Rapport de ZHPDiag v2013.6.7.12 par Nicolas Coolman, Update du 07/06/2013
Run by unknow at 09/06/2013 13:35:57
WebSite: http://nicolascoolman.webs.com
State : Your version is update.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Not Found


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 21.0
GCIE: Google Chrome v27.0.1453.110 (Defaut)

---\\ Windows Product Information
~ Langage: Anglais
Windows XP Home Edition Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ System Protection
AVG 2013 v13.0.3199
Malwarebytes Anti-Malware version 1.75.0.1300

---\\ System Optimizer
CCleaner v4.02 =>Piriform Ltd

---\\ Peer To Peer (P2P)
�Torrent v3.3.0.29544 =>P2P.�Torrent

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader X
Java 7 Update 21

---\\ System Information
~ Processor: x86 Family 15 Model 2 Stepping 7, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046.8 MB (47% free)
System Restore: Activ� (Enable)
System drive C: has 31 GB (39%) free of 80 GB

---\\ Logged in mode
~ Computer Name: STRANGER
~ User Name: unknow
~ All Users Names: unknow, SUPPORT_388945a0, HelpAssistant, Guest, ASPNET, Administrator,
~ Unselected Option: O45,O61
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\unknow\Application Data\
~ %Desktop% : C:\Documents and Settings\unknow\desktop\
~ %Favorites% : C:\Documents and Settings\unknow\Favorites\
~ %LocalAppData% : C:\Documents and Settings\unknow\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\unknow\Start Menu\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 31 Go of 80 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)
F:\ CD-ROM drive (Not Inserted)
G:\ Hard drive, Flash drive, Thumb drive (Free 50 Go of 80 Go)
H:\ Hard drive, Flash drive, Thumb drive (Free 203 Go of 851 Go)
I:\ Hard drive, Flash drive, Thumb drive (Free 19 Go of 39 Go)
J:\ Hard drive, Flash drive, Thumb drive (Free 586 Go of 1397 Go)
K:\ Hard drive, Flash drive, Thumb drive (Free 51 Go of 110 Go)
L:\ Hard drive, Flash drive, Thumb drive (Free 75 Go of 851 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 33 Scanned in 00mn 00s



---\\ Search Generic System Files
[MD5.12896823FB95BFB3DC9B46BCAEDC9923] - (.Microsoft Corporation - Windows Explorer.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\Explorer.exe [1033728]
[MD5.5C4AAC5A91422C95522ECC6C26FB93C8] - (.Microsoft Corporation - Internet Extensions for Win32.) (.16/04/2013 - 17:17:15.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.ED0EF0A136DEC83DF69F04118870003E] - (.Microsoft Corporation - Windows NT Logon Application.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [507904]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 08:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.D45926117EB9FA946A6AF572FBE1CAA3] - (.Microsoft Corporation - FIPS Crypto Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44544]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.4A0B06AA8943C1E332520F7440C0AA30] - (.Microsoft Corporation - i8042 Port Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [52480]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 08:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.5575FAF8F97CE5E713D108C2A58D7C7C] - (.Microsoft Corporation - Parallel Port Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80128]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.14/04/2008 - 03:02:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.F828DD7E1419B6653894A8F97A0094C5] - (.Microsoft Corporation - Redbook Audio Filter Driver.) (.13/04/2008 - 19:10:28.) -- C:\WINDOWS\system32\Drivers\redbook.sys [57600]
[MD5.4C8FCB5CC53AAB716D810740FE59D025] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.14/04/2008 - 07:00:00.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [52352]
~ Generic Processes: Scanned in 00mn 00s



---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 2/13
~ Mes musiques (My Musics) : 1/1278
~ Mes Videos (My Videos) : 1/15
~ Mes Favoris (My Favorites) : 1/1461
~ Mes Documents (My Documents) : 1/105597
~ Mon Bureau (My Desktop) : 0/192
~ Menu demarrer (Programs) : 1/71
~ Hidden Files: Scanned in 00mn 25s



---\\ Running Processes
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.616]
[MD5.4AFC14AFA58878FAA1D249E7E90EA54B] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files\AVG\AVG2013\avgidsagent.exe [5814904] [PID.656]
[MD5.6B72E1E329C4E98C6B6FDD2D265E3BA3] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe [196664] [PID.456]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.1420]
[MD5.5739F2821D49975CEDE6BF0153D0CF01] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [181664] [PID.376]
[MD5.9677195EA48CED7ED3E7A25B289BFD23] - (.Matrox Graphics Inc - Service used to handle various PowerDesk ta.) -- C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe [344832] [PID.668]
[MD5.966FE72529898A4493BE6A1C69DF28E1] - (.Matrox Graphics Inc. - MGABG.) -- C:\WINDOWS\system32\mgabg.exe [87560] [PID.820]
[MD5.3BAE2BFCB6D69E19C8373F635DD544DC] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [800040] [PID.1532]
[MD5.6ECB52E9EF77186D8D9531915639FEB2] - (.Matrox Graphics Inc. - PowerDesk-SE Application.) -- C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe [4223232] [PID.1680]
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\system32\IoctlSvc.exe [81920] [PID.1804]
[MD5.574B0C1A95D1EA0FBA1CA700CE83E7B9] - (.Logitech Inc. - LVCom Server.) -- C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.exe [127022] [PID.1852]
[MD5.1CA7C04957F8419E426E334B5FF2D0FA] - (.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files\AVG\AVG2013\avgnsx.exe [1116792] [PID.1868]
[MD5.F6321D6505EBDD699F7DBBEB996127C8] - (...) -- C:\Program Files\Silicon Image\3114-W-I32-R SATARAID5\SATARaid5ConfigService.exe [131072] [PID.1884]
[MD5.A4932026499FFE9A493E3E9BBFDAA682] - (.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files\AVG\AVG2013\avgemcx.exe [796792] [PID.1924]
[MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.1928]
[MD5.32933B07FC16D9F778BEE12545FA1B1A] - (.Microsoft Corporation - TCP/IP Services Application.) -- C:\WINDOWS\system32\tcpsvcs.exe [19456] [PID.2172]
[MD5.0E34B7BB1FCF22BCC1E394D16F9E992B] - (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040] [PID.2204]
[MD5.9DADF1A809ECEC86F04BDE35190D59FE] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files\AVG\AVG2013\avgui.exe [3147384] [PID.2216]
[MD5.63E35605AF4E9545799E238984E74638] - (.Unknown owner - M-Audio Delta Tray Application.) -- C:\WINDOWS\System32\DeltaIITray.exe [236040] [PID.2304]
[MD5.3E930C641079443D4DE036167A69CAA2] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232] [PID.2360]
[MD5.60C377BE6B3CC83F6A8584934B181D2E] - (.Microsoft Corporation - SNMP Service.) -- C:\WINDOWS\System32\snmp.exe [33280] [PID.2448]
[MD5.16E1569E02827D1B0732432FAEADEE53] - (.GlavSoft LLC. - TightVNC Server.) -- C:\Program Files\TightVNC\tvnserver.exe [1226808] [PID.2812]
[MD5.161F8FB21C088124F4D591AEBBDF8C57] - (.Wyse Technology. - Wyse Remote Access Server for Windows.) -- C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe [1436160] [PID.4080]
[MD5.FE56897B27ED266F9C4E7D90A0B5DA47] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [553288] [PID.2464]
[MD5.2F3390C8E3620B3991D7D82014E26AA7] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [825808] [PID.3396]
[MD5.BA58BE8F544B058C160E7CCDB7A6EA72] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [7472128] [PID.4672]
[MD5.544D486301588C8199187C9AB5778B4B] - (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Service.) -- C:\Program Files\AVG\AVG2013\avgrsx.exe [726648] [PID.2180]
[MD5.99997FA9056ACB38AA388BDA134CEF6E] - (.AVG Technologies CZ, s.r.o. - AVG Scanning Core Module - Server Part.) -- C:\Program Files\AVG\AVG2013\avgcsrvx.exe [440440] [PID.2776]
[MD5.8C515081584A38AA007909CD02020B3D] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.3088]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
C:\Documents and Settings\unknow\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
G0 - GCSP: Preference [User Data\Default] http://www.google.ca
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Docs v.0.5 (Activ�)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activ�)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activ�)
G2 - GCE: Preference [User Data\Default] [cijeeimilokkhlfjombmalgpabbonmah] Solid Savings v.1.23.13 (Activ�) =>Adware.SolidSavings
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Search v.0.0.0.20 (Activ�)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activ�)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activ�)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activ�)
~ Google Browser: 14 Scanned in 00mn 10s



---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\prefs.js
M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\0daymusicorg.xml
M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\aim-search.xml
M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\aol-search.xml
M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\bmrk-file-host-search.xml
M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\live-search.xml
M3 - MFPP: Plugins - [unknow] -- C:\Documents and Settings\unknow\Application Data\Mozilla\Firefox\Profiles\869nwu04.default\searchplugins\multifilesearch.xml
M3 - MFPP: Plugins - [unknow] -- C:\Program Files\Mozilla FireFox\searchplugins\answers.xml
M3 - MFPP: Plugins - [unknow] -- C:\Program Files\Mozilla FireFox\searchplugins\creativecommons.xml
M3 - MFPP: Plugins - [unknow] -- C:\Program Files\Mozilla FireFox\searchplugins\McSiteAdvisor.xml
M2 - MFEP: prefs.js [unknow - 869nwu04.default\9518042e-7ad6-4dac-b377-056e28d00c8f@f1cc0a13-4df1-4d66-938f-088db8838882.com] [] Solid Savings v (..) =>Adware.SolidSavings
M2 - MFEP: prefs.js [unknow - 869nwu04.default\en-CA@dictionaries.addons.mozilla.org] [] Canadian English Dictionary v2.0.6 (..)
M2 - MFEP: prefs.js [unknow - 869nwu04.default\fr-classique-reforme1990@dictionaries.addons.mozilla.org] [] Dictionnaire français «Classique & Réforme 1990» v4.3 (..)
M2 - MFEP: prefs.js [unknow - 869nwu04.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.7.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.Nullsoft, Inc. - Winamp Application Detector.) -- C:\Program Files\Mozilla Firefox\Plugins\npwachk.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.21.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.21.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.7.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.1] - (.Unknown owner - Provides additional functionality on Facebook. See R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ IE Browser: 13 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
~ Proxy management: Scanned in 00mn 00s



---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 24



---\\ Browser Helper Objects (O2)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (...) -- "C:\Program Files\Microsoft\BingBar\BingExt.dll" (.not file.)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
~ BHO: 5 Scanned in 00mn 00s



---\\ Internet Explorer toolbars (O3)
O3 - Toolbar: Bing Bar - [HKLM]{8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation. - Bing Client Extensions.) -- C:\Program Files\Microsoft\BingBar\BingExt.dll
~ Toolbar: Scanned in 00mn 00s



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [tvncontrol] . (.GlavSoft LLC. - TightVNC Server.) -- C:\Program Files\TightVNC\tvnserver.exe
O4 - HKLM\..\Run: [Matrox PowerDesk SE] . (.Matrox Graphics Inc. - PowerDesk-SE Application.) -- C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe
O4 - HKLM\..\Run: [LVCOMS] . (.Logitech Inc. - LVCom Server.) -- C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.exe
O4 - HKLM\..\Run: [Logitech Utility] . (.Logitech Inc. - Logitech Launcher Application.) -- C:\WINDOWS\Logi_MwX.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] . (.HP - No comment.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
O4 - HKLM\..\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files\AVG\AVG2013\avgui.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [M-Audio Taskbar Icon] . (.Unknown owner - M-Audio Delta Tray Application.) -- C:\WINDOWS\System32\DeltaIITray.exe
O4 - HKLM\..\Run: [DeltaIITaskbarApp] . (.Unknown owner - M-Audio Delta Tray Application.) -- C:\WINDOWS\system32\DeltaIITray.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-823518204-507921405-1417001333-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-823518204-507921405-1417001333-1004\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Application: Scanned in 00mn 00s



---\\ Other User Links (O4)
O4 - GS\Desktop: CCleaner.lnk . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>Piriform Ltd
O4 - GS\Desktop: Driver Fusion.lnk . (.Treexy - Treexy Driver Fusion.) -- C:\Program Files\Driver Fusion\DriverFusion.exe
O4 - GS\Desktop: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop: iTunes.lnk . (.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe
O4 - GS\Desktop: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - GS\Desktop: MBRCheck.lnk . (...) -- C:\Program Files\ZHPDiag\mbrcheck.exe
O4 - GS\Desktop: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Desktop: SATARaid5Manager.lnk . (...) -- C:\WINDOWS\Installer\{461E1742-51DC-459B-9D30-A432573AC6AA}\_E6CD1DC584C7806947D7CF.exe
O4 - GS\Desktop: Smart Defrag 2.lnk . (.IObit - Smart Defrag v2.) -- C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
O4 - GS\Desktop: Sound Forge Pro 10.0.lnk . (.Sony Creative Software Inc. - Sound Forge Pro.) -- C:\Program Files\Sony\Sound Forge Pro 10.0\Forge100.exe
O4 - GS\Desktop: Traktor 2.lnk . (.Native Instruments Software Synthesis GmbH - Traktor 2.) -- C:\Program Files\Native Instruments\Traktor 2\Traktor.exe
O4 - GS\Desktop: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPhep.exe
O4 - GS\Desktop: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe
O4 - GS\Desktop: Glary Utilities.lnk . (.Glarysoft Ltd - Glary Utilities.) -- C:\Program Files\Glary Utilities\Integrator.exe
O4 - Global Startup: C:\Documents And Settings\unknow\Desktop\Glarysoft Giveaway.url . (.Glarysoft Ltd - Glary Utilities.) -- C:\Documents And Settings\unknow\Desktop\Glarysoft Giveaway.url
~ Global Startup: Scanned in 00mn 00s



---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} -- Orphean Key
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Orphean Key
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll
~ Winsock: 6 Scanned in 00mn 00s



---\\ 'Reset Web Settings' hijack (O14)
O14 - IERESET.INF: SAFESITE_VALUE=SAFESITE_VALUE="ie.search.msn.com"
~ IE Param�tres WEB: Scanned in 00mn 00s



---\\ ActiveX Objects (Downloaded Program Files) (O16)
O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} ((no name)) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} ((no name)) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} ((no name)) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{13962CD6-C950-4592-9ACB-A175EACDDD13}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113
O17 - HKLM\System\CS1\Services\Tcpip\..\{13962CD6-C950-4592-9ACB-A175EACDDD13}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113
O17 - HKLM\System\CS2\Services\Tcpip\..\{13962CD6-C950-4592-9ACB-A175EACDDD13}: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113
~ Domain: Scanned in 00mn 00s



---\\ Extra protocols (O18)
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - UPNP Tray Monitor and Folder.) -- C:\WINDOWS\system32\upnpui.dll
~ SSODL: 6 Scanned in 00mn 00s



---\\ SharedTaskScheduler (O22)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Browseui preloader - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll
~ STS/SSO: Scanned in 00mn 00s



---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bonjour Service (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Matrox.Pdesk.ServicesHost (Matrox.Pdesk.ServicesHost) . (.Matrox Graphics Inc - Service used to handle various PowerDesk ta.) - C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe
O23 - Service: MGABGEXE (MGABGEXE) . (.Matrox Graphics Inc. - MGABG.) - C:\WINDOWS\system32\mgabg.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation - No comment.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService (NBService) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: SATARaid5 Configuration Service (SATARaid5 Config Service) . (...) - C:\Program Files\Silicon Image\3114-W-I32-R SATARAID5\SATARaid5ConfigService.exe
O23 - Service: TightVNC Server (tvnserver) . (.GlavSoft LLC. - TightVNC Server.) - C:\Program Files\TightVNC\tvnserver.exe
O23 - Service: Wyse PocketCloud (WysePocketCloud) . (.Unknown owner - PocketCloudService.) - C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe
O23 - Service: Wyse Remote Access (WyseRemoteAccess) . (.Wyse Technology. - Wyse Remote Access Server for Windows.) - C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe
~ Services: 15 Scanned in 00mn 08s



---\\ Windows Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Task Planned Automatically(039)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [472]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [830]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Game_Booster_Startup.job [250]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job [314]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [882]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [886]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job [384]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SmartDefragUpdate.job [280]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{2D888123-9B14-4D49-9DF2-BA51A5FBB9BA}.job [424]
~ Scheduled Task: 10 Scanned in 00mn 00s



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Internet Explorer Version Update - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Microsoft Windows Media Player Setup Utility.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - Windows Theme API.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shell Extension.) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf
O40 - ASIC: Address Book 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Outlook Express Setup Library.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_7_700_202.ocx
O40 - ASIC: Installed Component - S-1-5-21-823518204-507921405-1417001333-1004 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexad�cimal CLSID
~ Active Setup: 20 Scanned in 00mn 00s



---\\ Drivers launched at startup (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys
O41 - Driver: (AVGIDSShim) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Loader Dri.) - C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys
O41 - Driver: (Avgldx86) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\WINDOWS\system32\DRIVERS\avgldx86.sys
O41 - Driver: (Avgtdix) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\WINDOWS\system32\DRIVERS\avgtdix.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Processor Device Driver.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - HID Mouse Filter Driver.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Serial Device Driver.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (Tcpip6) . (.Microsoft Corporation - IPv6 driver.) - C:\WINDOWS\system32\DRIVERS\tcpip6.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
~ Drivers: 78 Scanned in 00mn 00s



---\\ Software installed (O42)
O42 - Logiciel: 3114-W-I32-R SATARAID5 - (.Silicon Image.) [HKLM] -- {461E1742-51DC-459B-9D30-A432573AC6AA}
O42 - Logiciel: AIM 7 - (...) [HKLM] -- AIM_7
O42 - Logiciel: AKAI professional DCVocoder 1.0 - (...) [HKLM] -- AKAI professional DCVocoder 1.0
O42 - Logiciel: AKAI professional QuadComp 1.0 - (...) [HKLM] -- AKAI professional QuadComp 1.0
O42 - Logiciel: AKAI professional Rotator 1.0 - (...) [HKLM] -- AKAI professional Rotator 1.0
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- AVG
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- {241DBC8D-14E3-4240-8EE5-3AC35086B638}
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM] -- {2AE79B77-E3FA-4F9C-93D7-4FC643516D6A}
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {77DCDCE3-2DED-62F3-8154-05E745472D07}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.7) - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-AA1000000001}
O42 - Logiciel: Antidote RX v8 - (.Druide informatique inc..) [HKLM] -- {A474EA56-5DBD-4181-8230-806A4762EA7F}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {E14ADE0E-75F3-4A46-87E5-26692DD626EC}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {B4089055-D468-45A4-A6BA-5A138DD715FC}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: C-Media WDM Audio Driver - (...) [HKLM] -- C-Media Audio Driver
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>Piriform Ltd
O42 - Logiciel: Compatibility Pack for the 2007 Office system - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-0409-0000-0000000FF1CE}
O42 - Logiciel: Delta - (.M-Audio.) [HKLM] -- {A4810699-E859-43A6-8F40-1743873E72AB}
O42 - Logiciel: Driver Fusion - (.Treexy.) [HKLM] -- {100C8F3B-82D6-4B14-BB7A-5E8C3FF810C8}_is1
O42 - Logiciel: Glary Utilities 2.56.0.1822 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HD Tune Pro 4.01 - (.EFD Software.) [HKLM] -- HD Tune Pro_is1
O42 - Logiciel: HDD Regenerator - (.Abstradrome.) [HKLM] -- {97A39919-9FEA-48B7-AB2B-4F99212D1E98}
O42 - Logiciel: HP Precisionscan Pro 3.1 - (.Hewlett-Packard.) [HKLM] -- {6B36DEBF-27D0-4B1E-858D-D397091C6C7D}
O42 - Logiciel: Hotfix for Windows XP (KB2779562) - (.Microsoft Corporation.) [HKLM] -- KB2779562
O42 - Logiciel: Hotfix for Windows XP (KB952287) - (.Microsoft Corporation.) [HKLM] -- KB952287
O42 - Logiciel: Hotfix for Windows XP (KB961118) - (.Microsoft Corporation.) [HKLM] -- KB961118
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF}
O42 - Logiciel: Java(TM) 6 Update 35 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216033FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
O42 - Logiciel: Lexicon PSP 42 1.5.3 32bit - (.PSPaudioware.com.) [HKLM] -- Lexicon PSP 42 1.5.3 32bit
O42 - Logiciel: Live 8.0.3 - (...) [HKLM] -- Live 8.0.3
O42 - Logiciel: Logitech MouseWare 9.79.1 - (...) [HKLM] -- {5809E7CF-4DCF-11D4-9875-00105ACE7734}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM] -- {1E76EB6E-E390-11DF-95DB-005056C00008}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML4SP2 - (.Logiciel Dr Tax Software Inc..) [HKLM] -- {451BB54C-8B23-4455-8BDC-14FC7D43E056}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: ManyCam 2.6.43 (remove only) - (.ManyCam LLC.) [HKLM] -- ManyCam
O42 - Logiciel: Matrox Graphics Software (remove only) - (...) [HKLM] -- Matrox Graphics Uninstaller
O42 - Logiciel: Matrox PowerDesk-SE - (.Matrox Graphics Inc..) [HKLM] -- {BB3E446F-A88E-4D91-9905-9138965561E3}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM] -- {D24DB8B9-BB6C-4334-9619-BA1C650E13D3}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 21.0 (x86 en-US) - (.Mozilla.) [HKLM] -- Mozilla Firefox 21.0 (x86 en-US)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Native Instruments Controller Editor - (.Native Instruments.) [HKLM] -- Native Instruments Controller Editor
O42 - Logiciel: Native Instruments Controller Editor - (.Native Instruments.) [HKLM] -- {0886900B-B2F3-452C-B580-60F1253F7F80}
O42 - Logiciel: Native Instruments Service Center - (.Native Instruments.) [HKLM] -- Native Instruments Service Center
O42 - Logiciel: Native Instruments Service Center - (.Native Instruments.) [HKLM] -- {0B8565BA-BAD5-4732-B122-5FD78EFC50A9}
O42 - Logiciel: Native Instruments Traktor 2 - (.Native Instruments.) [HKLM] -- Native Instruments Traktor 2
O42 - Logiciel: Native Instruments Traktor 2 - (.Native Instruments.) [HKLM] -- {A8EC0CC0-AD8D-4244-B080-424EDF7A7634}
O42 - Logiciel: Nero 7 Ultra Edition - (.Nero AG.) [HKLM] -- {F90D6825-8F1F-4E3A-9E42-A9C8A9DD1033}
O42 - Logiciel: Noise Reduction Plug-in 2.0i - (.Sony.) [HKLM] -- {DC35AABA-EA0A-41C1-8462-F60A201DFF9B}
O42 - Logiciel: PSP 84 1.5.2 - (.PSPaudioware.com.) [HKLM] -- PSP 84 1.5.2
O42 - Logiciel: PSP EasyVerb 1.6.0 32bit - (.PSPaudioware.com.) [HKLM] -- PSP EasyVerb 1.6.0 32bit
O42 - Logiciel: PSP VintageWarmer2 2.3.1 32bit - (.PSPaudioware.com.) [HKLM] -- PSP VintageWarmer2 2.3.1 32bit
O42 - Logiciel: PSP oldTimer 1.1.6 32bit - (.PSPaudioware.com.) [HKLM] -- PSP oldTimer 1.1.6 32bit
O42 - Logiciel: PSP sQuad 1.5.1 32bit - (.PSPaudioware.com.) [HKLM] -- PSP sQuad 1.5.1 32bit
O42 - Logiciel: PocketCloud Windows Companion - (.Wyse Technology.) [HKLM] -- {8C8C169B-D493-42C7-A975-7C1E0E4C5847}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: REALTEK GbE & FE Ethernet PCI NIC Driver - (.Realtek.) [HKLM] -- {ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}
O42 - Logiciel: SeaTools for Windows - (.Seagate Technology.) [HKLM] -- {98613C99-1399-416C-A07C-1EE1C585D872}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2510531) - (.Microsoft Corporation.) [HKLM] -- KB2510531-IE8
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2817183) - (.Microsoft Corporation.) [HKLM] -- KB2817183-IE8
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2829530) - (.Microsoft Corporation.) [HKLM] -- KB2829530-IE8
O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2847204) - (.Microsoft Corporation.) [HKLM] -- KB2847204-IE8
O42 - Logiciel: Security Update for Windows XP (KB2115168) - (.Microsoft Corporation.) [HKLM] -- KB2115168
O42 - Logiciel: Security Update for Windows XP (KB2229593) - (.Microsoft Corporation.) [HKLM] -- KB2229593
O42 - Logiciel: Security Update for Windows XP (KB2296011) - (.Microsoft Corporation.) [HKLM] -- KB2296011
O42 - Logiciel: Security Update for Windows XP (KB2347290) - (.Microsoft Corporation.) [HKLM] -- KB2347290
O42 - Logiciel: Security Update for Windows XP (KB2360937) - (.Microsoft Corporation.) [HKLM] -- KB2360937
O42 - Logiciel: Security Update for Windows XP (KB2387149) - (.Microsoft Corporation.) [HKLM] -- KB2387149
O42 - Logiciel: Security Update for Windows XP (KB2393802) - (.Microsoft Corporation.) [HKLM] -- KB2393802
O42 - Logiciel: Security Update for Windows XP (KB2419632) - (.Microsoft Corporation.) [HKLM] -- KB2419632
O42 - Logiciel: Security Update for Windows XP (KB2423089) - (.Microsoft Corporation.) [HKLM] -- KB2423089
O42 - Logiciel: Security Update for Windows XP (KB2440591) - (.Microsoft Corporation.) [HKLM] -- KB2440591
O42 - Logiciel: Security Update for Windows XP (KB2443105) - (.Microsoft Corporation.) [HKLM] -- KB2443105
O42 - Logiciel: Security Update for Windows XP (KB2478960) - (.Microsoft Corporation.) [HKLM] -- KB2478960
O42 - Logiciel: Security Update for Windows XP (KB2478971) - (.Microsoft Corporation.) [HKLM] -- KB2478971
O42 - Logiciel: Security Update for Windows XP (KB2479943) - (.Microsoft Corporation.) [HKLM] -- KB2479943
O42 - Logiciel: Security Update for Windows XP (KB2481109) - (.Microsoft Corporation.) [HKLM] -- KB2481109
O42 - Logiciel: Security Update for Windows XP (KB2483185) - (.Microsoft Corporation.) [HKLM] -- KB2483185
O42 - Logiciel: Security Update for Windows XP (KB2485663) - (.Microsoft Corporation.) [HKLM] -- KB2485663
O42 - Logiciel: Security Update for Windows XP (KB2506212) - (.Microsoft Corporation.) [HKLM] -- KB2506212
O42 - Logiciel: Security Update for Windows XP (KB2507938) - (.Microsoft Corporation.) [HKLM] -- KB2507938
O42 - Logiciel: Security Update for Windows XP (KB2508429) - (.Microsoft Corporation.) [HKLM] -- KB2508429
O42 - Logiciel: Security Update for Windows XP (KB2509553) - (.Microsoft Corporation.) [HKLM] -- KB2509553
O42 - Logiciel: Security Update for Windows XP (KB2535512) - (.Microsoft Corporation.) [HKLM] -- KB2535512
O42 - Logiciel: Security Update for Windows XP (KB2536276-v2) - (.Microsoft Corporation.) [HKLM] -- KB2536276-v2
O42 - Logiciel: Security Update for Windows XP (KB2544893-v2) - (.Microsoft Corporation.) [HKLM] -- KB2544893-v2
O42 - Logiciel: Security Update for Windows XP (KB2566454) - (.Microsoft Corporation.) [HKLM] -- KB2566454
O42 - Logiciel: Security Update for Windows XP (KB2570947) - (.Microsoft Corporation.) [HKLM] -- KB2570947
O42 - Logiciel: Security Update for Windows XP (KB2584146) - (.Microsoft Corporation.) [HKLM] -- KB2584146
O42 - Logiciel: Security Update for Windows XP (KB2585542) - (.Microsoft Corporation.) [HKLM] -- KB2585542
O42 - Logiciel: Security Update for Windows XP (KB2592799) - (.Microsoft Corporation.) [HKLM] -- KB2592799
O42 - Logiciel: Security Update for Windows XP (KB2598479) - (.Microsoft Corporation.) [HKLM] -- KB2598479
O42 - Logiciel: Security Update for Windows XP (KB2603381) - (.Microsoft Corporation.) [HKLM] -- KB2603381
O42 - Logiciel: Security Update for Windows XP (KB2619339) - (.Microsoft Corporation.) [HKLM] -- KB2619339
O42 - Logiciel: Security Update for Windows XP (KB2620712) - (.Microsoft Corporation.) [HKLM] -- KB2620712
O42 - Logiciel: Security Update for Windows XP (KB2624667) - (.Microsoft Corporation.) [HKLM] -- KB2624667
O42 - Logiciel: Security Update for Windows XP (KB2631813) - (.Microsoft Corporation.) [HKLM] -- KB2631813
O42 - Logiciel: Security Update for Windows XP (KB2653956) - (.Microsoft Corporation.) [HKLM] -- KB2653956
O42 - Logiciel: Security Update for Windows XP (KB2655992) - (.Microsoft Corporation.) [HKLM] -- KB2655992
O42 - Logiciel: Security Update for Windows XP (KB2659262) - (.Microsoft Corporation.) [HKLM] -- KB2659262
O42 - Logiciel: Security Update for Windows XP (KB2676562) - (.Microsoft Corporation.) [HKLM] -- KB2676562
O42 - Logiciel: Security Update for Windows XP (KB2686509) - (.Microsoft Corporation.) [HKLM] -- KB2686509
O42 - Logiciel: Security Update for Windows XP (KB2691442) - (.Microsoft Corporation.) [HKLM] -- KB2691442
O42 - Logiciel: Security Update for Windows XP (KB2698365) - (.Microsoft Corporation.) [HKLM] -- KB2698365
O42 - Logiciel: Security Update for Windows XP (KB2705219-v2) - (.Microsoft Corporation.) [HKLM] -- KB2705219-v2
O42 - Logiciel: Security Update for Windows XP (KB2712808) - (.Microsoft Corporation.) [HKLM] -- KB2712808
O42 - Logiciel: Security Update for Windows XP (KB2719985) - (.Microsoft Corporation.) [HKLM] -- KB2719985
O42 - Logiciel: Security Update for Windows XP (KB2723135-v2) - (.Microsoft Corporation.) [HKLM] -- KB2723135-v2
O42 - Logiciel: Security Update for Windows XP (KB2727528) - (.Microsoft Corporation.) [HKLM] -- KB2727528
O42 - Logiciel: Security Update for Windows XP (KB2753842-v2) - (.Microsoft Corporation.) [HKLM] -- KB2753842-v2
O42 - Logiciel: Security Update for Windows XP (KB2757638) - (.Microsoft Corporation.) [HKLM] -- KB2757638
O42 - Logiciel: Security Update for Windows XP (KB2758857) - (.Microsoft Corporation.) [HKLM] -- KB2758857
O42 - Logiciel: Security Update for Windows XP (KB2770660) - (.Microsoft Corporation.) [HKLM] -- KB2770660
O42 - Logiciel: Security Update for Windows XP (KB2780091) - (.Microsoft Corporation.) [HKLM] -- KB2780091
O42 - Logiciel: Security Update for Windows XP (KB2802968) - (.Microsoft Corporation.) [HKLM] -- KB2802968
O42 - Logiciel: Security Update for Windows XP (KB2807986) - (.Microsoft Corporation.) [HKLM] -- KB2807986
O42 - Logiciel: Security Update for Windows XP (KB2808735) - (.Microsoft Corporation.) [HKLM] -- KB2808735
O42 - Logiciel: Security Update for Windows XP (KB2813170) - (.Microsoft Corporation.) [HKLM] -- KB2813170
O42 - Logiciel: Security Update for Windows XP (KB2813345) - (.Microsoft Corporation.) [HKLM] -- KB2813345
O42 - Logiciel: Security Update for Windows XP (KB2820197) - (.Microsoft Corporation.) [HKLM] -- KB2820197
O42 - Logiciel: Security Update for Windows XP (KB2820917) - (.Microsoft Corporation.) [HKLM] -- KB2820917
O42 - Logiciel: Security Update for Windows XP (KB2829361) - (.Microsoft Corporation.) [HKLM] -- KB2829361
O42 - Logiciel: Security Update for Windows XP (KB923561) - (.Microsoft Corporation.) [HKLM] -- KB923561
O42 - Logiciel: Security Update for Windows XP (KB923789) - (.Microsoft Corporation.) [HKLM] -- KB923789
O42 - Logiciel: Security Update for Windows XP (KB941569) - (.Microsoft Corporation.) [HKLM] -- KB941569
O42 - Logiciel: Security Update for Windows XP (KB950762) - (.Microsoft Corporation.) [HKLM] -- KB950762
O42 - Logiciel: Security Update for Windows XP (KB950974) - (.Microsoft Corporation.) [HKLM] -- KB950974
O42 - Logiciel: Security Update for Windows XP (KB951376-v2) - (.Microsoft Corporation.) [HKLM] -- KB951376-v2
O42 - Logiciel: Security Update for Windows XP (KB952004) - (.Microsoft Corporation.) [HKLM] -- KB952004
O42 - Logiciel: Security Update for Windows XP (KB952954) - (.Microsoft Corporation.) [HKLM] -- KB952954
O42 - Logiciel: Security Update for Windows XP (KB956572) - (.Microsoft Corporation.) [HKLM] -- KB956572
O42 - Logiciel: Security Update for Windows XP (KB956802) - (.Microsoft Corporation.) [HKLM] -- KB956802
O42 - Logiciel: Security Update for Windows XP (KB956844) - (.Microsoft Corporation.) [HKLM] -- KB956844
O42 - Logiciel: Security Update for Windows XP (KB959426) - (.Microsoft Corporation.) [HKLM] -- KB959426
O42 - Logiciel: Security Update for Windows XP (KB960803) - (.Microsoft Corporation.) [HKLM] -- KB960803
O42 - Logiciel: Security Update for Windows XP (KB960859) - (.Microsoft Corporation.) [HKLM] -- KB960859
O42 - Logiciel: Security Update for Windows XP (KB969059) - (.Microsoft Corporation.) [HKLM] -- KB969059
O42 - Logiciel: Security Update for Windows XP (KB970430) - (.Microsoft Corporation.) [HKLM] -- KB970430
O42 - Logiciel: Security Update for Windows XP (KB971657) - (.Microsoft Corporation.) [HKLM] -- KB971657
O42 - Logiciel: Security Update for Windows XP (KB972270) - (.Microsoft Corporation.) [HKLM] -- KB972270
O42 - Logiciel: Security Update for Windows XP (KB973507) - (.Microsoft Corporation.) [HKLM] -- KB973507
O42 - Logiciel: Security Update for Windows XP (KB973869) - (.Microsoft Corporation.) [HKLM] -- KB973869
O42 - Logiciel: Security Update for Windows XP (KB973904) - (.Microsoft Corporation.) [HKLM] -- KB973904
O42 - Logiciel: Security Update for Windows XP (KB974112) - (.Microsoft Corporation.) [HKLM] -- KB974112
O42 - Logiciel: Security Update for Windows XP (KB974318) - (.Microsoft Corporation.) [HKLM] -- KB974318
O42 - Logiciel: Security Update for Windows XP (KB974392) - (.Microsoft Corporation.) [HKLM] -- KB974392
O42 - Logiciel: Security Update for Windows XP (KB974571) - (.Microsoft Corporation.) [HKLM] -- KB974571
O42 - Logiciel: Security Update for Windows XP (KB975025) - (.Microsoft Corporation.) [HKLM] -- KB975025
O42 - Logiciel: Security Update for Windows XP (KB975467) - (.Microsoft Corporation.) [HKLM] -- KB975467
O42 - Logiciel: Security Update for Windows XP (KB975560) - (.Microsoft Corporation.) [HKLM] -- KB975560
O42 - Logiciel: Security Update for Windows XP (KB975713) - (.Microsoft Corporation.) [HKLM] -- KB975713
O42 - Logiciel: Security Update for Windows XP (KB977816) - (.Microsoft Corporation.) [HKLM] -- KB977816
O42 - Logiciel: Security Update for Windows XP (KB977914) - (.Microsoft Corporation.) [HKLM] -- KB977914
O42 - Logiciel: Security Update for Windows XP (KB978338) - (.Microsoft Corporation.) [HKLM] -- KB978338
O42 - Logiciel: Security Update for Windows XP (KB978542) - (.Microsoft Corporation.) [HKLM] -- KB978542
O42 - Logiciel: Security Update for Windows XP (KB978706) - (.Microsoft Corporation.) [HKLM] -- KB978706
O42 - Logiciel: Security Update for Windows XP (KB979309) - (.Microsoft Corporation.) [HKLM] -- KB979309
O42 - Logiciel: Security Update for Windows XP (KB979482) - (.Microsoft Corporation.) [HKLM] -- KB979482
O42 - Logiciel: Security Update for Windows XP (KB979687) - (.Microsoft Corporation.) [HKLM] -- KB979687
O42 - Logiciel: Security Update for Windows XP (KB981322) - (.Microsoft Corporation.) [HKLM] -- KB981322
O42 - Logiciel: Security Update for Windows XP (KB981997) - (.Microsoft Corporation.) [HKLM] -- KB981997
O42 - Logiciel: Security Update for Windows XP (KB982132) - (.Microsoft Corporation.) [HKLM] -- KB982132
O42 - Logiciel: Security Update for Windows XP (KB982665) - (.Microsoft Corporation.) [HKLM] -- KB982665
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Smart Defrag 2 - (.IObit.) [HKLM] -- Smart Defrag 2_is1
O42 - Logiciel: Soap 3.0 Toolkit - (.Your Company Name.) [HKLM] -- {2C464EC1-2B0C-4490-9CAC-D4562DD8377A}
O42 - Logiciel: Sony CD Architect 5.2 - (.Sony.) [HKLM] -- {8E13588F-6FE1-40B0-85B2-96F524CD653F}
O42 - Logiciel: SoulSeek 157 NS 13e - (...) [HKLM] -- Soulseek2 =>P2P.SoulSeek
O42 - Logiciel: SoulSeek Client 156c - (...) [HKLM] -- Soulseek =>P2P.SoulSeek
O42 - Logiciel: Sound Forge Pro 10.0 - (.Sony.) [HKLM] -- {9660B18F-EC12-11DF-B006-0013D3D69929}
O42 - Logiciel: Spark FXMachine 2.1 - (...) [HKLM] -- Spark FXMachine 2.1
O42 - Logiciel: TC Native Bundle v3.1 - (...) [HKLM] -- TC Native Bundle v3.1
O42 - Logiciel: TightVNC - (.GlavSoft LLC..) [HKLM] -- {981B8EDC-E693-4F22-9694-C0FF8E56F134}
O42 - Logiciel: TouchCopy 09 - (.Wide Angle Software.) [HKLM] -- {538183EA-2FDB-450C-84A1-56AEA6FF1DFA}
O42 - Logiciel: Unlocker 1.9.0 - (.Cedrick Collomb.) [HKLM] -- Unlocker
O42 - Logiciel: Update for Windows XP (KB2345886) - (.Microsoft Corporation.) [HKLM] -- KB2345886
O42 - Logiciel: Update for Windows XP (KB2661254-v2) - (.Microsoft Corporation.) [HKLM] -- KB2661254-v2
O42 - Logiciel: Update for Windows XP (KB2749655) - (.Microsoft Corporation.) [HKLM] -- KB2749655
O42 - Logiciel: Update for Windows XP (KB951978) - (.Microsoft Corporation.) [HKLM] -- KB951978
O42 - Logiciel: Update for Windows XP (KB955759) - (.Microsoft Corporation.) [HKLM] -- KB955759
O42 - Logiciel: Update for Windows XP (KB961503) - (.Microsoft Corporation.) [HKLM] -- KB961503
O42 - Logiciel: Update for Windows XP (KB968389) - (.Microsoft Corporation.) [HKLM] -- KB968389
O42 - Logiciel: Update for Windows XP (KB971029) - (.Microsoft Corporation.) [HKLM] -- KB971029
O42 - Logiciel: Update for Windows XP (KB973815) - (.Microsoft Corporation.) [HKLM] -- KB973815
O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}
O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01
O42 - Logiciel: WD Diagnostics - (.Western Digital Technologies.) [HKLM] -- {0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}
O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp
O42 - Logiciel: Windows Installer Clean Up - (.Microsoft Corporation.) [HKLM] -- {121634B0-2F4B-11D3-ADA3-00C04F52DD52}
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Management Framework Core - (.Microsoft Corporation.) [HKLM] -- KB968930
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format Runtime - (...) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (...) [HKLM] -- Windows Media Player
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: erLT - (.Logitech, Inc..) [HKLM] -- {A498D9EB-927B-459B-85D6-DD6EF8C2C564}
O42 - Logiciel: hp deskjet 940c series (Remove only) - (...) [HKLM] -- hp deskjet 940c series
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {91FD46D2-4FB7-4A51-8637-556E1BE1DB7C}
O42 - Logiciel: iZotope Ozone 3 - (.iZotope, Inc..) [HKLM] -- iZotope Ozone 3_is1
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
O42 - Logiciel: �Torrent - (...) [HKCU] -- uTorrent =>P2P.�Torrent
O42 - Logiciel: �Torrent - (.BitTorrent Inc..) [HKLM] -- uTorrent =>P2P.�Torrent
~ Logic: 289 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVS4YOU]
[HKCU\Software\AWSoftware]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\Alcohol Soft]
[HKCU\Software\America Online]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audio Identifier]
[HKCU\Software\Avg]
[HKCU\Software\BitDefender]
[HKCU\Software\BitTorrent] =>P2P.BitTorrent
[HKCU\Software\CDDB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CodeGear]
[HKCU\Software\CopyPod]
[HKCU\Software\DVD Decrypter]
[HKCU\Software\DirectShow]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Dr Tax]
[HKCU\Software\Druide informatique inc.]
[HKCU\Software\EFD Software]
[HKCU\Software\ESET]
[HKCU\Software\FTPWare]
[HKCU\Software\FlashFXP]
[HKCU\Software\Flowmix]
[HKCU\Software\GlarySoft]
[HKCU\Software\GlavSoft LLC.]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IDAVLab]
[HKCU\Software\IM Providers]
[HKCU\Software\IObit]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Leadertech]
[HKCU\Software\Licenses]
[HKCU\Software\Logitech]
[HKCU\Software\M-Audio]
[HKCU\Software\MPEG Audio Collection]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\ManyCam]
[HKCU\Software\Matrox Graphics Inc]
[HKCU\Software\Matrox]
[HKCU\Software\McAfee]
[HKCU\Software\Mirage]
[HKCU\Software\Mixi.DJ]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Native Instruments]
[HKCU\Software\Netscape]
[HKCU\Software\Nitro PDF]
[HKCU\Software\O&O]
[HKCU\Software\ODBC]
[HKCU\Software\ORL]
[HKCU\Software\Phoenix Technologies]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PowerPack]
[HKCU\Software\Pure Networks]
[HKCU\Software\RapidSolution]
[HKCU\Software\Reimage] =>Rogue.ReimageRepair
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\SampleView]
[HKCU\Software\Samsung]
[HKCU\Software\Sensaura]
[HKCU\Software\Silicon Image]
[HKCU\Software\Skype]
[HKCU\Software\SlimWare Utilities Inc]
[HKCU\Software\SolidDocuments]
[HKCU\Software\Sony Creative Software]
[HKCU\Software\Sony Media Software]
[HKCU\Software\SoulSeek] =>P2P.SoulSeek
[HKCU\Software\Soulseek2] =>P2P.SoulSeek
[HKCU\Software\Spotlife]
[HKCU\Software\SysMech]
[HKCU\Software\Sysinternals]
[HKCU\Software\TC Works]
[HKCU\Software\TeamViewer]
[HKCU\Software\TightVNC]
[HKCU\Software\TinySoftware]
[HKCU\Software\Trolltech]
[HKCU\Software\Unlimited Possibilities]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VirusSecureLab]
[HKCU\Software\WideAngleSoftware]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\Winds]
[HKCU\Software\Wyse]
[HKCU\Software\ej-technologies]
[HKCU\Software\iTouchMidi]
[HKCU\Software\iZotope]
[HKCU\Software\iolo]
[HKCU\Software\mIRC]
[HKCU\Software\redsn0w]
[HKLM\Software\ACE Compression Software]
[HKLM\Software\AMI]
[HKLM\Software\AOL]
[HKLM\Software\ASIO]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Acronis]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Ahead]
[HKLM\Software\Alcohol Soft]
[HKLM\Software\Alienware]
[HKLM\Software\America Online]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\AskPBar]
[HKLM\Software\Avg]
[HKLM\Software\Avira]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CopyPod]
[HKLM\Software\Curiolab]
[HKLM\Software\Daniusoft]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\Dr Tax]
[HKLM\Software\Druide informatique inc.]
[HKLM\Software\Eset]
[HKLM\Software\FTPWare]
[HKLM\Software\Flowmix]
[HKLM\Software\GEAR Software]
[HKLM\Software\Gemplus]
[HKLM\Software\GlarySoft]
[HKLM\Software\Global IP Solutions]
[HKLM\Software\Google]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\HighCriteria]
[HKLM\Software\HitmanPro]
[HKLM\Software\IDAVLab]
[HKLM\Software\IObit]
[HKLM\Software\ISSS]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel Corporation]
[HKLM\Software\Intel]
[HKLM\Software\Iolo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KasperskyLab]
[HKLM\Software\Licenses]
[HKLM\Software\Logitech]
[HKLM\Software\M-Audio]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Matrox]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Muzzleflash]
[HKLM\Software\Native Instruments]
[HKLM\Software\Nero]
[HKLM\Software\Nullsoft]
[HKLM\Software\O&O]
[HKLM\Software\ODBC]
[HKLM\Software\ORL]
[HKLM\Software\Oracle]
[HKLM\Software\PSP-audioware]
[HKLM\Software\Panda Software]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Propellerhead Software]
[HKLM\Software\Protexis]
[HKLM\Software\QuickCamInstallTemp]
[HKLM\Software\RTLSetup]
[HKLM\Software\ReJig]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\S3R521]
[HKLM\Software\SUPERAntiSpyware.com]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Schlumberger]
[HKLM\Software\Services]
[HKLM\Software\Silicon Image]
[HKLM\Software\Skype]
[HKLM\Software\SlimWare Utilities Inc]
[HKLM\Software\SoftShape]
[HKLM\Software\Sonix]
[HKLM\Software\Sony Creative Software]
[HKLM\Software\Sony Media Software]
[HKLM\Software\Speedchecker Limited]
[HKLM\Software\Swearware]
[HKLM\Software\Symantec]
[HKLM\Software\TeamViewer]
[HKLM\Software\TightVNC]
[HKLM\Software\TinySoftware]
[HKLM\Software\Uniblue]
[HKLM\Software\V-RAID RAID Tool]
[HKLM\Software\VBMZ]
[HKLM\Software\VIA Technologies, Inc]
[HKLM\Software\VideoLAN]
[HKLM\Software\Videotron]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Wyse]
[HKLM\Software\X-AVCSD]
[HKLM\Software\mozilla.org]
~ Key Software: 280 Scanned in 00mn 01s



---\\ Contents of the Common Files folders (O43)
O43 - CFD: 19/03/2010 - 09:15:42 - [6.241] ----D C:\Program Files\a-squared Free
O43 - CFD: 31/10/2009 - 14:52:54 - [1519.138] ----D C:\Program Files\Ableton
O43 - CFD: 15/06/2011 - 22:40:18 - [159.367] ----D C:\Program Files\Adobe
O43 - CFD: 12/02/2013 - 10:50:38 - [12.429] ----D C:\Program Files\AIM
O43 - CFD: 05/01/2009 - 08:16:17 - [0] ----D C:\Program Files\Alcohol Soft
O43 - CFD: 02/12/2011 - 21:29:05 - [2.316] ----D C:\Program Files\Apple Software Update
O43 - CFD: 23/02/2012 - 21:45:21 - [3.365] ----D C:\Program Files\Audio Identifier
O43 - CFD: 12/05/2013 - 22:12:48 - [83.368] ----D C:\Program Files\AVG
O43 - CFD: 11/02/2013 - 00:46:41 - [0] ----D C:\Program Files\Bitdefender
O43 - CFD: 11/02/2013 - 00:02:33 - [0.070] ----D C:\Program Files\BlueSprig
O43 - CFD: 02/12/2011 - 21:28:14 - [0.602] ----D C:\Program Files\Bonjour
O43 - CFD: 01/06/2013 - 09:10:30 - [5.583] ----D C:\Program Files\CCleaner =>Piriform Ltd
O43 - CFD: 08/02/2011 - 17:05:27 - [0] ----D C:\Program Files\CD_DVD-ROM Generator 1.50
O43 - CFD: 19/05/2013 - 12:41:54 - [709.439] ----D C:\Program Files\Common Files
O43 - CFD: 09/12/2008 - 01:12:59 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 09/10/2010 - 16:49:45 - [0] ----D C:\Program Files\CopyPod
O43 - CFD: 13/02/2013 - 04:25:54 - [0] ----D C:\Program Files\CoreFTP
O43 - CFD: 21/03/2012 - 21:19:25 - [0.000] ----D C:\Program Files\Defraggler
O43 - CFD: 03/07/2011 - 16:21:31 - [0.527] ----D C:\Program Files\DIFX
O43 - CFD: 06/06/2010 - 06:38:10 - [4.740] ----D C:\Program Files\DivX
O43 - CFD: 21/05/2013 - 21:20:03 - [19.428] ----D C:\Program Files\Driver Fusion
O43 - CFD: 28/07/2009 - 21:54:48 - [142.923] ----D C:\Program Files\Druide
O43 - CFD: 10/04/2012 - 11:35:21 - [7.836] ----D C:\Program Files\Eac-drum-(2006-01-17)
O43 - CFD: 13/05/2011 - 13:58:59 - [165.673] ----D C:\Program Files\eMule
O43 - CFD: 14/05/2013 - 23:00:22 - [29.571] ----D C:\Program Files\ESET
O43 - CFD: 04/05/2011 - 10:32:48 - [0.397] ----D C:\Program Files\Eusing Free Registry Cleaner
O43 - CFD: 10/01/2010 - 12:11:09 - [0.005] ----D C:\Program Files\FlashFXP
O43 - CFD: 26/04/2011 - 08:40:59 - [0.777] ----D C:\Program Files\FreeApps
O43 - CFD: 28/08/2010 - 10:27:53 - [0] ----D C:\Program Files\G-Lock Software
O43 - CFD: 09/06/2013 - 07:13:47 - [19.058] ----D C:\Program Files\Glary Utilities
O43 - CFD: 19/05/2013 - 12:20:05 - [369.724] ----D C:\Program Files\Google
O43 - CFD: 04/05/2010 - 06:44:11 - [2.547] ----D C:\Program Files\HD Tune Pro
O43 - CFD: 27/12/2010 - 10:20:29 - [13.448] ----D C:\Program Files\HDD Regenerator
O43 - CFD: 27/04/2011 - 13:11:44 - [87.748] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 16/02/2013 - 18:32:02 - [1.010] ----D C:\Program Files\HijackThis
O43 - CFD: 17/02/2013 - 10:58:18 - [1.173] ----D C:\Program Files\hp deskjet 940c series
O43 - CFD: 23/03/2009 - 22:24:45 - [0.958] ----D C:\Program Files\ImpotExpert 2008
O43 - CFD: 04/05/2010 - 20:01:22 - [8.296] ----D C:\Program Files\ImpotRapide 2008
O43 - CFD: 15/03/2011 - 22:17:45 - [8.715] ----D C:\Program Files\ImpotRapide 2009
O43 - CFD: 21/03/2012 - 21:09:34 - [11.897] ----D C:\Program Files\ImpotRapide 2010
O43 - CFD: 25/05/2013 - 11:33:35 - [11.507] ----D C:\Program Files\InstallShield Installation Information
O43 - CFD: 14/05/2013 - 22:56:05 - [5.306] ----D C:\Program Files\Internet Explorer
O43 - CFD: 11/02/2013 - 23:16:07 - [443.132] ----D C:\Program Files\IObit
O43 - CFD: 06/07/2012 - 07:19:58 - [1.765] ----D C:\Program Files\iPod
O43 - CFD: 10/02/2013 - 13:18:31 - [0] ----D C:\Program Files\iTouchMidi
O43 - CFD: 08/06/2013 - 07:22:18 - [187.177] ----D C:\Program Files\iTunes
O43 - CFD: 10/01/2011 - 19:18:24 - [8.696] ----D C:\Program Files\iZotope
O43 - CFD: 19/04/2013 - 07:04:21 - [202.326] ----D C:\Program Files\Java
O43 - CFD: 21/10/2011 - 14:05:38 - [0] ----D C:\Program Files\LeapFrog
O43 - CFD: 13/05/2013 - 23:35:32 - [54.025] ----D C:\Program Files\Logitech
O43 - CFD: 25/05/2013 - 11:32:53 - [3.795] ----D C:\Program Files\M-Audio
O43 - CFD: 09/06/2013 - 11:54:54 - [13.248] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 02/04/2011 - 07:44:53 - [12.374] ----D C:\Program Files\ManyCam
O43 - CFD: 10/11/2012 - 22:30:09 - [2.414] ----D C:\Program Files\MarkAny
O43 - CFD: 09/12/2008 - 21:54:24 - [10.811] ----D C:\Program Files\Matrox Graphics Inc
O43 - CFD: 09/12/2008 - 01:34:08 - [2.062] ----D C:\Program Files\Messenger
O43 - CFD: 08/05/2013 - 22:04:12 - [52.743] ----D C:\Program Files\Microsoft
O43 - CFD: 03/10/2010 - 10:55:36 - [0.764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 09/12/2008 - 01:15:56 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 28/06/2011 - 18:18:12 - [663.567] ----D C:\Program Files\Microsoft Office
O43 - CFD: 09/05/2013 - 07:09:41 - [1.477] ----D C:\Program Files\Microsoft Security Client
O43 - CFD: 13/03/2013 - 03:21:07 - [40.835] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 07/11/2009 - 02:27:55 - [1.745] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 14/05/2009 - 20:33:09 - [0.014] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 14/05/2009 - 20:24:42 - [1.204] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 15/05/2009 - 09:21:15 - [3.554] ----D C:\Program Files\Microsoft Works
O43 - CFD: 14/05/2009 - 20:31:48 - [7.797] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 13/05/2013 - 22:44:04 - [9.809] ----D C:\Program Files\Movie Maker
O43 - CFD: 29/04/2010 - 20:28:59 - [0.002] ----D C:\Program Files\Mozilla ActiveX Control v1.7.12
O43 - CFD: 28/05/2013 - 22:50:19 - [46.842] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 01/06/2013 - 09:16:47 - [0.214] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 28/05/2013 - 21:44:35 - [51.966] ----D C:\Program Files\MPEG Audio Collection
O43 - CFD: 13/06/2010 - 08:36:27 - [0.025] ----D C:\Program Files\MSBuild
O43 - CFD: 31/07/2012 - 12:14:40 - [61.724] ----D C:\Program Files\MSECache
O43 - CFD: 09/12/2008 - 01:11:52 - [0] ----D C:\Program Files\MSN
O43 - CFD: 09/12/2008 - 01:12:17 - [8.338] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 25/11/2009 - 07:57:46 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 04/05/2013 - 13:45:46 - [0] ----D C:\Program Files\MyFree Codec
O43 - CFD: 07/05/2011 - 10:35:20 - [209.580] ----D C:\Program Files\Native Instruments
O43 - CFD: 14/12/2008 - 03:02:13 - [476.475] ----D C:\Program Files\Nero
O43 - CFD: 09/12/2008 - 01:13:52 - [3.108] ----D C:\Program Files\NetMeeting
O43 - CFD: 23/09/2011 - 19:45:24 - [0.001] ----D C:\Program Files\Online Services
O43 - CFD: 25/12/2008 - 14:23:58 - [0.000] ----D C:\Program Files\Opera
O43 - CFD: 17/09/2012 - 21:32:32 - [33.205] ----D C:\Program Files\Oracle
O43 - CFD: 13/05/2013 - 22:47:26 - [4.123] ----D C:\Program Files\Outlook Express
O43 - CFD: 25/05/2013 - 16:00:41 - [0] ----D C:\Program Files\Panda Security
O43 - CFD: 04/07/2009 - 14:45:11 - [0.295] ----D C:\Program Files\PixCreations
O43 - CFD: 20/10/2012 - 07:46:07 - [5.566] ----D C:\Program Files\Platinum Notes
O43 - CFD: 25/08/2010 - 09:43:02 - [0] ----D C:\Program Files\Process Lasso
O43 - CFD: 10/01/2011 - 18:33:47 - [7.689] ----D C:\Program Files\PSPaudioware
O43 - CFD: 08/06/2013 - 07:12:32 - [73.544] ----D C:\Program Files\QuickTime
O43 - CFD: 09/12/2008 - 03:09:16 - [0] ----D C:\Program Files\Realtek
O43 - CFD: 31/08/2012 - 12:53:55 - [34.730] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 12/02/2013 - 10:45:51 - [2.197] ----D C:\Program Files\Samsung
O43 - CFD: 17/02/2010 - 22:25:51 - [20.677] ----D C:\Program Files\Seagate
O43 - CFD: 16/02/2013 - 17:59:40 - [19.308] ----D C:\Program Files\Silicon Image
O43 - CFD: 21/03/2012 - 21:17:18 - [3.926] R---D C:\Program Files\Skype
O43 - CFD: 21/05/2013 - 20:55:18 - [0.010] ----D C:\Program Files\Solid Savings =>Adware.SolidSavings
O43 - CFD: 28/11/2010 - 10:53:59 - [326.927] ----D C:\Program Files\Sony
O43 - CFD: 10/12/2008 - 02:47:44 - [73.896] ----D C:\Program Files\Sony Setup
O43 - CFD: 06/07/2012 - 07:16:35 - [3.243] ----D C:\Program Files\Soulseek =>P2P.SoulSeek
O43 - CFD: 13/12/2008 - 10:45:58 - [3.592] ----D C:\Program Files\SoulseekNS =>P2P.SoulSeek
O43 - CFD: 13/05/2011 - 15:15:47 - [1.114] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 09/06/2013 - 00:17:28 - [1.294] ----D C:\Program Files\Spybot - Search & Destroy 2
O43 - CFD: 10/01/2011 - 17:54:22 - [22.284] ----D C:\Program Files\TcWorks
O43 - CFD: 19/07/2011 - 21:35:19 - [0] ----D C:\Program Files\TeamViewer
O43 - CFD: 14/05/2013 - 19:25:53 - [2.013] ----D C:\Program Files\TightVNC
O43 - CFD: 26/04/2011 - 08:48:56 - [0.000] ----D C:\Program Files\Trend Micro
O43 - CFD: 12/05/2013 - 22:53:17 - [286.952] ----D C:\Program Files\Trillian
O43 - CFD: 10/02/2013 - 13:40:13 - [0.447] ----D C:\Program Files\Tweaking.com
O43 - CFD: 13/05/2011 - 13:21:51 - [0] ----D C:\Program Files\TweakNow RegCleaner 2011
O43 - CFD: 09/12/2008 - 01:25:17 - [0] ----D C:\Program Files\Uninstall Information
O43 - CFD: 18/01/2011 - 16:42:38 - [0.219] ----D C:\Program Files\Unlocker
O43 - CFD: 25/04/2013 - 06:46:42 - [0.765] ----D C:\Program Files\uTorrent =>P2P.�Torrent
O43 - CFD: 10/11/2011 - 22:25:52 - [0] ----D C:\Program Files\VIA
O43 - CFD: 22/02/2010 - 22:57:49 - [98.689] ----D C:\Program Files\VideoLAN
O43 - CFD: 25/05/2013 - 11:24:27 - [0] ----D C:\Program Files\VS Revo Group
O43 - CFD: 10/01/2011 - 20:07:02 - [83.535] ----D C:\Program Files\VST
O43 - CFD: 07/02/2009 - 13:11:37 - [0.819] ----D C:\Program Files\Western Digital Technologies
O43 - CFD: 26/10/2010 - 16:08:23 - [23.186] ----D C:\Program Files\Wide Angle Software
O43 - CFD: 12/05/2013 - 08:45:07 - [64.486] ----D C:\Program Files\Winamp
O43 - CFD: 12/05/2013 - 08:43:57 - [0.126] ----D C:\Program Files\Winamp Detect
O43 - CFD: 15/05/2009 - 03:06:08 - [0] ----D C:\Program Files\Windows Desktop Search
O43 - CFD: 20/05/2009 - 09:03:04 - [0.136] ----D C:\Program Files\Windows Installer Clean Up
O43 - CFD: 12/05/2011 - 11:14:15 - [127.451] ----D C:\Program Files\Windows Live
O43 - CFD: 07/11/2009 - 02:24:49 - [0.234] ----D C:\Program Files\Windows Live SkyDrive
O43 - CFD: 12/09/2010 - 23:04:17 - [2.691] ----D C:\Program Files\Windows Media Components
O43 - CFD: 09/06/2009 - 22:36:51 - [3.415] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 13/05/2013 - 16:16:31 - [7.195] ----D C:\Program Files\Windows Media Player
O43 - CFD: 27/09/2011 - 16:05:54 - [3.740] ----D C:\Program Files\Windows NT
O43 - CFD: 09/12/2008 - 01:14:20 - [0] ----D C:\Program Files\WindowsUpdate
O43 - CFD: 09/10/2010 - 17:37:01 - [0] ----D C:\Program Files\WindSolutions
O43 - CFD: 09/12/2008 - 03:21:36 - [3.221] ----D C:\Program Files\WinRAR
O43 - CFD: 27/05/2012 - 11:56:43 - [0.001] ----D C:\Program Files\WinRAS 2012.01
O43 - CFD: 09/02/2013 - 11:43:51 - [16.147] ----D C:\Program Files\Wyse
O43 - CFD: 09/12/2008 - 01:15:56 - [0] ----D C:\Program Files\xerox
O43 - CFD: 09/06/2013 - 13:36:36 - [16.858] ----D C:\Program Files\ZHPDiag
O43 - CFD: 13/05/2011 - 13:53:02 - [0] ----D C:\Program Files\Common Files\Acronis
O43 - CFD: 14/05/2013 - 23:04:43 - [3.182] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 27/12/2010 - 11:12:24 - [29.398] ----D C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 14/12/2008 - 11:50:02 - [113.271] ----D C:\Program Files\Common Files\Ahead
O43 - CFD: 13/06/2012 - 12:42:56 - [0.010] ----D C:\Program Files\Common Files\AOL
O43 - CFD: 08/06/2013 - 07:21:22 - [109.824] ----D C:\Program Files\Common Files\Apple
O43 - CFD: 14/01/2009 - 22:30:00 - [0] ----D C:\Program Files\Common Files\AVSMedia
O43 - CFD: 14/05/2009 - 20:33:08 - [0.089] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 25/03/2011 - 15:20:06 - [0.322] ----D C:\Program Files\Common Files\Hewlett-Packard
O43 - CFD: 13/05/2013 - 23:35:10 - [6.568] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 21/12/2009 - 10:34:27 - [0.261] ----D C:\Program Files\Common Files\iS3
O43 - CFD: 10/01/2011 - 19:18:27 - [0.809] ----D C:\Program Files\Common Files\iZotope
O43 - CFD: 19/04/2013 - 07:04:44 - [1.189] ----D C:\Program Files\Common Files\Java
O43 - CFD: 21/05/2013 - 21:27:26 - [0.535] ----D C:\Program Files\Common Files\Logishrd
O43 - CFD: 13/05/2013 - 23:35:34 - [28.986] ----D C:\Program Files\Common Files\Logitech
O43 - CFD: 08/05/2013 - 22:16:13 - [190.006] ----D C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 09/12/2008 - 01:13:49 - [0.271] ----D C:\Program Files\Common Files\MSSoap
O43 - CFD: 07/05/2011 - 10:35:22 - [163.575] ----D C:\Program Files\Common Files\Native Instruments
O43 - CFD: 08/12/2008 - 16:57:43 - [0] ----D C:\Program Files\Common Files\ODBC
O43 - CFD: 09/12/2008 - 01:13:51 - [0.008] ----D C:\Program Files\Common Files\Services
O43 - CFD: 18/10/2010 - 17:12:22 - [2.064] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 08/12/2008 - 16:57:41 - [3.612] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 06/05/2010 - 22:39:41 - [0] ----D C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 23/04/2012 - 13:40:07 - [42.406] ----D C:\Program Files\Common Files\System
O43 - CFD: 07/11/2009 - 02:20:33 - [0] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 09/12/2008 - 19:55:23 - [1.927] -S--D C:\Program Files\Common Files\WindowsLiveInstaller
O43 - CFD: 21/10/2011 - 14:00:09 - [11.125] ----D C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 09/06/2013 - 12:39:01 - [-1086.831] R---D C:\Documents and Settings\All Users\Application Data
O43 - CFD: 09/06/2013 - 12:28:50 - [0.017] ----D C:\Documents and Settings\All Users\Desktop
O43 - CFD: 16/02/2013 - 11:25:50 - [29.923] R---D C:\Documents and Settings\All Users\Documents
O43 - CFD: 21/02/2013 - 15:12:14 - [0.139] -SH-D C:\Documents and Settings\All Users\DRM
O43 - CFD: 08/12/2008 - 16:57:21 - [0] ----D C:\Documents and Settings\All Users\Favorites
O43 - CFD: 13/05/2013 - 16:25:47 - [0.384] R---D C:\Documents and Settings\All Users\Start Menu
O43 - CFD: 08/12/2008 - 16:57:21 - [0] ----D C:\Documents and Settings\All Users\Templates
O43 - CFD: 16/05/2010 - 14:13:03 - [0] ----D C:\Documents and Settings\All Users\Uniblue
O43 - CFD: 31/10/2009 - 14:59:20 - [15.607] ----D C:\Documents and Settings\unknow\Application Data\Ableton
O43 - CFD: 24/01/2010 - 00:03:12 - [0.094] ----D C:\Documents and Settings\unknow\Application Data\acccore
O43 - CFD: 24/03/2011 - 22:01:42 - [0.007] ----D C:\Documents and Settings\unknow\Application Data\Acronis
O43 - CFD: 19/05/2013 - 10:03:15 - [0.402] ----D C:\Documents and Settings\unknow\Application Data\Adobe
O43 - CFD: 04/01/2009 - 19:59:19 - [0.153] ----D C:\Documents and Settings\unknow\Application Data\Ahead
O43 - CFD: 12/02/2013 - 09:12:19 - [209.693] ----D C:\Documents and Settings\unknow\Application Data\Apple Computer
O43 - CFD: 12/05/2013 - 22:24:40 - [0.060] ----D C:\Documents and Settings\unknow\Application Data\AVG2013
O43 - CFD: 14/01/2009 - 22:21:57 - [0.041] ----D C:\Documents and Settings\unknow\Application Data\AVS4YOU
O43 - CFD: 10/02/2013 - 13:08:03 - [0.264] ----D C:\Documents and Settings\unknow\Application Data\BlueSprig
O43 - CFD: 15/05/2011 - 11:05:59 - [0] ----D C:\Documents and Settings\unknow\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 09/10/2010 - 17:35:29 - [0.011] ----D C:\Documents and Settings\unknow\Application Data\CopyTrans
O43 - CFD: 28/04/2011 - 09:24:31 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\CoreFTP
O43 - CFD: 09/05/2010 - 12:48:06 - [0.075] ----D C:\Documents and Settings\unknow\Application Data\DivX
O43 - CFD: 28/07/2009 - 21:57:33 - [0.009] ----D C:\Documents and Settings\unknow\Application Data\Druide
O43 - CFD: 21/05/2013 - 20:28:57 - [7.749] ----D C:\Documents and Settings\unknow\Application Data\Easeware
O43 - CFD: 11/12/2011 - 19:41:50 - [0] ----D C:\Documents and Settings\unknow\Application Data\f-secure
O43 - CFD: 01/02/2010 - 22:37:17 - [6.251] ----D C:\Documents and Settings\unknow\Application Data\Facebook
O43 - CFD: 09/06/2013 - 07:13:37 - [0.354] ----D C:\Documents and Settings\unknow\Application Data\GlarySoft
O43 - CFD: 21/04/2010 - 07:59:07 - [3.556] ----D C:\Documents and Settings\unknow\Application Data\HD Tune Pro
O43 - CFD: 16/01/2011 - 13:44:27 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Help
O43 - CFD: 09/10/2010 - 17:35:15 - [0.008] ----D C:\Documents and Settings\unknow\Application Data\iCloner
O43 - CFD: 09/12/2008 - 01:25:18 - [0] ----D C:\Documents and Settings\unknow\Application Data\Identities
O43 - CFD: 09/10/2010 - 17:35:59 - [0.008] ----D C:\Documents and Settings\unknow\Application Data\iLibs
O43 - CFD: 09/12/2008 - 03:09:09 - [0] ----D C:\Documents and Settings\unknow\Application Data\InstallShield
O43 - CFD: 02/03/2011 - 17:19:02 - [0.092] ----D C:\Documents and Settings\unknow\Application Data\Intuit Canada
O43 - CFD: 11/05/2013 - 23:10:18 - [109.817] ----D C:\Documents and Settings\unknow\Application Data\IObit
O43 - CFD: 11/01/2010 - 08:13:41 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Leadertech
O43 - CFD: 21/05/2013 - 21:27:26 - [0.050] ----D C:\Documents and Settings\unknow\Application Data\Logishrd
O43 - CFD: 21/05/2013 - 21:27:26 - [0] ----D C:\Documents and Settings\unknow\Application Data\Logitech
O43 - CFD: 11/01/2010 - 21:47:12 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Logitech(3)
O43 - CFD: 19/05/2013 - 10:03:16 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\Macromedia
O43 - CFD: 23/12/2008 - 22:53:40 - [4.907] ----D C:\Documents and Settings\unknow\Application Data\Malwarebytes
O43 - CFD: 16/12/2010 - 23:53:01 - [9.319] ----D C:\Documents and Settings\unknow\Application Data\ManyCam
O43 - CFD: 05/01/2011 - 00:22:37 - [10.764] -S--D C:\Documents and Settings\unknow\Application Data\Microsoft
O43 - CFD: 19/05/2009 - 12:11:14 - [0.261] ----D C:\Documents and Settings\unknow\Application Data\mIRC
O43 - CFD: 25/01/2009 - 10:11:12 - [35.378] ----D C:\Documents and Settings\unknow\Application Data\Mozilla
O43 - CFD: 29/04/2010 - 20:29:05 - [0.502] ----D C:\Documents and Settings\unknow\Application Data\MozillaControl
O43 - CFD: 13/01/2009 - 22:57:21 - [0.000] ----D C:\Documents and Settings\unknow\Application Data\NCH Swift Sound
O43 - CFD: 29/11/2009 - 19:23:16 - [0] ----D C:\Documents and Settings\unknow\Application Data\NetMedia Providers
O43 - CFD: 02/04/2011 - 20:40:48 - [0.006] ----D C:\Documents and Settings\unknow\Application Data\Nitro PDF
O43 - CFD: 18/12/2008 - 08:37:39 - [0.206] ----D C:\Documents and Settings\unknow\Application Data\Opera
O43 - CFD: 17/09/2012 - 21:31:59 - [0] ----D C:\Documents and Settings\unknow\Application Data\Oracle
O43 - CFD: 14/03/2013 - 12:58:50 - [0.016] ----D C:\Documents and Settings\unknow\Application Data\player
O43 - CFD: 10/12/2008 - 03:11:49 - [0] ----D C:\Documents and Settings\unknow\Application Data\Publish Providers
O43 - CFD: 14/05/2013 - 20:56:16 - [0.300] ----D C:\Documents and Settings\unknow\Application Data\QuickScan
O43 - CFD: 12/02/2013 - 11:15:25 - [32.095] ----D C:\Documents and Settings\unknow\Application Data\redsn0w
O43 - CFD: 14/10/2011 - 14:07:14 - [0] ----D C:\Documents and Settings\unknow\Application Data\RegistryKeys
O43 - CFD: 01/12/2012 - 14:11:50 - [208.707] ----D C:\Documents and Settings\unknow\Application Data\Samsung
O43 - CFD: 25/03/2011 - 15:20:23 - [0] ----D C:\Documents and Settings\unknow\Application Data\Share-to-Web Upload Folder
O43 - CFD: 27/04/2011 - 07:32:29 - [1.650] ----D C:\Documents and Settings\unknow\Application Data\Skype
O43 - CFD: 08/09/2012 - 00:03:33 - [0.015] ----D C:\Documents and Settings\unknow\Application Data\skypePM
O43 - CFD: 08/02/2011 - 17:05:30 - [0.022] ----D C:\Documents and Settings\unknow\Application Data\Sony
O43 - CFD: 12/01/2010 - 21:38:54 - [0] ----D C:\Documents and Settings\unknow\Application Data\Sony Creative Software
O43 - CFD: 10/12/2008 - 02:47:57 - [22.422] ----D C:\Documents and Settings\unknow\Application Data\Sony Setup
O43 - CFD: 11/12/2008 - 22:50:37 - [37.390] ----D C:\Documents and Settings\unknow\Application Data\Sun
O43 - CFD: 19/07/2011 - 21:04:45 - [0.018] ----D C:\Documents and Settings\unknow\Application Data\TeamViewer
O43 - CFD: 19/08/2010 - 01:10:50 - [0.313] ----D C:\Documents and Settings\unknow\Application Data\thecleaner
O43 - CFD: 16/12/2008 - 03:54:04 - [0] ----D C:\Documents and Settings\unknow\Application Data\Thinstall
O43 - CFD: 17/02/2011 - 12:31:01 - [0] ----D C:\Documents and Settings\unknow\Application Data\TightVNC
O43 - CFD: 12/05/2013 - 22:22:24 - [0] ----D C:\Documents and Settings\unknow\Application Data\TuneUp Software
O43 - CFD: 04/05/2011 - 10:33:47 - [0.011] ----D C:\Documents and Settings\unknow\Application Data\TweakNow RegCleaner 2011
O43 - CFD: 16/05/2010 - 14:12:54 - [6.936] ----D C:\Documents and Settings\unknow\Application Data\Uniblue
O43 - CFD: 02/11/2011 - 17:10:07 - [0] ----D C:\Documents and Settings\unknow\Application Data\Ustream Producer
O43 - CFD: 08/06/2013 - 07:05:53 - [13.421] ----D C:\Documents and Settings\unknow\Application Data\uTorrent =>P2P.�Torrent
O43 - CFD: 04/06/2013 - 11:38:49 - [0.079] ----D C:\Documents and Settings\unknow\Application Data\vlc
O43 - CFD: 09/06/2013 - 00:10:45 - [0.729] ----D C:\Documents and Settings\unknow\Application Data\Winamp
O43 - CFD: 17/12/2008 - 18:34:27 - [0] ----D C:\Documents and Settings\unknow\Application Data\Windows Search
O43 - CFD: 09/10/2010 - 17:25:34 - [1.506] ----D C:\Documents and Settings\unknow\Application Data\WindSolutions
O43 - CFD: 09/12/2008 - 02:35:02 - [0] ----D C:\Documents and Settings\unknow\Application Data\WinRAR
O43 - CFD: 09/02/2013 - 11:44:32 - [0] ----D C:\Documents and Settings\unknow\Application Data\WysePocketCloud
O43 - CFD: 04/01/2011 - 12:50:33 - [0.236] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Adobe
O43 - CFD: 13/09/2010 - 16:58:43 - [4.903] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Ahead
O43 - CFD: 13/06/2012 - 07:57:16 - [0.005] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\AIM
O43 - CFD: 13/06/2012 - 12:22:43 - [0.042] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\AOL
O43 - CFD: 09/12/2008 - 04:37:41 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Apple
O43 - CFD: 28/08/2010 - 15:21:58 - [170.449] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Apple Computer
O43 - CFD: 22/05/2012 - 10:04:51 - [0.011] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 12/05/2013 - 22:32:03 - [4.446] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Avg2013
O43 - CFD: 16/02/2013 - 17:52:19 - [2.420] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\CRE
O43 - CFD: 21/05/2013 - 20:46:10 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Deployment
O43 - CFD: 01/12/2012 - 15:34:08 - [290.889] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 10/11/2011 - 22:31:41 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\eSupport.com =>Rogue.RegistryWizard
O43 - CFD: 14/03/2010 - 20:27:20 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\G DATA
O43 - CFD: 17/02/2013 - 01:35:34 - [178.033] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Google
O43 - CFD: 29/04/2010 - 20:39:15 - [0.003] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Graboid
O43 - CFD: 29/04/2010 - 20:29:11 - [0.001] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Graboid_Inc
O43 - CFD: 13/12/2008 - 14:25:10 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Help
O43 - CFD: 14/12/2008 - 03:14:48 - [497.078] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Identities
O43 - CFD: 08/01/2011 - 22:45:06 - [0.400] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\iolo
O43 - CFD: 12/02/2013 - 13:06:36 - [0.006] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\libimobiledevice
O43 - CFD: 08/01/2011 - 16:22:12 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Logishrd
O43 - CFD: 26/02/2013 - 13:04:48 - [0.072] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\ManyCam
O43 - CFD: 08/01/2011 - 16:24:04 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Matrox
O43 - CFD: 12/05/2013 - 22:07:59 - [5.836] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\MFAData
O43 - CFD: 09/05/2013 - 23:36:33 - [1343.127] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft
O43 - CFD: 14/05/2009 - 20:21:12 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Microsoft Help
O43 - CFD: 01/09/2012 - 11:15:06 - [0.001] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\MixedInKey
O43 - CFD: 31/08/2012 - 14:14:49 - [0.000] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Mixed_In_Key_LLC
O43 - CFD: 25/01/2009 - 10:11:09 - [61.209] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Mozilla
O43 - CFD: 13/12/2008 - 14:26:29 - [68.188] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\O&O
O43 - CFD: 18/12/2008 - 08:37:39 - [0.043] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Opera
O43 - CFD: 13/06/2010 - 09:14:03 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\PCHealth
O43 - CFD: 31/08/2012 - 14:14:49 - [0.004] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Platinum Notes
O43 - CFD: 13/01/2009 - 20:41:19 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\RapidSolution
O43 - CFD: 10/11/2012 - 22:35:13 - [0.029] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Samsung
O43 - CFD: 17/02/2013 - 09:47:24 - [105.415] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\SlimWare Utilities Inc
O43 - CFD: 31/10/2009 - 14:23:18 - [131.896] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Sony
O43 - CFD: 22/09/2012 - 08:23:33 - [1.308] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Sun
O43 - CFD: 08/01/2011 - 00:04:22 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Sunbelt Software
O43 - CFD: 01/01/2011 - 12:23:16 - [3.824] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\tctemp
O43 - CFD: 16/02/2013 - 17:53:04 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Temp
O43 - CFD: 21/05/2013 - 20:55:18 - [0] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\Updater26278 =>PUP.CrossRider
O43 - CFD: 11/01/2010 - 17:00:16 - [138.884] ----D C:\Documents and Settings\unknow\Local Settings\Application Data\VS Revo Group
O43 - CFD: 09/12/2008 - 01:15:42 - [0.015] R---D C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Accessories
O43 - CFD: 08/12/2008 - 16:57:21 - [0.000] R---D C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Startup
O43 - CFD: 09/12/2008 - 01:37:34 - [0.016] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Accessories
O43 - CFD: 09/02/2009 - 08:55:40 - [0.000] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Administrative Tools
O43 - CFD: 28/07/2009 - 21:55:05 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Antidote
O43 - CFD: 23/02/2012 - 21:45:13 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Audio Identifier
O43 - CFD: 07/05/2009 - 12:59:54 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\DVD Decrypter
O43 - CFD: 02/04/2011 - 07:44:54 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\ManyCam
O43 - CFD: 16/01/2011 - 13:16:58 - [0.004] ----D C:\Documents and Settings\unknow\Start Menu\Programs\MPEG Audio Collection
O43 - CFD: 10/01/2011 - 17:47:13 - [0.008] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Sony
O43 - CFD: 10/12/2008 - 01:01:06 - [0.004] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Soulseek =>P2P.SoulSeek
O43 - CFD: 10/12/2008 - 00:47:51 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Soulseek NS =>P2P.SoulSeek
O43 - CFD: 08/01/2011 - 16:22:38 - [0.000] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Startup
O43 - CFD: 17/01/2011 - 11:40:37 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Unlocker
O43 - CFD: 11/11/2011 - 15:09:09 - [0.003] ----D C:\Documents and Settings\unknow\Start Menu\Programs\WD Diagnostics
O43 - CFD: 22/01/2010 - 08:55:51 - [0.001] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Winamp Application Detect
O43 - CFD: 24/07/2010 - 07:53:19 - [0.001] ----D C:\Documents and Settings\unknow\Start Menu\Programs\Winamp Detector Plug-in
O43 - CFD: 09/12/2008 - 03:07:30 - [0.002] ----D C:\Documents and Settings\unknow\Start Menu\Programs\WinRAR
O43 - CFD: 10/01/2011 - 19:58:15 - [0.001] ----D C:\Documents and Settings\unknow\Start Menu\Programs\ZionDSP
~ Program Folder: 304 Scanned in 00mn 02s



---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.BD81E75129F68E28E2259C1FEFD5ADCF] - 09/06/2013 - 11:58:45 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [319482]
O44 - LFC:[MD5.1D1DBD9023DDF91D5109F355DB77F027] - 09/06/2013 - 11:53:51 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.1D5E8DB3FC9528AFCFA97AF0E8E3A4E6] - 09/06/2013 - 11:53:44 ---A- . (...) -- C:\WINDOWS\wiaservc.log [48]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 09/06/2013 - 11:52:14 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.0877AC09CAA217471589644C398FA572] - 09/06/2013 - 11:51:54 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.2B2B77815492F68126B9DBAC435B4FCB] - 09/06/2013 - 11:49:47 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [27580]
O44 - LFC:[MD5.7799367EE6429DFAC4FF1FA89542DF06] - 09/06/2013 - 11:49:30 ---A- . (...) -- C:\AdwCleaner[S1].txt [1155]
O44 - LFC:[MD5.4470E3C1E0C3378E4CAB137893C12C3A] - 09/06/2013 - 10:54:41 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys [22856]
O44 - LFC:[MD5.D6A755A42BD28535569F886164310CE1] - 08/06/2013 - 22:58:55 ---A- . (...) -- C:\WINDOWS\wininit.ini [16]
O44 - LFC:[MD5.149E0E824427BA314F9F655BA33BECEE] - 08/06/2013 - 07:13:41 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [597802]
O44 - LFC:[MD5.07B6C77E780FCF66BCD79F43DBDBA235] - 08/06/2013 - 07:13:41 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [87180]
O44 - LFC:[MD5.BEA51F8D0FC74928961D2012F0A06FC3] - 08/06/2013 - 07:13:41 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [499108]
O44 - LFC:[MD5.4E7E24529F30852118690F3CE75B6891] - 08/06/2013 - 07:08:20 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [12676]
O44 - LFC:[MD5.C7BC96C3711C0D269DA26D1F0ECEC547] - 04/06/2013 - 10:37:57 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [69]
O44 - LFC:[MD5.1A23C314248D6ABF9590FD6A8C9BB209] - 26/05/2013 - 20:11:54 ---A- . (...) -- C:\Ab LogFile.txt [254]
O44 - LFC:[MD5.CAD96F431C915C8542DBEF39ECB9BAE5] - 26/05/2013 - 07:00:35 -SH-- . (...) -- C:\boot.ini [316]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 25/05/2013 - 13:49:20 ----- . (...) -- C:\WINDOWS\Sti_Trace.log [0]
~ Files: 17 Scanned in 00mn 02s



---\\ Operations and functions at Windows Explorer startup (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Export authorized application key (O47)
O47 - AAKE:Key Export SP - "C:\Program Files\SoulseekNS\slsk.exe" [Enabled] .(..) -- C:\Program Files\SoulseekNS\slsk.exe =>P2P.SoulSeek
O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.BitTorrent Inc..) -- C:\Program Files\uTorrent\uTorrent.exe =>P2P.�Torrent
O47 - AAKE:Key Export SP - "C:\Program Files\Soulseek\slsk.exe" [Enabled] .(..) -- C:\Program Files\Soulseek\slsk.exe =>P2P.SoulSeek
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe" [Enabled] .(.Nero AG.) -- C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AIM\aim.exe" [Enabled] .(.AOL Inc..) -- C:\Program Files\AIM\aim.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Sun Microsystems, Inc..) -- C:\Program Files\Java\jre6\bin\javaw.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\java.exe" [Enabled] .(.Sun Microsystems, Inc..) -- C:\Program Files\Java\jre6\bin\java.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\mmc.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\mmc.exe
O47 - AAKE:Key Export SP - "C:\Program Files\VideoLAN\VLC\vlc.exe" [Enabled] .(.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\vlc.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Skype Technologies.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe
O47 - AAKE:Key Export SP - "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2011 11.0.1.400\English\setup.exe" [Enabled] .(.Kaspersky Lab.) -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2011 11.0.1.400\English\setup.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Winamp\winamp.exe" [Enabled] .(.Nullsoft, Inc..) -- C:\Program Files\Winamp\winamp.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "K:\DOWNLOAD FIREFOX\tinyumbrella-4.33.00.exe" [Enabled] .(..) -- K:\DOWNLOAD FIREFOX\tinyumbrella-4.33.00.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Bonjour\mDNSResponder.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Internet Explorer\iexplore.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\muzapp.exe" [Enabled] .(.Musiccity Co.Ltd..) -- C:\WINDOWS\system32\muzapp.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Wyse\PocketCloud Windows Companion\WyseBrowser.exe" [Enabled] .(.Wyse Technology Inc..) -- C:\Program Files\Wyse\PocketCloud Windows Companion\WyseBrowser.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe" [Enabled] .(..) -- C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe" [Enabled] .(.Wyse Technology..) -- C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgnsx.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgnsx.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgdiagex.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgdiagex.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgmfapx.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgmfapx.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AVG\AVG2013\avgemcx.exe" [Enabled] .(.AVG Technologies CZ, s.r.o..) -- C:\Program Files\AVG\AVG2013\avgemcx.exe
O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\tvnserver.exe" [Enabled] .(.GlavSoft LLC..) -- C:\Program Files\TightVNC\tvnserver.exe
O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\tvnviewer.exe" [Enabled] .(.GlavSoft LLC..) -- C:\Program Files\TightVNC\tvnviewer.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dpvsetup.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\dpvsetup.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dxdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\dxdiag.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dpnsvr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\dpnsvr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\iTunes\iTunes.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
~ Keys Export: 41 Scanned in 00mn 00s



---\\ Local Security Authority-LSA Deny (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Windows Security Configuration Editor Client Engine.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Safe Boot Control (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
~ CSB: 23 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak� Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo� Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo� audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo� video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"msacm.voxacm160"="vct3216.acm" . (.Voxware, Inc. - Voxware Audio Compression Manager Driver.) -- C:\WINDOWS\system32\vct3216.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo� audio software" . (.Intel Corporation - Indeo� audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"mciqtz32.dll"="mciqtz32.dll" . (...) -- C:\WINDOWS\system32\mciqtz32.dll
O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak� Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Intel Corporation - Intel Indeo� Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \drivers.desc\"vct3216.acm"="Voxware Compression Toolkit" . (.Voxware, Inc. - Voxware Audio Compression Manager Driver.) -- C:\WINDOWS\system32\vct3216.acm
~ TDSD: 19 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 6 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1
O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0
O55 - MWPS:[HKCU\...\Policies\System] - "NoDispSettingsPage"=0
O55 - MWPS:[HKCU\...\Policies\System] - "NoDispAppearancePage"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0
~ MWPS: 12 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "EditLevel"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFileMenu"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoCommonGroups"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKCU\...\policies\Explorer] - "LinkResolveIgnoreLinkInfo"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFolderOptions"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFileUrl"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRun"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLogoff"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoClose"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSetFolders"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoNetHood"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFind"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSetTaskBar"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "Nosecuritytab"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoUpdateCheck"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoWindowsUpdate"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoInstrumentation"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "LinkResolveIgnoreLinkInfo"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoResolveSearch"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoCDBurning"=0
~ MWPE Keys: 26 Scanned in 00mn 00s



---\\ System Drivers List (SDL) (O58)
O58 - SDL:[MD5.95B4FB835E28AA1336CEEB07FD5B9398] - 14/04/2008 - 07:00:00 ---A- . (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) -- C:\WINDOWS\system32\Drivers\amdagp.sys [43008]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 14/04/2008 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9029]
~ Drivers: Scanned in 00mn 00s



---\\ Alternate Data Stream File (ADS) (O62)
O62 - ADS:Alternate Data Stream File - C:\WINDOWS\system32\IoctlSvc.exe:SummaryInformation
O62 - ADS:Alternate Data Stream File - C:\WINDOWS\system32\IoctlSvc.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
~ ADS: Scanned in 00mn 01s



---\\ List all tools cleaner (LATC) (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS: Scanned in 00mn 00s



---\\ List all legacy services(LALS) (O64)
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (6to4) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_6TO4
O64 - Services: CurCS - 21/05/2013 - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (AdobeFlashPlayerUpdateSvc) .(.Adobe Systems Incorporated - Adobe� Flash� Player Update Service 11.7 r7.) - LEGACY_ADOBEFLASHPLAYERUPDATESVC
O64 - Services: CurCS - 17/08/2011 - C:\WINDOWS\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Alerter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ALERTER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\alg.exe (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG
O64 - Services: CurCS - 21/12/2012 - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device) .(.Apple Inc. - MobileDeviceService.) - LEGACY_APPLE_MOBILE_DEVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV
O64 - Services: CurCS - 15/11/2012 - C:\Program Files\AVG\AVG2013\avgidsagent.exe (AVGIDSAgent) .(.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - LEGACY_AVGIDSAGENT
O64 - Services: CurCS - 22/10/2012 - C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys (AVGIDSDriver) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - LEGACY_AVGIDSDRIVER
O64 - Services: CurCS - 15/10/2012 - C:\WINDOWS\system32\DRIVERS\avgidshx.sys (AVGIDSHX) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Helper Dri.) - LEGACY_AVGIDSHX
O64 - Services: CurCS - 21/09/2012 - C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys (AVGIDSShim) .(.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Loader Dri.) - LEGACY_AVGIDSSHIM
O64 - Services: CurCS - 02/10/2012 - C:\WINDOWS\system32\DRIVERS\avgldx86.sys (Avgldx86) .(.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - LEGACY_AVGLDX86
O64 - Services: CurCS - 21/09/2012 - C:\WINDOWS\system32\DRIVERS\avglogx.sys (Avglogx) .(.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) - LEGACY_AVGLOGX
O64 - Services: CurCS - 15/11/2012 - C:\WINDOWS\system32\DRIVERS\avgmfx86.sys (Avgmfx86) .(.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - LEGACY_AVGMFX86
O64 - Services: CurCS - 14/09/2012 - C:\WINDOWS\system32\DRIVERS\avgrkx86.sys (Avgrkx86) .(.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) - LEGACY_AVGRKX86
O64 - Services: CurCS - 21/09/2012 - C:\WINDOWS\system32\DRIVERS\avgtdix.sys (AvgTdiX) .(.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - LEGACY_AVGTDIX
O64 - Services: CurCS - 22/10/2012 - C:\Program Files\AVG\AVG2013\avgwdsvc.exe (avgwd) .(.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - LEGACY_AVGWD
O64 - Services: CurCS - 21/10/2011 - C:\Program Files\Microsoft\BingBar\BBSvc.exe (BBSvc) .(.Microsoft Corporation. - BingBar Service.) - LEGACY_BBSVC
O64 - Services: CurCS - 13/10/2011 - C:\Program Files\Microsoft\BingBar\SeaPort.exe (BBUpdate) .(.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) - LEGACY_BBUPDATE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS
O64 - Services: CurCS - ??\??\???? - BOClean Kernel Monitor. (BOCDRIVE) .(. - .) - LEGACY_BOCDRIVE
O64 - Services: CurCS - 30/08/2011 - C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service) .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\cisvc.exe (cisvc) .(.Microsoft Corporation - Content Index service.) - LEGACY_CISVC
O64 - Services: CurCS - 25/07/2008 - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32
O64 - Services: CurCS - 18/03/2010 - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (clr_optimization_v4.0.30319_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V4.0.30319_32
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\dllhost.exe (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC
O64 - Services: CurCS - 29/10/2012 - C:\WINDOWS\system32\drivers\dgderdrv.sys (dgderdrv) .(.Devguru Co., Ltd - Device Error Recovery SDK(x86).) - LEGACY_DGDERDRV
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\dmadmin.exe (dmadmin) .(.Microsoft Corp., Veritas Software - Logical Disk Manager service process.) - LEGACY_DMADMIN
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot) .(.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) - LEGACY_DMBOOT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\fltMgr.sys (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR
O64 - Services: CurCS - 29/07/2008 - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0
O64 - Services: CurCS - 05/08/2009 - C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys (fssfltr) .(.Microsoft Corporation - Family Safety Filter Driver (TDI).) - LEGACY_FSSFLTR
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\msgpc.sys (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC
O64 - Services: CurCS - 19/05/2013 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate) .(.Google Inc. - Google Installer.) - LEGACY_GUPDATE
O64 - Services: CurCS - 19/05/2013 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdatem) .(.Google Inc. - Google Installer.) - LEGACY_GUPDATEM
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV
O64 - Services: CurCS - 20/10/2009 - C:\WINDOWS\system32\Drivers\HTTP.sys (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\imapi.exe (ImapiService) .(.Microsoft Corporation - Image Mastering API.) - LEGACY_IMAPISERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys (Ip6Fw) .(.Microsoft Corporation - IPv6 Windows Firewall Driver.) - LEGACY_IP6FW
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys (IpFilterDriver) .(.Microsoft Corporation - IP FILTER DRIVER.) - LEGACY_IPFILTERDRIVER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ipnat.sys (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT
O64 - Services: CurCS - 31/05/2013 - C:\Program Files\iPod\bin\iPodService.exe (iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Iprip) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IPRIP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ipsec.sys (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\irda.sys (irda) .(.Microsoft Corporation - IRDA Protocol Driver.) - LEGACY_IRDA
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Irmon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IRMON
O64 - Services: CurCS - 04/04/2013 - C:\Program Files\Java\jre7\bin\jqs.exe (JavaQuickStarterService) .(.Oracle Corporation - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LanmanServer) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION
O64 - Services: CurCS - ??\??\???? - Unknown owner (Lbd) .(...) - LEGACY_LBD
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS
O64 - Services: CurCS - 11/06/2009 - C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe (Matrox.Pdesk.ServicesHost) .(.Matrox Graphics Inc - Service used to handle various PowerDesk ta.) - LEGACY_MATROX.PDESK.SERVICESHOST
O64 - Services: CurCS - 11/06/2009 - C:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe (Matrox Centering Service) .(.Matrox Graphics Inc. - Matrox PowerDesk Services.) - LEGACY_MATROX_CENTERING_SERVICE
O64 - Services: CurCS - 04/04/2007 - C:\WINDOWS\system32\mgabg.exe (MGABGEXE) .(.Matrox Graphics Inc. - MGABG.) - LEGACY_MGABGEXE
O64 - Services: CurCS - 26/05/2013 - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (MozillaMaintenance) .(.Mozilla Foundation - No comment.) - LEGACY_MOZILLAMAINTENANCE
O64 - Services: CurCS - 20/01/2013 - C:\WINDOWS\system32\DRIVERS\MpFilter.sys (MpFilter) .(.Microsoft Corporation - Microsoft antimalware file system filter dr.) - LEGACY_MPFILTER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\mrxdav.sys (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV
O64 - Services: CurCS - 15/07/2011 - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\msdtc.exe (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\msiexec.exe (MSIServer) .(.Microsoft Corporation - Windows� installer.) - LEGACY_MSISERVER
O64 - Services: CurCS - 27/01/2013 - C:\Program Files\Microsoft Security Client\MsMpEng.exe (MsMpSvc) .(.Microsoft Corporation - Antimalware Service Executable.) - LEGACY_MSMPSVC
O64 - Services: CurCS - 21/04/2011 - C:\WINDOWS\system32\Drivers\Mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP
O64 - Services: CurCS - 08/04/2008 - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe (NBService) .(.Nero AG - Nero BackItUp.) - LEGACY_NBSERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\Drivers\NDIS.sys (NDIS) .(.Microsoft Corporation - NDIS 5.1 wrapper driver.) - LEGACY_NDIS
O64 - Services: CurCS - 08/07/2011 - C:\WINDOWS\system32\DRIVERS\ndistapi.sys (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN
O64 - Services: CurCS - 08/12/2009 - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NIHardwareService) .(.Native Instruments GmbH - NIHardwareService.) - LEGACY_NIHARDWARESERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA
O64 - Services: CurCS - 22/01/2008 - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (NMIndexingService) .(.Nero AG - Nero Home.) - LEGACY_NMINDEXINGSERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC
O64 - Services: CurCS - 20/07/2011 - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.exe (odserv) .(.Microsoft Corporation - Microsoft Office Diagnostics.) - LEGACY_ODSERV
O64 - Services: CurCS - 15/02/2010 - C:\WINDOWS\system32\IoctlSvc.exe (PLFlash DeviceIoControl Service) .(.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - LEGACY_PLFLASH_DEVICEIOCONTROL_SERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT
O64 - Services: CurCS - 12/01/2002 - C:\WINDOWS\system32\Drivers\PortTalk.sys (PortTalk) .(.Beyond Logic http://www.beyondlogic.org - PortTalk - Beyond Logic I/O Port Driver.) - LEGACY_PORTTALK
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\rasacd.sys (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\rdbss.sys (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\rsvp.exe (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS
O64 - Services: CurCS - 05/10/2005 - Unknown owner (SATARaid5 Config Service) .(...) - LEGACY_SATARAID5_CONFIG_SERVICE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION
O64 - Services: CurCS - 01/11/2004 - C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys (SiFilter) .(.Silicon Image, Inc. - Windows Accelerator Driver.) - LEGACY_SIFILTER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\tcpsvcs.exe (SimpTcp) .(.Microsoft Corporation - TCP/IP Services Application.) - LEGACY_SIMPTCP
O64 - Services: CurCS - 26/11/2010 - Unknown owner (SmartDefragDriver) .(...) - LEGACY_SMARTDEFRAGDRIVER
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\snmp.exe (SNMP) .(.Microsoft Corporation - SNMP Service.) - LEGACY_SNMP
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\snmptrap.exe (SNMPTRAP) .(.Microsoft Corporation - SNMP Trap Service.) - LEGACY_SNMPTRAP
O64 - Services: CurCS - 17/08/2010 - C:\WINDOWS\system32\spoolsv.exe (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER
O64 - Services: CurCS - 23/05/2009 - C:\WINDOWS\system32\Drivers\sptd.sys (sptd) .(.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) - LEGACY_SPTD
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\sr.sys (sr) .(.Microsoft Corporation - System Restore Filesystem Filter Driver.) - LEGACY_SR
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE
O64 - Services: CurCS - 17/02/2011 - C:\WINDOWS\system32\DRIVERS\srv.sys (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV
O64 - Services: CurCS - 20/06/2008 - C:\WINDOWS\system32\DRIVERS\tcpip.sys (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP
O64 - Services: CurCS - 11/02/2010 - C:\WINDOWS\system32\DRIVERS\tcpip6.sys (Tcpip6) .(.Microsoft Corporation - IPv6 driver.) - LEGACY_TCPIP6
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS
O64 - Services: CurCS - 20/11/2012 - C:\Program Files\TightVNC\tvnserver.exe (tvnserver) .(.GlavSoft LLC. - TightVNC Server.) - LEGACY_TVNSERVER
O64 - Services: CurCS - 04/07/2010 - Unknown owner (UnlockerDriver5) .(...) - LEGACY_UNLOCKERDRIVER5
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST
O64 - Services: CurCS - 17/04/2000 - C:\WINDOWS\system32\drivers\UtilNT.sys (UtilNT) .(.Matrox Graphics Inc. - No comment.) - LEGACY_UTILNT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 18/05/2004 - C:\WINDOWS\system32\DRIVERS\viamraid.sys (viamraid) .(.VIA Technologies inc,.ltd - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32.) - LEGACY_VIAMRAID
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\vssvc.exe (VSS) .(.Microsoft Corporation - Microsoft� Volume Shadow Copy Service.) - LEGACY_VSS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\DRIVERS\wanarp.sys (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP
O64 - Services: CurCS - 14/07/2009 - C:\WINDOWS\system32\DRIVERS\Wdf01000.sys (Wdf01000) .(.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT
O64 - Services: CurCS - 18/08/2009 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe (wlidsvc) .(.Microsoft Corporation - Microsoft� Windows Live ID Service.) - LEGACY_WLIDSVC
O64 - Services: CurCS - 18/10/2006 - C:\Program Files\Windows Media Player\WMPNetwk.exe (WMPNetworkSvc) .(.Microsoft Corporation - Windows Media Player Network Sharing Servic.) - LEGACY_WMPNETWORKSVC
O64 - Services: CurCS - 18/03/2010 - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (WPFFontCache_v0400) .(.Microsoft Corporation - wpffontcache_v0400.exe.) - LEGACY_WPFFONTCACHE_V0400
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\ws2ifsl.sys (WS2IFSL) .(.Microsoft Corporation - Winsock2 IFS Layer.) - LEGACY_WS2IFSL
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV
O64 - Services: CurCS - 05/11/2012 - C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe (WysePocketCloud) .(.Unknown owner - PocketCloudService.) - LEGACY_WYSEPOCKETCLOUD
O64 - Services: CurCS - 05/11/2012 - C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe (WyseRemoteAccess) .(.Wyse Technology. - Wyse Remote Access Server for Windows.) - LEGACY_WYSEREMOTEACCESS
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC
~ Legacy: 354 Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe
~ FASS Keys: 17 Scanned in 00mn 00s



---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {17E71D10-C50B-4BDC-9360-864D73F655FB} - (Yahoo! Search) - http://search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {7A200381-2517-4512-8AE1-81F11444E64D} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com
~ Keys: Scanned in 00mn 00s



---\\ Crack & Keygen Files (CKF) (O82)
C:\Documents and Settings\unknow\Application Data\uTorrent\Acronis partition suite 10 + keygen.rar.torrent =>P2P.�Torrent
C:\Documents and Settings\unknow\Application Data\uTorrent\Copy Pod V7.63 + Keygen.zip.torrent =>P2P.�Torrent
C:\Documents and Settings\unknow\Application Data\uTorrent\Acronis partition suite 10 + keygen.rar.torrent =>P2P.�Torrent
C:\Documents and Settings\unknow\Application Data\uTorrent\Copy Pod V7.63 + Keygen.zip.torrent =>P2P.�Torrent
H:\Download\aim 2010\juillet\MixMeister.Studio.v7.4.4.0.Cracked-iND\.AppleDouble\ind-mms74.rar
H:\Download\aim 2010\juillet\MixMeister.Studio.v7.4.4.0.Cracked-iND\Crack\StudioDemo.exe
H:\Download\aim 2010\juillet\MixMeister.Studio.v7.4.4.0.Cracked-iND\ind-mms74.rar
H:\Download\aim 2010\juillet\MixMeister.Studio.v7.4.4.0.Cracked-iND\MixMeisterStudioDemo_PC.exe
H:\Download\Utorrent incoming\IZotope.Ozone.VST.DX.AS.RTAS.HTDM.v3.15.incl.Keygen-AiR\a-io315b.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\IZotope.Ozone.VST.DX.AS.RTAS.HTDM.v3.15.incl.Keygen-AiR\a-io315c\Setup.exe =>P2P.�Torrent
H:\Download\Utorrent incoming\IZotope.Ozone.VST.DX.AS.RTAS.HTDM.v3.15.incl.Keygen-AiR\a-io315c.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\IZotope.Ozone.VST.DX.AS.RTAS.HTDM.v3.15.incl.Keygen-AiR\a-io315d.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.Lexicon.PSP42.v1.5.3.VST.RTAS.incl.Keygen-DYNAMiCS\d-p42151.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.OldTimer.v1.1.6.VST.RTAS.Incl.KeyGen-DYNAMiCS\d-po16wa.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.OldTimer.v1.1.6.VST.RTAS.Incl.KeyGen-DYNAMiCS\d-po16wb.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.PSP84.VST.RTAS.v1.5.2.incl.KeyGen.WIN-NEMESiS\n-psp84.rar =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.sQuad.v1.5.1.VST.RTAS.Incl.KeyGen.READ.NFO-DYNAMiCS\d-00571a.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.sQuad.v1.5.1.VST.RTAS.Incl.KeyGen.READ.NFO-DYNAMiCS\d-00571b.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.sQuad.v1.5.1.VST.RTAS.Incl.KeyGen.READ.NFO-DYNAMiCS\d-00571c.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.sQuad.v1.5.1.VST.RTAS.Incl.KeyGen.READ.NFO-DYNAMiCS\d-00571d.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.sQuad.v1.5.1.VST.RTAS.Incl.KeyGen.READ.NFO-DYNAMiCS\d-00571e.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.VintageWarmer.v2.3.1.VST.RTAS.Incl.KeyGen-DYNAMiCS\d-00569a.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.VintageWarmer.v2.3.1.VST.RTAS.Incl.KeyGen-DYNAMiCS\d-00569b.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.Audioware.VintageWarmer.v2.3.1.VST.RTAS.Incl.KeyGen-DYNAMiCS\d-00569c.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSP.EasyVerb.VST.RTAS.v1.6.Incl.Keygen-MESMERiZE\m-psev01.zip =>P2P.�Torrent
H:\Download\Utorrent incoming\PSPaudioware.sQuad.RTAS.VST.v1.5.2.x86.x64.Incl.Keygen-ASSiGN\asgn0058.rar =>P2P.�Torrent
I:\Documents and Settings\stranger\Application Data\uTorrent\HDD.Regenerator.v1.51.n.Keygen.torrent =>P2P.�Torrent
I:\Documents and Settings\stranger\Application Data\uTorrent\O&O Defrag 10.0.1670.Francais+keygen.rar.torrent =>P2P.�Torrent
I:\utils'09\Ahead.Nero.v7.9.6.0.Incl.Keymaker-EMBRACE\e-an8634\keygen.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802a.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802b.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802c.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802d.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802e.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802f.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802g.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802h.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802i.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\keygen.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\COMMAND.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FDISK.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\IBMBIO.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\IBMDOS.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\KEYB.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\MODE.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Rescueme\Setup.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Setup\BootMagic.msi
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Setup\instmsia.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Setup\instmsiw.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Setup\isscript.msi
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\BTMagic\Setup\setup.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\DKeeper\DataKeeper.msi
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\DKeeper\instmsia.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\DKeeper\instmsiw.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\DKeeper\isscript.msi
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\DKeeper\setup.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\PQMagicKg.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\CHKDSK.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\COMMAND.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\EMM386.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\FDISK.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\FLOPPY.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\FLOPPY9x.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\FLOPPYME.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\IBMBIO.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\IBMDOS.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\KEYB.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\MODE.COM
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\NWCDEX.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\PMHELP.DAT
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\DOSYSTEM\PTEDIT32.EXE
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\RESCUEME\Setup.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\Setup\instmsia.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\Setup\instmsiw.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\Setup\isscript.msi
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\Setup\PartitionMagic.msi
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802\Setup\setup.exe
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part01.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part02.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part03.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part04.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part05.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part06.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part07.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part08.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part09.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part10.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j\s-pqm802.part11.rar
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j.zip
I:\utils'09\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k.zip
I:\utils'09\Sony.Products.Keygen.and.Patch.Only.FINAL.REPACK.READ.NFO-DI\audiostudio90d-trial_enu.exe
I:\utils'09\Sony.Products.Keygen.and.Patch.Only.FINAL.REPACK.READ.NFO-DI\soundforge90e-trial_enu.exe
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c01.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c02.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c03.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c04.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c05.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c06.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c07.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c08.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c09.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c10.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c11.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c12.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c13.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c14.zip
I:\utils'09\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c15.zip
K:\DVD and mpeg\Astuces\ASTUCE Cracker un reseau Wi Fi sans la cle Wep.rar
K:\instal program\Impot_rapide_2007\keygen.exe
K:\UTILS\Ahead.Nero.Burning.ROM.v6.6.0.3.Ultra.Edition.Incl.Keygen.WORKING-ORiON\o-5yly3a.zip
K:\UTILS\Ahead.Nero.Burning.ROM.v6.6.0.3.Ultra.Edition.Incl.Keygen.WORKING-ORiON\o-5yly3b.zip
K:\UTILS\Ahead.Nero.Burning.ROM.v6.6.0.3.Ultra.Edition.Incl.Keygen.WORKING-ORiON\o-5yly3c.zip
K:\UTILS\Ahead.Nero.Burning.ROM.v6.6.0.3.Ultra.Edition.Incl.Keygen.WORKING-ORiON\o-5yly3d.zip
K:\UTILS\Ahead.Nero.Burning.ROM.v6.6.0.3.Ultra.Edition.Incl.Keygen.WORKING-ORiON\o-5yly3e.zip
K:\UTILS\Ahead.Nero.Burning.ROM.v6.6.0.3.Ultra.Edition.Incl.Keygen.WORKING-ORiON\o-5yly3f.zip
K:\UTILS\Ahead.Nero.Burning.ROM.v6.6.0.3.Ultra.Edition.Incl.Keygen.WORKING-ORiON\o-5yly3g.zip
K:\UTILS\AudioRealism.BassLine.VSTi.v2.1.1.Incl.Keygen-AiR\a-ab211a.zip
K:\UTILS\AudioRealism.BassLine.VSTi.v2.1.1.Incl.Keygen-AiR\a-ab211b.zip
K:\UTILS\Final.Uninstaller.v1.7.2.183.WinAll.Incl.Keygen-CRD\cxa1235a\cxa1235a\setup\FinalUninstall_setup.exe
K:\UTILS\FTPRush.Unicode.v1.0.0.568.Cracked.WinXP\f-568.zip
K:\UTILS\Magic.ISO.Maker.v5.4.247.WinALL.Incl.Keygen-ECLiPSE\eclmiso5.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802a.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802b.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802c.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802d.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802e.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802f.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802g.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802h.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802i.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802j.zip
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\keygen.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\COMMAND.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FDISK.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\IBMBIO.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\IBMDOS.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\KEYB.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\MODE.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Rescueme\Setup.exe
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Setup\BootMagic.msi
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\BTMagic\Setup\isscript.msi
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\DKeeper\DataKeeper.msi
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\DKeeper\isscript.msi
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\PQMagicKg.exe
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\CHKDSK.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\COMMAND.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\EMM386.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\FDISK.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\FLOPPY.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\FLOPPY9x.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\FLOPPYME.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\IBMBIO.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\IBMDOS.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\KEYB.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\MODE.COM
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\NWCDEX.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\PMHELP.DAT
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\DOSYSTEM\PTEDIT32.EXE
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\RESCUEME\Setup.exe
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\Setup\instmsiw.exe
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\Setup\isscript.msi
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\Setup\PartitionMagic.msi
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802\Setup\setup.exe
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part01.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part02.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part03.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part04.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part05.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part06.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part07.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part08.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part09.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part10.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k\s-pqm802.part11.rar
K:\UTILS\PowerQuest.PartitionMagic.v8.02.Incl.Keygen-SSG\s-pm802k.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c01.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c02.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c03.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c04.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c05.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c06.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c07.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c08.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c09.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c10.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c11.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c12.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c13.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c14.zip
K:\UTILS\Sony.Sound.Forge.9.0c.Build.405.Winall.Cracked-NoPE\npsf9c15.zip
K:\UTILS\Winrar.V3.70.Final.WinALL.Cracked-NoPE\npwrf\nowrf\setup\wrar370.exe
~ Files: Scanned in 04mn 12s



---\\ Search Svchost Services (SSS) (O83)
O83 - Search Svchost Services: 6to4 (6to4) . (.Microsoft Corporation - Service that offers IPv6 connectivity over an IPv4 network..) -- C:\WINDOWS\system32\6to4svc.dll [100864]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll [0]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - Logical Disk Manager service dll.) -- C:\WINDOWS\system32\dmserver.dll [23552]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - DHCP Client Service.) -- C:\WINDOWS\system32\dhcpcsvc.dll [126976]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - No comment.) -- C:\WINDOWS\system32\es.dll [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]
O83 - Search Svchost Services: Iprip (Iprip) . (.Microsoft Corporation - Microsoft RIP for Internet Protocol.) -- C:\WINDOWS\system32\iprip.dll [35328]
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infrared Monitor.) -- C:\WINDOWS\system32\irmon.dll [28160]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Network Connections Manager.) -- C:\WINDOWS\system32\netman.dll [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll [245248]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Removable Storage Manager.) -- C:\WINDOWS\system32\ntmssvc.dll [435200]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Task Scheduler Engine.) -- C:\WINDOWS\system32\schedsvc.dll [192512]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - Secondary Logon Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\system32\ipnathlp.dll [331264]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - System Restore Service.) -- C:\WINDOWS\system32\srsvc.dll [171008]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft� Windows(TM) Telephony Server.) -- C:\WINDOWS\system32\tapisrv.dll [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Windows Time Service.) -- C:\WINDOWS\system32\w32time.dll [175104]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Wireless Zero Configuration Service.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [144896]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Quarantine Agent Service Run-Time.) -- C:\WINDOWS\system32\qagentrt.dll [291328]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Key Management Service.) -- C:\WINDOWS\system32\kmsvc.dll [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\system32\qmgr.dll [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\WINDOWS\system32\shsvcs.dll [135168]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]
~ Services: 41 Scanned in 00mn 01s



---\\ Search Particular Root Folder (SPRF) (O84)
[MD5.A79AF4DC922EDEE7EC23B46973F4C950] [SPRF][10/02/2013] (...) -- C:\Documents and Settings\All Users\Application Data\1360555640.bdinstall.bin [45870]
[MD5.F0D76373C888423F3DB9288AB6AF0842] [SPRF][10/02/2013] (...) -- C:\Documents and Settings\All Users\Application Data\1360555884.bdinstall.bin [29308]
[MD5.8DB089A2445E6EE30CCE79BE3F41E8AD] [SPRF][08/06/2013] (...) -- C:\Documents and Settings\unknow\Local Settings\Application Data\d3d9caps.dat [664]
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][24/03/2010] (...) -- C:\Documents and Settings\unknow\Local Settings\Application Data\prvlcl.dat [0]
[MD5.4EF33D516F31BEB1C9847D1FDA69375C] [SPRF][09/06/2013] (...) -- C:\Documents and Settings\unknow\desktop\AdwCleaner (1).exe [648201]
[MD5.09A3F926C400C29B3CF04FD15A0D8DEA] [SPRF][09/06/2013] (.Oleg N. Scherbakov - 7z Setup SFX.) -- C:\Documents and Settings\unknow\desktop\JRT.exe [545954]
[MD5.FB639C452779257622C8AFBE92FFEA19] [SPRF][14/01/2008] (.Cranium Consulting and Custom Software - iPhoneBrowser.) -- C:\Program Files\iPhoneBrowser.exe [217088]
[MD5.3938450629C9BE3165B0E4BAE1588631] [SPRF][16/12/2007] (.Starlight Computer Wizardry - SCW_iPhonePNG.) -- C:\Program Files\SCW_iPhonePNG.dll [20480]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\bdcore.dll [32]
[MD5.298068536300DA6DC163E394797A7C50] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\bdupd.dll [118784]
[MD5.1CAB87DE6638846FBF51F32B5D95E482] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\ipsupd.dll [53248]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\libfn.dll [32]
~ Files: Scanned in 00mn 01s



---\\ Additionnal Scan (O88)
Database Version : v2.12437 - (07/06/2013)
Cl�s trouv�es (Keys found) : 11
Valeurs trouv�es (Values found) : 0
Dossiers trouv�s (Folders found) : 2
Fichiers trouv�s (Files found) : 1

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B4089055-D468-45A4-A6BA-5A138DD715FC}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{C31103D1-E584-4880-B1D3-6B1DF6FBDE22}] =>Toolbar.Agent
[HKLM\Software\VBMZ] =>Toolbar.Conduit
[HKLM\Software\Google\Chrome\Extensions\cgiaikfpllchefojlnehlmpekeogihnm] =>Toolbar.Conduit
[HKCU\Software\Mixi.DJ] =>Toolbar.MixiDJ
[HKCU\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\Reimage] =>Rogue.ReimageRepair
[HKLM\Software\Classes\MAudio.DELTACPL.1] =>toolbar.DeltaSearch
C:\Program Files\Solid Savings =>Adware.SolidSavings
C:\Documents and Settings\unknow\Local Settings\Application Data\eSupport.com =>Rogue.RegistryWizard
C:\WINDOWS\Reimage.ini =>Rogue.ReimageRepair
~ Additionnel Scan: 347162 Items scanned in 00mn 42s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "00002109020090400000000000F01FEC" . (.Compatibility Pack for the 2007 Office system.) -- C:\WINDOWS\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
O90 - PUC: "00002159FA0090400000000000F01FEC" . (.Microsoft Office PowerPoint Viewer 2007 (English).) -- C:\WINDOWS\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe,0
O90 - PUC: "00004159180090400000000000F01FEC" . (.Microsoft Office Outlook Connector.) -- C:\WINDOWS\Installer\{95140000-0081-0409-0000-0000000FF1CE}\OLCIcon.exe
O90 - PUC: "1CE464C2C0B20944C9CA4D65D28D73A7" . (.Soap 3.0 Toolkit.) -- C:\WINDOWS\Installer\{2C464EC1-2B0C-4490-9CAC-D4562DD8377A}\ARPPRODUCTICON.exe
O90 - PUC: "277C90D53BCEB244C96C4B43C187DF2C" . (.Apple Application Support.) -- C:\WINDOWS\Installer\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}\WinInstall.ico
O90 - PUC: "2D64DF197BF415A4687355E6B11EBDC7" . (.iTunes.) -- C:\WINDOWS\Installer\{91FD46D2-4FB7-4A51-8637-556E1BE1DB7C}\Installer.ico
O90 - PUC: "2FFAE75BEE6DC6C41957DEF971FB1CCB" . (.Windows Live Messenger.) -- C:\WINDOWS\Installer\{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}\MsblIco.Exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "5286D09FF1F8A3E4E9249A8C9ADD0133" . (.Nero 7 Ultra Edition.) -- C:\WINDOWS\Installer\{F90D6825-8F1F-4E3A-9E42-A9C8A9DD1033}\ARPPRODUCTICON.exe
O90 - PUC: "5509804B864D4A546AABA531D87D51CF" . (.Bing Bar.) -- C:\WINDOWS\Installer\{B4089055-D468-45A4-A6BA-5A138DD715FC}\icon_installer_ico
O90 - PUC: "68AB67CA7DA73301B744AA0100000010" . (.Adobe Reader X (10.1.7).) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "6D4B04801DD7781458326ECF0070FE7B" . (.Windows Live ID Sign-in Assistant.) -- C:\WINDOWS\Installer\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}\prodicon.ico
O90 - PUC: "7CEBB04F4A2C00A4B942A750A5C22526" . (.Microsoft Office Live Add-in 1.5.) -- C:\WINDOWS\Installer\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}\ProductIcon
O90 - PUC: "91993A79AEF97B84BAB2F49912D2E189" . (.HDD Regenerator.) -- C:\WINDOWS\Installer\{97A39919-9FEA-48B7-AB2B-4F99212D1E98}\ARPPRODUCTICON.exe
O90 - PUC: "93FDBE4833B47D940ADBBEE6C2E4181C" . (.Windows Live Sync.) -- C:\WINDOWS\Installer\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}\FolderShare48x48.ico
O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico
O90 - PUC: "ABAA53CDA0AE1C1448266FA002D1FFB9" . (.Noise Reduction Plug-in 2.0i.) -- C:\WINDOWS\Installer\{DC35AABA-EA0A-41C1-8462-F60A201DFF9B}\sfnrpack.ico
O90 - PUC: "ABFAB76BF9C4AF84496939E3B3520544" . (.QuickTime.) -- C:\WINDOWS\Installer\{B67BAFBA-4C9F-48FA-9496-933E3B255044}\Installer.ico
O90 - PUC: "AE381835BDF2C054481A65EA6AFFD1AF" . (.TouchCopy 09.) -- C:\WINDOWS\Installer\{538183EA-2FDB-450C-84A1-56AEA6FF1DFA}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "B0F57C6D1CB39CF48B5CF3E7E80D95AC" . (.Windows Live Photo Gallery.) -- C:\WINDOWS\Installer\{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}\WLXPhotoGalleryIcon.exe
O90 - PUC: "B2F5519759897D9468219D52080EEDB5" . (.Bonjour.) -- C:\WINDOWS\Installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}\Bonjour.ico
O90 - PUC: "B961C8C8394D7C249A57C7E1E0C48574" . (.PocketCloud Windows Companion.) -- C:\WINDOWS\Installer\{8C8C169B-D493-42C7-A975-7C1E0E4C5847}\ARPPRODUCTICON.exe
O90 - PUC: "BE9D894AB729B954586DDDE68F2C5C46" . (.erLT.) -- C:\WINDOWS\Installer\{A498D9EB-927B-459B-85D6-DD6EF8C2C564}\ARPPRODUCTICON.exe
O90 - PUC: "CDE8B189396E22F469490CFFE8651F43" . (.TightVNC.) -- C:\WINDOWS\Installer\{981B8EDC-E693-4F22-9694-C0FF8E56F134}\tvnserver.ico
O90 - PUC: "DDB6C50237B7ED245850A990F3532A83" . (.Windows Live Upload Tool.) -- C:\WINDOWS\Installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}\RichUpload.ico
O90 - PUC: "E0EDA41E3F5764A4785E6296D26D62CE" . (.Apple Mobile Device Support.) -- C:\WINDOWS\Installer\{E14ADE0E-75F3-4A46-87E5-26692DD626EC}\Installer.ico
O90 - PUC: "E303E9310501F794891BA98EB7514C36" . (.Windows Live Family Safety.) -- C:\WINDOWS\Installer\{139E303E-1050-497F-98B1-9AE87B15C463}\fssicon.ico
O90 - PUC: "ECEC214627185EB439B5C6CECA2DAC78" . (.Windows Live Mail.) -- C:\WINDOWS\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe
O90 - PUC: "ED2388710ED978C4F92839519A0B9358" . (.Windows Live Writer.) -- C:\WINDOWS\Installer\{178832DE-9DE0-4C87-9F82-9315A9B03985}\ApplicationIcon.ico
O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\WINDOWS\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico
O90 - PUC: "F81B066921CEFD110B6000313D6D9992" . (.Sound Forge Pro 10.0.) -- C:\WINDOWS\Installer\{9660B18F-EC12-11DF-B006-0013D3D69929}\forge.ico
O90 - PUC: "F88531E81EF60B04582B695F42DC56F3" . (.Sony CD Architect 5.2.) -- C:\WINDOWS\Installer\{8E13588F-6FE1-40B0-85B2-96F524CD653F}\icon_cda52.ico
~ Update Products: 99 Scanned in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: Web Folders - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ MNS: 1 Scanned in 00mn 00s



---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 21/05/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 15/11/2012 5814904 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2013\avgidsagent.exe
SR - | Auto 22/10/2012 196664 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
SS - | Auto 21/10/2011 196176 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\BBSvc.exe
SR - | Auto 13/10/2011 249648 | (BBUpdate) . (.Microsoft Corporation.) - C:\Program Files\Microsoft\BingBar\SeaPort.exe
SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Demand 14/04/2008 224768 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Auto 19/05/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 19/05/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - | Demand 31/05/2013 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 04/04/2013 181664 | (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe
SS - | Disabled 11/06/2009 1263872 | (Matrox Centering Service) . (.Matrox Graphics Inc..) - C:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe
SR - | Auto 11/06/2009 344832 | (Matrox.Pdesk.ServicesHost) . (.Matrox Graphics Inc.) - C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe
SR - | Auto 04/04/2007 87560 | (MGABGEXE) . (.Matrox Graphics Inc..) - C:\WINDOWS\system32\mgabg.exe
SS - | Auto 26/05/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 08/04/2008 800040 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SS - | Disabled 08/12/2009 3616768 | (NIHardwareService) . (.Native Instruments GmbH.) - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
SS - | Disabled 22/01/2008 275752 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
SR - | Auto 15/02/2010 81920 | (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc..) - C:\WINDOWS\system32\IoctlSvc.exe
SR - | Auto 131072 | (SATARaid5 Config Service) . (...) - C:\Program Files\Silicon Image\3114-W-I32-R SATARAID5\SATARaid5ConfigService.exe
SR - | Auto 20/11/2012 1226808 | (tvnserver) . (.GlavSoft LLC..) - C:\Program Files\TightVNC\tvnserver.exe
SS - | Auto 191488 | (WysePocketCloud) . (...) - C:\Program Files\Wyse\PocketCloud Windows Companion\PocketCloudService.exe
SR - | Auto 05/11/2012 1436160 | (WyseRemoteAccess) . (.Wyse Technology..) - C:\Program Files\Wyse\PocketCloud Windows Companion\WyseRemoteAccess.exe
~ Services: Scanned in 00mn 01s



---\\ Search Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by unknow at 09/06/2013 13:42:05

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



End of the scan (2055 lines in 06mn 07s)(211)