Rapport de ZHPDiag v2013.6.10.15 par Nicolas Coolman, Update du 10/06/2013 Run by unknow at 11/06/2013 06:22:53 WebSite: http://nicolascoolman.webs.com State : Your version is update. WhiteList : Disable High Elevated Privileges : OK UAC : Not Found ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox 21.0 GCIE: Google Chrome v27.0.1453.110 (Defaut) ---\\ Windows Product Information ~ Langage: Anglais Windows XP Home Edition Service Pack 3 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : OK ---\\ System Protection AVG 2013 v13.0.3345 Malwarebytes Anti-Malware version 1.75.0.1300 ---\\ System Optimizer CCleaner v4.02 =>Piriform Ltd ---\\ Peer To Peer (P2P) µTorrent v3.3.0.29544 =>P2P.µTorrent ---\\ Software Update Adobe Flash Player 11 Plugin Adobe Reader XI Java 7 Update 21 ---\\ System Information ~ Processor: x86 Family 15 Model 2 Stepping 7, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 2046.8 MB (65% free) System Restore: Activé (Enable) System drive C: has 30 GB (36%) free of 80 GB ---\\ Logged in mode ~ Computer Name: STRANGER ~ User Name: unknow ~ All Users Names: unknow, SUPPORT_388945a0, HelpAssistant, Guest, ASPNET, Administrator, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Documents and Settings\unknow\Application Data\ ~ %Desktop% : C:\Documents and Settings\unknow\desktop\ ~ %Favorites% : C:\Documents and Settings\unknow\Favorites\ ~ %LocalAppData% : C:\Documents and Settings\unknow\Local Settings\Application Data\ ~ %StartMenu% : C:\Documents and Settings\unknow\Start Menu\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\system32\ ---\\ DOS/Devices A:\ Floppy drive, Flash card reader, USB Key (Not Inserted) C:\ Hard drive, Flash drive, Thumb drive (Free 30 Go of 80 Go) D:\ CD-ROM drive (Not Inserted) E:\ CD-ROM drive (Not Inserted) F:\ CD-ROM drive (Not Inserted) G:\ Hard drive, Flash drive, Thumb drive (Free 50 Go of 80 Go) H:\ Hard drive, Flash drive, Thumb drive (Free 203 Go of 851 Go) I:\ Hard drive, Flash drive, Thumb drive (Free 19 Go of 39 Go) J:\ Hard drive, Flash drive, Thumb drive (Free 586 Go of 1397 Go) K:\ Hard drive, Flash drive, Thumb drive (Free 51 Go of 110 Go) L:\ Hard drive, Flash drive, Thumb drive (Free 75 Go of 851 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: 33 Scanned in 00mn 00s ---\\ Search Generic System Files [MD5.12896823FB95BFB3DC9B46BCAEDC9923] - (.Microsoft Corporation - Windows Explorer.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\Explorer.exe [1033728] [MD5.5C4AAC5A91422C95522ECC6C26FB93C8] - (.Microsoft Corporation - Internet Extensions for Win32.) (.16/04/2013 - 17:17:15.) -- C:\WINDOWS\system32\wininet.dll [920064] [MD5.ED0EF0A136DEC83DF69F04118870003E] - (.Microsoft Corporation - Windows NT Logon Application.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [507904] [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 08:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512] [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976] [MD5.D45926117EB9FA946A6AF572FBE1CAA3] - (.Microsoft Corporation - FIPS Crypto Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44544] [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384] [MD5.4A0B06AA8943C1E332520F7440C0AA30] - (.Microsoft Corporation - i8042 Port Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [52480] [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112] [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832] [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264] [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 08:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320] [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976] [MD5.5575FAF8F97CE5E713D108C2A58D7C7C] - (.Microsoft Corporation - Parallel Port Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80128] [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328] [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.14/04/2008 - 03:02:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224] [MD5.F828DD7E1419B6653894A8F97A0094C5] - (.Microsoft Corporation - Redbook Audio Filter Driver.) (.13/04/2008 - 19:10:28.) -- C:\WINDOWS\system32\Drivers\redbook.sys [57600] [MD5.4C8FCB5CC53AAB716D810740FE59D025] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [52352] ~ Generic Processes: Scanned in 00mn 02s ---\\ Hidden files state (Hidden/Total) ~ Mes images (My Pictures) : 2/13 ~ Mes musiques (My Musics) : 1/1278 ~ Mes Videos (My Videos) : 1/15 ~ Mes Favoris (My Favorites) : 1/1461 ~ Mes Documents (My Documents) : 1/105607 ~ Mon Bureau (My Desktop) : 0/293 ~ Menu demarrer (Programs) : 1/71 ~ Hidden Files: Scanned in 04mn 12s ---\\ Running Processes [MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.708] [MD5.50185186719134FA8F307D269106A51C] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files\AVG\AVG2013\avgidsagent.exe [4937264] [PID.764] [MD5.3A0977CB68AF13E2579E47EB8984056B] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136] [PID.1376] [MD5.01A24B415926BB5F772DBE12459D97DE] - (.Microsoft Corporation. - BingBar Service.) -- C:\Program Files\Microsoft\BingBar\BBSvc.exe [196176] [PID.1524] [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.1688] [MD5.5739F2821D49975CEDE6BF0153D0CF01] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [181664] [PID.728] [MD5.E9501E93FC7A3E6FADB55A09227DF590] - (.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files\AVG\AVG2013\avgnsx.exe [1117232] [PID.1696] [MD5.9677195EA48CED7ED3E7A25B289BFD23] - (.Matrox Graphics Inc - Service used to handle various PowerDesk ta.) -- C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe [344832] [PID.1700] [MD5.EC45360EF69F034D2D6F52AFE88EA88D] - (.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files\AVG\AVG2013\avgemcx.exe [799280] [PID.2156] [MD5.966FE72529898A4493BE6A1C69DF28E1] - (.Matrox Graphics Inc. - MGABG.) -- C:\WINDOWS\system32\mgabg.exe [87560] [PID.2252] [MD5.3BAE2BFCB6D69E19C8373F635DD544DC] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [800040] [PID.2412] [MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\system32\IoctlSvc.exe [81920] [PID.2544] [MD5.F6321D6505EBDD699F7DBBEB996127C8] - (...) -- C:\Program Files\Silicon Image\3114-W-I32-R SATARAID5\SATARaid5ConfigService.exe [131072] [PID.2584] [MD5.32933B07FC16D9F778BEE12545FA1B1A] - (.Microsoft Corporation - TCP/IP Services Application.) -- C:\WINDOWS\system32\tcpsvcs.exe [19456] [PID.2640] [MD5.63E35605AF4E9545799E238984E74638] - (.Unknown owner - M-Audio Delta Tray Application.) -- C:\WINDOWS\system32\DeltaIITray.exe [236040] [PID.2896] [MD5.60C377BE6B3CC83F6A8584934B181D2E] - (.Microsoft Corporation - SNMP Service.) -- C:\WINDOWS\System32\snmp.exe [33280] [PID.2912] [MD5.0E34B7BB1FCF22BCC1E394D16F9E992B] - (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040] [PID.3104] [MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.3176] [MD5.574B0C1A95D1EA0FBA1CA700CE83E7B9] - (.Logitech Inc. - LVCom Server.) -- C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.exe [127022] [PID.3304] [MD5.6ECB52E9EF77186D8D9531915639FEB2] - (.Matrox Graphics Inc. - PowerDesk-SE Application.) -- C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe [4223232] [PID.3392] [MD5.3D24A66867ECE2A70223A83A1B18248D] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files\AVG\AVG2013\avgui.exe [4408368] [PID.3476] [MD5.3E930C641079443D4DE036167A69CAA2] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232] [PID.3688] [MD5.161F8FB21C088124F4D591AEBBDF8C57] - (.Wyse Technology. - Wyse Remote Access Server for Windows.) -- C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe [1436160] [PID.3152] [MD5.FE56897B27ED266F9C4E7D90A0B5DA47] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [553288] [PID.2488] [MD5.2F3390C8E3620B3991D7D82014E26AA7] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [825808] [PID.1796] [MD5.16E1569E02827D1B0732432FAEADEE53] - (.GlavSoft LLC. - TightVNC Server.) -- C:\Program Files\TightVNC\tvnserver.exe [1226808] [PID.3760] [MD5.3A32FAFEEE290E6E6C058DE59EC4EC88] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [7478272] [PID.2504] [MD5.3CBE72BDF167CC075B7CFA09B2089B4C] - (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Service.) -- C:\Program Files\AVG\AVG2013\avgrsx.exe [763952] [PID.852] [MD5.53B18D940D7155C49D507F076AF43554] - (.AVG Technologies CZ, s.r.o. - AVG Scanning Core Module - Server Part.) -- C:\Program Files\AVG\AVG2013\avgcsrvx.exe [448560] [PID.896] [MD5.8C515081584A38AA007909CD02020B3D] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.3892] ~ Processes Running: Scanned in 00mn 11s ---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2) C:\Documents and Settings\unknow\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [User Data\Default] None G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com G0 - GCSP: Preference [User Data\Default] http://www.google.ca G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Docs v.0.5 (Activé) G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé) G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé) G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Search v.0.0.0.20 (Activé) G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé) ~ Google Browser: 13 Scanned in 00mn 10s ---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\prefs.js M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\0daymusicorg.xml M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\aim-search.xml M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\aol-search.xml M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\bmrk-file-host-search.xml M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\live-search.xml M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\multifilesearch.xml M3 - MFPP: Plugins - [unknow] -- C:\Program Files\Mozilla FireFox\searchplugins\answers.xml M3 - MFPP: Plugins - [unknow] -- C:\Program Files\Mozilla FireFox\searchplugins\creativecommons.xml M3 - MFPP: Plugins - [unknow] -- C:\Program Files\Mozilla FireFox\searchplugins\McSiteAdvisor.xml M2 - MFEP: prefs.js [unknow - 869nwu04.default\en-CA@dictionaries.addons.mozilla.org] [] Canadian English Dictionary v2.0.6 (..) M2 - MFEP: prefs.js [unknow - 869nwu04.default\fr-classique-reforme1990@dictionaries.addons.mozilla.org] [] Dictionnaire français «Classique &amp; Réforme 1990» v4.3 (..) M2 - MFEP: prefs.js [unknow - 869nwu04.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (..) P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.03.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll P2 - FPN:Firefox Plugin Navigator . (.Nullsoft, Inc. - Winamp Application Detector.) -- C:\Program Files\Mozilla Firefox\Plugins\npwachk.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.5.1] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Oracle Corporation - Next Generation Java Plug-in 10.21.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.21.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.21.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN - VLC media player Web Plugin 2.0.6.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.6] - (.VideoLAN - VLC media player Web Plugin 2.0.6.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.03.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.1] - (.Unknown owner - Provides additional functionality on Facebook. See Piriform Ltd O4 - GS\Desktop: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O4 - GS\Desktop: iTunes.lnk . (.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O4 - GS\Desktop: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe O4 - GS\Desktop: MBRCheck.lnk . (...) -- C:\Program Files\ZHPDiag\mbrcheck.exe O4 - GS\Desktop: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O4 - GS\Desktop: Smart Defrag 2.lnk . (.IObit - Smart Defrag v2.) -- C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe O4 - GS\Desktop: Sound Forge Pro 10.0.lnk . (.Sony Creative Software Inc. - Sound Forge Pro.) -- C:\Program Files\Sony\Sound Forge Pro 10.0\Forge100.exe O4 - GS\Desktop: Traktor 2.lnk . (.Native Instruments Software Synthesis GmbH - Traktor 2.) -- C:\Program Files\Native Instruments\Traktor 2\Traktor.exe O4 - GS\Desktop: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPhep.exe O4 - GS\Desktop: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe ~ Global Startup: Scanned in 00mn 06s ---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9) O9 - Extra button: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} -- Orphean Key O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Orphean Key O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll ~ Winsock: 6 Scanned in 00mn 00s ---\\ 'Reset Web Settings' hijack (O14) O14 - IERESET.INF: SAFESITE_VALUE=SAFESITE_VALUE="ie.search.msn.com" ~ IE Paramètres WEB: Scanned in 00mn 00s ---\\ ActiveX Objects (Downloaded Program Files) (O16) O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} ((no name)) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} ((no name)) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} ((no name)) - http://download.eset.com/special/eos/OnlineScanner.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\\ Lop.com/Domain Hijackers (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{13962CD6-C950-4592-9ACB-A175EACDDD13}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 O17 - HKLM\System\CS1\Services\Tcpip\..\{13962CD6-C950-4592-9ACB-A175EACDDD13}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 O17 - HKLM\System\CS2\Services\Tcpip\..\{13962CD6-C950-4592-9ACB-A175EACDDD13}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 ~ Domain: Scanned in 00mn 00s ---\\ Extra protocols (O18) O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ AppInit_DLLs Registry value Autorun (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll ~ Winlogon: Scanned in 00mn 00s ---\\ ShellServiceObjectDelayLoad (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - UPNP Tray Monitor and Folder.) -- C:\WINDOWS\system32\upnpui.dll ~ SSODL: 6 Scanned in 00mn 00s ---\\ SharedTaskScheduler (O22) O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Browseui preloader - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll ~ STS/SSO: Scanned in 00mn 00s ---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23) O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files\AVG\AVG2013\avgwdsvc.exe O23 - Service: Bonjour Service (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe O23 - Service: Matrox.Pdesk.ServicesHost (Matrox.Pdesk.ServicesHost) . (.Matrox Graphics Inc - Service used to handle various PowerDesk ta.) - C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe O23 - Service: MGABGEXE (MGABGEXE) . (.Matrox Graphics Inc. - MGABG.) - C:\WINDOWS\system32\mgabg.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation - No comment.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: NBService (NBService) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\WINDOWS\system32\IoctlSvc.exe O23 - Service: SATARaid5 Configuration Service (SATARaid5 Config Service) . (...) - C:\Program Files\Silicon Image\3114-W-I32-R SATARAID5\SATARaid5ConfigService.exe O23 - Service: TightVNC Server (tvnserver) . (.GlavSoft LLC. - TightVNC Server.) - C:\Program Files\TightVNC\tvnserver.exe O23 - Service: Wyse PocketCloud (WysePocketCloud) . (.Unknown owner - PocketCloudService.) - C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe O23 - Service: Wyse Remote Access (WyseRemoteAccess) . (.Wyse Technology. - Wyse Remote Access Server for Windows.) - C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe ~ Services: 15 Scanned in 00mn 07s ---\\ Windows Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft\Wallpaper1.bmp ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart) (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Service.) -- C:\PROGRA~1\AVG\AVG2013\avgrsx.exe ~ BEX: 2 Scanned in 00mn 00s ---\\ Task Planned Automatically(039) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [472] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [830] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Game_Booster_Startup.job [250] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [882] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [886] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job [384] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SmartDefragUpdate.job [280] O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{2D888123-9B14-4D49-9DF2-BA51A5FBB9BA}.job [424] ~ Scheduled Task: 9 Scanned in 00mn 00s ---\\ ActiveSetup Installed Components (O40) O40 - ASIC: Internet Explorer Version Update - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utility.) -- C:\WINDOWS\inf\unregmp2.exe O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - Windows Theme API.) -- C:\WINDOWS\system32\themeui.dll O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shell Extension.) -- C:\WINDOWS\system32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf O40 - ASIC: Address Book 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_7_700_202.ocx O40 - ASIC: Installed Component - S-1-5-21-823518204-507921405-1417001333-1004 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID ~ Active Setup: 20 Scanned in 00mn 02s ---\\ Drivers launched at startup (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys O41 - Driver: (AVGIDSShim) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Loader Dri.) - C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys O41 - Driver: (Avgldx86) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\WINDOWS\system32\DRIVERS\avgldx86.sys O41 - Driver: (Avgtdix) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\WINDOWS\system32\DRIVERS\avgtdix.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Processor Device Driver.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - HID Mouse Filter Driver.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Serial Device Driver.) - C:\WINDOWS\system32\DRIVERS\serial.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: (Tcpip6) . (.Microsoft Corporation - IPv6 driver.) - C:\WINDOWS\system32\DRIVERS\tcpip6.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys ~ Drivers: 78 Scanned in 00mn 00s ---\\ Software installed (O42) O42 - Logiciel: 3114-W-I32-R SATARAID5 - (.Silicon Image.) [HKLM] -- {461E1742-51DC-459B-9D30-A432573AC6AA} O42 - Logiciel: AIM 7 - (...) [HKLM] -- AIM_7 O42 - Logiciel: AKAI professional DCVocoder 1.0 - (...) [HKLM] -- AKAI professional DCVocoder 1.0 O42 - Logiciel: AKAI professional QuadComp 1.0 - (...) [HKLM] -- AKAI professional QuadComp 1.0 O42 - Logiciel: AKAI professional Rotator 1.0 - (...) [HKLM] -- AKAI professional Rotator 1.0 O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- AVG O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- {2AE79B77-E3FA-4F9C-93D7-4FC643516D6A} O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- {D774186B-031F-4186-BC4D-B256B9831B85} O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {77DCDCE3-2DED-62F3-8154-05E745472D07} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {A0087DDE-69D0-11E2-AD57-43CA6188709B} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader XI (11.0.03) - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-AB0000000001} O42 - Logiciel: Antidote RX v8 - (.Druide informatique inc..) [HKLM] -- {A474EA56-5DBD-4181-8230-806A4762EA7F} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {E14ADE0E-75F3-4A46-87E5-26692DD626EC} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {B4089055-D468-45A4-A6BA-5A138DD715FC} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} O42 - Logiciel: C-Media WDM Audio Driver - (...) [HKLM] -- C-Media Audio Driver O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>Piriform Ltd O42 - Logiciel: Compatibility Pack for the 2007 Office system - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-0409-0000-0000000FF1CE} O42 - Logiciel: Delta - (.M-Audio.) [HKLM] -- {A4810699-E859-43A6-8F40-1743873E72AB} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HD Tune Pro 4.01 - (.EFD Software.) [HKLM] -- HD Tune Pro_is1 O42 - Logiciel: HDD Regenerator - (.Abstradrome.) [HKLM] -- {97A39919-9FEA-48B7-AB2B-4F99212D1E98} O42 - Logiciel: HP Precisionscan Pro 3.1 - (.Hewlett-Packard.) [HKLM] -- {6B36DEBF-27D0-4B1E-858D-D397091C6C7D} O42 - Logiciel: Hotfix for Windows XP (KB2779562) - (.Microsoft Corporation.) [HKLM] -- KB2779562 O42 - Logiciel: Hotfix for Windows XP (KB952287) - (.Microsoft Corporation.) [HKLM] -- KB952287 O42 - Logiciel: Hotfix for Windows XP (KB961118) - (.Microsoft Corporation.) [HKLM] -- KB961118 O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF} O42 - Logiciel: Java(TM) 6 Update 45 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216045FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5} O42 - Logiciel: Lexicon PSP 42 1.5.3 32bit - (.PSPaudioware.com.) [HKLM] -- Lexicon PSP 42 1.5.3 32bit O42 - Logiciel: Live 8.0.3 - (...) [HKLM] -- Live 8.0.3 O42 - Logiciel: Logitech MouseWare 9.79.1 - (...) [HKLM] -- {5809E7CF-4DCF-11D4-9875-00105ACE7734} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM] -- {1E76EB6E-E390-11DF-95DB-005056C00008} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E} O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM] -- {196467F1-C11F-4F76-858B-5812ADC83B94} O42 - Logiciel: MSXML4SP2 - (.Logiciel Dr Tax Software Inc..) [HKLM] -- {451BB54C-8B23-4455-8BDC-14FC7D43E056} O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: ManyCam 2.6.43 (remove only) - (.ManyCam LLC.) [HKLM] -- ManyCam O42 - Logiciel: Matrox Graphics Software (remove only) - (...) [HKLM] -- Matrox Graphics Uninstaller O42 - Logiciel: Matrox PowerDesk-SE - (.Matrox Graphics Inc..) [HKLM] -- {BB3E446F-A88E-4D91-9905-9138965561E3} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM] -- {D24DB8B9-BB6C-4334-9619-BA1C650E13D3} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Mozilla Firefox 21.0 (x86 en-US) - (.Mozilla.) [HKLM] -- Mozilla Firefox 21.0 (x86 en-US) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService O42 - Logiciel: Native Instruments Controller Editor - (.Native Instruments.) [HKLM] -- Native Instruments Controller Editor O42 - Logiciel: Native Instruments Controller Editor - (.Native Instruments.) [HKLM] -- {0886900B-B2F3-452C-B580-60F1253F7F80} O42 - Logiciel: Native Instruments Service Center - (.Native Instruments.) [HKLM] -- Native Instruments Service Center O42 - Logiciel: Native Instruments Service Center - (.Native Instruments.) [HKLM] -- {0B8565BA-BAD5-4732-B122-5FD78EFC50A9} O42 - Logiciel: Native Instruments Traktor 2 - (.Native Instruments.) [HKLM] -- Native Instruments Traktor 2 O42 - Logiciel: Native Instruments Traktor 2 - (.Native Instruments.) [HKLM] -- {A8EC0CC0-AD8D-4244-B080-424EDF7A7634} O42 - Logiciel: Nero 7 Ultra Edition - (.Nero AG.) [HKLM] -- {F90D6825-8F1F-4E3A-9E42-A9C8A9DD1033} O42 - Logiciel: Noise Reduction Plug-in 2.0i - (.Sony.) [HKLM] -- {DC35AABA-EA0A-41C1-8462-F60A201DFF9B} O42 - Logiciel: PSP 84 1.5.2 - (.PSPaudioware.com.) [HKLM] -- PSP 84 1.5.2 O42 - Logiciel: PSP EasyVerb 1.6.0 32bit - (.PSPaudioware.com.) [HKLM] -- PSP EasyVerb 1.6.0 32bit O42 - Logiciel: PSP VintageWarmer2 2.3.1 32bit - (.PSPaudioware.com.) [HKLM] -- PSP VintageWarmer2 2.3.1 32bit O42 - Logiciel: PSP oldTimer 1.1.6 32bit - (.PSPaudioware.com.) [HKLM] -- PSP oldTimer 1.1.6 32bit O42 - Logiciel: PSP sQuad 1.5.1 32bit - (.PSPaudioware.com.) [HKLM] -- PSP sQuad 1.5.1 32bit O42 - Logiciel: PocketCloud Windows Companion - (.Wyse Technology.) [HKLM] -- {8C8C169B-D493-42C7-A975-7C1E0E4C5847} O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044} O42 - Logiciel: REALTEK GbE & FE Ethernet PCI NIC Driver - (.Realtek.) [HKLM] -- {ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730} O42 - Logiciel: SeaTools for Windows - (.Seagate Technology.) [HKLM] -- {98613C99-1399-416C-A07C-1EE1C585D872} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2510531) - (.Microsoft Corporation.) [HKLM] -- KB2510531-IE8 O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2817183) - (.Microsoft Corporation.) [HKLM] -- KB2817183-IE8 O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2829530) - (.Microsoft Corporation.) [HKLM] -- KB2829530-IE8 O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2847204) - (.Microsoft Corporation.) [HKLM] -- KB2847204-IE8 O42 - Logiciel: Security Update for Windows XP (KB2115168) - (.Microsoft Corporation.) [HKLM] -- KB2115168 O42 - Logiciel: Security Update for Windows XP (KB2229593) - (.Microsoft Corporation.) [HKLM] -- KB2229593 O42 - Logiciel: Security Update for Windows XP (KB2296011) - (.Microsoft Corporation.) [HKLM] -- KB2296011 O42 - Logiciel: Security Update for Windows XP (KB2347290) - (.Microsoft Corporation.) [HKLM] -- KB2347290 O42 - Logiciel: Security Update for Windows XP (KB2360937) - (.Microsoft Corporation.) [HKLM] -- KB2360937 O42 - Logiciel: Security Update for Windows XP (KB2387149) - (.Microsoft Corporation.) [HKLM] -- KB2387149 O42 - Logiciel: Security Update for Windows XP (KB2393802) - (.Microsoft Corporation.) [HKLM] -- KB2393802 O42 - Logiciel: Security Update for Windows XP (KB2419632) - (.Microsoft Corporation.) [HKLM] -- KB2419632 O42 - Logiciel: Security Update for Windows XP (KB2423089) - (.Microsoft Corporation.) [HKLM] -- KB2423089 O42 - Logiciel: Security Update for Windows XP (KB2440591) - (.Microsoft Corporation.) [HKLM] -- KB2440591 O42 - Logiciel: Security Update for Windows XP (KB2443105) - (.Microsoft Corporation.) [HKLM] -- KB2443105 O42 - Logiciel: Security Update for Windows XP (KB2478960) - (.Microsoft Corporation.) [HKLM] -- KB2478960 O42 - Logiciel: Security Update for Windows XP (KB2478971) - (.Microsoft Corporation.) [HKLM] -- KB2478971 O42 - Logiciel: Security Update for Windows XP (KB2479943) - (.Microsoft Corporation.) [HKLM] -- KB2479943 O42 - Logiciel: Security Update for Windows XP (KB2481109) - (.Microsoft Corporation.) [HKLM] -- KB2481109 O42 - Logiciel: Security Update for Windows XP (KB2483185) - (.Microsoft Corporation.) [HKLM] -- KB2483185 O42 - Logiciel: Security Update for Windows XP (KB2485663) - (.Microsoft Corporation.) [HKLM] -- KB2485663 O42 - Logiciel: Security Update for Windows XP (KB2506212) - (.Microsoft Corporation.) [HKLM] -- KB2506212 O42 - Logiciel: Security Update for Windows XP (KB2507938) - (.Microsoft Corporation.) [HKLM] -- KB2507938 O42 - Logiciel: Security Update for Windows XP (KB2508429) - (.Microsoft Corporation.) [HKLM] -- KB2508429 O42 - Logiciel: Security Update for Windows XP (KB2509553) - (.Microsoft Corporation.) [HKLM] -- KB2509553 O42 - Logiciel: Security Update for Windows XP (KB2535512) - (.Microsoft Corporation.) [HKLM] -- KB2535512 O42 - Logiciel: Security Update for Windows XP (KB2536276-v2) - (.Microsoft Corporation.) [HKLM] -- KB2536276-v2 O42 - Logiciel: Security Update for Windows XP (KB2544893-v2) - (.Microsoft Corporation.) [HKLM] -- KB2544893-v2 O42 - Logiciel: Security Update for Windows XP (KB2566454) - (.Microsoft Corporation.) [HKLM] -- KB2566454 O42 - Logiciel: Security Update for Windows XP (KB2570947) - (.Microsoft Corporation.) [HKLM] -- KB2570947 O42 - Logiciel: Security Update for Windows XP (KB2584146) - (.Microsoft Corporation.) [HKLM] -- KB2584146 O42 - Logiciel: Security Update for Windows XP (KB2585542) - (.Microsoft Corporation.) [HKLM] -- KB2585542 O42 - Logiciel: Security Update for Windows XP (KB2592799) - (.Microsoft Corporation.) [HKLM] -- KB2592799 O42 - Logiciel: Security Update for Windows XP (KB2598479) - (.Microsoft Corporation.) [HKLM] -- KB2598479 O42 - Logiciel: Security Update for Windows XP (KB2603381) - (.Microsoft Corporation.) [HKLM] -- KB2603381 O42 - Logiciel: Security Update for Windows XP (KB2619339) - (.Microsoft Corporation.) [HKLM] -- KB2619339 O42 - Logiciel: Security Update for Windows XP (KB2620712) - (.Microsoft Corporation.) [HKLM] -- KB2620712 O42 - Logiciel: Security Update for Windows XP (KB2624667) - (.Microsoft Corporation.) [HKLM] -- KB2624667 O42 - Logiciel: Security Update for Windows XP (KB2631813) - (.Microsoft Corporation.) [HKLM] -- KB2631813 O42 - Logiciel: Security Update for Windows XP (KB2653956) - (.Microsoft Corporation.) [HKLM] -- KB2653956 O42 - Logiciel: Security Update for Windows XP (KB2655992) - (.Microsoft Corporation.) [HKLM] -- KB2655992 O42 - Logiciel: Security Update for Windows XP (KB2659262) - (.Microsoft Corporation.) [HKLM] -- KB2659262 O42 - Logiciel: Security Update for Windows XP (KB2676562) - (.Microsoft Corporation.) [HKLM] -- KB2676562 O42 - Logiciel: Security Update for Windows XP (KB2686509) - (.Microsoft Corporation.) [HKLM] -- KB2686509 O42 - Logiciel: Security Update for Windows XP (KB2691442) - (.Microsoft Corporation.) [HKLM] -- KB2691442 O42 - Logiciel: Security Update for Windows XP (KB2698365) - (.Microsoft Corporation.) [HKLM] -- KB2698365 O42 - Logiciel: Security Update for Windows XP (KB2705219-v2) - (.Microsoft Corporation.) [HKLM] -- KB2705219-v2 O42 - Logiciel: Security Update for Windows XP (KB2712808) - (.Microsoft Corporation.) [HKLM] -- KB2712808 O42 - Logiciel: Security Update for Windows XP (KB2719985) - (.Microsoft Corporation.) [HKLM] -- KB2719985 O42 - Logiciel: Security Update for Windows XP (KB2723135-v2) - (.Microsoft Corporation.) [HKLM] -- KB2723135-v2 O42 - Logiciel: Security Update for Windows XP (KB2727528) - (.Microsoft Corporation.) [HKLM] -- KB2727528 O42 - Logiciel: Security Update for Windows XP (KB2753842-v2) - (.Microsoft Corporation.) [HKLM] -- KB2753842-v2 O42 - Logiciel: Security Update for Windows XP (KB2757638) - (.Microsoft Corporation.) [HKLM] -- KB2757638 O42 - Logiciel: Security Update for Windows XP (KB2758857) - (.Microsoft Corporation.) [HKLM] -- KB2758857 O42 - Logiciel: Security Update for Windows XP (KB2770660) - (.Microsoft Corporation.) [HKLM] -- KB2770660 O42 - Logiciel: Security Update for Windows XP (KB2780091) - (.Microsoft Corporation.) [HKLM] -- KB2780091 O42 - Logiciel: Security Update for Windows XP (KB2802968) - (.Microsoft Corporation.) [HKLM] -- KB2802968 O42 - Logiciel: Security Update for Windows XP (KB2807986) - (.Microsoft Corporation.) [HKLM] -- KB2807986 O42 - Logiciel: Security Update for Windows XP (KB2808735) - (.Microsoft Corporation.) [HKLM] -- KB2808735 O42 - Logiciel: Security Update for Windows XP (KB2813170) - (.Microsoft Corporation.) [HKLM] -- KB2813170 O42 - Logiciel: Security Update for Windows XP (KB2813345) - (.Microsoft Corporation.) [HKLM] -- KB2813345 O42 - Logiciel: Security Update for Windows XP (KB2820197) - (.Microsoft Corporation.) [HKLM] -- KB2820197 O42 - Logiciel: Security Update for Windows XP (KB2820917) - (.Microsoft Corporation.) [HKLM] -- KB2820917 O42 - Logiciel: Security Update for Windows XP (KB2829361) - (.Microsoft Corporation.) [HKLM] -- KB2829361 O42 - Logiciel: Security Update for Windows XP (KB923561) - (.Microsoft Corporation.) [HKLM] -- KB923561 O42 - Logiciel: Security Update for Windows XP (KB923789) - (.Microsoft Corporation.) [HKLM] -- KB923789 O42 - Logiciel: Security Update for Windows XP (KB941569) - (.Microsoft Corporation.) [HKLM] -- KB941569 O42 - Logiciel: Security Update for Windows XP (KB950762) - (.Microsoft Corporation.) [HKLM] -- KB950762 O42 - Logiciel: Security Update for Windows XP (KB950974) - (.Microsoft Corporation.) [HKLM] -- KB950974 O42 - Logiciel: Security Update for Windows XP (KB951376-v2) - (.Microsoft Corporation.) [HKLM] -- KB951376-v2 O42 - Logiciel: Security Update for Windows XP (KB952004) - (.Microsoft Corporation.) [HKLM] -- KB952004 O42 - Logiciel: Security Update for Windows XP (KB952954) - (.Microsoft Corporation.) [HKLM] -- KB952954 O42 - Logiciel: Security Update for Windows XP (KB956572) - (.Microsoft Corporation.) [HKLM] -- KB956572 O42 - Logiciel: Security Update for Windows XP (KB956802) - (.Microsoft Corporation.) [HKLM] -- KB956802 O42 - Logiciel: Security Update for Windows XP (KB956844) - (.Microsoft Corporation.) [HKLM] -- KB956844 O42 - Logiciel: Security Update for Windows XP (KB959426) - (.Microsoft Corporation.) [HKLM] -- KB959426 O42 - Logiciel: Security Update for Windows XP (KB960803) - (.Microsoft Corporation.) [HKLM] -- KB960803 O42 - Logiciel: Security Update for Windows XP (KB960859) - (.Microsoft Corporation.) [HKLM] -- KB960859 O42 - Logiciel: Security Update for Windows XP (KB969059) - (.Microsoft Corporation.) [HKLM] -- KB969059 O42 - Logiciel: Security Update for Windows XP (KB970430) - (.Microsoft Corporation.) [HKLM] -- KB970430 O42 - Logiciel: Security Update for Windows XP (KB971657) - (.Microsoft Corporation.) [HKLM] -- KB971657 O42 - Logiciel: Security Update for Windows XP (KB972270) - (.Microsoft Corporation.) [HKLM] -- KB972270 O42 - Logiciel: Security Update for Windows XP (KB973507) - (.Microsoft Corporation.) [HKLM] -- KB973507 O42 - Logiciel: Security Update for Windows XP (KB973869) - (.Microsoft Corporation.) [HKLM] -- KB973869 O42 - Logiciel: Security Update for Windows XP (KB973904) - (.Microsoft Corporation.) [HKLM] -- KB973904 O42 - Logiciel: Security Update for Windows XP (KB974112) - (.Microsoft Corporation.) [HKLM] -- KB974112 O42 - Logiciel: Security Update for Windows XP (KB974318) - (.Microsoft Corporation.) [HKLM] -- KB974318 O42 - Logiciel: Security Update for Windows XP (KB974392) - (.Microsoft Corporation.) [HKLM] -- KB974392 O42 - Logiciel: Security Update for Windows XP (KB974571) - (.Microsoft Corporation.) [HKLM] -- KB974571 O42 - Logiciel: Security Update for Windows XP (KB975025) - (.Microsoft Corporation.) [HKLM] -- KB975025 O42 - Logiciel: Security Update for Windows XP (KB975467) - (.Microsoft Corporation.) [HKLM] -- KB975467 O42 - Logiciel: Security Update for Windows XP (KB975560) - (.Microsoft Corporation.) [HKLM] -- KB975560 O42 - Logiciel: Security Update for Windows XP (KB975713) - (.Microsoft Corporation.) [HKLM] -- KB975713 O42 - Logiciel: Security Update for Windows XP (KB977816) - (.Microsoft Corporation.) [HKLM] -- KB977816 O42 - Logiciel: Security Update for Windows XP (KB977914) - (.Microsoft Corporation.) [HKLM] -- KB977914 O42 - Logiciel: Security Update for Windows XP (KB978338) - (.Microsoft Corporation.) [HKLM] -- KB978338 O42 - Logiciel: Security Update for Windows XP (KB978542) - (.Microsoft Corporation.) [HKLM] -- KB978542 O42 - Logiciel: Security Update for Windows XP (KB978706) - (.Microsoft Corporation.) [HKLM] -- KB978706 O42 - Logiciel: Security Update for Windows XP (KB979309) - (.Microsoft Corporation.) [HKLM] -- KB979309 O42 - Logiciel: Security Update for Windows XP (KB979482) - (.Microsoft Corporation.) [HKLM] -- KB979482 O42 - Logiciel: Security Update for Windows XP (KB979687) - (.Microsoft Corporation.) [HKLM] -- KB979687 O42 - Logiciel: Security Update for Windows XP (KB981322) - (.Microsoft Corporation.) [HKLM] -- KB981322 O42 - Logiciel: Security Update for Windows XP (KB981997) - (.Microsoft Corporation.) [HKLM] -- KB981997 O42 - Logiciel: Security Update for Windows XP (KB982132) - (.Microsoft Corporation.) [HKLM] -- KB982132 O42 - Logiciel: Security Update for Windows XP (KB982665) - (.Microsoft Corporation.) [HKLM] -- KB982665 O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} O42 - Logiciel: Smart Defrag 2 - (.IObit.) [HKLM] -- Smart Defrag 2_is1 O42 - Logiciel: Soap 3.0 Toolkit - (.Your Company Name.) [HKLM] -- {2C464EC1-2B0C-4490-9CAC-D4562DD8377A} O42 - Logiciel: Sony CD Architect 5.2 - (.Sony.) [HKLM] -- {8E13588F-6FE1-40B0-85B2-96F524CD653F} O42 - Logiciel: SoulSeek 157 NS 13e - (...) [HKLM] -- Soulseek2 =>P2P.SoulSeek O42 - Logiciel: SoulSeek Client 156c - (...) [HKLM] -- Soulseek =>P2P.SoulSeek O42 - Logiciel: Sound Forge Pro 10.0 - (.Sony.) [HKLM] -- {9660B18F-EC12-11DF-B006-0013D3D69929} O42 - Logiciel: Spark FXMachine 2.1 - (...) [HKLM] -- Spark FXMachine 2.1 O42 - Logiciel: TC Native Bundle v3.1 - (...) [HKLM] -- TC Native Bundle v3.1 O42 - Logiciel: TightVNC - (.GlavSoft LLC..) [HKLM] -- {981B8EDC-E693-4F22-9694-C0FF8E56F134} O42 - Logiciel: TouchCopy 09 - (.Wide Angle Software.) [HKLM] -- {538183EA-2FDB-450C-84A1-56AEA6FF1DFA} O42 - Logiciel: Unlocker 1.9.0 - (.Cedrick Collomb.) [HKLM] -- Unlocker O42 - Logiciel: Update for Windows XP (KB2345886) - (.Microsoft Corporation.) [HKLM] -- KB2345886 O42 - Logiciel: Update for Windows XP (KB2661254-v2) - (.Microsoft Corporation.) [HKLM] -- KB2661254-v2 O42 - Logiciel: Update for Windows XP (KB2749655) - (.Microsoft Corporation.) [HKLM] -- KB2749655 O42 - Logiciel: Update for Windows XP (KB951978) - (.Microsoft Corporation.) [HKLM] -- KB951978 O42 - Logiciel: Update for Windows XP (KB955759) - (.Microsoft Corporation.) [HKLM] -- KB955759 O42 - Logiciel: Update for Windows XP (KB961503) - (.Microsoft Corporation.) [HKLM] -- KB961503 O42 - Logiciel: Update for Windows XP (KB968389) - (.Microsoft Corporation.) [HKLM] -- KB968389 O42 - Logiciel: Update for Windows XP (KB971029) - (.Microsoft Corporation.) [HKLM] -- KB971029 O42 - Logiciel: Update for Windows XP (KB973815) - (.Microsoft Corporation.) [HKLM] -- KB973815 O42 - Logiciel: VLC media player 2.0.6 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27} O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01 O42 - Logiciel: WD Diagnostics - (.Western Digital Technologies.) [HKLM] -- {0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B} O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp O42 - Logiciel: Windows Installer Clean Up - (.Microsoft Corporation.) [HKLM] -- {121634B0-2F4B-11D3-ADA3-00C04F52DD52} O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Management Framework Core - (.Microsoft Corporation.) [HKLM] -- KB968930 O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format Runtime - (...) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows Media Player 11 - (...) [HKLM] -- Windows Media Player O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} O42 - Logiciel: erLT - (.Logitech, Inc..) [HKLM] -- {A498D9EB-927B-459B-85D6-DD6EF8C2C564} O42 - Logiciel: hp deskjet 940c series (Remove only) - (...) [HKLM] -- hp deskjet 940c series O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {91FD46D2-4FB7-4A51-8637-556E1BE1DB7C} O42 - Logiciel: iZotope Ozone 3 - (.iZotope, Inc..) [HKLM] -- iZotope Ozone 3_is1 O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: µTorrent - (...) [HKCU] -- uTorrent =>P2P.µTorrent O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM] -- uTorrent =>P2P.µTorrent ~ Logic: 287 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\AVS4YOU] [HKCU\Software\AWSoftware] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\Alcohol Soft] [HKCU\Software\America Online] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Audio Identifier] [HKCU\Software\Avg] [HKCU\Software\BitTorrent] =>P2P.BitTorrent [HKCU\Software\CDDB] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CodeGear] [HKCU\Software\CopyPod] [HKCU\Software\DVD Decrypter] [HKCU\Software\DirectShow] [HKCU\Software\DivXNetworks] [HKCU\Software\Dr Tax] [HKCU\Software\Druide informatique inc.] [HKCU\Software\EFD Software] [HKCU\Software\ESET] [HKCU\Software\FTPWare] [HKCU\Software\FlashFXP] [HKCU\Software\Flowmix] [HKCU\Software\GlarySoft] [HKCU\Software\GlavSoft LLC.] [HKCU\Software\Google] [HKCU\Software\HP] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\Leadertech] [HKCU\Software\Licenses] [HKCU\Software\Logitech] [HKCU\Software\M-Audio] [HKCU\Software\MPEG Audio Collection] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\ManyCam] [HKCU\Software\Matrox Graphics Inc] [HKCU\Software\Matrox] [HKCU\Software\McAfee] [HKCU\Software\Mirage] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Native Instruments] [HKCU\Software\Netscape] [HKCU\Software\Nitro PDF] [HKCU\Software\O&O] [HKCU\Software\ODBC] [HKCU\Software\ORL] [HKCU\Software\Phoenix Technologies] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PowerPack] [HKCU\Software\Pure Networks] [HKCU\Software\RapidSolution] [HKCU\Software\Safer Networking Limited] [HKCU\Software\SampleView] [HKCU\Software\Samsung] [HKCU\Software\Secunia] [HKCU\Software\Sensaura] [HKCU\Software\Silicon Image] [HKCU\Software\Skype] [HKCU\Software\SlimWare Utilities Inc] [HKCU\Software\SolidDocuments] [HKCU\Software\Sony Creative Software] [HKCU\Software\Sony Media Software] [HKCU\Software\SoulSeek] =>P2P.SoulSeek [HKCU\Software\Soulseek2] =>P2P.SoulSeek [HKCU\Software\Spotlife] [HKCU\Software\SysMech] [HKCU\Software\Sysinternals] [HKCU\Software\TC Works] [HKCU\Software\TeamViewer] [HKCU\Software\TightVNC] [HKCU\Software\TinySoftware] [HKCU\Software\Trolltech] [HKCU\Software\Unlimited Possibilities] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VirusSecureLab] [HKCU\Software\WideAngleSoftware] [HKCU\Software\WinRAR] [HKCU\Software\Winamp] [HKCU\Software\Winds] [HKCU\Software\Wyse] [HKCU\Software\ej-technologies] [HKCU\Software\iTouchMidi] [HKCU\Software\iZotope] [HKCU\Software\iolo] [HKCU\Software\mIRC] [HKCU\Software\redsn0w] [HKLM\Software\ACE Compression Software] [HKLM\Software\AMI] [HKLM\Software\AOL] [HKLM\Software\ASIO] [HKLM\Software\AVS4YOU] [HKLM\Software\Acronis] [HKLM\Software\Adobe] [HKLM\Software\Ahead] [HKLM\Software\Alcohol Soft] [HKLM\Software\Alienware] [HKLM\Software\America Online] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Avg] [HKLM\Software\Avira] [HKLM\Software\C07ft5Y] [HKLM\Software\CDDB] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CopyPod] [HKLM\Software\Curiolab] [HKLM\Software\Daniusoft] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\Dr Tax] [HKLM\Software\Druide informatique inc.] [HKLM\Software\Eset] [HKLM\Software\FTPWare] [HKLM\Software\Flowmix] [HKLM\Software\GEAR Software] [HKLM\Software\Gemplus] [HKLM\Software\GlarySoft] [HKLM\Software\Global IP Solutions] [HKLM\Software\Google] [HKLM\Software\HP] [HKLM\Software\Hewlett-Packard] [HKLM\Software\HighCriteria] [HKLM\Software\HitmanPro] [HKLM\Software\IObit] [HKLM\Software\ISSS] [HKLM\Software\InstallShield] [HKLM\Software\Intel Corporation] [HKLM\Software\Intel] [HKLM\Software\Iolo] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\KasperskyLab] [HKLM\Software\Licenses] [HKLM\Software\Logitech] [HKLM\Software\M-Audio] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\Matrox] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Muzzleflash] [HKLM\Software\Native Instruments] [HKLM\Software\Nero] [HKLM\Software\Nullsoft] [HKLM\Software\O&O] [HKLM\Software\ODBC] [HKLM\Software\ORL] [HKLM\Software\PSP-audioware] [HKLM\Software\Panda Software] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\Propellerhead Software] [HKLM\Software\Protexis] [HKLM\Software\QuickCamInstallTemp] [HKLM\Software\RTLSetup] [HKLM\Software\ReJig] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\S3R521] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Secunia] [HKLM\Software\Services] [HKLM\Software\Silicon Image] [HKLM\Software\Skype] [HKLM\Software\SlimWare Utilities Inc] [HKLM\Software\SoftShape] [HKLM\Software\Sonix] [HKLM\Software\Sony Creative Software] [HKLM\Software\Sony Media Software] [HKLM\Software\Speedchecker Limited] [HKLM\Software\Symantec] [HKLM\Software\TeamViewer] [HKLM\Software\TightVNC] [HKLM\Software\TinySoftware] [HKLM\Software\Uniblue] [HKLM\Software\V-RAID RAID Tool] [HKLM\Software\VIA Technologies, Inc] [HKLM\Software\VideoLAN] [HKLM\Software\Videotron] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Windows] [HKLM\Software\Wow6432Node] [HKLM\Software\Wyse] [HKLM\Software\X-AVCSD] [HKLM\Software\mozilla.org] ~ Key Software: 269 Scanned in 00mn 00s ---\\ Contents of the Common Files folders (O43) O43 - CFD: 19/03/2010 - 09:15:42 - [6.241] ----D C:\Program Files\a-squared Free O43 - CFD: 31/10/2009 - 14:52:54 - [1519.138] ----D C:\Program Files\Ableton O43 - CFD: 10/06/2013 - 20:23:09 - [117.926] ----D C:\Program Files\Adobe O43 - CFD: 12/02/2013 - 10:50:38 - [12.429] ----D C:\Program Files\AIM O43 - CFD: 05/01/2009 - 08:16:17 - [0] ----D C:\Program Files\Alcohol Soft O43 - CFD: 02/12/2011 - 21:29:05 - [2.316] ----D C:\Program Files\Apple Software Update O43 - CFD: 23/02/2012 - 21:45:21 - [3.365] ----D C:\Program Files\Audio Identifier O43 - CFD: 10/06/2013 - 21:04:45 - [86.257] ----D C:\Program Files\AVG O43 - CFD: 11/02/2013 - 00:02:33 - [0.070] ----D C:\Program Files\BlueSprig O43 - CFD: 02/12/2011 - 21:28:14 - [0.602] ----D C:\Program Files\Bonjour O43 - CFD: 01/06/2013 - 09:10:30 - [5.583] ----D C:\Program Files\CCleaner =>Piriform Ltd O43 - CFD: 08/02/2011 - 17:05:27 - [0] ----D C:\Program Files\CD_DVD-ROM Generator 1.50 O43 - CFD: 19/05/2013 - 12:41:54 - [729.856] ----D C:\Program Files\Common Files O43 - CFD: 09/12/2008 - 01:12:59 - [0] ----D C:\Program Files\ComPlus Applications O43 - CFD: 09/10/2010 - 16:49:45 - [0] ----D C:\Program Files\CopyPod O43 - CFD: 13/02/2013 - 04:25:54 - [0] ----D C:\Program Files\CoreFTP O43 - CFD: 21/03/2012 - 21:19:25 - [0.000] ----D C:\Program Files\Defraggler O43 - CFD: 03/07/2011 - 16:21:31 - [0.527] ----D C:\Program Files\DIFX O43 - CFD: 06/06/2010 - 06:38:10 - [4.740] ----D C:\Program Files\DivX O43 - CFD: 28/07/2009 - 21:54:48 - [142.923] ----D C:\Program Files\Druide O43 - CFD: 10/04/2012 - 11:35:21 - [7.836] ----D C:\Program Files\Eac-drum-(2006-01-17) O43 - CFD: 13/05/2011 - 13:58:59 - [165.673] ----D C:\Program Files\eMule O43 - CFD: 14/05/2013 - 23:00:22 - [29.571] ----D C:\Program Files\ESET O43 - CFD: 04/05/2011 - 10:32:48 - [0.397] ----D C:\Program Files\Eusing Free Registry Cleaner O43 - CFD: 10/01/2010 - 12:11:09 - [0.005] ----D C:\Program Files\FlashFXP O43 - CFD: 26/04/2011 - 08:40:59 - [0.777] ----D C:\Program Files\FreeApps O43 - CFD: 28/08/2010 - 10:27:53 - [0] ----D C:\Program Files\G-Lock Software O43 - CFD: 19/05/2013 - 12:20:05 - [369.724] ----D C:\Program Files\Google O43 - CFD: 04/05/2010 - 06:44:11 - [2.547] ----D C:\Program Files\HD Tune Pro O43 - CFD: 27/12/2010 - 10:20:29 - [13.448] ----D C:\Program Files\HDD Regenerator O43 - CFD: 27/04/2011 - 13:11:44 - [87.748] ----D C:\Program Files\Hewlett-Packard O43 - CFD: 17/02/2013 - 10:58:18 - [1.173] ----D C:\Program Files\hp deskjet 940c series O43 - CFD: 23/03/2009 - 22:24:45 - [0.958] ----D C:\Program Files\ImpotExpert 2008 O43 - CFD: 04/05/2010 - 20:01:22 - [8.296] ----D C:\Program Files\ImpotRapide 2008 O43 - CFD: 15/03/2011 - 22:17:45 - [8.715] ----D C:\Program Files\ImpotRapide 2009 O43 - CFD: 21/03/2012 - 21:09:34 - [11.897] ----D C:\Program Files\ImpotRapide 2010 O43 - CFD: 10/06/2013 - 20:50:36 - [11.504] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 14/05/2013 - 22:56:05 - [5.327] ----D C:\Program Files\Internet Explorer O43 - CFD: 11/02/2013 - 23:16:07 - [443.132] ----D C:\Program Files\IObit O43 - CFD: 06/07/2012 - 07:19:58 - [1.765] ----D C:\Program Files\iPod O43 - CFD: 10/02/2013 - 13:18:31 - [0] ----D C:\Program Files\iTouchMidi O43 - CFD: 08/06/2013 - 07:22:18 - [187.177] ----D C:\Program Files\iTunes O43 - CFD: 10/01/2011 - 19:18:24 - [8.696] ----D C:\Program Files\iZotope O43 - CFD: 19/04/2013 - 07:04:21 - [211.824] ----D C:\Program Files\Java O43 - CFD: 21/10/2011 - 14:05:38 - [0] ----D C:\Program Files\LeapFrog O43 - CFD: 13/05/2013 - 23:35:32 - [54.025] ----D C:\Program Files\Logitech O43 - CFD: 10/06/2013 - 20:49:21 - [3.795] ----D C:\Program Files\M-Audio O43 - CFD: 10/06/2013 - 15:43:14 - [0.001] ----D C:\Program Files\ma-config.com O43 - CFD: 09/06/2013 - 11:54:54 - [13.248] ----D C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 02/04/2011 - 07:44:53 - [12.374] ----D C:\Program Files\ManyCam O43 - CFD: 10/11/2012 - 22:30:09 - [2.414] ----D C:\Program Files\MarkAny O43 - CFD: 09/12/2008 - 21:54:24 - [10.811] ----D C:\Program Files\Matrox Graphics Inc O43 - CFD: 09/12/2008 - 01:34:08 - [2.062] ----D C:\Program Files\Messenger O43 - CFD: 08/05/2013 - 22:04:12 - [52.743] ----D C:\Program Files\Microsoft O43 - CFD: 03/10/2010 - 10:55:36 - [0.764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 09/12/2008 - 01:15:56 - [0] ----D C:\Program Files\microsoft frontpage O43 - CFD: 28/06/2011 - 18:18:12 - [663.567] ----D C:\Program Files\Microsoft Office O43 - CFD: 09/05/2013 - 07:09:41 - [1.477] ----D C:\Program Files\Microsoft Security Client O43 - CFD: 13/03/2013 - 03:21:07 - [40.835] ----D C:\Program Files\Microsoft Silverlight O43 - CFD: 07/11/2009 - 02:27:55 - [1.745] ----D C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 14/05/2009 - 20:33:09 - [0.014] ----D C:\Program Files\Microsoft Visual Studio O43 - CFD: 14/05/2009 - 20:24:42 - [1.204] ----D C:\Program Files\Microsoft Visual Studio 8 O43 - CFD: 15/05/2009 - 09:21:15 - [3.554] ----D C:\Program Files\Microsoft Works O43 - CFD: 14/05/2009 - 20:31:48 - [7.797] ----D C:\Program Files\Microsoft.NET O43 - CFD: 13/05/2013 - 22:44:04 - [9.809] ----D C:\Program Files\Movie Maker O43 - CFD: 29/04/2010 - 20:28:59 - [0.002] ----D C:\Program Files\Mozilla ActiveX Control v1.7.12 O43 - CFD: 28/05/2013 - 22:50:19 - [46.863] ----D C:\Program Files\Mozilla Firefox O43 - CFD: 01/06/2013 - 09:16:47 - [0.214] ----D C:\Program Files\Mozilla Maintenance Service O43 - CFD: 28/05/2013 - 21:44:35 - [51.966] ----D C:\Program Files\MPEG Audio Collection O43 - CFD: 13/06/2010 - 08:36:27 - [0.025] ----D C:\Program Files\MSBuild O43 - CFD: 31/07/2012 - 12:14:40 - [61.724] ----D C:\Program Files\MSECache O43 - CFD: 09/12/2008 - 01:11:52 - [0] ----D C:\Program Files\MSN O43 - CFD: 09/12/2008 - 01:12:17 - [8.338] ----D C:\Program Files\MSN Gaming Zone O43 - CFD: 10/06/2013 - 15:32:28 - [0.147] ----D C:\Program Files\MSXML 4.0 O43 - CFD: 04/05/2013 - 13:45:46 - [0] ----D C:\Program Files\MyFree Codec O43 - CFD: 07/05/2011 - 10:35:20 - [209.580] ----D C:\Program Files\Native Instruments O43 - CFD: 14/12/2008 - 03:02:13 - [476.475] ----D C:\Program Files\Nero O43 - CFD: 09/12/2008 - 01:13:52 - [3.108] ----D C:\Program Files\NetMeeting O43 - CFD: 23/09/2011 - 19:45:24 - [0.001] ----D C:\Program Files\Online Services O43 - CFD: 25/12/2008 - 14:23:58 - [0.000] ----D C:\Program Files\Opera O43 - CFD: 17/09/2012 - 21:32:32 - [18.918] ----D C:\Program Files\Oracle O43 - CFD: 13/05/2013 - 22:47:26 - [4.123] ----D C:\Program Files\Outlook Express O43 - CFD: 25/05/2013 - 16:00:41 - [0] ----D C:\Program Files\Panda Security O43 - CFD: 04/07/2009 - 14:45:11 - [0.295] ----D C:\Program Files\PixCreations O43 - CFD: 20/10/2012 - 07:46:07 - [5.566] ----D C:\Program Files\Platinum Notes O43 - CFD: 25/08/2010 - 09:43:02 - [0] ----D C:\Program Files\Process Lasso O43 - CFD: 10/01/2011 - 18:33:47 - [7.689] ----D C:\Program Files\PSPaudioware O43 - CFD: 08/06/2013 - 07:12:32 - [73.544] ----D C:\Program Files\QuickTime O43 - CFD: 09/12/2008 - 03:09:16 - [0] ----D C:\Program Files\Realtek O43 - CFD: 31/08/2012 - 12:53:55 - [34.730] ----D C:\Program Files\Reference Assemblies O43 - CFD: 12/02/2013 - 10:45:51 - [2.197] ----D C:\Program Files\Samsung O43 - CFD: 17/02/2010 - 22:25:51 - [20.677] ----D C:\Program Files\Seagate O43 - CFD: 10/06/2013 - 14:07:10 - [2.544] ----D C:\Program Files\Secunia O43 - CFD: 16/02/2013 - 17:59:40 - [19.363] ----D C:\Program Files\Silicon Image O43 - CFD: 21/03/2012 - 21:17:18 - [3.926] R---D C:\Program Files\Skype O43 - CFD: 28/11/2010 - 10:53:59 - [326.927] ----D C:\Program Files\Sony O43 - CFD: 10/12/2008 - 02:47:44 - [73.896] ----D C:\Program Files\Sony Setup O43 - CFD: 06/07/2012 - 07:16:35 - [3.243] ----D C:\Program Files\Soulseek =>P2P.SoulSeek O43 - CFD: 13/12/2008 - 10:45:58 - [3.592] ----D C:\Program Files\SoulseekNS =>P2P.SoulSeek O43 - CFD: 13/05/2011 - 15:15:47 - [1.114] ----D C:\Program Files\Spybot - Search & Destroy O43 - CFD: 09/06/2013 - 00:17:28 - [1.294] ----D C:\Program Files\Spybot - Search & Destroy 2 O43 - CFD: 10/01/2011 - 17:54:22 - [22.284] ----D C:\Program Files\TcWorks O43 - CFD: 19/07/2011 - 21:35:19 - [0] ----D C:\Program Files\TeamViewer O43 - CFD: 14/05/2013 - 19:25:53 - [2.013] ----D C:\Program Files\TightVNC O43 - CFD: 10/06/2013 - 13:42:17 - [0] ----D C:\Program Files\Trend Micro O43 - CFD: 12/05/2013 - 22:53:17 - [286.952] ----D C:\Program Files\Trillian O43 - CFD: 10/02/2013 - 13:40:13 - [0.447] ----D C:\Program Files\Tweaking.com O43 - CFD: 13/05/2011 - 13:21:51 - [0] ----D C:\Program Files\TweakNow RegCleaner 2011 O43 - CFD: 09/12/2008 - 01:25:17 - [0] ----D C:\Program Files\Uninstall Information O43 - CFD: 18/01/2011 - 16:42:38 - [0.219] ----D C:\Program Files\Unlocker O43 - CFD: 25/04/2013 - 06:46:42 - [0.765] ----D C:\Program Files\uTorrent =>P2P.µTorrent O43 - CFD: 10/11/2011 - 22:25:52 - [0] ----D C:\Program Files\VIA O43 - CFD: 22/02/2010 - 22:57:49 - [106.268] ----D C:\Program Files\VideoLAN O43 - CFD: 25/05/2013 - 11:24:27 - [0] ----D C:\Program Files\VS Revo Group O43 - CFD: 10/01/2011 - 20:07:02 - [83.535] ----D C:\Program Files\VST O43 - CFD: 07/02/2009 - 13:11:37 - [0.819] ----D C:\Program Files\Western Digital Technologies O43 - CFD: 26/10/2010 - 16:08:23 - [23.186] ----D C:\Program Files\Wide Angle Software O43 - CFD: 12/05/2013 - 08:45:07 - [64.486] ----D C:\Program Files\Winamp O43 - CFD: 12/05/2013 - 08:43:57 - [0.126] ----D C:\Program Files\Winamp Detect O43 - CFD: 15/05/2009 - 03:06:08 - [0] ----D C:\Program Files\Windows Desktop Search O43 - CFD: 20/05/2009 - 09:03:04 - [0.136] ----D C:\Program Files\Windows Installer Clean Up O43 - CFD: 12/05/2011 - 11:14:15 - [127.451] ----D C:\Program Files\Windows Live O43 - CFD: 07/11/2009 - 02:24:49 - [0.234] ----D C:\Program Files\Windows Live SkyDrive O43 - CFD: 12/09/2010 - 23:04:17 - [2.691] ----D C:\Program Files\Windows Media Components O43 - CFD: 09/06/2009 - 22:36:51 - [3.415] ----D C:\Program Files\Windows Media Connect 2 O43 - CFD: 13/05/2013 - 16:16:31 - [7.195] ----D C:\Program Files\Windows Media Player O43 - CFD: 27/09/2011 - 16:05:54 - [3.740] ----D C:\Program Files\Windows NT O43 - CFD: 09/12/2008 - 01:14:20 - [0] ----D C:\Program Files\WindowsUpdate O43 - CFD: 09/10/2010 - 17:37:01 - [0] ----D C:\Program Files\WindSolutions O43 - CFD: 09/12/2008 - 03:21:36 - [3.221] ----D C:\Program Files\WinRAR O43 - CFD: 27/05/2012 - 11:56:43 - [0.001] ----D C:\Program Files\WinRAS 2012.01 O43 - CFD: 09/02/2013 - 11:43:51 - [16.147] ----D C:\Program Files\Wyse O43 - CFD: 09/12/2008 - 01:15:56 - [0] ----D C:\Program Files\xerox O43 - CFD: 11/06/2013 - 06:27:32 - [16.864] ----D C:\Program Files\ZHPDiag O43 - CFD: 13/05/2011 - 13:53:02 - [0] ----D C:\Program Files\Common Files\Acronis O43 - CFD: 10/06/2013 - 20:23:13 - [7.366] ----D C:\Program Files\Common Files\Adobe O43 - CFD: 10/06/2013 - 14:26:13 - [45.604] ----D C:\Program Files\Common Files\Adobe AIR O43 - CFD: 14/12/2008 - 11:50:02 - [113.271] ----D C:\Program Files\Common Files\Ahead O43 - CFD: 13/06/2012 - 12:42:56 - [0.010] ----D C:\Program Files\Common Files\AOL O43 - CFD: 08/06/2013 - 07:21:22 - [109.824] ----D C:\Program Files\Common Files\Apple O43 - CFD: 14/01/2009 - 22:30:00 - [0] ----D C:\Program Files\Common Files\AVSMedia O43 - CFD: 14/05/2009 - 20:33:08 - [0.089] ----D C:\Program Files\Common Files\DESIGNER O43 - CFD: 25/03/2011 - 15:20:06 - [0.322] ----D C:\Program Files\Common Files\Hewlett-Packard O43 - CFD: 13/05/2013 - 23:35:10 - [6.596] ----D C:\Program Files\Common Files\InstallShield O43 - CFD: 21/12/2009 - 10:34:27 - [0.261] ----D C:\Program Files\Common Files\iS3 O43 - CFD: 10/01/2011 - 19:18:27 - [0.809] ----D C:\Program Files\Common Files\iZotope O43 - CFD: 19/04/2013 - 07:04:44 - [1.189] ----D C:\Program Files\Common Files\Java O43 - CFD: 21/05/2013 - 21:27:26 - [0.535] ----D C:\Program Files\Common Files\Logishrd O43 - CFD: 13/05/2013 - 23:35:34 - [28.986] ----D C:\Program Files\Common Files\Logitech O43 - CFD: 08/05/2013 - 22:16:13 - [190.006] ----D C:\Program Files\Common Files\Microsoft Shared O43 - CFD: 09/12/2008 - 01:13:49 - [0.271] ----D C:\Program Files\Common Files\MSSoap O43 - CFD: 07/05/2011 - 10:35:22 - [163.575] ----D C:\Program Files\Common Files\Native Instruments O43 - CFD: 08/12/2008 - 16:57:43 - [0] ----D C:\Program Files\Common Files\ODBC O43 - CFD: 09/12/2008 - 01:13:51 - [0.008] ----D C:\Program Files\Common Files\Services O43 - CFD: 18/10/2010 - 17:12:22 - [2.064] ----D C:\Program Files\Common Files\Skype O43 - CFD: 08/12/2008 - 16:57:41 - [3.612] ----D C:\Program Files\Common Files\SpeechEngines O43 - CFD: 06/05/2010 - 22:39:41 - [0] ----D C:\Program Files\Common Files\Symantec Shared O43 - CFD: 23/04/2012 - 13:40:07 - [42.406] ----D C:\Program Files\Common Files\System O43 - CFD: 07/11/2009 - 02:20:33 - [0] ----D C:\Program Files\Common Files\Windows Live O43 - CFD: 09/12/2008 - 19:55:23 - [1.927] -S--D C:\Program Files\Common Files\WindowsLiveInstaller O43 - CFD: 21/10/2011 - 14:00:09 - [11.125] ----D C:\Program Files\Common Files\Wise Installation Wizard O43 - CFD: 10/06/2013 - 21:11:07 - [-986.506] R---D C:\Documents and Settings\All Users\Application Data O43 - CFD: 11/06/2013 - 06:22:31 - [0.014] ----D C:\Documents and Settings\All Users\Desktop O43 - CFD: 16/02/2013 - 11:25:50 - [29.923] R---D C:\Documents and Settings\All Users\Documents O43 - CFD: 21/02/2013 - 15:12:14 - [0.139] -SH-D C:\Documents and Settings\All Users\DRM O43 - CFD: 13/05/2013 - 16:25:47 - [0.378] R---D C:\Documents and Settings\All Users\Start Menu O43 - CFD: 08/12/2008 - 16:57:21 - [0] ----D C:\Documents and Settings\All Users\Templates O43 - CFD: 16/05/2010 - 14:13:03 - [0] ----D C:\Documents and Settings\All Users\Uniblue O43 - CFD: 31/10/2009 - 14:59:20 - [15.607] ----D C:\Documents and Settings\unknow\Application Data\Ableton O43 - CFD: 24/01/2010 - 00:03:12 - [0.094] ----D C:\Documents and Settings\unknow\Application Data\acccore O43 - CFD: 24/03/2011 - 22:01:42 - [0.007] ----D C:\Documents and Settings\unknow\Application Data\Acronis O43 - CFD: 19/05/2013 - 10:03:15 - [0.459] ----D C:\Documents and Settings\unknow\Application Data\Adobe O43 - CFD: 04/01/2009 - 19:59:19 - [0.153] ----D C:\Documents and Settings\unknow\Application Data\Ahead O43 - CFD: 12/02/2013 - 09:12:19 - [209.694] ----D C:\Documents and Settings\unknow\Application Data\Apple Computer O43 - CFD: 10/06/2013 - 21:19:44 - [0.019] ----D C:\Documents and Settings\unknow\Application Data\AVG2013 O43 - CFD: 14/01/2009 - 22:21:57 - [0.041] ----D C:\Documents and Settings\unknow\Application Data\AVS4YOU O43 - CFD: 10/02/2013 - 13:08:03 - [0.264] ----D C:\Documents and Settings\unknow\Application Data\BlueSprig O43 - CFD: 15/05/2011 - 11:05:59 - [0] ----D C:\Documents and Settings\unknow\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 09/10/2010 - 17:35:29 - [0.011] ----D C:\Documents and Settings\unknow\Application Data\CopyTrans O43 - CFD: 28/04/2011 - 09:24:31 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\CoreFTP O43 - CFD: 09/05/2010 - 12:48:06 - [0.075] ----D C:\Documents and Settings\unknow\Application Data\DivX O43 - CFD: 28/07/2009 - 21:57:33 - [0.009] ----D C:\Documents and Settings\unknow\Application Data\Druide O43 - CFD: 21/05/2013 - 20:28:57 - [7.749] ----D C:\Documents and Settings\unknow\Application Data\Easeware O43 - CFD: 11/12/2011 - 19:41:50 - [0] ----D C:\Documents and Settings\unknow\Application Data\f-secure O43 - CFD: 01/02/2010 - 22:37:17 - [6.251] ----D C:\Documents and Settings\unknow\Application Data\Facebook O43 - CFD: 10/06/2013 - 13:50:40 - [0.354] ----D C:\Documents and Settings\unknow\Application Data\GlarySoft O43 - CFD: 21/04/2010 - 07:59:07 - [3.556] ----D C:\Documents and Settings\unknow\Application Data\HD Tune Pro O43 - CFD: 16/01/2011 - 13:44:27 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Help O43 - CFD: 09/10/2010 - 17:35:15 - [0.008] ----D C:\Documents and Settings\unknow\Application Data\iCloner O43 - CFD: 09/12/2008 - 01:25:18 - [0] ----D C:\Documents and Settings\unknow\Application Data\Identities O43 - CFD: 09/10/2010 - 17:35:59 - [0.008] ----D C:\Documents and Settings\unknow\Application Data\iLibs O43 - CFD: 09/12/2008 - 03:09:09 - [0] ----D C:\Documents and Settings\unknow\Application Data\InstallShield O43 - CFD: 02/03/2011 - 17:19:02 - [0.092] ----D C:\Documents and Settings\unknow\Application Data\Intuit Canada O43 - CFD: 11/05/2013 - 23:10:18 - [109.817] ----D C:\Documents and Settings\unknow\Application Data\IObit O43 - CFD: 11/01/2010 - 08:13:41 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Leadertech O43 - CFD: 21/05/2013 - 21:27:26 - [0.050] ----D C:\Documents and Settings\unknow\Application Data\Logishrd O43 - CFD: 21/05/2013 - 21:27:26 - [0] ----D C:\Documents and Settings\unknow\Application Data\Logitech O43 - CFD: 11/01/2010 - 21:47:12 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Logitech(3) O43 - CFD: 19/05/2013 - 10:03:16 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Macromedia O43 - CFD: 23/12/2008 - 22:53:40 - [4.911] ----D C:\Documents and Settings\unknow\Application Data\Malwarebytes O43 - CFD: 16/12/2010 - 23:53:01 - [9.319] ----D C:\Documents and Settings\unknow\Application Data\ManyCam O43 - CFD: 05/01/2011 - 00:22:37 - [10.762] -S--D C:\Documents and Settings\unknow\Application Data\Microsoft O43 - CFD: 19/05/2009 - 12:11:14 - [0.261] ----D C:\Documents and Settings\unknow\Application Data\mIRC O43 - CFD: 25/01/2009 - 10:11:12 - [36.248] ----D C:\Documents and Settings\unknow\Application Data\Mozilla O43 - CFD: 29/04/2010 - 20:29:05 - [0.502] ----D C:\Documents and Settings\unknow\Application Data\MozillaControl O43 - CFD: 13/01/2009 - 22:57:21 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\NCH Swift Sound O43 - CFD: 29/11/2009 - 19:23:16 - [0] ----D C:\Documents and Settings\unknow\Application Data\NetMedia Providers O43 - CFD: 02/04/2011 - 20:40:48 - [0.006] ----D C:\Documents and Settings\unknow\Application Data\Nitro PDF O43 - CFD: 18/12/2008 - 08:37:39 - [0.206] ----D C:\Documents and Settings\unknow\Application Data\Opera O43 - CFD: 17/09/2012 - 21:31:59 - [0] ----D C:\Documents and Settings\unknow\Application Data\Oracle O43 - CFD: 14/03/2013 - 12:58:50 - [0.016] ----D C:\Documents and Settings\unknow\Application Data\player O43 - CFD: 10/12/2008 - 03:11:49 - [0] ----D C:\Documents and Settings\unknow\Application Data\Publish Providers O43 - CFD: 14/05/2013 - 20:56:16 - [0.300] ----D C:\Documents and Settings\unknow\Application Data\QuickScan O43 - CFD: 12/02/2013 - 11:15:25 - [32.095] ----D C:\Documents and Settings\unknow\Application Data\redsn0w O43 - CFD: 14/10/2011 - 14:07:14 - [0] ----D C:\Documents and Settings\unknow\Application Data\RegistryKeys O43 - CFD: 01/12/2012 - 14:11:50 - [208.707] ----D C:\Documents and Settings\unknow\Application Data\Samsung O43 - CFD: 25/03/2011 - 15:20:23 - [0] ----D C:\Documents and Settings\unknow\Application Data\Share-to-Web Upload Folder O43 - CFD: 27/04/2011 - 07:32:29 - [1.650] ----D C:\Documents and Settings\unknow\Application Data\Skype O43 - CFD: 08/09/2012 - 00:03:33 - [0.015] ----D C:\Documents and Settings\unknow\Application Data\skypePM O43 - CFD: 08/02/2011 - 17:05:30 - [0.022] ----D C:\Documents and Settings\unknow\Application Data\Sony O43 - CFD: 12/01/2010 - 21:38:54 - [0] ----D C:\Documents and Settings\unknow\Application Data\Sony Creative Software O43 - CFD: 10/12/2008 - 02:47:57 - [22.422] ----D C:\Documents and Settings\unknow\Application Data\Sony Setup O43 - CFD: 11/12/2008 - 22:50:37 - [37.390] ----D C:\Documents and Settings\unknow\Application Data\Sun O43 - CFD: 19/07/2011 - 21:04:45 - [0.018] ----D C:\Documents and Settings\unknow\Application Data\TeamViewer O43 - CFD: 19/08/2010 - 01:10:50 - [0.313] ----D C:\Documents and Settings\unknow\Application Data\thecleaner O43 - CFD: 16/12/2008 - 03:54:04 - [0] ----D C:\Documents and Settings\unknow\Application Data\Thinstall O43 - CFD: 17/02/2011 - 12:31:01 - [0] ----D C:\Documents and Settings\unknow\Application Data\TightVNC O43 - CFD: 12/05/2013 - 22:22:24 - [0] ----D C:\Documents and Settings\unknow\Application Data\TuneUp Software O43 - CFD: 04/05/2011 - 10:33:47 - [0.011] ----D C:\Documents and Settings\unknow\Application Data\TweakNow RegCleaner 2011 O43 - CFD: 16/05/2010 - 14:12:54 - [6.936] ----D C:\Documents and Settings\unknow\Application Data\Uniblue O43 - CFD: 02/11/2011 - 17:10:07 - [0] ----D C:\Documents and Settings\unknow\Application Data\Ustream Producer O43 - CFD: 08/06/2013 - 07:05:53 - [13.421] ----D C:\Documents and Settings\unknow\Application Data\uTorrent =>P2P.µTorrent O43 - CFD: 10/06/2013 - 14:05:40 - [0.079] ----D C:\Documents and Settings\unknow\Application Data\vlc O43 - CFD: 10/06/2013 - 21:01:45 - [0.731] ----D C:\Documents and Settings\unknow\Application Data\Winamp O43 - CFD: 17/12/2008 - 18:34:27 - [0] ----D C:\Documents and Settings\unknow\Application Data\Windows Search O43 - CFD: 09/10/2010 - 17:25:34 - [1.506] ----D C:\Documents and Settings\unknow\Application Data\WindSolutions O43 - CFD: 09/12/2008 - 02:35:02 - [0] ----D C:\Documents and Settings\unknow\Application Data\WinRAR O43 - CFD: 09/02/2013 - 11:44:32 - [0] ----D C:\Documents and Settings\unknow\Application Data\WysePocketCloud O43 - CFD: 10/06/2013 - 20:17:31 - [0.386] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Adobe O43 - CFD: 13/09/2010 - 16:58:43 - [4.903] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Ahead O43 - CFD: 13/06/2012 - 07:57:16 - [0.005] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\AIM O43 - CFD: 13/06/2012 - 12:22:43 - [0.042] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\AOL O43 - CFD: 09/12/2008 - 04:37:41 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Apple O43 - CFD: 28/08/2010 - 15:21:58 - [171.056] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Apple Computer O43 - CFD: 22/05/2012 - 10:04:51 - [0.011] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\ApplicationHistory O43 - CFD: 10/06/2013 - 21:56:01 - [2.829] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Avg2013 O43 - CFD: 16/02/2013 - 17:52:19 - [2.420] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\CRE O43 - CFD: 21/05/2013 - 20:46:10 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Deployment O43 - CFD: 01/12/2012 - 15:34:08 - [290.889] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Downloaded Installations O43 - CFD: 14/03/2010 - 20:27:20 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\G DATA O43 - CFD: 17/02/2013 - 01:35:34 - [101.214] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Google O43 - CFD: 29/04/2010 - 20:39:15 - [0.003] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Graboid O43 - CFD: 29/04/2010 - 20:29:11 - [0.001] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Graboid_Inc O43 - CFD: 13/12/2008 - 14:25:10 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Help O43 - CFD: 14/12/2008 - 03:14:48 - [497.078] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Identities O43 - CFD: 08/01/2011 - 22:45:06 - [0.400] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\iolo O43 - CFD: 12/02/2013 - 13:06:36 - [0.006] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\libimobiledevice O43 - CFD: 08/01/2011 - 16:22:12 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Logishrd O43 - CFD: 26/02/2013 - 13:04:48 - [0.078] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\ManyCam O43 - CFD: 08/01/2011 - 16:24:04 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Matrox O43 - CFD: 10/06/2013 - 20:59:49 - [6.161] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\MFAData O43 - CFD: 09/05/2013 - 23:36:33 - [1343.197] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft O43 - CFD: 14/05/2009 - 20:21:12 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft Help O43 - CFD: 01/09/2012 - 11:15:06 - [0.001] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\MixedInKey O43 - CFD: 31/08/2012 - 14:14:49 - [0.000] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Mixed_In_Key_LLC O43 - CFD: 25/01/2009 - 10:11:09 - [61.385] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Mozilla O43 - CFD: 13/12/2008 - 14:26:29 - [68.188] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\O&O O43 - CFD: 18/12/2008 - 08:37:39 - [0.043] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Opera O43 - CFD: 13/06/2010 - 09:14:03 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\PCHealth O43 - CFD: 31/08/2012 - 14:14:49 - [0.004] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Platinum Notes O43 - CFD: 13/01/2009 - 20:41:19 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\RapidSolution O43 - CFD: 10/11/2012 - 22:35:13 - [0.029] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Samsung O43 - CFD: 10/06/2013 - 14:07:46 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Secunia PSI O43 - CFD: 17/02/2013 - 09:47:24 - [105.415] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\SlimWare Utilities Inc O43 - CFD: 31/10/2009 - 14:23:18 - [131.898] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Sony O43 - CFD: 22/09/2012 - 08:23:33 - [1.344] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Sun O43 - CFD: 08/01/2011 - 00:04:22 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Sunbelt Software O43 - CFD: 01/01/2011 - 12:23:16 - [3.824] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\tctemp O43 - CFD: 16/02/2013 - 17:53:04 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Temp O43 - CFD: 11/01/2010 - 17:00:16 - [138.884] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\VS Revo Group O43 - CFD: 09/12/2008 - 01:15:42 - [0.015] R---D C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Accessories O43 - CFD: 08/12/2008 - 16:57:21 - [0.000] R---D C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Startup O43 - CFD: 09/12/2008 - 01:37:34 - [0.016] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Accessories O43 - CFD: 09/02/2009 - 08:55:40 - [0.000] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Administrative Tools O43 - CFD: 28/07/2009 - 21:55:05 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Antidote O43 - CFD: 23/02/2012 - 21:45:13 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Audio Identifier O43 - CFD: 07/05/2009 - 12:59:54 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\DVD Decrypter O43 - CFD: 02/04/2011 - 07:44:54 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\ManyCam O43 - CFD: 16/01/2011 - 13:16:58 - [0.004] ----D C:\Documents and Settings\unknow\Start Menu\Programs\MPEG Audio Collection O43 - CFD: 10/01/2011 - 17:47:13 - [0.008] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Sony O43 - CFD: 10/12/2008 - 01:01:06 - [0.004] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Soulseek =>P2P.SoulSeek O43 - CFD: 10/12/2008 - 00:47:51 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Soulseek NS =>P2P.SoulSeek O43 - CFD: 08/01/2011 - 16:22:38 - [0.000] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Startup O43 - CFD: 17/01/2011 - 11:40:37 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Unlocker O43 - CFD: 11/11/2011 - 15:09:09 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\WD Diagnostics O43 - CFD: 22/01/2010 - 08:55:51 - [0.001] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Winamp Application Detect O43 - CFD: 24/07/2010 - 07:53:19 - [0.001] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Winamp Detector Plug-in O43 - CFD: 09/12/2008 - 03:07:30 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\WinRAR O43 - CFD: 10/01/2011 - 19:58:15 - [0.001] ----D C:\Documents and Settings\unknow\Start Menu\Programs\ZionDSP ~ Program Folder: 299 Scanned in 00mn 39s ---\\ Last modified or created files under Windows and System32 (O44) O44 - LFC:[MD5.F7EDA613E05567A9C4002C14F7304741] - 11/06/2013 - 05:19:49 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [473857] O44 - LFC:[MD5.F953F6354A2629F132AC4D9F9833FE23] - 11/06/2013 - 05:14:33 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.83CA0A60766F098243DF76E07308D764] - 11/06/2013 - 05:14:30 ---A- . (...) -- C:\WINDOWS\wiaservc.log [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 11/06/2013 - 05:13:33 ---A- . (...) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.0877AC09CAA217471589644C398FA572] - 11/06/2013 - 05:13:16 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.6A9E65744C11AF855A540353BEFF1816] - 11/06/2013 - 05:10:03 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32584] O44 - LFC:[MD5.F307B593F42DD465DD19260AF880F39D] - 11/06/2013 - 04:54:19 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt [108850] O44 - LFC:[MD5.D76C53DE4C04BBE08133607CCB5A6570] - 10/06/2013 - 20:46:38 ---A- . (...) -- C:\FixitRegBackup.reg [2154] O44 - LFC:[MD5.057CB69DC29C55E2B8623AB308C5A90C] - 10/06/2013 - 20:34:41 ---A- . (...) -- C:\WINDOWS\system32\fichsort.txt [2408] O44 - LFC:[MD5.4E7E24529F30852118690F3CE75B6891] - 10/06/2013 - 20:32:54 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [12676] O44 - LFC:[MD5.45D5E65671260FC44B0FAEFA4A27B817] - 10/06/2013 - 20:14:12 ---A- . (...) -- C:\WINDOWS\setupapi.log [16096] O44 - LFC:[MD5.63E35605AF4E9545799E238984E74638] - 10/06/2013 - 19:50:49 ---A- . (.Unknown owner - M-Audio Delta Tray Application.) -- C:\WINDOWS\system32\DeltaIITray.exe [236040] O44 - LFC:[MD5.10481F20399148ADD4CE54A55CE4AF8F] - 10/06/2013 - 19:50:46 ---A- . (.Avid Technology, Inc. - M-Audio Delta Audio Driver CPL.) -- C:\WINDOWS\system32\DeltaIICpl.exe [739848] O44 - LFC:[MD5.FDBB668DEFD3FAA8408F1B61E7F03914] - 10/06/2013 - 19:50:41 ---A- . (.Avid Technology, Inc. - Delta ASIO support library.) -- C:\WINDOWS\system32\deltaIIasio.dll [25096] O44 - LFC:[MD5.20A04D8077CCCBA1711070EB01F02AFB] - 10/06/2013 - 19:50:41 ---A- . (.Avid Technology, Inc. - M-Audio Delta PCI driver.) -- C:\WINDOWS\system32\Drivers\deltaII.sys [302728] O44 - LFC:[MD5.177D578067BBAC6C58C4C629569BCEDD] - 10/06/2013 - 19:50:41 ---A- . (.Avid Technology, Inc. - M-Audio Delta Series Interface Library.) -- C:\WINDOWS\system32\DeltaIIpnl.dll [21000] O44 - LFC:[MD5.F4D021E764F6FA554606F4A735A3151B] - 10/06/2013 - 18:49:27 ---A- . (...) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.B6DAA849266DF4C7ECB1C0F68A2AB50E] - 10/06/2013 - 18:49:27 ---A- . (...) -- C:\WINDOWS\win.ini [602] O44 - LFC:[MD5.5F56E15BC7C10ED3183BE40B80378887] - 10/06/2013 - 18:49:27 -SH-- . (...) -- C:\boot.ini [310] O44 - LFC:[MD5.091C84FE9C2A2C4AE1F30AC7C6A4BDD1] - 10/06/2013 - 14:14:42 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\WINDOWS\system32\java.exe [174496] O44 - LFC:[MD5.AE5F5021FC66A380FD46B17A3E30E8E8] - 10/06/2013 - 14:14:42 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\WINDOWS\system32\javaw.exe [174496] O44 - LFC:[MD5.21CFE2D87E8C81FF66DEFD1AB75B29EA] - 10/06/2013 - 14:14:42 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\WINDOWS\system32\javaws.exe [263584] O44 - LFC:[MD5.469195FFEFC2E36041AD34E4019E8F9E] - 10/06/2013 - 12:42:54 ---A- . (...) -- C:\DelFix.txt [2526] O44 - LFC:[MD5.4470E3C1E0C3378E4CAB137893C12C3A] - 09/06/2013 - 10:54:41 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [22856] O44 - LFC:[MD5.D6A755A42BD28535569F886164310CE1] - 08/06/2013 - 22:58:55 ---A- . (...) -- C:\WINDOWS\wininit.ini [16] O44 - LFC:[MD5.149E0E824427BA314F9F655BA33BECEE] - 08/06/2013 - 07:13:41 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [597802] O44 - LFC:[MD5.07B6C77E780FCF66BCD79F43DBDBA235] - 08/06/2013 - 07:13:41 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [87180] O44 - LFC:[MD5.BEA51F8D0FC74928961D2012F0A06FC3] - 08/06/2013 - 07:13:41 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [499108] O44 - LFC:[MD5.C7BC96C3711C0D269DA26D1F0ECEC547] - 04/06/2013 - 10:37:57 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [69] ~ Files: 29 Scanned in 02mn 09s ---\\ Operations and functions at Windows Explorer startup (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll ~ ShellExecuteHooks: Scanned in 00mn 00s ---\\ Export authorized application key (O47) O47 - AAKE:Key Export SP - "C:\Program Files\SoulseekNS\slsk.exe" [Enabled] .(..) -- C:\Program Files\SoulseekNS\slsk.exe =>P2P.SoulSeek O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.BitTorrent Inc..) -- C:\Program Files\uTorrent\uTorrent.exe =>P2P.µTorrent O47 - AAKE:Key Export SP - "C:\Program Files\Soulseek\slsk.exe" [Enabled] .(..) -- C:\Program Files\Soulseek\slsk.exe =>P2P.SoulSeek O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe O47 - AAKE:Key Export SP - "C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe" [Enabled] .(.Nero AG.) -- C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe O47 - AAKE:Key Export SP - "C:\Program Files\AIM\aim.exe" [Enabled] .(.AOL Inc..) -- C:\Program Files\AIM\aim.exe O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Sun Microsystems, Inc..) -- C:\Program Files\Java\jre6\bin\javaw.exe O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\java.exe" [Enabled] .(.Sun Microsystems, Inc..) -- C:\Program Files\Java\jre6\bin\java.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\mmc.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\mmc.exe O47 - AAKE:Key Export SP - "C:\Program Files\VideoLAN\VLC\vlc.exe" [Enabled] .(.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\vlc.exe O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Skype Technologies.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe O47 - AAKE:Key Export SP - "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2011 11.0.1.400\English\setup.exe" [Enabled] .(.Kaspersky Lab.) -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2011 11.0.1.400\English\setup.exe O47 - AAKE:Key Export SP - "C:\Program Files\Winamp\winamp.exe" [Enabled] .(.Nullsoft, Inc..) -- C:\Program Files\Winamp\winamp.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export SP - "K:\DOWNLOAD FIREFOX\tinyumbrella-4.33.00.exe" [Enabled] .(..) -- K:\DOWNLOAD FIREFOX\tinyumbrella-4.33.00.exe O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Bonjour\mDNSResponder.exe O47 - AAKE:Key Export SP - "C:\Program Files\Internet Explorer\iexplore.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\muzapp.exe" [Enabled] .(.Musiccity Co.Ltd..) -- C:\WINDOWS\system32\muzapp.exe O47 - AAKE:Key Export SP - "C:\Program Files\Wyse\PocketCloud Windows Companion\WyseBrowser.exe" [Enabled] .(.Wyse Technology Inc..) -- C:\Program Files\Wyse\PocketCloud Windows Companion\WyseBrowser.exe O47 - AAKE:Key Export SP - "C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe" [Enabled] .(..) -- C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe O47 - AAKE:Key Export SP - "C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe" [Enabled] .(.Wyse Technology..) -- C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\tvnserver.exe" [Enabled] .(.GlavSoft LLC..) -- C:\Program Files\TightVNC\tvnserver.exe O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\tvnviewer.exe" [Enabled] .(.GlavSoft LLC..) -- C:\Program Files\TightVNC\tvnviewer.exe O47 - AAKE:Key Export SP - "C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dpvsetup.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\dpvsetup.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dxdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\dxdiag.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dpnsvr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\dpnsvr.exe O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\iTunes\iTunes.exe O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgnsx.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgnsx.exe O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgdiagex.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgdiagex.exe O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgmfapx.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgmfapx.exe O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgemcx.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgemcx.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe ~ Keys Export: 38 Scanned in 00mn 06s ---\\ Local Security Authority-LSA Deny (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Windows Security Configuration Editor Client Engine.) -- C:\WINDOWS\system32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll ~ LSA: 6 Scanned in 00mn 00s ---\\ Safe Boot Control (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys ~ CSB: 23 Scanned in 00mn 00s ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ~ IFEO: Scanned in 00mn 00s ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"msacm.voxacm160"="vct3216.acm" . (.Voxware, Inc. - Voxware Audio Compression Manager Driver.) -- C:\WINDOWS\system32\vct3216.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"mciqtz32.dll"="mciqtz32.dll" . (...) -- C:\WINDOWS\system32\mciqtz32.dll O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax O52 - TDSD: \drivers.desc\"vct3216.acm"="Voxware Compression Toolkit" . (.Voxware, Inc. - Voxware Audio Compression Manager Driver.) -- C:\WINDOWS\system32\vct3216.acm ~ TDSD: 19 Scanned in 00mn 01s ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll ~ MSCP: 6 Scanned in 00mn 00s ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1 O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0 O55 - MWPS:[HKCU\...\Policies\System] - "NoDispSettingsPage"=0 O55 - MWPS:[HKCU\...\Policies\System] - "NoDispAppearancePage"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 ~ MWPS: 12 Scanned in 00mn 00s ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "EditLevel"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFileMenu"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoCommonGroups"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKCU\...\policies\Explorer] - "LinkResolveIgnoreLinkInfo"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFolderOptions"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFileUrl"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRun"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLogoff"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoClose"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSetFolders"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoNetHood"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFind"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSetTaskBar"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "Nosecuritytab"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoUpdateCheck"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoWindowsUpdate"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "LinkResolveIgnoreLinkInfo"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoResolveSearch"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoCDBurning"=0 ~ MWPE Keys: 25 Scanned in 00mn 00s ---\\ System Drivers List (SDL) (O58) O58 - SDL:[MD5.95B4FB835E28AA1336CEEB07FD5B9398] - 14/04/2008 - 07:00:00 ---A- . (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) -- C:\WINDOWS\system32\Drivers\amdagp.sys [43008] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 14/04/2008 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9029] ~ Drivers: Scanned in 00mn 00s ---\\ List all tools cleaner (LATC) (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\\ List all legacy services(LALS) (O64) O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (6to4) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_6TO4 O64 - Services: CurCS - 21/05/2013 - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (AdobeFlashPlayerUpdateSvc) .(.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 11.7 r7.) - LEGACY_ADOBEFLASHPLAYERUPDATESVC O64 - Services: CurCS - 17/08/2011 - C:\WINDOWS\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Alerter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ALERTER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\alg.exe (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - 21/12/2012 - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device) .(.Apple Inc. - MobileDeviceService.) - LEGACY_APPLE_MOBILE_DEVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - 13/05/2013 - C:\Program Files\AVG\AVG2013\avgidsagent.exe (AVGIDSAgent) .(.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - LEGACY_AVGIDSAGENT O64 - Services: CurCS - 29/03/2013 - C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys (AVGIDSDriver) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - LEGACY_AVGIDSDRIVER O64 - Services: CurCS - 08/02/2013 - C:\WINDOWS\system32\DRIVERS\avgidshx.sys (AVGIDSHX) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Dri.) - LEGACY_AVGIDSHX O64 - Services: CurCS - 01/03/2013 - C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys (AVGIDSShim) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Loader Dri.) - LEGACY_AVGIDSSHIM O64 - Services: CurCS - 08/02/2013 - C:\WINDOWS\system32\DRIVERS\avgldx86.sys (Avgldx86) .(.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - LEGACY_AVGLDX86 O64 - Services: CurCS - 08/02/2013 - C:\WINDOWS\system32\DRIVERS\avglogx.sys (Avglogx) .(.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) - LEGACY_AVGLOGX O64 - Services: CurCS - 08/02/2013 - C:\WINDOWS\system32\DRIVERS\avgmfx86.sys (Avgmfx86) .(.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - LEGACY_AVGMFX86 O64 - Services: CurCS - 08/02/2013 - C:\WINDOWS\system32\DRIVERS\avgrkx86.sys (Avgrkx86) .(.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) - LEGACY_AVGRKX86 O64 - Services: CurCS - 21/03/2013 - C:\WINDOWS\system32\DRIVERS\avgtdix.sys (Avgtdix) .(.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - LEGACY_AVGTDIX O64 - Services: CurCS - 18/04/2013 - C:\Program Files\AVG\AVG2013\avgwdsvc.exe (avgwd) .(.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - LEGACY_AVGWD O64 - Services: CurCS - 21/10/2011 - C:\Program Files\Microsoft\BingBar\BBSvc.exe (BBSvc) .(.Microsoft Corporation. - BingBar Service.) - LEGACY_BBSVC O64 - Services: CurCS - 13/10/2011 - C:\Program Files\Microsoft\BingBar\SeaPort.exe (BBUpdate) .(.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) - LEGACY_BBUPDATE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - ??\??\???? - BOClean Kernel Monitor. (BOCDRIVE) .(. - .) - LEGACY_BOCDRIVE O64 - Services: CurCS - 30/08/2011 - C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service) .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\cisvc.exe (cisvc) .(.Microsoft Corporation - Content Index service.) - LEGACY_CISVC O64 - Services: CurCS - 25/07/2008 - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - 18/03/2010 - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (clr_optimization_v4.0.30319_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V4.0.30319_32 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\dllhost.exe (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - 29/10/2012 - C:\WINDOWS\system32\drivers\dgderdrv.sys (dgderdrv) .(.Devguru Co., Ltd - Device Error Recovery SDK(x86).) - LEGACY_DGDERDRV O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\dmadmin.exe (dmadmin) .(.Microsoft Corp., Veritas Software - Logical Disk Manager service process.) - LEGACY_DMADMIN O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot) .(.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) - LEGACY_DMBOOT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\fltMgr.sys (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - 29/07/2008 - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - 05/08/2009 - C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys (fssfltr) .(.Microsoft Corporation - Family Safety Filter Driver (TDI).) - LEGACY_FSSFLTR O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\msgpc.sys (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - 19/05/2013 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate) .(.Google Inc. - Google Installer.) - LEGACY_GUPDATE O64 - Services: CurCS - 19/05/2013 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdatem) .(.Google Inc. - Google Installer.) - LEGACY_GUPDATEM O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV O64 - Services: CurCS - 20/10/2009 - C:\WINDOWS\system32\Drivers\HTTP.sys (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\imapi.exe (ImapiService) .(.Microsoft Corporation - Image Mastering API.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys (Ip6Fw) .(.Microsoft Corporation - IPv6 Windows Firewall Driver.) - LEGACY_IP6FW O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys (IpFilterDriver) .(.Microsoft Corporation - IP FILTER DRIVER.) - LEGACY_IPFILTERDRIVER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ipnat.sys (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - 31/05/2013 - C:\Program Files\iPod\bin\iPodService.exe (iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Iprip) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IPRIP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ipsec.sys (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\irda.sys (irda) .(.Microsoft Corporation - IRDA Protocol Driver.) - LEGACY_IRDA O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Irmon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IRMON O64 - Services: CurCS - 04/04/2013 - C:\Program Files\Java\jre7\bin\jqs.exe (JavaQuickStarterService) .(.Oracle Corporation - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LanmanServer) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - ??\??\???? - Unknown owner (Lbd) .(...) - LEGACY_LBD O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - 11/06/2009 - C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe (Matrox.Pdesk.ServicesHost) .(.Matrox Graphics Inc - Service used to handle various PowerDesk ta.) - LEGACY_MATROX.PDESK.SERVICESHOST O64 - Services: CurCS - 11/06/2009 - C:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe (Matrox Centering Service) .(.Matrox Graphics Inc. - Matrox PowerDesk Services.) - LEGACY_MATROX_CENTERING_SERVICE O64 - Services: CurCS - 04/04/2007 - C:\WINDOWS\system32\mgabg.exe (MGABGEXE) .(.Matrox Graphics Inc. - MGABG.) - LEGACY_MGABGEXE O64 - Services: CurCS - 26/05/2013 - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (MozillaMaintenance) .(.Mozilla Foundation - No comment.) - LEGACY_MOZILLAMAINTENANCE O64 - Services: CurCS - 20/01/2013 - C:\WINDOWS\system32\DRIVERS\MpFilter.sys (MpFilter) .(.Microsoft Corporation - Microsoft antimalware file system filter dr.) - LEGACY_MPFILTER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\mrxdav.sys (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - 15/07/2011 - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\msdtc.exe (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\msiexec.exe (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - 27/01/2013 - C:\Program Files\Microsoft Security Client\MsMpEng.exe (MsMpSvc) .(.Microsoft Corporation - Antimalware Service Executable.) - LEGACY_MSMPSVC O64 - Services: CurCS - 21/04/2011 - C:\WINDOWS\system32\Drivers\Mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - 08/04/2008 - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe (NBService) .(.Nero AG - Nero BackItUp.) - LEGACY_NBSERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\Drivers\NDIS.sys (NDIS) .(.Microsoft Corporation - NDIS 5.1 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - 08/07/2011 - C:\WINDOWS\system32\DRIVERS\ndistapi.sys (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - 08/12/2009 - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NIHardwareService) .(.Native Instruments GmbH - NIHardwareService.) - LEGACY_NIHARDWARESERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - 22/01/2008 - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (NMIndexingService) .(.Nero AG - Nero Home.) - LEGACY_NMINDEXINGSERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC O64 - Services: CurCS - 20/07/2011 - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.exe (odserv) .(.Microsoft Corporation - Microsoft Office Diagnostics.) - LEGACY_ODSERV O64 - Services: CurCS - 15/02/2010 - C:\WINDOWS\system32\IoctlSvc.exe (PLFlash DeviceIoControl Service) .(.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - LEGACY_PLFLASH_DEVICEIOCONTROL_SERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - 12/01/2002 - C:\WINDOWS\system32\Drivers\PortTalk.sys (PortTalk) .(.Beyond Logic http://www.beyondlogic.org - PortTalk - Beyond Logic I/O Port Driver.) - LEGACY_PORTTALK O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\rasacd.sys (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\rdbss.sys (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\rsvp.exe (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - 05/10/2005 - Unknown owner (SATARaid5 Config Service) .(...) - LEGACY_SATARAID5_CONFIG_SERVICE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - 01/11/2004 - C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys (SiFilter) .(.Silicon Image, Inc. - Windows Accelerator Driver.) - LEGACY_SIFILTER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\tcpsvcs.exe (SimpTcp) .(.Microsoft Corporation - TCP/IP Services Application.) - LEGACY_SIMPTCP O64 - Services: CurCS - 26/11/2010 - Unknown owner (SmartDefragDriver) .(...) - LEGACY_SMARTDEFRAGDRIVER O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\snmp.exe (SNMP) .(.Microsoft Corporation - SNMP Service.) - LEGACY_SNMP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\snmptrap.exe (SNMPTRAP) .(.Microsoft Corporation - SNMP Trap Service.) - LEGACY_SNMPTRAP O64 - Services: CurCS - 17/08/2010 - C:\WINDOWS\system32\spoolsv.exe (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - 23/05/2009 - C:\WINDOWS\system32\Drivers\sptd.sys (sptd) .(.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) - LEGACY_SPTD O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\sr.sys (sr) .(.Microsoft Corporation - System Restore Filesystem Filter Driver.) - LEGACY_SR O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - 17/02/2011 - C:\WINDOWS\system32\DRIVERS\srv.sys (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - 20/06/2008 - C:\WINDOWS\system32\DRIVERS\tcpip.sys (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - 11/02/2010 - C:\WINDOWS\system32\DRIVERS\tcpip6.sys (Tcpip6) .(.Microsoft Corporation - IPv6 driver.) - LEGACY_TCPIP6 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - 20/11/2012 - C:\Program Files\TightVNC\tvnserver.exe (tvnserver) .(.GlavSoft LLC. - TightVNC Server.) - LEGACY_TVNSERVER O64 - Services: CurCS - 04/07/2010 - Unknown owner (UnlockerDriver5) .(...) - LEGACY_UNLOCKERDRIVER5 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - 17/04/2000 - C:\WINDOWS\system32\drivers\UtilNT.sys (UtilNT) .(.Matrox Graphics Inc. - No comment.) - LEGACY_UTILNT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - 18/05/2004 - C:\WINDOWS\system32\DRIVERS\viamraid.sys (viamraid) .(.VIA Technologies inc,.ltd - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32.) - LEGACY_VIAMRAID O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\vssvc.exe (VSS) .(.Microsoft Corporation - Microsoft® Volume Shadow Copy Service.) - LEGACY_VSS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\wanarp.sys (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - 14/07/2009 - C:\WINDOWS\system32\DRIVERS\Wdf01000.sys (Wdf01000) .(.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) - LEGACY_WDF01000 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - 18/08/2009 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe (wlidsvc) .(.Microsoft Corporation - Microsoft® Windows Live ID Service.) - LEGACY_WLIDSVC O64 - Services: CurCS - 18/10/2006 - C:\Program Files\Windows Media Player\WMPNetwk.exe (WMPNetworkSvc) .(.Microsoft Corporation - Windows Media Player Network Sharing Servic.) - LEGACY_WMPNETWORKSVC O64 - Services: CurCS - 18/03/2010 - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (WPFFontCache_v0400) .(.Microsoft Corporation - wpffontcache_v0400.exe.) - LEGACY_WPFFONTCACHE_V0400 O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\ws2ifsl.sys (WS2IFSL) .(.Microsoft Corporation - Winsock2 IFS Layer.) - LEGACY_WS2IFSL O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - 05/11/2012 - C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe (WysePocketCloud) .(.Unknown owner - PocketCloudService.) - LEGACY_WYSEPOCKETCLOUD O64 - Services: CurCS - 05/11/2012 - C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe (WyseRemoteAccess) .(.Wyse Technology. - Wyse Remote Access Server for Windows.) - LEGACY_WYSEREMOTEACCESS O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ~ Legacy: 353 Scanned in 00mn 03s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe ~ FASS Keys: 17 Scanned in 00mn 00s ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {17E71D10-C50B-4BDC-9360-864D73F655FB} - (Yahoo! Search) - http://search.yahoo.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {7A200381-2517-4512-8AE1-81F11444E64D} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com ~ Keys: Scanned in 00mn 00s ---\\ Search Svchost Services (SSS) (O83) O83 - Search Svchost Services: 6to4 (6to4) . (.Microsoft Corporation - Service that offers IPv6 connectivity over an IPv4 network..) -- C:\WINDOWS\system32\6to4svc.dll [100864] O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll [0] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - Logical Disk Manager service dll.) -- C:\WINDOWS\system32\dmserver.dll [23552] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - DHCP Client Service.) -- C:\WINDOWS\system32\dhcpcsvc.dll [126976] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - No comment.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] O83 - Search Svchost Services: Iprip (Iprip) . (.Microsoft Corporation - Microsoft RIP for Internet Protocol.) -- C:\WINDOWS\system32\iprip.dll [35328] O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infrared Monitor.) -- C:\WINDOWS\system32\irmon.dll [28160] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Network Connections Manager.) -- C:\WINDOWS\system32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll [245248] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Removable Storage Manager.) -- C:\WINDOWS\system32\ntmssvc.dll [435200] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Task Scheduler Engine.) -- C:\WINDOWS\system32\schedsvc.dll [192512] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\system32\ipnathlp.dll [331264] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - System Restore Service.) -- C:\WINDOWS\system32\srsvc.dll [171008] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\WINDOWS\system32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Windows Time Service.) -- C:\WINDOWS\system32\w32time.dll [175104] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Wireless Zero Configuration Service.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [144896] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Quarantine Agent Service Run-Time.) -- C:\WINDOWS\system32\qagentrt.dll [291328] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\WINDOWS\system32\kmsvc.dll [61440] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] ~ Services: 41 Scanned in 00mn 00s ---\\ Search Particular Root Folder (SPRF) (O84) [MD5.A79AF4DC922EDEE7EC23B46973F4C950] [SPRF][10/02/2013] (...) -- C:\Documents and Settings\All Users\Application Data\1360555640.bdinstall.bin [45870] [MD5.F0D76373C888423F3DB9288AB6AF0842] [SPRF][10/02/2013] (...) -- C:\Documents and Settings\All Users\Application Data\1360555884.bdinstall.bin [29308] [MD5.861BAF04490D68611E26A33D1F3BAA06] [SPRF][10/06/2013] (...) -- C:\Documents and Settings\unknow\Local Settings\Application Data\d3d9caps.dat [664] [MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][24/03/2010] (...) -- C:\Documents and Settings\unknow\Local Settings\Application Data\prvlcl.dat [0] [MD5.B58E6381AEA24739ACEC49DE36A72F75] [SPRF][10/06/2013] (.Unknown owner - Configuration du PC.) -- C:\Documents and Settings\unknow\desktop\PCConfig.exe [2252796] [MD5.FEBAE691BF3A06C94E40277320E0B7DD] [SPRF][09/06/2013] (.Unknown owner - Nettoyage des fichiers temporaires.) -- C:\Documents and Settings\unknow\desktop\SFTGC.exe [1061630] [MD5.8EE509FEE63CB89AB1D763F644ACFED2] [SPRF][11/06/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\unknow\desktop\ZHPDiag2.exe [5676095] [MD5.FB639C452779257622C8AFBE92FFEA19] [SPRF][14/01/2008] (.Cranium Consulting and Custom Software - iPhoneBrowser.) -- C:\Program Files\iPhoneBrowser.exe [217088] [MD5.3938450629C9BE3165B0E4BAE1588631] [SPRF][16/12/2007] (.Starlight Computer Wizardry - SCW_iPhonePNG.) -- C:\Program Files\SCW_iPhonePNG.dll [20480] [MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\bdcore.dll [32] [MD5.298068536300DA6DC163E394797A7C50] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\bdupd.dll [118784] [MD5.1CAB87DE6638846FBF51F32B5D95E482] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\ipsupd.dll [53248] [MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\libfn.dll [32] ~ Files: Scanned in 00mn 01s ---\\ Additionnal Scan (O88) Database Version : v2.12437 - (10/06/2013) Clés trouvées (Keys found) : 6 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B4089055-D468-45A4-A6BA-5A138DD715FC}] =>Toolbar.Agent [HKLM\Software\Classes\TypeLib\{C31103D1-E584-4880-B1D3-6B1DF6FBDE22}] =>Toolbar.Agent [HKLM\Software\Classes\MAudio.DELTACPL.1] =>toolbar.DeltaSearch ~ Additionnel Scan: 344593 Items scanned in 00mn 40s ---\\ Product Upgrade Codes (O90) O90 - PUC: "00002109020090400000000000F01FEC" . (.Compatibility Pack for the 2007 Office system.) -- C:\WINDOWS\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe O90 - PUC: "00002159FA0090400000000000F01FEC" . (.Microsoft Office PowerPoint Viewer 2007 (English).) -- C:\WINDOWS\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe,0 O90 - PUC: "00004159180090400000000000F01FEC" . (.Microsoft Office Outlook Connector.) -- C:\WINDOWS\Installer\{95140000-0081-0409-0000-0000000FF1CE}\OLCIcon.exe O90 - PUC: "1CE464C2C0B20944C9CA4D65D28D73A7" . (.Soap 3.0 Toolkit.) -- C:\WINDOWS\Installer\{2C464EC1-2B0C-4490-9CAC-D4562DD8377A}\ARPPRODUCTICON.exe O90 - PUC: "277C90D53BCEB244C96C4B43C187DF2C" . (.Apple Application Support.) -- C:\WINDOWS\Installer\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}\WinInstall.ico O90 - PUC: "2D64DF197BF415A4687355E6B11EBDC7" . (.iTunes.) -- C:\WINDOWS\Installer\{91FD46D2-4FB7-4A51-8637-556E1BE1DB7C}\Installer.ico O90 - PUC: "2FFAE75BEE6DC6C41957DEF971FB1CCB" . (.Windows Live Messenger.) -- C:\WINDOWS\Installer\{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}\MsblIco.Exe O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico O90 - PUC: "5286D09FF1F8A3E4E9249A8C9ADD0133" . (.Nero 7 Ultra Edition.) -- C:\WINDOWS\Installer\{F90D6825-8F1F-4E3A-9E42-A9C8A9DD1033}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA73301B744BA0000000010" . (.Adobe Reader XI (11.0.03).) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AB0000000001}\SC_Reader.ico O90 - PUC: "6D4B04801DD7781458326ECF0070FE7B" . (.Windows Live ID Sign-in Assistant.) -- C:\WINDOWS\Installer\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}\prodicon.ico O90 - PUC: "7CEBB04F4A2C00A4B942A750A5C22526" . (.Microsoft Office Live Add-in 1.5.) -- C:\WINDOWS\Installer\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}\ProductIcon O90 - PUC: "91993A79AEF97B84BAB2F49912D2E189" . (.HDD Regenerator.) -- C:\WINDOWS\Installer\{97A39919-9FEA-48B7-AB2B-4F99212D1E98}\ARPPRODUCTICON.exe O90 - PUC: "93FDBE4833B47D940ADBBEE6C2E4181C" . (.Windows Live Sync.) -- C:\WINDOWS\Installer\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}\FolderShare48x48.ico O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico O90 - PUC: "ABAA53CDA0AE1C1448266FA002D1FFB9" . (.Noise Reduction Plug-in 2.0i.) -- C:\WINDOWS\Installer\{DC35AABA-EA0A-41C1-8462-F60A201DFF9B}\sfnrpack.ico O90 - PUC: "ABFAB76BF9C4AF84496939E3B3520544" . (.QuickTime.) -- C:\WINDOWS\Installer\{B67BAFBA-4C9F-48FA-9496-933E3B255044}\Installer.ico O90 - PUC: "AE381835BDF2C054481A65EA6AFFD1AF" . (.TouchCopy 09.) -- C:\WINDOWS\Installer\{538183EA-2FDB-450C-84A1-56AEA6FF1DFA}\_6FEFF9B68218417F98F549.exe O90 - PUC: "B0F57C6D1CB39CF48B5CF3E7E80D95AC" . (.Windows Live Photo Gallery.) -- C:\WINDOWS\Installer\{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}\WLXPhotoGalleryIcon.exe O90 - PUC: "B2F5519759897D9468219D52080EEDB5" . (.Bonjour.) -- C:\WINDOWS\Installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}\Bonjour.ico O90 - PUC: "B961C8C8394D7C249A57C7E1E0C48574" . (.PocketCloud Windows Companion.) -- C:\WINDOWS\Installer\{8C8C169B-D493-42C7-A975-7C1E0E4C5847}\ARPPRODUCTICON.exe O90 - PUC: "BE9D894AB729B954586DDDE68F2C5C46" . (.erLT.) -- C:\WINDOWS\Installer\{A498D9EB-927B-459B-85D6-DD6EF8C2C564}\ARPPRODUCTICON.exe O90 - PUC: "CDE8B189396E22F469490CFFE8651F43" . (.TightVNC.) -- C:\WINDOWS\Installer\{981B8EDC-E693-4F22-9694-C0FF8E56F134}\tvnserver.ico O90 - PUC: "DDB6C50237B7ED245850A990F3532A83" . (.Windows Live Upload Tool.) -- C:\WINDOWS\Installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}\RichUpload.ico O90 - PUC: "E0EDA41E3F5764A4785E6296D26D62CE" . (.Apple Mobile Device Support.) -- C:\WINDOWS\Installer\{E14ADE0E-75F3-4A46-87E5-26692DD626EC}\Installer.ico O90 - PUC: "E303E9310501F794891BA98EB7514C36" . (.Windows Live Family Safety.) -- C:\WINDOWS\Installer\{139E303E-1050-497F-98B1-9AE87B15C463}\fssicon.ico O90 - PUC: "ECEC214627185EB439B5C6CECA2DAC78" . (.Windows Live Mail.) -- C:\WINDOWS\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe O90 - PUC: "ED2388710ED978C4F92839519A0B9358" . (.Windows Live Writer.) -- C:\WINDOWS\Installer\{178832DE-9DE0-4C87-9F82-9315A9B03985}\ApplicationIcon.ico O90 - PUC: "F81B066921CEFD110B6000313D6D9992" . (.Sound Forge Pro 10.0.) -- C:\WINDOWS\Installer\{9660B18F-EC12-11DF-B006-0013D3D69929}\forge.ico O90 - PUC: "F88531E81EF60B04582B695F42DC56F3" . (.Sony CD Architect 5.2.) -- C:\WINDOWS\Installer\{8E13588F-6FE1-40B0-85B2-96F524CD653F}\icon_cda52.ico ~ Update Products: 98 Scanned in 00mn 00s ---\\ MyComputer Name Space (O92) O92 - MNS: Web Folders - {BDEADF00-C265-11D0-BCED-00A0C90AB50F} ~ MNS: 1 Scanned in 00mn 00s ---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 21/05/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 13/05/2013 4937264 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2013\avgidsagent.exe SR - | Auto 18/04/2013 283136 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2013\avgwdsvc.exe SS - | Auto 21/10/2011 196176 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\BBSvc.exe SR - | Auto 13/10/2011 249648 | (BBUpdate) . (.Microsoft Corporation.) - C:\Program Files\Microsoft\BingBar\SeaPort.exe SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Demand 14/04/2008 224768 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe SS - | Auto 19/05/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 19/05/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SR - | Demand 31/05/2013 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 04/04/2013 181664 | (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe SS - | Disabled 11/06/2009 1263872 | (Matrox Centering Service) . (.Matrox Graphics Inc..) - C:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe SR - | Auto 11/06/2009 344832 | (Matrox.Pdesk.ServicesHost) . (.Matrox Graphics Inc.) - C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe SR - | Auto 04/04/2007 87560 | (MGABGEXE) . (.Matrox Graphics Inc..) - C:\WINDOWS\system32\mgabg.exe SS - | Auto 26/05/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 08/04/2008 800040 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe SS - | Disabled 08/12/2009 3616768 | (NIHardwareService) . (.Native Instruments GmbH.) - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe SS - | Disabled 22/01/2008 275752 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe SR - | Auto 15/02/2010 81920 | (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc..) - C:\WINDOWS\system32\IoctlSvc.exe SR - | Auto 131072 | (SATARaid5 Config Service) . (...) - C:\Program Files\Silicon Image\3114-W-I32-R SATARAID5\SATARaid5ConfigService.exe SR - | Auto 20/11/2012 1226808 | (tvnserver) . (.GlavSoft LLC..) - C:\Program Files\TightVNC\tvnserver.exe SS - | Auto 191488 | (WysePocketCloud) . (...) - C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe SR - | Auto 05/11/2012 1436160 | (WyseRemoteAccess) . (.Wyse Technology..) - C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe ~ Services: Scanned in 00mn 02s End of the scan (1804 lines in 08mn 48s)(0)