cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 08/08/2013 17:05:41 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\steph et aurore\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

5,95 Gb Total Physical Memory | 4,83 Gb Available Physical Memory | 81,14% Memory free
11,95 Gb Paging File | 10,63 Gb Available in Paging File | 88,92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 457,70 Gb Total Space | 284,56 Gb Free Space | 62,17% Space Free | Partition Type: NTFS
Drive D: | 458,51 Gb Total Space | 457,78 Gb Free Space | 99,84% Space Free | Partition Type: NTFS

Computer Name: MAITREPP | User Name: steph et aurore | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2013/08/08 14:37:21 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\steph et aurore\Desktop\OTL.exe
PRC - [2013/06/20 11:29:38 | 000,173,192 | ---- | M] (Microsoft Corp.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
PRC - [2013/05/09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012/09/20 12:28:58 | 000,524,944 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
PRC - [2012/09/20 01:07:44 | 000,995,856 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
PRC - [2012/08/13 11:22:48 | 010,376,704 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2012/08/13 11:22:48 | 010,368,512 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2012/07/17 11:10:32 | 000,364,416 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2012/07/17 11:10:30 | 000,276,864 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2012/07/17 11:10:16 | 000,165,760 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
PRC - [2011/11/26 01:32:36 | 000,687,400 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2010/06/15 11:36:40 | 006,479,712 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Hama\Common\RaUI.exe
PRC - [2010/06/01 14:37:58 | 000,193,888 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Hama\Common\RaRegistry.exe
PRC - [2005/04/01 08:49:20 | 000,193,536 | ---- | M] () -- C:\Program Files (x86)\Project64 1.6\Project64.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012/08/10 16:51:32 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2010/06/14 15:38:44 | 000,984,416 | ---- | M] () -- C:\Program Files (x86)\Hama\Common\RaWLAPI.dll
MOD - [2005/04/01 08:49:20 | 000,193,536 | ---- | M] () -- C:\Program Files (x86)\Project64 1.6\Project64.exe
MOD - [2005/03/20 21:39:02 | 000,109,568 | ---- | M] () -- C:\Program Files (x86)\Project64 1.6\Plugin\RSP.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2013/06/01 11:19:58 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2013/05/04 08:58:02 | 000,470,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2013/05/04 08:57:05 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2013/04/09 06:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2013/03/02 04:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2013/03/02 04:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2013/01/29 03:57:14 | 000,014,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2013/01/10 01:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2013/01/10 01:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2012/11/06 06:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2012/09/20 11:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2012/09/20 08:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2012/08/27 11:43:46 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2012/08/23 05:02:36 | 000,658,576 | ---- | M] (Acer Incorporated) [On_Demand | Running] -- C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe -- (ePowerSvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2012/07/26 05:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2012/07/26 05:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2012/07/26 05:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2012/04/20 15:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV - [2013/06/20 11:29:38 | 000,173,192 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe -- (BingDesktopUpdate)
SRV - [2012/12/17 16:46:50 | 000,137,488 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2012/11/06 06:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012/07/26 05:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2012/07/17 11:10:32 | 000,364,416 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012/07/17 11:10:30 | 000,276,864 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012/07/17 11:10:16 | 000,165,760 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2012/07/13 11:02:16 | 002,451,456 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe -- (IconMan_R)
SRV - [2012/07/12 05:10:24 | 000,174,160 | ---- | M] (Egis Technology Inc. ) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service)
SRV - [2011/11/26 01:32:36 | 000,687,400 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2010/10/12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/06/01 14:38:46 | 000,211,296 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Hama\Common\RaRegistry64.exe -- (RalinkRegistryWriter64)
SRV - [2010/06/01 14:37:58 | 000,193,888 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Hama\Common\RaRegistry.exe -- (RalinkRegistryWriter)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2013/06/28 08:48:06 | 001,030,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:[b]64bit:[/b] - [2013/06/28 08:48:06 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:[b]64bit:[/b] - [2013/06/28 08:48:06 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:[b]64bit:[/b] - [2013/06/01 13:54:16 | 000,194,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2013/06/01 13:29:35 | 000,337,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2013/06/01 13:29:35 | 000,213,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
DRV:[b]64bit:[/b] - [2013/06/01 05:08:57 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2013/05/13 15:36:06 | 000,050,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\point64.sys -- (Point64)
DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\aswRdr2.sys -- (aswRdr)
DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:[b]64bit:[/b] - [2013/05/09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\Drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2013/05/09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:[b]64bit:[/b] - [2013/05/04 09:34:17 | 000,446,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2013/05/04 09:34:15 | 000,284,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2013/03/25 14:41:46 | 000,076,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\dc3d.sys -- (dc3d)
DRV:[b]64bit:[/b] - [2013/03/06 01:42:04 | 000,452,432 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\e1c63x64.sys -- (e1cexpress)
DRV:[b]64bit:[/b] - [2013/03/02 12:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2013/03/02 12:45:20 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2013/03/02 12:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2013/02/12 02:17:50 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2013/02/07 14:32:54 | 002,380,288 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\netr28ux.sys -- (netr28ux)
DRV:[b]64bit:[/b] - [2013/01/29 19:15:04 | 000,029,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\nuidfltr.sys -- (NuidFltr)
DRV:[b]64bit:[/b] - [2013/01/29 03:57:05 | 000,035,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2013/01/29 01:08:22 | 000,230,904 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2013/01/10 03:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2012/12/13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2012/11/27 05:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2012/11/20 06:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2012/11/06 05:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
DRV:[b]64bit:[/b] - [2012/10/22 04:59:06 | 000,062,776 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:[b]64bit:[/b] - [2012/10/22 04:59:06 | 000,022,648 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:[b]64bit:[/b] - [2012/10/22 04:59:06 | 000,020,520 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
DRV:[b]64bit:[/b] - [2012/10/12 10:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2012/10/11 09:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2012/10/11 09:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2012/09/20 09:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2012/09/20 09:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2012/09/20 09:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2012/08/27 13:16:14 | 010,306,560 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2012/08/27 10:46:50 | 000,370,688 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2012/07/26 07:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012/07/26 07:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2012/07/26 07:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2012/07/26 06:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2012/07/26 06:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2012/07/26 06:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2012/07/26 05:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2012/07/26 04:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2012/07/26 04:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2012/07/26 04:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2012/07/26 04:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2012/07/26 04:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2012/07/26 04:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2012/07/26 04:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2012/07/26 04:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2012/07/26 04:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2012/07/17 14:59:12 | 000,098,472 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AtihdW86.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2012/07/09 14:43:12 | 000,645,952 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStorA.sys -- (iaStorA)
DRV:[b]64bit:[/b] - [2012/07/02 09:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2012/06/24 01:24:52 | 015,283,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2012/06/15 07:50:46 | 000,315,536 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\RtsUVStor.sys -- (RSUSBVSTOR)
DRV:[b]64bit:[/b] - [2012/06/02 16:31:38 | 000,333,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\e1i63x64.sys -- (e1iexpress)
DRV:[b]64bit:[/b] - [2011/01/15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\VClone.sys -- (VClone)
DRV:[b]64bit:[/b] - [2010/12/17 00:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:[b]64bit:[/b] - [2010/04/27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WmVirHid.sys -- (WmVirHid)
DRV:[b]64bit:[/b] - [2010/04/27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WmHidLo.sys -- (WmHidLo)
DRV:[b]64bit:[/b] - [2010/04/27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\WmBEnum.sys -- (WmBEnum)
DRV:[b]64bit:[/b] - [2010/04/27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\WmXlCore.sys -- (WmXlCore)
DRV:[b]64bit:[/b] - [2010/04/27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WmFilter.sys -- (WmFilter)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope =
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{318258A9-58D9-4E3D-A08D-49BB2EC32346}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{318258A9-58D9-4E3D-A08D-49BB2EC32346}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2647307370-3958953616-775769082-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
IE - HKU\S-1-5-21-2647307370-3958953616-775769082-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com
IE - HKU\S-1-5-21-2647307370-3958953616-775769082-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2647307370-3958953616-775769082-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2647307370-3958953616-775769082-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


[color=#E56717]========== FireFox ==========[/color]

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK


[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - Extension: Documents Google = C:\Users\steph et aurore\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google\u00A0Drive = C:\Users\steph et aurore\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\steph et aurore\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Recherche Google = C:\Users\steph et aurore\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: avast! Ad Blocker = C:\Users\steph et aurore\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd\8.0_0\
CHR - Extension: avast! Online Security = C:\Users\steph et aurore\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\
CHR - Extension: Gmail = C:\Users\steph et aurore\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012/07/26 07:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe (Microsoft Corp.)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-2647307370-3958953616-775769082-1001..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
O4 - HKU\S-1-5-21-2647307370-3958953616-775769082-1001..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup File not found
O4 - HKU\S-1-5-21-2647307370-3958953616-775769082-1001..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung)
O4 - Startup: C:\Users\steph et aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4FA9742F-9223-4A70-BE68-1CDDD001C010}: DhcpNameServer = 192.168.1.254
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)


SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] MCODS - Reg Error: Value error.
SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MCODS - Reg Error: Value error.
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] MCODS - Reg Error: Value error.
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: MCODS - Reg Error: Value error.
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {74166507-F39E-305E-A972-2C3478E47350} - .NET Framework
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U %SystemRoot%\System32\shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3A8403F3-90B5-35DC-8926-EB9B907209F9} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2013/08/08 15:40:38 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2013/08/08 14:37:17 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\steph et aurore\Desktop\OTL.exe
[2013/08/04 13:27:26 | 000,000,000 | ---D | C] -- C:\Users\steph et aurore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\project64 1.6
[2013/08/04 13:27:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Project64 1.6
[2013/08/03 11:53:20 | 000,000,000 | ---D | C] -- C:\Users\steph et aurore\AppData\Local\Software
[2013/08/03 11:53:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Software
[2013/08/03 11:53:19 | 000,000,000 | ---D | C] -- C:\Users\steph et aurore\AppData\Roaming\index
[2013/08/02 14:12:12 | 000,000,000 | ---D | C] -- C:\Users\steph et aurore\Desktop\PHOTO SAMSUNG
[2013/08/02 14:09:56 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\CrashDump
[2013/08/02 13:43:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MarkAny
[2013/07/24 19:49:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/07/24 19:48:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2013/07/24 19:48:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2013/07/24 19:34:08 | 002,219,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2013/07/24 19:34:06 | 002,391,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2013/07/24 19:34:06 | 002,106,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2013/07/24 19:34:06 | 001,842,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2013/07/24 19:34:05 | 006,987,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013/07/24 19:34:05 | 001,527,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcore.dll
[2013/07/24 19:34:05 | 000,729,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2013/07/24 19:34:02 | 001,453,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcore.dll
[2013/07/24 19:33:59 | 001,403,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2013/07/24 19:33:58 | 001,271,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2013/07/24 19:33:57 | 001,217,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2013/07/24 19:33:57 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013/07/24 19:33:56 | 001,093,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2013/07/24 19:33:56 | 000,583,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2013/07/24 19:33:55 | 001,048,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfasfsrcsnk.dll
[2013/07/24 19:33:55 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013/07/24 19:33:55 | 000,213,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS
[2013/07/24 19:33:55 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll
[2013/07/24 19:33:54 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfasfsrcsnk.dll
[2013/07/24 19:33:54 | 000,337,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS
[2013/07/24 19:33:54 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceSetupManager.dll
[2013/07/24 19:33:54 | 000,194,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys
[2013/07/24 19:33:54 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2013/07/24 19:33:54 | 000,125,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys
[2013/07/24 19:33:54 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeParserTask.exe
[2013/07/24 19:33:53 | 000,037,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys
[2013/07/24 19:32:51 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2013/07/24 19:32:51 | 000,496,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2013/07/24 19:32:46 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013/07/24 19:32:45 | 002,842,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2013/07/24 19:32:45 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2013/07/24 19:32:23 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/07/24 19:32:20 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/07/24 19:32:18 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/07/24 19:32:18 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/07/24 19:32:18 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2013/08/08 17:06:25 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/08/08 16:13:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/08/08 15:45:30 | 001,793,362 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/08/08 15:45:30 | 000,799,736 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2013/08/08 15:45:30 | 000,710,046 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/08/08 15:45:30 | 000,155,444 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2013/08/08 15:45:30 | 000,132,416 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/08/08 15:42:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/08/08 15:41:15 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/08/08 15:40:34 | 680,758,654 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013/08/08 15:40:34 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2013/08/08 15:40:32 | 818,970,623 | -HS- | M] () -- C:\hiberfil.sys
[2013/08/08 14:37:21 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\steph et aurore\Desktop\OTL.exe
[2013/08/08 14:32:12 | 000,000,099 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013/08/07 15:00:40 | 000,002,243 | ---- | M] () -- C:\Users\steph et aurore\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/08/07 15:00:40 | 000,002,219 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/08/04 13:28:56 | 000,001,013 | ---- | M] () -- C:\Users\steph et aurore\Desktop\Project64 - Raccourci.lnk
[2013/08/02 18:54:30 | 000,297,354 | ---- | M] () -- C:\Users\steph et aurore\Documents\LM.pdf
[2013/08/02 18:49:33 | 000,020,126 | ---- | M] () -- C:\Users\steph et aurore\Documents\lettre de motivation 2 ok.odt
[2013/08/02 13:47:46 | 000,002,124 | ---- | M] () -- C:\Users\steph et aurore\Application Data\Microsoft\Internet Explorer\Quick Launch\Samsung Story Album Viewer.lnk
[2013/08/02 13:46:49 | 000,001,966 | ---- | M] () -- C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
[2013/07/29 12:00:45 | 000,306,034 | ---- | M] () -- C:\Users\steph et aurore\Documents\assurance scolaire baptiste.pdf
[2013/07/29 11:59:43 | 000,339,813 | ---- | M] () -- C:\Users\steph et aurore\Documents\assurance scolaire timeo.pdf
[2013/07/26 18:52:18 | 000,308,568 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2013/08/08 15:40:34 | 680,758,654 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013/08/08 14:45:37 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013/08/08 14:32:05 | 000,000,099 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013/08/04 13:28:56 | 000,001,013 | ---- | C] () -- C:\Users\steph et aurore\Desktop\Project64 - Raccourci.lnk
[2013/08/02 18:54:30 | 000,297,354 | ---- | C] () -- C:\Users\steph et aurore\Documents\LM.pdf
[2013/08/02 13:47:46 | 000,002,124 | ---- | C] () -- C:\Users\steph et aurore\Application Data\Microsoft\Internet Explorer\Quick Launch\Samsung Story Album Viewer.lnk
[2013/07/29 12:00:45 | 000,306,034 | ---- | C] () -- C:\Users\steph et aurore\Documents\assurance scolaire baptiste.pdf
[2013/07/29 11:59:43 | 000,339,813 | ---- | C] () -- C:\Users\steph et aurore\Documents\assurance scolaire timeo.pdf
[2013/07/26 18:52:08 | 000,308,568 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/07/24 19:34:08 | 000,386,642 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
[2013/04/18 19:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2013/04/18 19:06:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2013/04/18 19:06:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2013/04/18 19:06:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2013/04/18 19:06:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2013/03/05 22:31:35 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2013/03/05 21:39:00 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013/03/05 19:11:40 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat
[2013/03/05 19:11:30 | 000,000,451 | ---- | C] () -- C:\Windows\SysWow64\DiagFunc.ini
[2013/03/05 19:11:29 | 000,147,456 | ---- | C] () -- C:\Windows\SysWow64\DiagFunc.dll
[2012/12/14 05:49:58 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012/10/19 09:07:11 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012/10/19 09:07:11 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012/10/19 09:07:10 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2012/07/26 10:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2012/07/26 10:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2012/07/26 09:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2012/07/26 03:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2012/07/25 22:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2012/07/25 22:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2012/07/25 22:22:56 | 000,267,284 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin
[2012/07/25 22:22:54 | 000,963,376 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin
[2012/06/02 16:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2012/04/20 14:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
[2011/09/28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2013/03/08 15:49:21 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/03/06 08:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/03/06 07:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2013/08/03 11:55:46 | 000,000,000 | ---D | M] -- C:\Users\steph et aurore\AppData\Roaming\index
[2013/04/10 15:48:04 | 000,000,000 | ---D | M] -- C:\Users\steph et aurore\AppData\Roaming\OpenOffice.org
[2013/06/21 17:58:24 | 000,000,000 | ---D | M] -- C:\Users\steph et aurore\AppData\Roaming\Samsung
[2013/03/16 12:33:34 | 000,000,000 | ---D | M] -- C:\Users\steph et aurore\AppData\Roaming\SystemRequirementsLab
[2013/04/05 14:33:51 | 000,000,000 | ---D | M] -- C:\Users\steph et aurore\AppData\Roaming\WildTangent

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2013/08/08 14:32:12 | 000,004,557 | ---- | M] () -- C:\AdwCleaner[S1].txt
[2012/06/02 16:30:55 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2013/08/08 15:40:32 | 818,970,623 | -HS- | M] () -- C:\hiberfil.sys
[2013/08/08 15:40:34 | 2147,483,647 | -HS- | M] () -- C:\pagefile.sys
[2013/08/08 17:06:25 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/08/08 15:40:34 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2012/07/26 10:11:35 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2013/03/06 15:15:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AbiWord
[2013/03/08 15:56:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Acer
[2012/12/14 06:01:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AMD APP
[2013/06/19 11:31:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2012/12/14 06:01:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies
[2013/06/19 11:31:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2013/04/13 15:01:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BRS
[2013/03/05 19:11:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cisco
[2013/04/13 14:44:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Codemasters
[2013/06/19 11:31:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2012/10/22 05:02:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
[2013/05/04 10:47:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EA GAMES
[2012/10/22 04:58:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EgisTec IPS
[2012/10/22 04:59:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EgisTec MyWinLocker
[2012/10/22 04:58:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EgisTec MyWinLockerSuite
[2012/10/22 04:59:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EgisTec Shredder
[2013/03/21 15:17:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Elaborate Bytes
[2013/03/16 12:38:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Futuremark
[2013/05/26 18:01:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2013/03/05 19:11:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hama
[2013/03/05 21:39:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP
[2013/03/05 21:39:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Photo Creations
[2013/08/02 13:47:36 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2012/12/14 06:05:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2013/07/24 22:46:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2013/06/19 11:32:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2013/06/29 10:38:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2013/08/02 13:43:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MarkAny
[2013/06/22 19:20:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2013/04/13 15:16:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2012/12/14 06:19:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2013/07/24 19:48:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2012/07/26 10:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2012/10/22 04:29:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2013/05/24 18:01:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MyFree Codec
[2012/10/22 05:01:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Nero
[2013/04/13 15:01:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenAL
[2013/04/10 15:45:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenOffice.org 3
[2013/08/04 13:28:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Project64 1.6
[2012/12/14 06:06:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2012/10/22 04:29:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2013/08/02 13:47:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Samsung
[2013/08/08 14:32:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Software
[2012/12/14 06:20:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Symantec
[2013/03/20 21:55:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SystemRequirementsLab
[2012/12/14 06:06:37 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
[2013/05/02 17:40:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TomTom International B.V
[2013/03/22 00:12:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
[2012/10/22 04:53:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WildGames
[2013/04/05 14:33:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WildTangent Games
[2013/03/31 01:12:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2012/12/14 14:45:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2013/03/08 15:11:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2012/07/26 10:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform
[2012/07/26 10:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2013/06/19 20:47:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2012/07/26 10:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2012/07/26 10:12:59 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar
[2013/05/17 18:36:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2012/07/26 07:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\SysNative\drivers\AGP440.sys
[2012/07/26 07:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_81a4c6c9cc9d86a0\AGP440.sys
[2012/07/26 07:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_6.2.9200.16384_none_12dc94a048750f71\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2012/07/26 05:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=2D14788C5D0836292BEB27BBE109BE56 -- C:\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.2.9200.16384_none_da988fc8e5cdd730\appmgmts.dll
[2012/07/26 05:17:52 | 000,152,064 | ---- | M] (Microsoft Corporation) MD5=8F0F777B167CADDF9D206180B8558433 -- C:\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.2.9200.16384_none_e4ed3a1b1a2e992b\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\drivers\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_69660e2be041f47b\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_b733d17ea1e7f604\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.16384_none_3601cf7eab4e0493\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.16548_none_36311422ab29f479\atapi.sys
[2012/07/26 07:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.20652_none_36a9df45c455182a\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2013/05/15 04:24:10 | 000,793,088 | ---- | M] (Microsoft Corporation) MD5=61ADD65C9D1E2EAF8BB080A4D6AAB055 -- C:\Windows\SysWOW64\autochk.exe
[2013/05/15 04:24:10 | 000,793,088 | ---- | M] (Microsoft Corporation) MD5=61ADD65C9D1E2EAF8BB080A4D6AAB055 -- C:\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16612_none_dee8adbc92f0e8e0\autochk.exe
[2013/06/23 10:44:21 | 000,000,596 | ---- | M] () MD5=D311E77815BE96B21A9BE77C797DA1E8 -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.20717_none_3b95e77d64677893\autochk.exe
[2013/06/23 18:39:39 | 000,000,619 | ---- | M] () MD5=E3CF5913F597B9B907703979318AEDE1 -- C:\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.20717_none_df774bf9ac0a075d\autochk.exe
[2013/06/23 18:39:38 | 000,034,714 | ---- | M] () MD5=E3EB6CAF64A40F5AD58A83EAB7183FF8 -- C:\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16384_none_de9ef92a9327e7b0\autochk.exe
[2013/05/15 04:25:59 | 000,888,320 | ---- | M] (Microsoft Corporation) MD5=E47235E8DF26CA48DA189ACFD756329C -- C:\Windows\SysNative\autochk.exe
[2013/05/15 04:25:59 | 000,888,320 | ---- | M] (Microsoft Corporation) MD5=E47235E8DF26CA48DA189ACFD756329C -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16612_none_3b0749404b4e5a16\autochk.exe
[2013/06/23 10:44:20 | 000,040,790 | ---- | M] () MD5=F19DA4DAEBB2360B4EEB3CEA34F12607 -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16384_none_3abd94ae4b8558e6\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2012/07/26 04:30:19 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=9E7AEA59776D904607985AFFE7E5E183 -- C:\Windows\SysNative\drivers\beep.sys
[2012/07/26 04:30:19 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=9E7AEA59776D904607985AFFE7E5E183 -- C:\Windows\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.2.9200.16384_none_1cea48b791617e52\beep.sys

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2013/06/01 13:34:21 | 002,391,280 | ---- | M] (Microsoft Corporation) MD5=0E8E6463F81C80AFBED533E0F1F8895D -- C:\Windows\explorer.exe
[2013/06/01 13:34:21 | 002,391,280 | ---- | M] (Microsoft Corporation) MD5=0E8E6463F81C80AFBED533E0F1F8895D -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16628_none_aac334d9034c59e1\explorer.exe
[2013/06/23 10:49:36 | 000,003,739 | ---- | M] () MD5=164E4F71D229B2CA9596EEF371C98052 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_ab3dfcc41c75b5f2\explorer.exe
[2013/06/23 12:20:48 | 000,145,657 | ---- | M] () MD5=3D59A4C78CA93BD06E0957C8B073E319 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_b4d2f8c937e166b1\explorer.exe
[2013/07/28 11:21:48 | 000,191,911 | ---- | M] () MD5=8EB62D668D08250A74CDA803D4B5A241 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_b5080a0137b9becc\explorer.exe
[2013/07/28 11:15:35 | 000,217,360 | ---- | M] () MD5=8F31590B3697381097390A9E1AE4E5C6 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20733_none_ab3d00461c7696e9\explorer.exe
[2013/07/28 11:15:33 | 000,220,310 | ---- | M] () MD5=C0296E615FF3BEBAE33DC66D2A9C4CE7 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_aab35faf0358fcd1\explorer.exe
[2013/06/23 12:20:51 | 000,004,958 | ---- | M] () MD5=C7EC7A8B574BAF770E07E35938F70BED -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_b592a71650d677ed\explorer.exe
[2013/06/23 10:49:34 | 000,188,441 | ---- | M] () MD5=D141CEE7DE756559A88850AEC6210AD9 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_aa7e4e770380a4b6\explorer.exe
[2013/06/01 12:24:46 | 002,106,176 | ---- | M] (Microsoft Corporation) MD5=EAFE46B0292D2BD2467835E2ACF717CC -- C:\Windows\SysWOW64\explorer.exe
[2013/06/01 12:24:46 | 002,106,176 | ---- | M] (Microsoft Corporation) MD5=EAFE46B0292D2BD2467835E2ACF717CC -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16628_none_b517df2b37ad1bdc\explorer.exe
[2013/07/28 11:21:51 | 000,190,101 | ---- | M] () MD5=FFF3940E17F3882134D724235F98DF1E -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20733_none_b591aa9850d758e4\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2012/07/26 05:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=C0A9999E5B4C1953C6B07CD9105B41FD -- C:\Windows\SysWOW64\hidserv.dll
[2012/07/26 05:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=C0A9999E5B4C1953C6B07CD9105B41FD -- C:\Windows\WinSxS\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.2.9200.16384_none_39ca9a244593a029\hidserv.dll
[2012/07/26 05:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=FAC37D7B3D6354A5A5E19A45B50B4008 -- C:\Windows\SysNative\hidserv.dll
[2012/07/26 05:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=FAC37D7B3D6354A5A5E19A45B50B4008 -- C:\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.2.9200.16384_none_2f75efd21132de2e\hidserv.dll

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2012/07/26 07:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2012/07/26 07:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_819876bbe5c3b25f\iaStorV.sys
[2012/07/26 07:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_6.2.9200.16384_none_07daf9dd118c3086\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2012/07/26 04:27:28 | 000,121,344 | ---- | M] (Microsoft Corporation) MD5=51E886381803D55926A6D50643B9436C -- C:\Windows\SysWOW64\imm32.dll
[2012/07/26 04:27:28 | 000,121,344 | ---- | M] (Microsoft Corporation) MD5=51E886381803D55926A6D50643B9436C -- C:\Windows\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.2.9200.16384_none_bf746fcd388ff4f4\imm32.dll
[2012/07/26 05:05:49 | 000,213,504 | ---- | M] (Microsoft Corporation) MD5=DA66D6D4A0B77D57F5CF449B1231010F -- C:\Windows\SysNative\imm32.dll
[2012/07/26 05:05:49 | 000,213,504 | ---- | M] (Microsoft Corporation) MD5=DA66D6D4A0B77D57F5CF449B1231010F -- C:\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.2.9200.16384_none_b51fc57b042f32f9\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2013/06/23 11:32:42 | 000,146,568 | ---- | M] () MD5=00F72AB5C0B71608450C1B0EE6E88945 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16384_none_ec878ca5e00fbea5\kernel32.dll
[2013/06/23 12:43:57 | 000,000,190 | ---- | M] () MD5=69FB26ACE36BAC95A632232E5681327A -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20732_none_f799e87d2d67597c\kernel32.dll
[2013/06/23 11:32:44 | 000,147,542 | ---- | M] () MD5=72204A75D73A95FC0910512EEA6B3E48 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20708_none_ed6bafaaf8e8dbb8\kernel32.dll
[2013/06/23 12:43:53 | 000,052,285 | ---- | M] () MD5=8A51A9AB4B18858D46A3302FDC791CC1 -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16384_none_f6dc36f8147080a0\kernel32.dll
[2013/05/31 01:08:26 | 000,974,848 | ---- | M] (Microsoft Corporation) MD5=941B22338052E8A0ADA7944B827E3E2A -- C:\Windows\SysWOW64\kernel32.dll
[2013/05/31 01:08:26 | 000,974,848 | ---- | M] (Microsoft Corporation) MD5=941B22338052E8A0ADA7944B827E3E2A -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16627_none_f7201d10143d1c74\kernel32.dll
[2013/06/23 11:32:45 | 000,140,299 | ---- | M] () MD5=BC9B330A4E5329B8E0164ABE6398A9A0 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20732_none_ed453e2af9069781\kernel32.dll
[2013/06/23 11:32:43 | 000,122,358 | ---- | M] () MD5=DE7FE76E475E6EC2B3AEBCECDD7E016C -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16604_none_ecde11b7dfced692\kernel32.dll
[2013/06/23 12:43:54 | 000,043,697 | ---- | M] () MD5=E10F972B51A8E3530849F777016FB590 -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16604_none_f732bc0a142f988d\kernel32.dll
[2013/05/31 01:24:29 | 001,257,472 | ---- | M] (Microsoft Corporation) MD5=E1FF9D65E6B86F7EBB531AE36C5AF635 -- C:\Windows\SysNative\kernel32.dll
[2013/05/31 01:24:29 | 001,257,472 | ---- | M] (Microsoft Corporation) MD5=E1FF9D65E6B86F7EBB531AE36C5AF635 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16627_none_eccb72bddfdc5a79\kernel32.dll
[2013/06/23 12:43:55 | 000,043,698 | ---- | M] () MD5=F06B8DCAE6E8BDA15FBF61732C36EA6F -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20708_none_f7c059fd2d499db3\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2012/10/11 07:44:51 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=1AC307A2F7317007BC382046B3835202 -- C:\Windows\SysNative\mswsock.dll
[2012/10/11 07:44:51 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=1AC307A2F7317007BC382046B3835202 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16433_none_11520fa2b6e84ca0\mswsock.dll
[2013/06/23 12:04:18 | 000,000,945 | ---- | M] () MD5=74CFBF03BD2A2A28B231ADC14EFCB5ED -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.20534_none_11dcacb7d00505c1\mswsock.dll
[2013/06/23 12:04:18 | 000,001,574 | ---- | M] () MD5=AA1AE6B9B9C9F6F2AF4B47AC8A7F3DC5 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16384_none_111cfe6ab70ff485\mswsock.dll
[2012/10/11 07:06:45 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=C317E72447B437F99CC750BD876DF30E -- C:\Windows\SysWOW64\mswsock.dll
[2012/10/11 07:06:45 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=C317E72447B437F99CC750BD876DF30E -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16433_none_b533741efe8adb6a\mswsock.dll
[2013/06/23 18:54:27 | 000,009,902 | ---- | M] () MD5=DDB231A7D8EBF7DE4728F6FE48B2C864 -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16384_none_b4fe62e6feb2834f\mswsock.dll
[2013/06/23 18:54:28 | 000,000,998 | ---- | M] () MD5=F80F6EEEAE5AF078E00E8B612D6C2952 -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.20534_none_b5be113417a7948b\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2013/07/28 11:18:21 | 000,051,156 | ---- | M] () MD5=56F9184C73A9869E3B6FA73D46876B02 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16628_none_b2640bfbb19bf6df\ndis.sys
[2013/06/23 11:37:22 | 000,080,917 | ---- | M] () MD5=75D93AB245EE14397FBCDD137C6B2B0C -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16420_none_b25c05dfb1a331d9\ndis.sys
[2013/06/23 11:37:27 | 000,000,956 | ---- | M] () MD5=7FEF5EDAAF7C4BC79B78E734C587F2EE -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20623_none_b2e8a56ecabe1acf\ndis.sys
[2013/07/28 11:18:23 | 000,123,394 | ---- | M] () MD5=947138DA155B32167E3B9CEE27600FAE -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20750_none_b2c536b2cad91fc4\ndis.sys
[2013/06/17 00:41:31 | 000,997,632 | ---- | M] (Microsoft Corporation) MD5=A10E176F3B2BF83EDE7B5C4658C93B66 -- C:\Windows\SysNative\drivers\ndis.sys
[2013/06/17 00:41:31 | 000,997,632 | ---- | M] (Microsoft Corporation) MD5=A10E176F3B2BF83EDE7B5C4658C93B66 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16643_none_b2496ab1b1b0b00e\ndis.sys
[2013/06/23 11:37:25 | 000,080,905 | ---- | M] () MD5=B9E714693CA2F0B829C36A392919A889 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20534_none_b2ded3e6cac552f0\ndis.sys
[2013/06/23 11:37:21 | 000,084,368 | ---- | M] () MD5=D41E909B535813AA87DBEDFBD8372F34 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16384_none_b21f2599b1d041b4\ndis.sys
[2013/06/23 11:37:23 | 000,080,907 | ---- | M] () MD5=E6D88BECB04368BDE36404B1440BFB75 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16433_none_b25436d1b1a899cf\ndis.sys
[2013/07/28 11:18:22 | 000,123,250 | ---- | M] () MD5=EF96C68D8DDDF30D83F4CF6D0DB7D17B -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20733_none_b2ddd768cac633e7\ndis.sys
[2013/06/23 11:37:24 | 000,080,923 | ---- | M] () MD5=F4E1BE3EA3F940F342A1F623793A260B -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20521_none_b2e6a2f4cabfeafa\ndis.sys
[2013/07/28 11:18:19 | 000,126,379 | ---- | M] () MD5=FD7A5A27B1C416CBE727F01AF77A48ED -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16518_none_b26eda01b193ddc7\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2012/07/26 05:19:22 | 000,634,368 | ---- | M] (Microsoft Corporation) MD5=EEF9DA64D7B1DD51FB8AB9EFCC560E3E -- C:\Windows\SysWOW64\netlogon.dll
[2012/07/26 05:19:22 | 000,634,368 | ---- | M] (Microsoft Corporation) MD5=EEF9DA64D7B1DD51FB8AB9EFCC560E3E -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.2.9200.16384_none_60d608f9f61ee049\netlogon.dll
[2012/07/26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) MD5=FDC70965F0FC9DFEBC919627DED5DDFF -- C:\Windows\SysNative\netlogon.dll
[2012/07/26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) MD5=FDC70965F0FC9DFEBC919627DED5DDFF -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.2.9200.16384_none_56815ea7c1be1e4e\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2013/06/23 11:38:14 | 000,041,699 | ---- | M] () MD5=2A723C0A8B69B5BFAB6DBF583EEBD02C -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.20604_none_001af118bf8c8a1a\ntfs.sys
[2013/06/23 11:38:12 | 000,041,771 | ---- | M] () MD5=3CCE05D22B27E9707698429C4F3B9F23 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16497_none_ff3303f9a6b534a7\ntfs.sys
[2013/06/23 11:38:16 | 000,001,970 | ---- | M] () MD5=5AFFCFCF7A6BA95FBB691ACC0214F09F -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.20623_none_000450f6bf9da8a5\ntfs.sys
[2013/02/02 12:54:54 | 001,933,544 | ---- | M] (Microsoft Corporation) MD5=76929F4A69E425911A63B407E26C2589 -- C:\Windows\SysNative\drivers\ntfs.sys
[2013/02/02 12:54:54 | 001,933,544 | ---- | M] (Microsoft Corporation) MD5=76929F4A69E425911A63B407E26C2589 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16518_none_ff8a8589a6736b9d\ntfs.sys
[2013/06/23 11:38:10 | 000,146,946 | ---- | M] () MD5=D23B1F239BA320152BAB04CA6A7C9EA0 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16384_none_ff3ad121a6afcf8a\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2012/07/26 07:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\SysNative\drivers\nvstor.sys
[2012/07/26 07:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_7ba65ba4b222e751\nvstor.sys
[2012/07/26 07:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_6.2.9200.16384_none_92a46a8c48c2da5e\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2012/07/26 05:08:36 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=5E3A61CE8F1CE3A166FFD76425CB6340 -- C:\Windows\SysNative\proquota.exe
[2012/07/26 05:08:36 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=5E3A61CE8F1CE3A166FFD76425CB6340 -- C:\Windows\WinSxS\amd64_microsoft-windows-proquota_31bf3856ad364e35_6.2.9200.16384_none_80909f3c1c295de0\proquota.exe
[2012/07/26 05:20:53 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=B7D1E1915AA8A55E2FAF56BC3B524C48 -- C:\Windows\SysWOW64\proquota.exe
[2012/07/26 05:20:53 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=B7D1E1915AA8A55E2FAF56BC3B524C48 -- C:\Windows\WinSxS\x86_microsoft-windows-proquota_31bf3856ad364e35_6.2.9200.16384_none_247203b863cbecaa\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2012/07/26 05:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) MD5=D598C44A7072D3108D8D8102EC5E07F7 -- C:\Windows\SysNative\qmgr.dll
[2012/07/26 05:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) MD5=D598C44A7072D3108D8D8102EC5E07F7 -- C:\Windows\WinSxS\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.2.9200.16384_none_7c5a6c5183364183\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2012/07/26 05:07:07 | 000,224,768 | ---- | M] (Microsoft Corporation) MD5=4F6E1CA672370A9BCAC049CE3AB7F666 -- C:\Windows\SysNative\scecli.dll
[2012/07/26 05:07:07 | 000,224,768 | ---- | M] (Microsoft Corporation) MD5=4F6E1CA672370A9BCAC049CE3AB7F666 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.2.9200.16384_none_90d789c062dfa509\scecli.dll
[2012/07/26 05:19:52 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=B95DC83FF580DD92F487C2F4D0854B6A -- C:\Windows\SysWOW64\scecli.dll
[2012/07/26 05:19:52 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=B95DC83FF580DD92F487C2F4D0854B6A -- C:\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.2.9200.16384_none_9b2c341297406704\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2012/07/26 05:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) MD5=3F215BF2D4D8D6756298B25B579772C2 -- C:\Windows\SysNative\spoolsv.exe
[2012/07/26 05:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) MD5=3F215BF2D4D8D6756298B25B579772C2 -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.2.9200.16384_none_2f154a864b4cfb0d\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2013/06/23 18:51:19 | 000,000,583 | ---- | M] () MD5=1230AC4E41432FD2C7D63F805FCB63C0 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_b32de2dcefa42bec\svchost.exe
[2012/09/20 07:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\SysWOW64\svchost.exe
[2012/09/20 07:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_b2a345c7d68772cb\svchost.exe
[2013/06/23 11:51:16 | 000,002,873 | ---- | M] () MD5=AB1BC2C7B3F615D3E25E47E601AAB6A4 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_0e8501058f11f3dc\svchost.exe
[2013/06/23 18:51:19 | 000,003,208 | ---- | M] () MD5=DFCE778E708693A2B6A2BDF17A52276B -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_b2666581d6b482a6\svchost.exe
[2012/09/20 08:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\SysNative\svchost.exe
[2012/09/20 08:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_0ec1e14b8ee4e401\svchost.exe
[2013/06/23 11:51:16 | 000,000,609 | ---- | M] () MD5=F3588F20B97A2662263FB534913274C1 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_0f4c7e60a8019d22\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2012/07/26 05:07:29 | 000,723,968 | ---- | M] (Microsoft Corporation) MD5=541EE228D0DEF392F7B2DFD885DD021B -- C:\Windows\SysNative\termsrv.dll
[2012/07/26 05:07:29 | 000,723,968 | ---- | M] (Microsoft Corporation) MD5=541EE228D0DEF392F7B2DFD885DD021B -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.2.9200.16384_none_e768e92cde084d59\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2012/07/26 05:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\SysNative\userinit.exe
[2012/07/26 05:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_34f2617a5b742e02\userinit.exe
[2012/07/26 05:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\SysWOW64\userinit.exe
[2012/07/26 05:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_d8d3c5f6a316bccc\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2013/06/01 14:06:28 | 000,332,032 | ---- | M] (Microsoft Corporation) MD5=0548F5D3282A91B69F9D39EE771307F7 -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.20733_none_6f3f10b49ecf22f7\volsnap.sys
[2012/07/26 06:57:09 | 000,332,016 | ---- | M] (Microsoft Corporation) MD5=2FB3CDFD5EAF4CD9D4AFAF96877D13AE -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_9d78abd6ac3df11c\volsnap.sys
[2012/07/26 06:57:09 | 000,332,016 | ---- | M] (Microsoft Corporation) MD5=2FB3CDFD5EAF4CD9D4AFAF96877D13AE -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.16384_none_6e805ee585d930c4\volsnap.sys
[2013/06/01 13:26:33 | 000,327,936 | ---- | M] (Microsoft Corporation) MD5=78A5BBA3819FFFC62FFEC3E2220D102D -- C:\Windows\SysNative\drivers\volsnap.sys
[2013/06/01 13:26:33 | 000,327,936 | ---- | M] (Microsoft Corporation) MD5=78A5BBA3819FFFC62FFEC3E2220D102D -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_84c99cb521dc4714\volsnap.sys
[2013/06/01 13:26:33 | 000,327,936 | ---- | M] (Microsoft Corporation) MD5=78A5BBA3819FFFC62FFEC3E2220D102D -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.16628_none_6ec5454785a4e5ef\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2013/06/23 10:56:46 | 000,390,359 | ---- | M] () MD5=097F8E0152752C8A6FC79D8CB3B9D830 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16433_none_a12b51eee0322d03\wininet.dll
[2013/06/23 18:45:36 | 000,311,141 | ---- | M] () MD5=0DA871053F059CA2A1456DE20CEFA0DB -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16384_none_451c710127c83830\wininet.dll
[2013/06/23 18:46:03 | 000,322,196 | ---- | M] () MD5=21BC3723B74AC7BA9BCD296FB2D48008 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20521_none_2e336d294184eada\wininet.dll
[2013/06/23 10:56:40 | 000,388,208 | ---- | M] () MD5=2D507B2B970F71B3B756048D6C6C4827 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16384_none_a13b0c84e025a966\wininet.dll
[2013/06/23 18:46:26 | 000,312,727 | ---- | M] () MD5=3CED7F7174153D54E402BEA836A1827D -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20703_none_2e1b9f2d41972350\wininet.dll
[2013/06/23 18:45:40 | 000,322,188 | ---- | M] () MD5=58A675D0F2D0481D9A477B16BD5ECDB3 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16420_none_450bfa7927d55593\wininet.dll
[2013/06/23 18:45:44 | 000,322,183 | ---- | M] () MD5=6C11291100CF2F1E108F8E2C1C306CE3 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16433_none_450cb66b27d4bbcd\wininet.dll
[2013/06/23 11:02:22 | 000,381,389 | ---- | M] () MD5=9AFD5C0BA9224C4E0E241FBBE7ED9802 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20703_none_8a3a3ab0f9f49486\wininet.dll
[2013/06/12 01:43:37 | 001,767,936 | ---- | M] (Microsoft Corporation) MD5=9BF7C7654EFD098EE3A27B49492A382A -- C:\Windows\SysWOW64\wininet.dll
[2013/06/12 01:43:37 | 001,767,936 | ---- | M] (Microsoft Corporation) MD5=9BF7C7654EFD098EE3A27B49492A382A -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16635_none_44f6e90327e526f1\wininet.dll
[2013/07/28 11:25:15 | 000,317,474 | ---- | M] () MD5=9E36547C47E808CA00CB407FBBA69CEF -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20742_none_2e1fb71d41936f0b\wininet.dll
[2013/07/28 11:25:11 | 000,008,006 | ---- | M] () MD5=AE73F4B70826797F09ACD2C3139796E1 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16599_none_45075f8b27d8098e\wininet.dll
[2013/06/23 11:02:06 | 000,390,372 | ---- | M] () MD5=C8064F2BAE5C518AED37E3D9428F75B9 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20521_none_8a5208acf9e25c10\wininet.dll
[2013/07/28 11:15:41 | 000,021,108 | ---- | M] () MD5=EC6CCB11F87D384684FA101DABE83A40 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16599_none_a125fb0ee0357ac4\wininet.dll
[2013/06/23 18:46:06 | 000,322,192 | ---- | M] () MD5=EDD65D2840E39D33363B32BCFCA13595 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20534_none_2e34291b41845114\wininet.dll
[2013/07/28 11:15:44 | 000,382,489 | ---- | M] () MD5=F65ABBE4639B142729A1DE6AAFBF2695 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20742_none_8a3e52a0f9f0e041\wininet.dll
[2013/06/23 10:56:43 | 000,390,338 | ---- | M] () MD5=F8708BD7F481651633AB2E7DE1AA5016 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16420_none_a12a95fce032c6c9\wininet.dll
[2013/06/12 01:26:20 | 002,241,024 | ---- | M] (Microsoft Corporation) MD5=FAF6EC2460AD5FBBD38D8E1AE28B0D77 -- C:\Windows\SysNative\wininet.dll
[2013/06/12 01:26:20 | 002,241,024 | ---- | M] (Microsoft Corporation) MD5=FAF6EC2460AD5FBBD38D8E1AE28B0D77 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16635_none_a1158486e0429827\wininet.dll
[2013/06/23 11:02:08 | 000,390,371 | ---- | M] () MD5=FCC160620EFE9C9BC2EDC8902B59473D -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20534_none_8a52c49ef9e1c24a\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2012/07/26 05:08:50 | 000,132,608 | ---- | M] (Microsoft Corporation) MD5=FE9AB232B56A12224E8A3F3F9878C9A3 -- C:\Windows\SysNative\wininit.exe
[2012/07/26 05:08:50 | 000,132,608 | ---- | M] (Microsoft Corporation) MD5=FE9AB232B56A12224E8A3F3F9878C9A3 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.2.9200.16384_none_89bc60338e14dc99\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2013/06/23 12:09:09 | 000,001,620 | ---- | M] () MD5=2A9004C2DE62202B039A20EF25CD7207 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe
[2013/06/23 12:09:09 | 000,001,620 | ---- | M] () MD5=2A9004C2DE62202B039A20EF25CD7207 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe
[2013/06/23 12:09:08 | 000,053,884 | ---- | M] () MD5=45BAB8EE6347EEDD0A2788FE1749A656 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe
[2013/06/23 12:09:08 | 000,053,884 | ---- | M] () MD5=45BAB8EE6347EEDD0A2788FE1749A656 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe
[2013/06/23 12:09:08 | 000,053,876 | ---- | M] () MD5=B193286B22ADCD2346727034E95C5B79 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe
[2013/06/23 12:09:08 | 000,053,876 | ---- | M] () MD5=B193286B22ADCD2346727034E95C5B79 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\SysNative\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\SysNative\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe
[2012/10/11 07:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe
[2013/06/23 12:09:07 | 000,053,889 | ---- | M] () MD5=FF2FB702FC4C81E591A1F0AD14A3258F -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe
[2013/06/23 12:09:07 | 000,053,889 | ---- | M] () MD5=FF2FB702FC4C81E591A1F0AD14A3258F -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2012/07/26 07:26:48 | 000,345,088 | ---- | M] (Microsoft Corporation) MD5=2E5B349ACDA36C20612795754DB93312 -- C:\Windows\SysNative\ws2_32.dll
[2012/07/26 07:26:48 | 000,345,088 | ---- | M] (Microsoft Corporation) MD5=2E5B349ACDA36C20612795754DB93312 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.2.9200.16384_none_4b815827581a3bbb\ws2_32.dll
[2012/07/26 05:20:38 | 000,310,784 | ---- | M] (Microsoft Corporation) MD5=B3CC9EDFD97F7087013A9A47089DF571 -- C:\Windows\SysWOW64\ws2_32.dll
[2012/07/26 05:20:38 | 000,310,784 | ---- | M] (Microsoft Corporation) MD5=B3CC9EDFD97F7087013A9A47089DF571 -- C:\Windows\WinSxS\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.2.9200.16384_none_ef62bca39fbcca85\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr entControlSet\Control\Session Manager\SubSystems /s >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[4 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* .sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2013/07/29 10:23:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I016VIH.pdf
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I080RIE.jpg
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I0DBWG8.jpg
[2013/07/31 13:38:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I0EQ2U9.zip
[2013/07/26 18:54:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I0HE1TM
[2013/07/27 12:05:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I0J2SOP.avi
[2013/08/07 15:23:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I0MMIUL.Ext
[2013/08/04 13:42:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I11CAIE.zip
[2013/08/04 13:25:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I2951ST.zip
[2013/05/09 16:41:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I2AMIT6.zip
[2013/07/21 17:37:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I2T7PM9.rar
[2013/07/27 12:05:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I2XZ029.rar
[2013/08/07 15:23:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I2YBHOY.txt
[2013/07/30 20:37:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I3WSB34.rar
[2013/07/29 10:23:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I47PQCL.xls
[2013/07/20 18:56:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I5PIKN2.jpg
[2013/07/30 20:37:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I5XEIUZ.rar
[2013/07/27 12:08:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I6R5LD3.rar
[2013/08/07 15:23:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I7MA71T.rar
[2013/07/29 10:23:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I7S45M3.xls
[2013/07/20 18:56:32 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I8DXS6Z.jpg
[2013/08/07 15:23:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$I9FAO3Q.dll
[2013/05/11 13:28:32 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IA3XEWU
[2013/07/29 10:24:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IAWW9UH.jpg
[2013/07/31 13:38:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IBLZ0O6.zip
[2013/07/29 15:46:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ICM4BH4.zip
[2013/07/18 21:04:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ICZGCLR.rar
[2013/07/29 10:24:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IDPTIEL.jpg
[2013/07/31 13:38:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IERFWK6.zip
[2013/07/27 12:05:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IF03JKX.zip
[2013/08/04 13:43:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IF9H9X9.zip
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IF9KVUK.jpg
[2013/05/09 16:26:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IFURJ78
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IGG2UGI.jpg
[2013/07/29 10:24:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IGUL3OK.jpg
[2013/07/29 10:23:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IHPXL7C.xls
[2013/07/29 10:23:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IHSTLHY.pdf
[2013/07/27 12:05:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IID9XDC.rar
[2013/07/21 17:43:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IIFICFX.zip
[2013/07/25 20:19:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IJVCMEQ
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IJXA4EC.jpg
[2013/08/07 15:23:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IK8EC00.txt
[2013/07/29 10:24:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ILF2S7F.xls
[2013/07/29 10:24:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ILIHLT8.jpg
[2013/07/29 10:24:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ILOCSQ5.jpg
[2013/07/30 11:36:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IM1TC8G
[2013/05/11 13:01:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IMHZWAP.zip
[2013/07/29 10:24:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IMKZREX.jpg
[2013/08/07 15:23:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IMTUKOB.txt
[2013/07/18 21:04:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IMZ2TEU.rar
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$INOTIJT.jpg
[2013/05/09 16:40:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IO0Z0X9
[2013/07/29 10:23:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IO4WSKD.pdf
[2013/07/29 10:23:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IO9M1V7.xls
[2013/07/29 10:24:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IOJ5BWE.jpg
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IOOXYRS.jpg
[2013/08/07 15:23:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IOTNRL5.txt
[2013/07/21 17:43:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IP75PCS.avi
[2013/05/09 10:36:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IQOP83K
[2013/07/30 20:37:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IQTJ2HR.zip
[2013/08/07 15:23:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IQZMXDL.txt
[2013/07/29 10:24:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IRLCHMZ.pdf
[2013/07/18 21:04:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ITSA2AT.rar
[2013/07/31 13:38:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ITTSGD5.zip
[2013/07/31 13:38:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IUAPTXT.zip
[2013/08/07 15:22:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IUJRYKS.rar
[2013/07/29 10:23:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IUNZBHR.pdf
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IUU7MJQ.jpg
[2013/05/09 11:57:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IUYG55O.zip
[2013/07/31 13:38:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IV8WP9Q.zip
[2013/07/14 14:43:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IWIEB72.jpg
[2013/07/29 10:23:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IXSHFSU.xls
[2013/08/07 15:23:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IXX58NP.txt
[2013/07/20 18:56:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IY40LIC.jpg
[2013/07/21 17:43:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IYJW1WZ.zip
[2013/08/07 15:22:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IYRXZUN.rar
[2013/07/31 13:38:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IZD8EQX.zip
[2013/07/29 10:24:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$IZL3WO0.jpg
[2013/07/08 16:51:11 | 000,072,482 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R016VIH.pdf
[2013/01/22 21:09:53 | 000,069,340 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R080RIE.jpg
[2012/12/29 12:45:46 | 000,076,020 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0DBWG8.jpg
[2013/07/31 12:59:11 | 014,551,668 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0EQ2U9.zip
[2013/07/15 22:53:11 | 368,768,530 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0J2SOP.avi
[2013/07/21 17:43:56 | 000,000,134 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0MMIUL.Ext
[2013/08/04 13:39:59 | 002,854,391 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R11CAIE.zip
[2013/08/04 13:20:45 | 001,867,443 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R2951ST.zip
[2013/07/15 21:44:28 | 254,505,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R2XZ029.rar
[2010/01/30 09:25:12 | 000,000,382 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R2YBHOY.txt
[2013/07/27 13:22:48 | 262,865,560 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R3WSB34.rar
[2013/07/05 10:39:13 | 000,029,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R47PQCL.xls
[2013/07/20 18:55:06 | 000,099,450 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R5PIKN2.jpg
[2013/07/27 12:17:30 | 262,865,560 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R5XEIUZ.rar
[2013/07/19 18:02:34 | 367,654,757 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R6R5LD3.rar
[2013/07/30 20:49:04 | 307,998,276 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R7MA71T.rar
[2013/07/01 18:16:15 | 000,029,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R7S45M3.xls
[2013/07/20 18:53:01 | 000,068,069 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R8DXS6Z.jpg
[2009/12/17 15:07:28 | 000,377,344 | ---- | M] (Firelight Technologies) -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R9FAO3Q.dll
[2013/07/03 10:52:48 | 000,056,672 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RAWW9UH.jpg
[2013/07/31 12:58:06 | 022,724,384 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RBLZ0O6.zip
[2013/07/29 15:41:47 | 014,485,277 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RCM4BH4.zip
[2013/06/10 20:32:56 | 101,066,032 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RCZGCLR.rar
[2013/07/03 10:19:04 | 000,076,843 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RDPTIEL.jpg
[2013/07/31 12:55:46 | 016,508,937 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RERFWK6.zip
[2013/07/22 20:41:01 | 072,383,344 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RF03JKX.zip
[2013/07/31 12:59:46 | 006,314,411 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RF9H9X9.zip
[2012/12/05 22:15:44 | 000,112,975 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RF9KVUK.jpg
[2013/01/22 21:10:02 | 000,081,135 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RGG2UGI.jpg
[2013/07/15 13:31:57 | 000,035,922 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RGUL3OK.jpg
[2013/07/20 18:51:36 | 000,029,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RHPXL7C.xls
[2013/07/08 16:51:38 | 000,072,711 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RHSTLHY.pdf
[2013/07/21 17:50:21 | 268,872,915 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RID9XDC.rar
[2013/06/09 10:32:51 | 392,502,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RIFICFX.zip
[2013/01/22 21:09:45 | 000,072,797 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RJXA4EC.jpg
[2013/07/21 17:43:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RK8EC00.txt
[2013/06/24 10:58:00 | 000,029,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RLF2S7F.xls
[2013/07/15 13:23:07 | 000,004,805 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RLIHLT8.jpg
[2013/07/03 10:18:56 | 000,077,188 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RLOCSQ5.jpg
[2013/07/09 21:41:02 | 000,085,967 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RMKZREX.jpg
[2010/01/12 19:33:38 | 000,146,466 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RMTUKOB.txt
[2013/07/18 20:23:21 | 362,991,841 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RMZ2TEU.rar
[2012/12/21 19:17:17 | 000,189,667 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RNOTIJT.jpg
[2013/07/01 18:33:29 | 000,013,279 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RO4WSKD.pdf
[2013/07/03 08:58:16 | 000,029,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RO9M1V7.xls
[2013/06/21 21:24:20 | 000,156,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ROJ5BWE.jpg
[2013/01/22 21:10:09 | 000,081,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ROOXYRS.jpg
[2010/01/16 21:23:26 | 000,000,645 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$ROTNRL5.txt
[2013/03/21 17:02:14 | 065,468,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RP75PCS.avi
[2013/07/29 15:43:41 | 030,354,520 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RQTJ2HR.zip
[2013/07/21 17:44:33 | 000,000,174 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RQZMXDL.txt
[2013/07/04 10:37:24 | 000,265,028 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RRLCHMZ.pdf
[2013/07/18 20:30:22 | 367,209,901 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RTSA2AT.rar
[2013/07/31 12:57:09 | 027,905,257 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RTTSGD5.zip
[2013/07/31 12:58:57 | 049,142,002 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RUAPTXT.zip
[2013/08/04 13:40:25 | 786,432,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RUJRYKS.rar
[2013/07/09 08:21:08 | 000,197,772 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RUNZBHR.pdf
[2012/12/19 16:29:32 | 000,171,820 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RUU7MJQ.jpg
[2013/07/31 12:56:37 | 009,968,004 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RV8WP9Q.zip
[2012/11/10 23:02:28 | 000,006,837 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RWIEB72.jpg
[2013/07/22 16:42:03 | 000,029,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RXSHFSU.xls
[2010/01/12 21:16:00 | 000,039,978 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RXX58NP.txt
[2013/07/20 18:53:52 | 000,068,069 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RY40LIC.jpg
[2013/06/09 11:08:48 | 025,964,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RYJW1WZ.zip
[2013/08/04 13:40:46 | 769,020,558 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RYRXZUN.rar
[2013/07/31 12:57:32 | 022,087,627 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RZD8EQX.zip
[2013/07/09 20:31:52 | 000,099,743 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RZL3WO0.jpg
[2013/03/05 18:51:58 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\desktop.ini
[2008/06/13 02:43:06 | 013,492,736 | ---- | M] (Codemasters) -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\GRID.exe
[2008/10/12 06:05:25 | 2607,415,295 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\Race.Driver.GRID-RELOADED.iso
[2008/06/27 17:46:43 | 000,004,106 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\rdg1-dtn.nfo
[2010/12/31 19:11:58 | 000,015,097 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\README.TXT
[2008/10/12 18:09:08 | 003,832,455 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\[PC GAME NoCD] Race Driver GRID Crack v1.1 Fr Eng Ita Spa Ger Certified ok NoDVD.rar
[2010/12/30 13:03:34 | 000,001,315 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\common.lua
[2010/12/31 18:01:44 | 000,001,443 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\daytona.lua
[2010/12/31 18:59:30 | 000,000,032 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\daytona.pat
[2013/05/09 10:15:18 | 011,750,659 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\daytona.zip
[2010/12/28 15:21:30 | 000,000,415 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\model2.lua
[2010/12/31 18:58:00 | 000,007,302 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\model2lua.txt
[2010/12/30 14:35:46 | 000,000,312 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\srallyc.lua
[2010/12/30 14:35:46 | 000,000,312 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$R0HE1TM\scripts\srallycb.lua
[2013/04/28 02:10:04 | 000,000,082 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RJVCMEQ\Olympe - 18 titres\._.DS_Store
[2004/01/24 20:45:46 | 003,941,901 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\01. La flamme.mp3
[2004/01/24 20:46:14 | 004,120,787 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\02. Fight here.mp3
[2004/01/24 20:46:34 | 002,514,570 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\03. Mauvaise réputation.mp3
[2004/01/24 20:46:54 | 003,241,401 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\04. I'm on the war.mp3
[2004/01/24 20:47:12 | 002,501,613 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\05. De l'histoire.mp3
[2004/01/24 20:47:30 | 002,833,891 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\06. Défenseur de la paix.mp3
[2004/01/24 20:47:48 | 002,463,161 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\07. L'amour comme arme.mp3
[2004/01/24 20:48:10 | 003,798,123 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\08. From laniless to madness.mp3
[2004/01/24 20:48:14 | 000,550,998 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\09. Dans le camion.mp3
[2004/01/24 20:48:36 | 003,478,384 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\10. Douanier 007.mp3
[2004/01/24 20:49:12 | 005,805,581 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\11. Roots on war.mp3
[2004/01/24 20:49:32 | 003,303,677 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\12. Hold up.mp3
[2004/01/24 20:50:04 | 004,823,377 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\13. Je préfère cent fois.mp3
[2005/12/21 22:12:40 | 003,022,890 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Billy the kick - OCB.mp3
[2004/01/11 15:58:26 | 004,082,173 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\01. Tout c'qu'on a.mp3
[2004/01/11 15:58:26 | 004,924,779 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\02. Ce style.mp3
[2004/01/11 15:58:26 | 003,475,296 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\03. I'm on war.mp3
[2004/01/11 15:58:26 | 004,252,282 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\04. Née elle.mp3
[2004/01/11 15:58:26 | 004,086,353 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\05. Medley premiere récolte.mp3
[2004/01/11 15:58:26 | 002,984,612 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\06. Antifacho dub.mp3
[2004/01/11 15:58:26 | 003,959,293 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\07. Jamais une mélodie ne rendra beau l'immonde.mp3
[2004/01/11 15:58:26 | 005,830,914 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\08. Little child.mp3
[2004/01/11 15:58:28 | 004,373,490 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\09. Douanier 007.mp3
[2004/01/11 15:58:28 | 004,918,509 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\10. Je préfère cent fois.mp3
[2004/01/11 15:58:28 | 001,100,870 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\11. La mauvaise réputation.mp3
[2004/01/11 15:58:28 | 002,490,584 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\12. La mauvaise réputation.mp3
[2004/01/11 15:58:28 | 013,836,504 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-1001\$RM1TC8G\Sinsemilia - Sinsé Part En Live\13. Amour gloire et beauté.mp3
[2012/12/14 05:58:01 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2647307370-3958953616-775769082-500\desktop.ini
[2012/07/26 09:22:10 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2013/03/05 19:48:11 | 000,001,100 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013/03/05 19:48:12 | 000,001,104 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< End of report >

Publicité


Signaler le contenu de ce document

Publicité