
SafeBootMin: TweakingRunAsSystem0030 - Service
SafeBootMin: TweakingRunAsSystem0031 - Service
SafeBootMin: TweakingRunAsSystem0032 - Service
SafeBootMin: TweakingRunAsSystem0033 - Service
SafeBootMin: TweakingRunAsSystem0034 - Service
SafeBootMin: TweakingRunAsSystem0035 - Service
SafeBootMin: TweakingRunAsSystem0036 - Service
SafeBootMin: TweakingRunAsSystem0037 - Service
SafeBootMin: TweakingRunAsSystem0038 - Service
SafeBootMin: TweakingRunAsSystem0039 - Service
SafeBootMin: TweakingRunAsSystem0040 - Service
SafeBootMin: TweakingRunAsSystem0041 - Service
SafeBootMin: TweakingRunAsSystem0042 - Service
SafeBootMin: TweakingRunAsSystem0043 - Service
SafeBootMin: TweakingRunAsSystem0044 - Service
SafeBootMin: TweakingRunAsSystem0045 - Service
SafeBootMin: TweakingRunAsSystem0046 - Service
SafeBootMin: TweakingRunAsSystem0047 - Service
SafeBootMin: TweakingRunAsSystem0048 - Service
SafeBootMin: TweakingRunAsSystem0049 - Service
SafeBootMin: TweakingRunAsSystem0050 - Service
SafeBootMin: TweakingRunAsSystem0051 - Service
SafeBootMin: TweakingRunAsSystem0052 - Service
SafeBootMin: TweakingRunAsSystem0053 - Service
SafeBootMin: TweakingRunAsSystem0054 - Service
SafeBootMin: TweakingRunAsSystem0055 - Service
SafeBootMin: TweakingRunAsSystem0056 - Service
SafeBootMin: TweakingRunAsSystem0057 - Service
SafeBootMin: TweakingRunAsSystem0058 - Service
SafeBootMin: TweakingRunAsSystem0059 - Service
SafeBootMin: TweakingRunAsSystem0060 - Service
SafeBootMin: TweakingRunAsSystem0061 - Service
SafeBootMin: TweakingRunAsSystem0062 - Service
SafeBootMin: TweakingRunAsSystem0063 - Service
SafeBootMin: TweakingRunAsSystem0064 - Service
SafeBootMin: TweakingRunAsSystem0065 - Service
SafeBootMin: TweakingRunAsSystem0066 - Service
SafeBootMin: TweakingRunAsSystem0067 - Service
SafeBootMin: TweakingRunAsSystem0068 - Service
SafeBootMin: TweakingRunAsSystem0069 - Service
SafeBootMin: TweakingRunAsSystem0070 - Service
SafeBootMin: TweakingRunAsSystem0071 - Service
SafeBootMin: TweakingRunAsSystem0072 - Service
SafeBootMin: TweakingRunAsSystem0073 - Service
SafeBootMin: TweakingRunAsSystem0074 - Service
SafeBootMin: TweakingRunAsSystem0075 - Service
SafeBootMin: TweakingRunAsSystem0076 - Service
SafeBootMin: TweakingRunAsSystem0077 - Service
SafeBootMin: TweakingRunAsSystem0078 - Service
SafeBootMin: TweakingRunAsSystem0079 - Service
SafeBootMin: TweakingRunAsSystem0080 - Service
SafeBootMin: TweakingRunAsSystem0081 - Service
SafeBootMin: TweakingRunAsSystem0082 - Service
SafeBootMin: TweakingRunAsSystem0083 - Service
SafeBootMin: TweakingRunAsSystem0084 - Service
SafeBootMin: TweakingRunAsSystem0085 - Service
SafeBootMin: TweakingRunAsSystem0086 - Service
SafeBootMin: TweakingRunAsSystem0087 - Service
SafeBootMin: TweakingRunAsSystem0088 - Service
SafeBootMin: TweakingRunAsSystem0089 - Service
SafeBootMin: TweakingRunAsSystem0090 - Service
SafeBootMin: TweakingRunAsSystem0091 - Service
SafeBootMin: TweakingRunAsSystem0092 - Service
SafeBootMin: TweakingRunAsSystem0093 - Service
SafeBootMin: TweakingRunAsSystem0094 - Service
SafeBootMin: TweakingRunAsSystem0095 - Service
SafeBootMin: TweakingRunAsSystem0096 - Service
SafeBootMin: TweakingRunAsSystem0097 - Service
SafeBootMin: TweakingRunAsSystem0098 - Service
SafeBootMin: TweakingRunAsSystem0099 - Service
SafeBootMin: TweakingRunAsSystem0100 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0001 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0002 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0003 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0004 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0005 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0006 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0007 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0008 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0009 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0010 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0011 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0012 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0013 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0014 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0015 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0016 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0017 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0018 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0019 - Service
SafeBootMin: TweakingRunAsTrustedInstaller0020 - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0001 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0002 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0003 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0004 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0005 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0006 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0007 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0008 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0009 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0010 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0011 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0012 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0013 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0014 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0015 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0016 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0017 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0018 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0019 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0020 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0021 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0022 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0023 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0024 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0025 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0026 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0027 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0028 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0029 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0030 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0031 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0032 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0033 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0034 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0035 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0036 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0037 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0038 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0039 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0040 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0041 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0042 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0043 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0044 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0045 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0046 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0047 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0048 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0049 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0050 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0051 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0052 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0053 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0054 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0055 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0056 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0057 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0058 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0059 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0060 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0061 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0062 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0063 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0064 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0065 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0066 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0067 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0068 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0069 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0070 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0071 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0072 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0073 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0074 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0075 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0076 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0077 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0078 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0079 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0080 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0081 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0082 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0083 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0084 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0085 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0086 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0087 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0088 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0089 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0090 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0091 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0092 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0093 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0094 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0095 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0096 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0097 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0098 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0099 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsSystem0100 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0001 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0002 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0003 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0004 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0005 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0006 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0007 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0008 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0009 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0010 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0011 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0012 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0013 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0014 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0015 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0016 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0017 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0018 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0019 - Service
SafeBootNet:[b]64bit:[/b] TweakingRunAsTrustedInstaller0020 - Service
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: TweakingRunAsSystem0001 - Service
SafeBootNet: TweakingRunAsSystem0002 - Service
SafeBootNet: TweakingRunAsSystem0003 - Service
SafeBootNet: TweakingRunAsSystem0004 - Service
SafeBootNet: TweakingRunAsSystem0005 - Service
SafeBootNet: TweakingRunAsSystem0006 - Service
SafeBootNet: TweakingRunAsSystem0007 - Service
SafeBootNet: TweakingRunAsSystem0008 - Service
SafeBootNet: TweakingRunAsSystem0009 - Service
SafeBootNet: TweakingRunAsSystem0010 - Service
SafeBootNet: TweakingRunAsSystem0011 - Service
SafeBootNet: TweakingRunAsSystem0012 - Service
SafeBootNet: TweakingRunAsSystem0013 - Service
SafeBootNet: TweakingRunAsSystem0014 - Service
SafeBootNet: TweakingRunAsSystem0015 - Service
SafeBootNet: TweakingRunAsSystem0016 - Service
SafeBootNet: TweakingRunAsSystem0017 - Service
SafeBootNet: TweakingRunAsSystem0018 - Service
SafeBootNet: TweakingRunAsSystem0019 - Service
SafeBootNet: TweakingRunAsSystem0020 - Service
SafeBootNet: TweakingRunAsSystem0021 - Service
SafeBootNet: TweakingRunAsSystem0022 - Service
SafeBootNet: TweakingRunAsSystem0023 - Service
SafeBootNet: TweakingRunAsSystem0024 - Service
SafeBootNet: TweakingRunAsSystem0025 - Service
SafeBootNet: TweakingRunAsSystem0026 - Service
SafeBootNet: TweakingRunAsSystem0027 - Service
SafeBootNet: TweakingRunAsSystem0028 - Service
SafeBootNet: TweakingRunAsSystem0029 - Service
SafeBootNet: TweakingRunAsSystem0030 - Service
SafeBootNet: TweakingRunAsSystem0031 - Service
SafeBootNet: TweakingRunAsSystem0032 - Service
SafeBootNet: TweakingRunAsSystem0033 - Service
SafeBootNet: TweakingRunAsSystem0034 - Service
SafeBootNet: TweakingRunAsSystem0035 - Service
SafeBootNet: TweakingRunAsSystem0036 - Service
SafeBootNet: TweakingRunAsSystem0037 - Service
SafeBootNet: TweakingRunAsSystem0038 - Service
SafeBootNet: TweakingRunAsSystem0039 - Service
SafeBootNet: TweakingRunAsSystem0040 - Service
SafeBootNet: TweakingRunAsSystem0041 - Service
SafeBootNet: TweakingRunAsSystem0042 - Service
SafeBootNet: TweakingRunAsSystem0043 - Service
SafeBootNet: TweakingRunAsSystem0044 - Service
SafeBootNet: TweakingRunAsSystem0045 - Service
SafeBootNet: TweakingRunAsSystem0046 - Service
SafeBootNet: TweakingRunAsSystem0047 - Service
SafeBootNet: TweakingRunAsSystem0048 - Service
SafeBootNet: TweakingRunAsSystem0049 - Service
SafeBootNet: TweakingRunAsSystem0050 - Service
SafeBootNet: TweakingRunAsSystem0051 - Service
SafeBootNet: TweakingRunAsSystem0052 - Service
SafeBootNet: TweakingRunAsSystem0053 - Service
SafeBootNet: TweakingRunAsSystem0054 - Service
SafeBootNet: TweakingRunAsSystem0055 - Service
SafeBootNet: TweakingRunAsSystem0056 - Service
SafeBootNet: TweakingRunAsSystem0057 - Service
SafeBootNet: TweakingRunAsSystem0058 - Service
SafeBootNet: TweakingRunAsSystem0059 - Service
SafeBootNet: TweakingRunAsSystem0060 - Service
SafeBootNet: TweakingRunAsSystem0061 - Service
SafeBootNet: TweakingRunAsSystem0062 - Service
SafeBootNet: TweakingRunAsSystem0063 - Service
SafeBootNet: TweakingRunAsSystem0064 - Service
SafeBootNet: TweakingRunAsSystem0065 - Service
SafeBootNet: TweakingRunAsSystem0066 - Service
SafeBootNet: TweakingRunAsSystem0067 - Service
SafeBootNet: TweakingRunAsSystem0068 - Service
SafeBootNet: TweakingRunAsSystem0069 - Service
SafeBootNet: TweakingRunAsSystem0070 - Service
SafeBootNet: TweakingRunAsSystem0071 - Service
SafeBootNet: TweakingRunAsSystem0072 - Service
SafeBootNet: TweakingRunAsSystem0073 - Service
SafeBootNet: TweakingRunAsSystem0074 - Service
SafeBootNet: TweakingRunAsSystem0075 - Service
SafeBootNet: TweakingRunAsSystem0076 - Service
SafeBootNet: TweakingRunAsSystem0077 - Service
SafeBootNet: TweakingRunAsSystem0078 - Service
SafeBootNet: TweakingRunAsSystem0079 - Service
SafeBootNet: TweakingRunAsSystem0080 - Service
SafeBootNet: TweakingRunAsSystem0081 - Service
SafeBootNet: TweakingRunAsSystem0082 - Service
SafeBootNet: TweakingRunAsSystem0083 - Service
SafeBootNet: TweakingRunAsSystem0084 - Service
SafeBootNet: TweakingRunAsSystem0085 - Service
SafeBootNet: TweakingRunAsSystem0086 - Service
SafeBootNet: TweakingRunAsSystem0087 - Service
SafeBootNet: TweakingRunAsSystem0088 - Service
SafeBootNet: TweakingRunAsSystem0089 - Service
SafeBootNet: TweakingRunAsSystem0090 - Service
SafeBootNet: TweakingRunAsSystem0091 - Service
SafeBootNet: TweakingRunAsSystem0092 - Service
SafeBootNet: TweakingRunAsSystem0093 - Service
SafeBootNet: TweakingRunAsSystem0094 - Service
SafeBootNet: TweakingRunAsSystem0095 - Service
SafeBootNet: TweakingRunAsSystem0096 - Service
SafeBootNet: TweakingRunAsSystem0097 - Service
SafeBootNet: TweakingRunAsSystem0098 - Service
SafeBootNet: TweakingRunAsSystem0099 - Service
SafeBootNet: TweakingRunAsSystem0100 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0001 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0002 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0003 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0004 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0005 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0006 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0007 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0008 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0009 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0010 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0011 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0012 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0013 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0014 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0015 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0016 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0017 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0018 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0019 - Service
SafeBootNet: TweakingRunAsTrustedInstaller0020 - Service
SafeBootNet: vmms - Service
SafeBootNet: vsmon - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd.)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1} - .NET Framework
ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {26784146-6E05-3FF9-9335-786C7C0FB5BE} - .NET Framework
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {7D715857-A67C-4C2F-A929-038448584D63} - C:\Windows\System32\ie4uinit.exe -DisableSSL3
ActiveX:[b]64bit:[/b] {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37} - .NET Framework
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {0291E591-EA41-4c82-8106-3DC6CE7F7664} - Reg Error: Value error.
ActiveX: {1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1} - .NET Framework
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {26784146-6E05-3FF9-9335-786C7C0FB5BE} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - Reg Error: Value error.
ActiveX: {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - Reg Error: Value error.
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.65\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:[b]64bit:[/b] VIDC.FFDS - ff_vfw.dll ()
Drivers32:[b]64bit:[/b] VIDC.LAGS - lagarith.dll ( )
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.LAGS - C:\Windows\SysWow64\lagarith.dll ( )
Drivers32: vidc.mjpg - C:\Windows\SysWow64\pvmjpg30.dll (Pegasus Imaging Corporation)
Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2020/01/08 04:04:53 | 000,136,408 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2020/01/08 04:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2020/01/08 04:04:44 | 000,107,736 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2020/01/08 04:04:44 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2020/01/08 04:04:44 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2020/01/08 04:04:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2015/05/23 08:46:04 | 000,000,000 | ---D | C] -- C:\Windows\CheckSur
[2015/05/22 23:34:11 | 000,000,000 | ---D | C] -- C:\Users\axiane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
[2015/05/22 23:33:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2015/05/22 19:30:49 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2015/05/22 12:18:55 | 000,069,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\stream.sys
[2015/05/21 08:13:48 | 000,000,000 | ---D | C] -- C:\RegBackup
[2015/05/21 00:28:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
[2015/05/21 00:28:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tweaking.com
[2015/05/20 22:34:36 | 000,000,000 | ---D | C] -- C:\Users\axiane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chromium
[2015/05/20 19:35:42 | 000,000,000 | -H-D | C] -- C:\_Exception1
[2015/05/14 09:38:01 | 000,000,000 | ---D | C] -- C:\Users\axiane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2015/05/14 09:38:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
[2015/05/14 09:38:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan
[2015/05/13 22:30:31 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2015/05/13 22:30:30 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2015/05/13 22:30:30 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2015/05/13 22:30:30 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2015/05/13 22:30:30 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2015/05/13 22:30:30 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2015/05/13 22:30:29 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2015/05/13 22:30:28 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2015/05/13 22:30:27 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2015/05/13 22:30:27 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2015/05/13 22:30:25 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2015/05/13 22:30:25 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2015/05/13 22:30:25 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2015/05/13 22:30:24 | 000,664,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2015/05/13 22:30:24 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2015/05/13 22:30:24 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2015/05/13 22:30:24 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2015/05/13 22:30:23 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2015/05/13 22:30:23 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2015/05/13 22:30:23 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2015/05/13 22:30:23 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2015/05/13 22:30:22 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2015/05/13 22:30:22 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2015/05/13 22:30:22 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2015/05/13 22:30:21 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2015/05/13 22:30:21 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2015/05/13 22:30:21 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2015/05/13 22:30:21 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2015/05/13 22:30:21 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2015/05/13 22:30:20 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2015/05/13 22:30:20 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2015/05/13 22:30:20 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2015/05/13 22:30:20 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2015/05/13 22:30:19 | 006,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2015/05/13 22:30:19 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2015/05/13 22:30:19 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2015/05/13 22:30:18 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2015/05/13 22:30:18 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2015/05/13 22:30:18 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2015/05/13 10:03:38 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2015/05/13 10:03:38 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2015/05/13 09:21:28 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2015/05/13 09:21:28 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2015/05/13 09:20:47 | 000,328,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\services.exe
[2015/05/13 09:20:30 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InkEd.dll
[2015/05/13 09:20:30 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InkEd.dll
[2015/05/13 09:20:12 | 001,647,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2015/05/13 03:15:38 | 000,000,000 | ---D | C] -- C:\Program Files\IDT
[2015/05/09 21:50:46 | 000,000,000 | ---D | C] -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44}
[2015/05/09 21:37:28 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\YouCam
[2015/05/09 21:20:39 | 000,654,336 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll
[2015/05/07 17:45:39 | 000,000,000 | ---D | C] -- C:\Users\axiane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
[2015/05/06 20:43:40 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2015/05/06 20:43:40 | 001,254,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagtrack.dll
[2015/05/06 20:43:40 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2015/05/06 20:43:40 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2015/05/06 20:43:40 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2015/05/06 20:43:40 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2015/05/06 20:43:40 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2015/05/06 20:43:40 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2015/05/06 20:43:40 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2015/05/06 20:43:40 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2015/05/06 20:43:40 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2015/05/06 20:43:40 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2015/05/06 20:43:40 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2015/05/06 20:43:40 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2015/05/06 20:43:40 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UtcResources.dll
[2015/05/06 20:43:40 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2015/05/06 20:43:40 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2015/05/06 20:43:35 | 005,569,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2015/05/06 20:43:35 | 003,989,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2015/05/06 20:43:35 | 003,934,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2015/05/06 20:43:35 | 001,728,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2015/05/06 20:43:35 | 001,162,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2015/05/06 20:43:35 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2015/05/06 20:43:35 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2015/05/06 20:43:35 | 000,635,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2015/05/06 20:43:35 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2015/05/06 20:43:35 | 000,404,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tracerpt.exe
[2015/05/06 20:43:35 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tracerpt.exe
[2015/05/06 20:43:35 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2015/05/06 20:43:35 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2015/05/06 20:43:35 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2015/05/06 20:43:35 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2015/05/06 20:43:35 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2015/05/06 20:43:35 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sechost.dll
[2015/05/06 20:43:35 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2015/05/06 20:43:35 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2015/05/06 20:43:35 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2015/05/06 20:43:35 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\typeperf.exe
[2015/05/06 20:43:35 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2015/05/06 20:43:35 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2015/05/06 20:43:35 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\typeperf.exe
[2015/05/06 20:43:35 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2015/05/06 20:43:35 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2015/05/06 20:43:35 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskperf.exe
[2015/05/06 20:43:35 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskperf.exe
[2015/05/06 20:43:35 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2015/05/06 20:43:35 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2015/05/06 20:43:35 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2015/05/06 20:43:35 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2015/05/06 20:43:35 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2015/05/06 20:43:35 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2015/05/06 20:43:35 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2015/05/06 20:43:35 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2015/05/06 20:43:35 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2015/05/06 20:43:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2015/05/06 20:43:35 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2015/05/06 20:43:34 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2015/05/06 20:43:34 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2015/05/06 19:26:42 | 000,000,000 | ---D | C] -- C:\Users\axiane\Documents\scan epson
[2015/05/06 19:18:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
[2015/05/06 19:18:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Epson Software
[2015/05/05 12:21:10 | 000,021,184 | ---- | C] (IObit) -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys
[2015/05/05 12:21:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
[2015/05/03 20:47:45 | 000,000,000 | ---D | C] -- C:\Users\axiane\AppData\Roaming\vlc
[2015/05/02 21:28:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
[2015/05/02 15:02:36 | 000,000,000 | ---D | C] -- C:\Users\axiane\Documents\__MOURET Cour d'Appel
[2015/05/02 04:27:19 | 000,359,128 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtsPStor.sys
[2015/05/02 04:27:19 | 000,083,160 | ---- | C] (Realtek Semiconductor.) -- C:\Windows\SysNative\RtCRX64.dll
[2015/05/02 03:42:45 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2015/05/02 03:42:43 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2015/05/02 03:42:14 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2015/05/02 03:42:14 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdbinst.exe
[2015/05/02 03:42:14 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimeng.dll
[2015/05/02 03:42:13 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sdbinst.exe
[2015/05/02 03:41:46 | 001,632,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2015/05/02 03:41:46 | 001,372,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2015/05/02 03:41:46 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmapi.dll
[2015/05/02 03:40:54 | 002,543,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2015/05/02 03:11:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
[2015/05/01 16:13:59 | 000,000,000 | ---D | C] -- C:\Users\axiane\AppData\Roaming\PCFixKit
[2015/05/01 00:13:47 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2015/04/30 15:32:59 | 000,564,224 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\idt64mp1.exe
[2015/04/30 13:27:53 | 000,000,000 | ---D | C] -- C:\ProgramData\RegInOut
[2015/04/29 21:54:21 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSATAPI.dll
[2015/04/29 21:54:20 | 000,501,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSATAPI.dll
[2015/04/29 21:49:15 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\input.dll
[2015/04/29 21:49:15 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2015/04/25 19:31:40 | 000,000,000 | ---D | C] -- C:\Program Files\VueScan
[2015/04/25 14:54:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2015/04/25 14:13:15 | 000,000,000 | ---D | C] -- C:\Users\axiane\AppData\Roaming\EPSON
[7 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[6 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Users\axiane\Documents\*.tmp files -> C:\Users\axiane\Documents\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/05/24 10:02:44 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/05/24 10:01:25 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/05/24 09:54:25 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/05/24 09:54:25 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/05/24 09:41:44 | 000,000,334 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize 5.job
[2015/05/24 09:41:06 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/05/24 09:38:12 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/05/24 09:37:54 | 495,865,855 | -HS- | M] () -- C:\hiberfil.sys
[2015/05/23 23:12:35 | 000,037,624 | ---- | M] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/05/22 23:33:29 | 000,002,273 | ---- | M] () -- C:\Users\axiane\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/05/22 23:33:29 | 000,002,249 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/05/22 19:29:44 | 020,742,744 | ---- | M] () -- C:\Users\axiane\Desktop\RogueKillerX64.exe
[2015/05/22 19:19:27 | 000,000,000 | -H-- | M] () -- C:\asc_rdflag
[2015/05/22 16:20:31 | 000,000,832 | ---- | M] () -- C:\Users\axiane\Desktop\ZHPCleaner.lnk
[2015/05/22 14:36:07 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForaxiane.job
[2015/05/22 14:14:23 | 000,073,728 | ---- | M] () -- C:\Users\axiane\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/05/22 12:41:36 | 000,000,512 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin
[2015/05/22 12:20:05 | 000,002,177 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
[2015/05/22 12:18:55 | 000,069,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\stream.sys
[2015/05/22 01:07:18 | 001,681,088 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/05/22 01:07:18 | 000,751,758 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2015/05/22 01:07:18 | 000,658,476 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/05/22 01:07:18 | 000,151,870 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2015/05/22 01:07:18 | 000,123,786 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/05/22 01:03:11 | 000,136,408 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/05/22 00:07:22 | 000,481,112 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015/05/21 17:13:32 | 000,001,098 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2015/05/21 13:13:03 | 000,001,983 | ---- | M] () -- C:\Users\axiane\Desktop\ZHPFix.lnk
[2015/05/21 13:13:03 | 000,001,856 | ---- | M] () -- C:\Users\axiane\Desktop\ZHPDiag.lnk
[2015/05/21 08:14:35 | 000,000,207 | ---- | M] () -- C:\Windows\tweaking.com-regbackup-AXIANE-HP-Windows-7-Home-Premium-(64-bit).dat
[2015/05/21 00:28:28 | 000,002,155 | ---- | M] () -- C:\Users\axiane\Desktop\Tweaking.com - Windows Repair.lnk
[2015/05/21 00:28:25 | 000,000,574 | ---- | M] () -- C:\Windows\tasks\Tweaking.com - Windows Repair Tray Icon.job
[2015/05/20 22:24:05 | 000,440,480 | ---- | M] () -- C:\Users\axiane\AppData\Local\census.cache
[2015/05/20 22:23:59 | 000,168,171 | ---- | M] () -- C:\Users\axiane\AppData\Local\ars.cache
[2015/05/20 22:01:55 | 000,001,260 | ---- | M] () -- C:\Users\axiane\Desktop\Revo Uninstaller.lnk
[2015/05/19 22:33:43 | 000,002,445 | ---- | M] () -- C:\Users\axiane\Application Data\Microsoft\Internet Explorer\Quick Launch\Chromium.lnk
[2015/05/15 20:47:55 | 000,001,764 | ---- | M] () -- C:\Users\Public\Desktop\Canon My Printer.lnk
[2015/05/15 12:20:24 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/05/15 08:14:22 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/05/15 08:14:22 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/05/14 09:38:02 | 000,001,003 | ---- | M] () -- C:\Users\axiane\Desktop\SpeedFan.lnk
[2015/05/14 09:38:01 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo
[2015/05/14 09:05:28 | 000,000,840 | ---- | M] () -- C:\Users\axiane\Desktop\cc_20150514_090510.reg
[2015/05/13 21:43:37 | 000,038,089 | -H-- | M] () -- C:\Windows\SysWow64\BTImages.dat
[2015/05/13 10:03:38 | 000,124,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2015/05/13 10:03:38 | 000,102,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2015/05/13 03:10:56 | 000,031,175 | ---- | M] () -- C:\Windows\wininit.ini
[2015/05/12 09:32:22 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\029B560A371F4E00AB32838EBC01B9E7
[2015/05/10 00:10:34 | 000,677,915 | ---- | M] () -- C:\Users\axiane\screenshot000.png
[2015/05/09 21:52:59 | 000,002,213 | ---- | M] () -- C:\Users\axiane\Desktop\HP Support Assistant.lnk
[2015/05/07 17:45:40 | 000,000,000 | ---- | M] () -- C:\Users\axiane\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader 2.lnk
[2015/05/06 20:43:40 | 001,461,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2015/05/06 20:43:40 | 001,254,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\diagtrack.dll
[2015/05/06 20:43:40 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2015/05/06 20:43:40 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2015/05/06 20:43:40 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2015/05/06 20:43:40 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2015/05/06 20:43:40 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2015/05/06 20:43:40 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2015/05/06 20:43:40 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2015/05/06 20:43:40 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2015/05/06 20:43:40 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2015/05/06 20:43:40 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2015/05/06 20:43:40 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2015/05/06 20:43:40 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2015/05/06 20:43:40 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UtcResources.dll
[2015/05/06 20:43:40 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2015/05/06 20:43:40 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2015/05/06 20:43:35 | 005,569,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2015/05/06 20:43:35 | 003,989,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2015/05/06 20:43:35 | 003,934,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2015/05/06 20:43:35 | 001,728,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2015/05/06 20:43:35 | 001,162,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2015/05/06 20:43:35 | 000,879,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2015/05/06 20:43:35 | 000,879,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2015/05/06 20:43:35 | 000,635,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2015/05/06 20:43:35 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2015/05/06 20:43:35 | 000,404,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tracerpt.exe
[2015/05/06 20:43:35 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tracerpt.exe
[2015/05/06 20:43:35 | 000,362,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2015/05/06 20:43:35 | 000,338,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2015/05/06 20:43:35 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2015/05/06 20:43:35 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2015/05/06 20:43:35 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2015/05/06 20:43:35 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sechost.dll
[2015/05/06 20:43:35 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2015/05/06 20:43:35 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2015/05/06 20:43:35 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2015/05/06 20:43:35 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\typeperf.exe
[2015/05/06 20:43:35 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2015/05/06 20:43:35 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2015/05/06 20:43:35 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\typeperf.exe
[2015/05/06 20:43:35 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2015/05/06 20:43:35 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2015/05/06 20:43:35 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\diskperf.exe
[2015/05/06 20:43:35 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\diskperf.exe
[2015/05/06 20:43:35 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2015/05/06 20:43:35 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2015/05/06 20:43:35 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2015/05/06 20:43:35 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2015/05/06 20:43:35 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2015/05/06 20:43:35 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2015/05/06 20:43:35 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2015/05/06 20:43:35 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2015/05/06 20:43:35 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2015/05/06 20:43:35 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2015/05/06 20:43:35 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2015/05/06 20:43:35 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2015/05/06 20:43:35 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2015/05/06 20:43:34 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2015/05/06 20:43:34 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2015/05/06 20:43:34 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2015/05/06 20:43:34 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2015/05/06 12:24:35 | 000,011,932 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2015/05/05 12:30:17 | 000,005,676 | ---- | M] () -- C:\Users\axiane\Desktop\cc_20150505_122949.reg
[2015/05/05 12:21:07 | 000,001,098 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 4.lnk
[2015/05/03 20:47:37 | 000,001,046 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2015/05/03 14:15:12 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2015/05/02 04:27:19 | 000,359,128 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtsPStor.sys
[2015/05/02 04:27:19 | 000,083,160 | ---- | M] (Realtek Semiconductor.) -- C:\Windows\SysNative\RtCRX64.dll
[2015/05/02 03:42:45 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2015/05/02 03:42:43 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2015/05/02 03:42:14 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2015/05/02 03:42:14 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sdbinst.exe
[2015/05/02 03:42:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\shimeng.dll
[2015/05/02 03:42:13 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\sdbinst.exe
[2015/05/02 03:41:46 | 001,632,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2015/05/02 03:41:46 | 001,372,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2015/05/02 03:41:46 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dwmapi.dll
[2015/05/02 03:40:54 | 002,543,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2015/05/02 03:40:54 | 001,195,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UMDF\WpdMtpDr.dll
[2015/05/01 21:14:12 | 002,204,160 | ---- | M] () -- C:\Users\axiane\Desktop\adwcleaner_4.203.exe
[2015/04/30 20:51:23 | 000,001,100 | ---- | M] () -- C:\Users\axiane\Application Data\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 5.lnk
[2015/04/30 20:51:23 | 000,001,076 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk
[2015/04/30 20:51:09 | 000,020,160 | ---- | M] (Glarysoft Ltd) -- C:\Windows\SysNative\drivers\GUBootStartup.sys
[2015/04/29 09:07:04 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015/04/25 13:52:03 | 000,000,944 | ---- | M] () -- C:\Users\axiane\Desktop\EPSON Scan.lnk
[7 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[6 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Users\axiane\Documents\*.tmp files -> C:\Users\axiane\Documents\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2020/01/08 04:04:47 | 000,001,098 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2015/05/24 10:02:44 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015/05/22 23:33:29 | 000,002,273 | ---- | C] () -- C:\Users\axiane\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/05/22 23:33:29 | 000,002,249 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/05/22 19:30:56 | 000,037,624 | ---- | C] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/05/22 19:29:31 | 020,742,744 | ---- | C] () -- C:\Users\axiane\Desktop\RogueKillerX64.exe
[2015/05/22 19:19:27 | 000,000,000 | -H-- | C] () -- C:\asc_rdflag
[2015/05/22 09:31:05 | 000,000,832 | ---- | C] () -- C:\Users\axiane\Desktop\ZHPCleaner.lnk
[2015/05/21 13:05:27 | 000,001,983 | ---- | C] () -- C:\Users\axiane\Desktop\ZHPFix.lnk
[2015/05/21 13:05:27 | 000,001,856 | ---- | C] () -- C:\Users\axiane\Desktop\ZHPDiag.lnk
[2015/05/21 08:14:35 | 000,000,207 | ---- | C] () -- C:\Windows\tweaking.com-regbackup-AXIANE-HP-Windows-7-Home-Premium-(64-bit).dat
[2015/05/21 00:28:28 | 000,002,155 | ---- | C] () -- C:\Users\axiane\Desktop\Tweaking.com - Windows Repair.lnk
[2015/05/21 00:28:25 | 000,000,574 | ---- | C] () -- C:\Windows\tasks\Tweaking.com - Windows Repair Tray Icon.job
[2015/05/14 09:38:02 | 000,001,003 | ---- | C] () -- C:\Users\axiane\Desktop\SpeedFan.lnk
[2015/05/14 09:38:00 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo
[2015/05/14 09:05:21 | 000,000,840 | ---- | C] () -- C:\Users\axiane\Desktop\cc_20150514_090510.reg
[2015/05/13 09:49:01 | 000,000,336 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForaxiane.job
[2015/05/10 00:10:33 | 000,677,915 | ---- | C] () -- C:\Users\axiane\screenshot000.png
[2015/05/09 21:52:59 | 000,002,213 | ---- | C] () -- C:\Users\axiane\Desktop\HP Support Assistant.lnk
[2015/05/06 11:32:15 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\029B560A371F4E00AB32838EBC01B9E7
[2015/05/05 12:29:55 | 000,005,676 | ---- | C] () -- C:\Users\axiane\Desktop\cc_20150505_122949.reg
[2015/05/05 12:21:07 | 000,001,098 | ---- | C] () -- C:\Users\Public\Desktop\Smart Defrag 4.lnk
[2015/05/02 03:11:52 | 000,002,177 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
[2015/05/01 21:14:08 | 002,204,160 | ---- | C] () -- C:\Users\axiane\Desktop\adwcleaner_4.203.exe
[2015/05/01 00:14:51 | 000,000,712 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX0.dat
[2015/05/01 00:14:51 | 000,000,008 | ---- | C] () -- C:\Windows\SysNative\drivers\rtkhdaud.dat
[2015/04/25 20:17:54 | 000,001,764 | ---- | C] () -- C:\Users\Public\Desktop\Canon My Printer.lnk
[2015/04/25 13:52:03 | 000,000,944 | ---- | C] () -- C:\Users\axiane\Desktop\EPSON Scan.lnk
[2014/10/08 10:15:11 | 006,388,483 | ---- | C] () -- C:\Users\axiane\c92252824c5ab842eb0956f51ff97c5a5763685a35ad086056f0261bce1df5248783a64e608f592f501c94a0aa558d6f7c0c
[2014/10/07 08:55:40 | 000,004,632 | ---- | C] () -- C:\Windows\SysWow64\LavasoftTcpService.ini
[2014/10/07 08:55:40 | 000,002,488 | ---- | C] () -- C:\Windows\SysWow64\LavasoftTcpServiceOff.ini
[2014/09/18 15:04:54 | 000,007,611 | ---- | C] () -- C:\Users\axiane\AppData\Local\Resmon.ResmonCfg
[2014/07/04 12:20:24 | 000,038,089 | -H-- | C] () -- C:\Windows\SysWow64\BTImages.dat
[2014/06/19 13:41:28 | 000,000,024 | ---- | C] () -- C:\Users\axiane\AppData\Roaming\temp.ini
[2014/06/16 18:55:22 | 013,632,904 | ---- | C] () -- C:\Windows\SysWow64\pepflashplayer.dll
[2014/05/18 23:36:52 | 000,001,021 | ---- | C] () -- C:\Users\axiane\AppData\Local\recently-used.xbel
[2014/03/05 10:12:48 | 000,263,693 | ---- | C] () -- C:\Windows\hpwins23.dat.temp
[2014/03/01 17:40:25 | 000,000,089 | ---- | C] () -- C:\Users\axiane\AppData\Roaming\WB.CFG
[2013/12/20 12:10:11 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013/12/20 11:29:40 | 000,002,075 | ---- | C] () -- C:\Windows\hpwmdl23.dat.temp
[2013/10/26 21:41:08 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat
[2013/10/17 02:10:04 | 000,074,703 | ---- | C] () -- C:\Windows\SysWOW64mfc45.dll
[2013/09/26 13:52:13 | 000,015,880 | ---- | C] () -- C:\Windows\SysWow64\lsdelete.exe
[2013/09/26 09:55:00 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2013/09/21 15:46:05 | 000,440,480 | ---- | C] () -- C:\Users\axiane\AppData\Local\census.cache
[2013/09/21 15:45:53 | 000,168,171 | ---- | C] () -- C:\Users\axiane\AppData\Local\ars.cache
[2013/09/21 15:14:36 | 000,000,036 | ---- | C] () -- C:\Users\axiane\AppData\Local\housecall.guid.cache
[2013/08/28 09:27:40 | 000,268,968 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll
[2013/08/11 17:34:07 | 000,715,038 | ---- | C] () -- C:\Windows\unins001.exe
[2013/07/05 22:27:00 | 000,129,024 | ---- | C] () -- C:\Windows\SysWow64\AVERM.dll
[2013/06/30 19:20:17 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2013/06/30 19:20:17 | 000,003,440 | ---- | C] () -- C:\Windows\unins001.dat
[2013/06/01 17:25:49 | 001,169,609 | ---- | C] () -- C:\Windows\unins000.exe
[2013/06/01 17:25:49 | 000,086,533 | ---- | C] () -- C:\Windows\unins000.dat
[2013/06/01 13:04:20 | 006,682,635 | ---- | C] () -- C:\Windows\SysWow64\avcodec-52.dll
[2012/12/28 11:51:34 | 000,000,187 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2012/05/07 16:53:28 | 000,008,192 | ---- | C] () -- C:\Users\axiane\.ecofax.db
[2012/05/01 16:16:31 | 000,001,594 | ---- | C] () -- C:\Users\axiane\.swfinfo
[2012/03/21 22:33:41 | 000,024,209 | ---- | C] () -- C:\Users\axiane\AppData\Roaming\UserTile.png
[2012/03/01 14:29:54 | 000,001,086 | ---- | C] () -- C:\Users\axiane\.qFreeFaxJournal.xml
[2012/03/01 14:28:28 | 000,000,202 | ---- | C] () -- C:\Users\axiane\qFreeFaxAddressBook.xml
[2012/02/25 11:19:32 | 000,073,728 | ---- | C] () -- C:\Users\axiane\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015/02/13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/02/13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]

[color=#A23BEC]< %APPDATA%\*. >[/color]
[2014/04/12 21:24:25 | 000,000,000 | -H-D | M] -- C:\Users\axiane\AppData\Roaming\2V2Z1C1P1H1P1Q1F2W1G1I1F1T1QtAtB
[2013/06/01 13:23:55 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\4Free
[2015/04/19 02:39:23 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Adobe
[2015/04/13 18:42:26 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Apowersoft
[2014/09/21 09:38:47 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Apple Computer
[2012/02/08 13:12:44 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\ATI
[2013/11/25 13:37:32 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\AVS4YOU
[2012/03/01 17:01:08 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Azureus
[2013/09/27 23:23:16 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\BitComet
[2015/04/16 11:58:14 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\BitTorrent
[2014/04/29 23:29:51 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\BlueLabelSoft
[2013/11/25 16:27:07 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Broad Intelligence
[2013/03/09 10:34:19 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Canneverbe Limited
[2014/04/12 22:00:23 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Canon
[2013/07/01 08:53:53 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\CDXReader
[2014/11/27 00:20:26 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\CheckPoint
[2013/09/22 09:02:46 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Cocoon Software
[2015/04/19 02:03:34 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2013/12/01 11:04:41 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\com.adobe.example.widget
[2014/04/12 21:32:03 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\com.adobe.example.widget.1FCEF1F0F0AF9458954A25E2A0F59C433BE1C94E.1
[2013/09/02 23:53:12 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\com.bouyguestelecom.mediacenter
[2013/08/08 14:27:54 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Common
[2012/03/16 17:20:41 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\CyberLink
[2014/04/09 10:55:42 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\DiskDefrag
[2013/09/17 13:55:03 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\DivX
[2015/04/17 21:17:10 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Dropbox
[2012/04/25 10:24:03 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\dvdcss
[2015/03/01 01:46:47 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\DVDVideoSoft
[2015/04/25 14:13:15 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\EPSON
[2014/11/15 18:04:30 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\FreeVideoConverter
[2014/02/22 00:47:48 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Fritivi.NET
[2015/04/16 13:05:07 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\FVD Suite
[2015/02/06 21:25:10 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\GlarySoft
[2015/05/02 10:58:24 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Hewlett-Packard
[2014/04/03 23:55:29 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\HP
[2015/05/11 14:38:16 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\hpqlog
[2015/05/11 14:38:16 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\HpUpdate
[2012/02/08 13:11:18 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Identities
[2013/03/17 23:15:51 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\IDT
[2013/09/22 19:41:32 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\InstallShield
[2012/02/08 13:11:44 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Intel Corporation
[2013/04/26 21:29:00 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\InternetTV
[2015/05/05 12:20:59 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\IObit
[2014/04/11 11:22:37 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\IsolatedStorage
[2013/10/08 19:42:46 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\JAM Software
[2012/03/22 18:59:30 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\JLC's Software
[2015/05/10 00:07:38 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Kodi
[2013/04/03 21:34:56 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\LavasoftStatistics
[2013/07/01 08:53:53 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\LavFilters
[2015/04/22 10:27:45 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Logishrd
[2015/04/22 10:30:17 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Logitech
[2012/02/08 13:12:07 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Macromedia
[2014/07/09 20:23:01 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Malwarebytes
[2012/05/01 16:14:01 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\MaxTV Technologies
[2011/09/23 11:26:55 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Media Center Programs
[2014/12/09 20:41:14 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Mediatronic
[2013/10/19 12:24:46 | 000,000,000 | --SD | M] -- C:\Users\axiane\AppData\Roaming\Microsoft
[2013/03/29 23:48:03 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\MMToolz
[2013/09/26 16:19:47 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\MobileAction
[2013/04/20 12:07:53 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Mozilla
[2014/11/16 00:19:05 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Oracle
[2014/01/26 20:08:01 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\PamFax Office Integrations
[2015/05/01 16:13:59 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\PCFixKit
[2013/04/12 19:26:53 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\PhotoFiltre 7
[2013/05/24 00:30:54 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\player
[2014/12/10 10:50:05 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\ProductData
[2015/05/22 01:11:35 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\QuickScan
[2013/09/04 01:31:14 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Real
[2013/05/14 19:49:16 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\RealNetworks
[2013/01/27 14:20:08 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\RegistryKeys
[2014/04/12 22:47:38 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Replay Media Catcher 5
[2014/03/23 17:48:07 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Samsung
[2014/02/10 10:46:11 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\ShieldApps
[2015/05/16 01:56:45 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Skype
[2013/09/08 09:43:10 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Smart PC Solutions
[2012/05/08 00:34:37 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Softland
[2013/10/02 01:50:27 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Studio-Scrap4
[2012/02/08 13:05:18 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Symantec
[2012/02/08 13:11:41 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Synaptics
[2013/10/17 01:15:55 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Temp
[2013/06/30 22:56:45 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Tomato
[2012/02/25 20:00:27 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\TomTom
[2013/09/12 22:43:57 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\TuneUp Software
[2013/07/01 08:53:53 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Ultimate Codec Packages
[2015/01/24 00:05:59 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\uTorrent
[2015/05/23 09:43:36 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\vlc
[2015/03/04 22:08:47 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\VSRevoGroup
[2012/03/27 00:13:39 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Windows Live Writer
[2012/03/21 22:19:01 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\WinZip
[2013/10/31 10:18:18 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\XnConvert
[2015/05/23 11:07:57 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\XnView
[2013/04/12 19:26:53 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\XnViewMP
[2012/02/26 01:30:28 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\Yahoo!
[2015/05/22 19:00:27 | 000,000,000 | ---D | M] -- C:\Users\axiane\AppData\Roaming\ZHP

[color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
[2015/02/23 19:41:34 | 001,743,960 | ---- | M] (BitTorrent Inc.) -- C:\Users\axiane\AppData\Roaming\BitTorrent\BitTorrent.exe
[2015/02/23 19:41:34 | 001,743,960 | ---- | M] (BitTorrent Inc.) -- C:\Users\axiane\AppData\Roaming\BitTorrent\updates\7.9.2_38759.exe
[2011/04/19 03:49:38 | 013,772,800 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\Cocoon Software\QuickMediaConverter\bin\Hd\FFmpeg.exe
[2011/09/26 03:40:56 | 017,075,712 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\Cocoon Software\QuickMediaConverter\bin\Std\FFmpeg.exe
[2013/07/04 17:55:48 | 000,494,080 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\com.bouyguestelecom.mediacenter\Local Store\csv\sqlite3.exe
[2015/04/02 20:38:14 | 043,382,072 | ---- | M] (Dropbox, Inc.) -- C:\Users\axiane\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2015/04/02 20:43:06 | 000,265,856 | ---- | M] (Dropbox, Inc.) -- C:\Users\axiane\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2015/04/02 20:38:20 | 001,032,456 | ---- | M] (Dropbox, Inc.) -- C:\Users\axiane\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe
[2015/05/02 03:12:03 | 000,588,576 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\IObit\IObit Uninstaller\Install_PintoStartMenutemp.exe
[2015/05/02 03:12:04 | 000,933,664 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\IObit\IObit Uninstaller\PPUninstallertemp.exe
[2015/05/02 03:12:06 | 000,776,992 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\IObit\IObit Uninstaller\UninstallDisplaytemp.exe
[2015/04/08 16:33:22 | 001,709,856 | ---- | M] (IObit) -- C:\Users\axiane\AppData\Roaming\IObit\IObit Uninstaller\UninstallPromotetemp.exe
[2013/05/30 14:26:40 | 000,202,752 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\LavFilters\UltimateCodec.exe
[2015/01/15 17:42:19 | 000,054,432 | ---- | M] (Adobe Systems Inc.) -- C:\Users\axiane\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2014/03/05 10:30:58 | 000,010,134 | R--- | M] () -- C:\Users\axiane\AppData\Roaming\Microsoft\Installer\{422CB2BA-2A49-B156-D96C-5B1971DBFF2C}\ARPPRODUCTICON.exe
[2012/10/20 17:05:27 | 000,230,547 | R--- | M] () -- C:\Users\axiane\AppData\Roaming\Microsoft\Installer\{688D159D-6D7E-40CA-971E-F0E379D855B8}\_DECCDFCBF7CBC722C3948F.exe
[2012/10/20 17:05:28 | 000,230,547 | R--- | M] () -- C:\Users\axiane\AppData\Roaming\Microsoft\Installer\{688D159D-6D7E-40CA-971E-F0E379D855B8}\_E41E08CA68E7F487FEF4BB.exe
[2013/03/29 21:43:15 | 000,230,547 | R--- | M] () -- C:\Users\axiane\AppData\Roaming\Microsoft\Installer\{9937E55B-6331-4804-93EF-77E992F204BD}\_3F7CDAE07E1639C4AEA7A8.exe
[2013/03/29 21:43:16 | 000,230,547 | R--- | M] () -- C:\Users\axiane\AppData\Roaming\Microsoft\Installer\{9937E55B-6331-4804-93EF-77E992F204BD}\_481820CA410C366184E158.exe
[2014/09/18 15:48:04 | 000,010,134 | R--- | M] () -- C:\Users\axiane\AppData\Roaming\Microsoft\Installer\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}\ARPPRODUCTICON.exe
[2015/04/21 04:00:32 | 000,435,192 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\Mozilla\Firefox\Profiles\zwd45tv8.default\extensions\{9051303c-7e41-4311-a783-d6fe5ef2832d}\modules\ffmpeg\ffmpeg.exe
[2015/05/21 09:35:41 | 000,113,152 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\QuickScan\chromeqs.exe
[2013/09/04 01:31:23 | 000,470,608 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\temp\~Upg0\rnupgagent.exe
[2014/04/21 23:44:01 | 000,503,888 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\temp\~Upg1\rnupgagent.exe
[2014/05/05 10:00:21 | 000,503,888 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\temp\~Upg2\rnupgagent.exe
[2014/05/12 11:20:21 | 000,503,888 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\temp\~Upg3\rnupgagent.exe
[2014/05/20 11:21:56 | 000,503,888 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\temp\~Upg4\rnupgagent.exe
[2014/11/21 21:42:58 | 000,527,440 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\temp\~Upg5\rnupgagent.exe
[2014/11/28 22:00:23 | 000,527,440 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\temp\~Upg6\rnupgagent.exe
[2014/11/21 21:42:58 | 000,527,440 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe
[2014/11/22 00:44:08 | 001,078,992 | ---- | M] (RealNetworks, Inc.) -- C:\Users\axiane\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\stub_exe\RealPlayerCloud_fr.exe
[2014/03/23 17:48:35 | 039,500,592 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Users\axiane\AppData\Roaming\Samsung\Kies3.0\Kies_3.2.14024_11.exe
[2013/01/30 14:45:44 | 001,114,624 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\Ultimate Codec Packages\uninstaller.exe
[2014/10/27 03:08:57 | 001,689,168 | ---- | M] (BitTorrent Inc.) -- C:\Users\axiane\AppData\Roaming\uTorrent\updates\3.4.2_35141.exe
[2014/12/26 02:15:14 | 001,385,808 | ---- | M] (BitTorrent Inc.) -- C:\Users\axiane\AppData\Roaming\uTorrent\updates\3.4.2_35702.exe
[2015/05/22 09:30:50 | 001,836,544 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\ZHP\ZHPCleaner.exe
[2011/02/12 02:02:56 | 000,179,200 | ---- | M] (Applian Technologies Inc.) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\Applian Director\Director.exe
[2013/06/01 14:43:42 | 001,360,896 | ---- | M] (Indigo Rose Corporation) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\Applian Director\Applian Director\uninstall.exe
[2009/04/28 16:34:48 | 009,838,592 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\OfficialVideoConverter\ffmpeg.exe
[2009/04/28 16:34:48 | 010,217,472 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\OfficialVideoConverter\ffplay.exe
[2010/12/25 18:40:52 | 000,393,216 | ---- | M] (Blink Solution) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\OfficialVideoConverter\Motion Man.exe
[2012/05/18 21:06:13 | 000,032,860 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\OfficialVideoConverter\uninstall.exe
[2011/09/20 14:27:52 | 000,024,576 | ---- | M] (OneStopSoft.com) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\OneStopSoft.com\Youtube Downloader\Clip.exe
[2012/08/30 19:55:22 | 000,710,528 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\OneStopSoft.com\Youtube Downloader\unins000.exe
[2011/09/20 14:26:42 | 000,573,440 | ---- | M] (OneStopSoft.com) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\OneStopSoft.com\Youtube Downloader\Youtube Downloader.exe
[2011/09/16 15:37:16 | 000,108,544 | ---- | M] (P2procket) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\MediaImageServices.exe
[2011/09/16 15:37:04 | 000,129,024 | ---- | M] (P2procket) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\MediaLibraryBuilder.exe
[2011/09/16 15:34:56 | 000,142,336 | ---- | M] (P2procket) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\MediaPlayer.exe
[2013/03/21 15:02:18 | 004,722,176 | ---- | M] (P2procket) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\P2P Rocket.exe
[2011/09/16 15:35:58 | 000,141,824 | ---- | M] (P2procket) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\Skin.exe
[2011/09/16 15:35:52 | 000,383,488 | ---- | M] (P2procket) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\TorrentWizard.exe
[2013/04/26 10:15:51 | 000,345,078 | ---- | M] (P2P Rocket LLC) -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\uninstall.exe
[2011/11/03 11:43:40 | 000,334,336 | ---- | M] () -- C:\Users\axiane\AppData\Roaming\ZHP\Quarantine\P2P Rocket\UpdateApp.exe

[color=#A23BEC]< %temp%\*.exe /s >[/color]
[2015/04/30 23:11:50 | 000,606,208 | ---- | M] () -- C:\Users\axiane\AppData\Local\Temp\Quarantine.exe
[58 C:\Users\axiane\AppData\Local\Temp\*.tmp files -> C:\Users\axiane\AppData\Local\Temp\*.tmp -> ]
[2015/05/16 19:54:38 | 000,244,040 | ---- | M] (Google Inc.) -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleCrashHandler.exe
[2015/05/16 19:54:39 | 000,304,968 | ---- | M] (Google Inc.) -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleCrashHandler64.exe
[2015/05/16 19:54:38 | 000,144,200 | ---- | M] (Google Inc.) -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleUpdate.exe
[2015/05/16 19:54:38 | 000,088,392 | ---- | M] (Google Inc.) -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleUpdateBroker.exe
[2015/05/16 19:54:38 | 000,127,816 | ---- | M] () -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleUpdateComRegisterShell64.exe
[2015/05/16 19:54:38 | 000,088,392 | ---- | M] (Google Inc.) -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleUpdateOnDemand.exe
[2015/05/04 18:39:00 | 000,931,408 | ---- | M] (Google Inc.) -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleUpdateSetup.exe
[2015/05/16 19:54:38 | 000,088,392 | ---- | M] (Google Inc.) -- C:\Users\axiane\AppData\Local\Temp\{1EEE4B38-CE37-4303-B1E5-A426A12D6F95}\GoogleUpdateWebPlugin.exe
[2015/05/21 23:39:18 | 002,084,864 | ---- | M] () -- C:\Users\axiane\AppData\Local\Temp\AB70\temp\flash video downloader google chrome.exe
[2015/05/20 09:41:26 | 000,506,464 | -H-- | M] (768) -- C:\Users\axiane\AppData\Local\Temp\AB70\temp\wpc_mystartsearch.exe
[2015/05/20 21:58:51 | 002,673,752 | ---- | M] (Igor Pavlov) -- C:\Users\axiane\AppData\Local\Temp\HCBackup\hcpackage64.exe
[2 C:\Users\axiane\AppData\Local\Temp\HCBackup\*.tmp files -> C:\Users\axiane\AppData\Local\Temp\HCBackup\*.tmp -> ]

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
[2007/11/07 09:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\consrv.dll >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

[color=#A23BEC]< %windir%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2011/07/16 14:24:50 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2014/06/24 11:42:02 | 004,818,848 | ---- | M] (Safer-Networking Ltd.) MD5=280C014187E24860A7C860329513208F -- C:\Program Files (x86)\Spybot - Search & Destroy 2\explorer.exe
[2011/07/16 14:24:50 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011/07/16 14:24:50 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/07/16 14:24:50 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/07/16 14:24:50 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011/07/16 14:24:50 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

[color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
[2009/07/14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
[2015/04/11 06:31:36 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=43DCEC23557C32F7702C8D5BC729738F -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_2df8898bfd178df8\services.exe
[2015/04/13 05:28:33 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=71C85477DF9347FE8E7BC55768473FCA -- C:\Windows\SysNative\services.exe
[2015/04/13 05:28:33 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=71C85477DF9347FE8E7BC55768473FCA -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_2d7fe646e3ec3705\services.exe

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2015/04/14 09:36:16 | 000,878,392 | ---- | M] (MalwareBytes) MD5=4518DD9A09B4FEF7DB3B13F0DDDDD36E -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe
[2014/03/04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe

[color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color]
"Debug" =
"" = mnmsrvc
"Kmode" = \SystemRoot\System32\win32k.sys
"Optional" = Posix [binary data]
"Required" = DebugWindows [binary data]
"Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s >[/color]
"ProfilesDirectory" = %SystemDrive%\Users -- [2015/02/24 10:26:50 | 000,000,000 | ---D | M]
"Default" = %SystemDrive%\Users\Default -- [2012/02/08 13:04:37 | 000,000,000 | RH-D | M]
"Public" = %SystemDrive%\Users\Public -- [2014/04/13 00:23:48 | 000,000,000 | R--D | M]
"ProgramData" = %SystemDrive%\ProgramData -- [2015/05/22 19:30:49 | 000,000,000 | -H-D | M]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18]
"Flags" = 12
"State" = 0
"RefCount" = 1
"Sid" = 01 01 00 00 00 00 00 05 12 00 00 00 [binary data]
"ProfileImagePath" = %systemroot%\system32\config\systemprofile -- [2015/04/22 10:37:26 | 000,000,000 | ---D | M]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"ProfileImagePath" = C:\Windows\ServiceProfiles\LocalService -- [2015/05/22 12:07:34 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
"ProfileImagePath" = C:\Windows\ServiceProfiles\NetworkService -- [2015/05/22 12:07:33 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-785782368-72873364-3399396315-1000]
"ProfileImagePath" = C:\Users\axiane -- [2015/05/22 12:07:34 | 000,000,000 | ---D | M]
"Flags" = 0
"State" = 0
"Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 60 16 D6 2E 94 F5 57 04 DB AB 9E CA E8 03 00 00 [binary data]
"ProfileLoadTimeLow" = 0
"ProfileLoadTimeHigh" = 0
"RefCount" = 3
"RunLogonScriptSync" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-785782368-72873364-3399396315-1005]
"ProfileImagePath" = C:\Users\fbwuser
"Flags" = 1
"State" = 0
"Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 60 16 D6 2E 94 F5 57 04 DB AB 9E CA ED 03 00 00 [binary data]
"ProfileLoadTimeLow" = 0
"ProfileLoadTimeHigh" = 0
"RefCount" = 2

[color=#A23BEC]< HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s >[/color]
"CompletionChar" = 64
"DefaultColor" = 0
"EnableExtensions" = 1
"PathCompletionChar" = 64

[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s >[/color]
"CompletionChar" = 9
"DefaultColor" = 0
"EnableExtensions" = 1
"PathCompletionChar" = 9

[color=#A23BEC]< nslookup [url]http://www.google.fr[/url] /c >[/color]
Serveur : box
Address: 192.168.1.1

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color]
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2015/04/16 03:54:51 | 000,924,136 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2015/04/16 03:54:51 | 000,924,136 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2015/04/16 03:54:51 | 000,924,136 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: firefox.exe
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -preferences [2015/04/16 01:55:03 | 000,376,944 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode [2015/04/16 01:55:03 | 000,376,944 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --make-default-browser [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --hide-icons [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --show-icons [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2015/04/22 04:28:10 | 000,813,776 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: iexplore.exe [2015/04/22 03:48:29 | 000,815,304 | ---- | M] (Microsoft Corporation)

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color]
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /HIDESHORTCUTS [2015/04/16 03:54:51 | 000,924,136 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /SHOWSHORTCUTS [2015/04/16 03:54:51 | 000,924,136 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\UNINSTALL\HELPER.EXE" /SETASDEFAULTAPPGLOBAL [2015/04/16 03:54:51 | 000,924,136 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: FIREFOX.EXE
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE" -PREFERENCES [2015/04/16 01:55:03 | 000,376,944 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE" -SAFE-MODE [2015/04/16 01:55:03 | 000,376,944 | ---- | M] (Mozilla Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --MAKE-DEFAULT-BROWSER [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --HIDE-ICONS [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" --SHOW-ICONS [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE" [2015/05/13 18:48:49 | 000,813,896 | ---- | M] (Google Inc.)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -SHOW [2015/04/21 17:49:46 | 000,720,384 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -REINSTALL [2015/04/21 17:49:46 | 000,720,384 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\SYSTEM32\IE4UINIT.EXE" -HIDE [2015/04/21 17:49:46 | 000,720,384 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE" -EXTOFF [2015/04/22 04:28:10 | 000,813,776 | ---- | M] (Microsoft Corporation)
64bit-HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: IEXPLORE.EXE [2015/04/22 03:48:29 | 000,815,304 | ---- | M] (Microsoft Corporation)

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 16 bytes -> C:\Users\axiane\Downloads:P2PRocket.GUID
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:E03F9932
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:0A8E2C33
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:6020C786
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:8FFC7CF4
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:373E1720

< End of report >

Publicité


Signaler le contenu de ce document

Publicité