problem kernel Résolu

Question

Bonjour, svp aidez-moi j'ai un problème qui m'innerve au démarrage de mon ordinateur Acer il y a un message:"impossible de trouver le fichier script "C:\Kernel\r00t3r" j'utilise Windows 7 professionnel 32 bits comment je peux réparer ce problème,je suis nul en informatique merci d'avance j'ai faisais un scan avec kingofsat et voila le rapport svp aidez moi Configuration:

Utilisateur anonyme · Answer

bonjour,

* Télécharge ZHPDiag sur ton bureau :
	
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

ou 
http://www.premiumorange.com/zeb-help-process/zhpdiag.html 

 
* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin. 

/!\Utilisateur de Vista, Seven et W8 : 

* Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

* Clique sur le tourne vis, sélectionne tous les modules.

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic ») 
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette 
* Héberge le rapport ZHPDiag.txt sur Cjoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :


https://www.cjoint.com/  => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

lotfi rx · Answer

https://www.cjoint.com/?0Deoa26HoU4

Utilisateur anonyme · Answer

ton pc est bien infecté !

 *	[*] Télécharger et enregistre RogueKiller sur le bureau 
https://www.luanagames.com/index.fr.html (by tigzy) 
[*] Quitter tous les programmes 
[*] Lancer RogueKiller.exe.
[*] Attendre que le Prescan ait fini ...
[*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du notepad

Note : Si RogueKiller ne se lance pas, change son nom en Winlogon.	

Tuto :
http://tigzyrk.blogspot.fr/2012/10/fr-roguekiller-tutoriel-officiel.html

lotfi rx · Answer

RogueKiller V8.5.4 [Mar 18 2013] par Tigzy mail : tigzyRKgmailcom Remontees : https://www.luanagames.com/index.fr.html Site Web : https://www.luanagames.com/index.fr.html Blog : http://tigzyrk.blogspot.com/ Systeme d'exploitation : Windows 7 (6.1.7600 Service Pack 1) 32 bits version Demarrage : Mode normal Utilisateur : pc [Droits d'admin] Mode : Recherche -- Date : 05/04/2013 00:35:48 | ARK || FAK || MBR | ¤¤¤ Processus malicieux : 1 ¤¤¤ [SERVICE] IBUpdaterService -- C:\Windows\System32\dmwu.exe [7] -> STOPPÉ ¤¤¤ Entrees de registre : 13 ¤¤¤ [Services][BLSVC] HKLM\[...]\ControlSet001\Services\IBUpdaterService (C:\Windows\System32\dmwu.exe) -> TROUVÉ [Services][BLSVC] HKLM\[...]\ControlSet002\Services\IBUpdaterService (C:\Windows\System32\dmwu.exe) -> TROUVÉ [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ [HJ] HKLM\[...]\System : EnableLUA (0) -> TROUVÉ [HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> TROUVÉ [HJ DESK] HKCU\[...]\ClassicStartMenu : {59031A47-3F72-44A7-89C5-5595FE6B30EE} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> TROUVÉ [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver : [CHARGE] ¤¤¤ SSDT[93] : NtCreateUserProcess @ 0x82C6F229 -> HOOKED (\??\C:\Windows\system32\drivers\kisknl.sys @ 0x8E8668DA) ¤¤¤ Fichier HOSTS: ¤¤¤ --> C:\Windows\system32\drivers\etc\hosts 127.0.0.1 genuine.microsoft.com 127.0.0.1 mpa.one.microsoft.com 127.0.0.1 sls.microsoft.com ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: WDC WD3200BEVT-22ZCT0 ATA Device +++++ --- User --- [MBR] 51ee66b0611633102158a8e1c29ace8a [BSP] 089451b4f8604bcf2a4eaa280b58e069 : Windows 7/8 MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 221144 Mo 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 453109760 | Size: 83999 Mo User = LL1 ... OK! User = LL2 ... OK! Termine : << RKreport[1]_S_05042013_003548.txt >> RKreport[1]_S_05042013_003548.txt

Utilisateur anonyme · Answer

ok,

relance Roguekiller,

[*] Quitter tous les programmes, même ta messagerie incredimail !
[*] Lancer RogueKiller.exe.
[*] Attendre que le Prescan ait fini ...
[*] Cliquer sur Supprimer, Cliquer sur Rapport et copier coller le contenu du notepad

lotfi rx · Answer

salut frere
le bouton supprimer ne marche pas

lotfi rx · Answer

salut frere 
le bouton supprimer ne marche pas
                            merci d'avance

lotfi rx · Answer

je vs remercie bien pour votre patience avec moi
hier lorsque j'ai t'envoyer le rapport de scan avant de sortir de rogue killer j'ai appuiye sur le bouton supprimer et j'ai sorti
s'il ya besoin de refaire tous les procédures parce que aujourd'hui le bouton supprime ne marche pas
                       je vs remercie infiniment

Utilisateur anonyme · Answer

le bouton Supprimer ne fonctionne pas si tu ne lances pas la recherche avant !

lotfi rx · Answer

cher ami j'ai fais un autre scan et voila le rapport RogueKiller V8.5.4 [Mar 18 2013] par Tigzy mail : tigzyRKgmailcom Remontees : https://www.luanagames.com/index.fr.html Site Web : https://www.luanagames.com/index.fr.html Blog : http://tigzyrk.blogspot.com/ Systeme d'exploitation : Windows 7 (6.1.7600 Service Pack 1) 32 bits version Demarrage : Mode normal Utilisateur : pc [Droits d'admin] Mode : Recherche -- Date : 05/04/2013 15:51:40 | ARK || FAK || MBR | ¤¤¤ Processus malicieux : 1 ¤¤¤ [SERVICE] IBUpdaterService -- C:\Windows\System32\dmwu.exe [7] -> STOPPÉ ¤¤¤ Entrees de registre : 13 ¤¤¤ [Services][BLSVC] HKLM\[...]\ControlSet001\Services\IBUpdaterService (C:\Windows\System32\dmwu.exe) -> TROUVÉ [Services][BLSVC] HKLM\[...]\ControlSet002\Services\IBUpdaterService (C:\Windows\System32\dmwu.exe) -> TROUVÉ [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ [HJ] HKLM\[...]\System : EnableLUA (0) -> TROUVÉ [HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> TROUVÉ [HJ DESK] HKCU\[...]\ClassicStartMenu : {59031A47-3F72-44A7-89C5-5595FE6B30EE} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> TROUVÉ [HJ DESK] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> TROUVÉ [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver : [CHARGE] ¤¤¤ SSDT[93] : NtCreateUserProcess @ 0x82C66229 -> HOOKED (\??\C:\Windows\system32\drivers\kisknl.sys @ 0x8BE448DA) ¤¤¤ Fichier HOSTS: ¤¤¤ --> C:\Windows\system32\drivers\etc\hosts 127.0.0.1 genuine.microsoft.com 127.0.0.1 mpa.one.microsoft.com 127.0.0.1 sls.microsoft.com ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: WDC WD3200BEVT-22ZCT0 ATA Device +++++ --- User --- [MBR] 51ee66b0611633102158a8e1c29ace8a [BSP] 089451b4f8604bcf2a4eaa280b58e069 : Windows 7/8 MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 221144 Mo 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 453109760 | Size: 83999 Mo User = LL1 ... OK! User = LL2 ... OK! Termine : << RKreport[2]_S_05042013_155140.txt >> RKreport[1]_S_05042013_003548.txt ; RKreport[2]_S_05042013_155140.txt

lotfi rx · Answer

maintenant j'ai fait la supression et voila le rapport RogueKiller V8.5.4 [Mar 18 2013] par Tigzy mail : tigzyRKgmailcom Remontees : https://www.luanagames.com/index.fr.html Site Web : https://www.luanagames.com/index.fr.html Blog : http://tigzyrk.blogspot.com/ Systeme d'exploitation : Windows 7 (6.1.7600 Service Pack 1) 32 bits version Demarrage : Mode normal Utilisateur : pc [Droits d'admin] Mode : Suppression -- Date : 05/04/2013 15:57:36 | ARK || FAK || MBR | ¤¤¤ Processus malicieux : 1 ¤¤¤ [SERVICE] IBUpdaterService -- C:\Windows\System32\dmwu.exe [7] -> STOPPÉ ¤¤¤ Entrees de registre : 13 ¤¤¤ [Services][BLSVC] HKLM\[...]\ControlSet001\Services\IBUpdaterService (C:\Windows\System32\dmwu.exe) -> SUPPRIMÉ [Services][BLSVC] HKLM\[...]\ControlSet002\Services\IBUpdaterService (C:\Windows\System32\dmwu.exe) -> SUPPRIMÉ [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REMPLACÉ (2) [HJ] HKLM\[...]\System : EnableLUA (0) -> REMPLACÉ (1) [HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REMPLACÉ (1) [HJ DESK] HKCU\[...]\ClassicStartMenu : {59031A47-3F72-44A7-89C5-5595FE6B30EE} (1) -> REMPLACÉ (0) [HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0) [HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0) [HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0) [HJ DESK] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REMPLACÉ (0) [HJ DESK] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REMPLACÉ (0) [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0) [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0) ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver : [CHARGE] ¤¤¤ SSDT[93] : NtCreateUserProcess @ 0x82C66229 -> HOOKED (\??\C:\Windows\system32\drivers\kisknl.sys @ 0x8BE448DA) ¤¤¤ Fichier HOSTS: ¤¤¤ --> C:\Windows\system32\drivers\etc\hosts 127.0.0.1 genuine.microsoft.com 127.0.0.1 mpa.one.microsoft.com 127.0.0.1 sls.microsoft.com ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: WDC WD3200BEVT-22ZCT0 ATA Device +++++ --- User --- [MBR] 51ee66b0611633102158a8e1c29ace8a [BSP] 089451b4f8604bcf2a4eaa280b58e069 : Windows 7/8 MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 221144 Mo 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 453109760 | Size: 83999 Mo User = LL1 ... OK! User = LL2 ... OK! Termine : << RKreport[3]_D_05042013_155736.txt >> RKreport[1]_S_05042013_003548.txt ; RKreport[2]_S_05042013_155140.txt ; RKreport[3]_D_05042013_155736.txt

Utilisateur anonyme · Answer

super,

*	Télécharge TDSSKiller sur ton bureau :

https://support.kaspersky.com/downloads/utils/tdsskiller.exe

*  Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant qu'administrateur " ) 

*  Clique sur [Start Scan] pour démarrer l'analyse. 

*  Si des élements sont trouvés, cliques sur [Continue] puis sur [Reboot Now] 

*  Un rapport s'ouvrira au redémarrage du PC. 

*  Copie/Colle son contenu dans ta prochaine réponse. 

Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt.

note : 
 Conserve l'action proposée par défaut par l'outil :

- Si TDSS.tdl2 : l'option Delete sera cochée. 
- Si TDSS.tdl3 ou TDSS.tdl4 : assure toi que Cure soit bien cochée. 
- Si "Suspicious object" ou Sptd ou ForgedFile.Multi.Generic : laisse l'option cochée sur Skip
- Si Rootkit.Win32.ZAccess.* est détecté règle sur cure en haut , et delete en bas:D

lotfi rx · Answer

1/lors de la fin de scan il n y a pas des touche continue ou reboot now il n y a que la touche "close" ça c'est le rapport après le redémarrage de mon pc 16:48:22.0119 3412 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 16:48:23.0223 3412 ============================================================ 16:48:23.0224 3412 Current date / time: 2013/04/05 16:48:23.0223 16:48:23.0224 3412 SystemInfo: 16:48:23.0224 3412 16:48:23.0224 3412 OS Version: 6.1.7600 ServicePack: 1.0 16:48:23.0224 3412 Product type: Workstation 16:48:23.0224 3412 ComputerName: PC-PC 16:48:23.0224 3412 UserName: pc 16:48:23.0224 3412 Windows directory: C:\Windows 16:48:23.0224 3412 System windows directory: C:\Windows 16:48:23.0224 3412 Processor architecture: Intel x86 16:48:23.0224 3412 Number of processors: 2 16:48:23.0224 3412 Page size: 0x1000 16:48:23.0225 3412 Boot type: Normal boot 16:48:23.0225 3412 ============================================================ 16:48:25.0826 3412 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 16:48:25.0838 3412 ============================================================ 16:48:25.0838 3412 \Device\Harddisk0\DR0: 16:48:25.0838 3412 MBR partitions: 16:48:25.0838 3412 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000 16:48:25.0838 3412 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1AFEC000 16:48:25.0838 3412 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1B01E800, BlocksNum 0xA40F800 16:48:25.0838 3412 ============================================================ 16:48:25.0860 3412 C: <-> \Device\Harddisk0\DR0\Partition2 16:48:25.0928 3412 D: <-> \Device\Harddisk0\DR0\Partition3 16:48:25.0929 3412 ============================================================ 16:48:25.0929 3412 Initialize success 16:48:25.0929 3412 ============================================================ 16:48:48.0501 4248 ============================================================ 16:48:48.0501 4248 Scan started 16:48:48.0501 4248 Mode: Manual; 16:48:48.0501 4248 ============================================================ 16:48:49.0362 4248 ================ Scan system memory ======================== 16:48:49.0362 4248 System memory - ok 16:48:49.0363 4248 ================ Scan services ============================= 16:48:49.0520 4248 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 16:48:49.0523 4248 1394ohci - ok 16:48:49.0580 4248 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys 16:48:49.0584 4248 ACPI - ok 16:48:49.0631 4248 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 16:48:49.0632 4248 AcpiPmi - ok 16:48:49.0753 4248 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 16:48:49.0756 4248 AdobeARMservice - ok 16:48:49.0842 4248 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 16:48:49.0846 4248 AdobeFlashPlayerUpdateSvc - ok 16:48:49.0904 4248 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 16:48:49.0910 4248 adp94xx - ok 16:48:49.0923 4248 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 16:48:49.0927 4248 adpahci - ok 16:48:49.0952 4248 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 16:48:49.0955 4248 adpu320 - ok 16:48:49.0989 4248 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 16:48:49.0994 4248 AeLookupSvc - ok 16:48:50.0045 4248 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys 16:48:50.0050 4248 AFD - ok 16:48:50.0083 4248 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys 16:48:50.0085 4248 agp440 - ok 16:48:50.0120 4248 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys 16:48:50.0122 4248 aic78xx - ok 16:48:50.0158 4248 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe 16:48:50.0161 4248 ALG - ok 16:48:50.0188 4248 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys 16:48:50.0190 4248 aliide - ok 16:48:50.0220 4248 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys 16:48:50.0222 4248 amdagp - ok 16:48:50.0266 4248 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys 16:48:50.0268 4248 amdide - ok 16:48:50.0315 4248 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 16:48:50.0317 4248 AmdK8 - ok 16:48:50.0326 4248 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 16:48:50.0329 4248 AmdPPM - ok 16:48:50.0388 4248 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys 16:48:50.0390 4248 amdsata - ok 16:48:50.0421 4248 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 16:48:50.0424 4248 amdsbs - ok 16:48:50.0447 4248 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys 16:48:50.0448 4248 amdxata - ok 16:48:50.0485 4248 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys 16:48:50.0489 4248 AppID - ok 16:48:50.0518 4248 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll 16:48:50.0523 4248 AppIDSvc - ok 16:48:50.0585 4248 [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo C:\Windows\System32\appinfo.dll 16:48:50.0587 4248 Appinfo - ok 16:48:50.0632 4248 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll 16:48:50.0637 4248 AppMgmt - ok 16:48:50.0680 4248 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys 16:48:50.0682 4248 arc - ok 16:48:50.0703 4248 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 16:48:50.0705 4248 arcsas - ok 16:48:50.0800 4248 [ 0AE43C6C411254049279C2EE55630F95 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys 16:48:50.0801 4248 aswFsBlk - ok 16:48:50.0943 4248 [ 6693141560B1615D8DCCF0D8EB00087E ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys 16:48:50.0944 4248 aswMonFlt - ok 16:48:50.0975 4248 [ 225013C16FE096714D71649AD7A20E8B ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys 16:48:50.0977 4248 aswRdr - ok 16:48:51.0040 4248 [ DCB199B967375753B5019EC15F008F53 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys 16:48:51.0046 4248 aswSnx - ok 16:48:51.0071 4248 [ B32873E5A1443C0A1E322266E203BF10 ] aswSP C:\Windows\system32\drivers\aswSP.sys 16:48:51.0075 4248 aswSP - ok 16:48:51.0093 4248 [ 6FF544175A9180C5D88534D3D9C9A9F7 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys 16:48:51.0094 4248 aswTdi - ok 16:48:51.0109 4248 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 16:48:51.0110 4248 AsyncMac - ok 16:48:51.0147 4248 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys 16:48:51.0148 4248 atapi - ok 16:48:51.0221 4248 [ 76BAB0C824E2D05B940C4DD40A9B08BF ] athr C:\Windows\system32\DRIVERS\athr.sys 16:48:51.0231 4248 athr - ok 16:48:51.0289 4248 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 16:48:51.0297 4248 AudioEndpointBuilder - ok 16:48:51.0321 4248 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll 16:48:51.0326 4248 Audiosrv - ok 16:48:51.0383 4248 [ 4041D31508A2A084DFB42C595854090F ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 16:48:51.0385 4248 avast! Antivirus - ok 16:48:51.0427 4248 [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV C:\Windows\System32\AxInstSV.dll 16:48:51.0430 4248 AxInstSV - ok 16:48:51.0467 4248 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys 16:48:51.0470 4248 b06bdrv - ok 16:48:51.0502 4248 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys 16:48:51.0504 4248 b57nd60x - ok 16:48:51.0540 4248 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll 16:48:51.0543 4248 BDESVC - ok 16:48:51.0555 4248 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys 16:48:51.0556 4248 Beep - ok 16:48:51.0602 4248 [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE C:\Windows\System32\bfe.dll 16:48:51.0619 4248 BFE - ok 16:48:51.0665 4248 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll 16:48:51.0686 4248 BITS - ok 16:48:51.0718 4248 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 16:48:51.0719 4248 blbdrive - ok 16:48:51.0748 4248 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 16:48:51.0749 4248 bowser - ok 16:48:51.0775 4248 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 16:48:51.0776 4248 BrFiltLo - ok 16:48:51.0804 4248 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 16:48:51.0806 4248 BrFiltUp - ok 16:48:51.0837 4248 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll 16:48:51.0841 4248 Browser - ok 16:48:51.0873 4248 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys 16:48:51.0877 4248 Brserid - ok 16:48:51.0889 4248 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 16:48:51.0892 4248 BrSerWdm - ok 16:48:51.0904 4248 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 16:48:51.0906 4248 BrUsbMdm - ok 16:48:51.0920 4248 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 16:48:51.0922 4248 BrUsbSer - ok 16:48:51.0934 4248 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 16:48:51.0937 4248 BTHMODEM - ok 16:48:51.0981 4248 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll 16:48:51.0984 4248 bthserv - ok 16:48:52.0012 4248 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 16:48:52.0015 4248 cdfs - ok 16:48:52.0067 4248 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 16:48:52.0069 4248 cdrom - ok 16:48:52.0134 4248 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll 16:48:52.0138 4248 CertPropSvc - ok 16:48:52.0162 4248 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys 16:48:52.0163 4248 circlass - ok 16:48:52.0205 4248 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys 16:48:52.0209 4248 CLFS - ok 16:48:52.0265 4248 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 16:48:52.0268 4248 clr_optimization_v2.0.50727_32 - ok 16:48:52.0367 4248 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 16:48:52.0373 4248 clr_optimization_v4.0.30319_32 - ok 16:48:52.0414 4248 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 16:48:52.0416 4248 CmBatt - ok 16:48:52.0447 4248 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys 16:48:52.0448 4248 cmdide - ok 16:48:52.0483 4248 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys 16:48:52.0487 4248 CNG - ok 16:48:52.0520 4248 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 16:48:52.0522 4248 Compbatt - ok 16:48:52.0568 4248 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 16:48:52.0569 4248 CompositeBus - ok 16:48:52.0580 4248 COMSysApp - ok 16:48:52.0623 4248 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 16:48:52.0624 4248 crcdisk - ok 16:48:52.0679 4248 [ 06E771AA596B8761107AB57E99F128D7 ] CryptSvc C:\Windows\system32\cryptsvc.dll 16:48:52.0683 4248 CryptSvc - ok 16:48:52.0734 4248 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys 16:48:52.0739 4248 CSC - ok 16:48:52.0785 4248 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll 16:48:52.0805 4248 CscService - ok 16:48:52.0834 4248 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32 pcss.dll 16:48:52.0857 4248 DcomLaunch - ok 16:48:52.0893 4248 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll 16:48:52.0899 4248 defragsvc - ok 16:48:52.0953 4248 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 16:48:52.0955 4248 DfsC - ok 16:48:53.0013 4248 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll 16:48:53.0020 4248 Dhcp - ok 16:48:53.0042 4248 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys 16:48:53.0044 4248 discache - ok 16:48:53.0102 4248 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys 16:48:53.0104 4248 Disk - ok 16:48:53.0138 4248 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll 16:48:53.0144 4248 Dnscache - ok 16:48:53.0175 4248 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll 16:48:53.0182 4248 dot3svc - ok 16:48:53.0224 4248 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll 16:48:53.0230 4248 DPS - ok 16:48:53.0258 4248 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 16:48:53.0259 4248 drmkaud - ok 16:48:53.0307 4248 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 16:48:53.0316 4248 DXGKrnl - ok 16:48:53.0346 4248 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll 16:48:53.0353 4248 EapHost - ok 16:48:53.0461 4248 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys 16:48:53.0493 4248 ebdrv - ok 16:48:53.0513 4248 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe 16:48:53.0519 4248 EFS - ok 16:48:53.0582 4248 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 16:48:53.0589 4248 ehRecvr - ok 16:48:53.0615 4248 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe 16:48:53.0618 4248 ehSched - ok 16:48:53.0647 4248 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 16:48:53.0653 4248 elxstor - ok 16:48:53.0672 4248 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys 16:48:53.0674 4248 ErrDev - ok 16:48:53.0735 4248 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll 16:48:53.0742 4248 EventSystem - ok 16:48:53.0770 4248 ewusbmbb - ok 16:48:53.0791 4248 ew_hwusbdev - ok 16:48:53.0805 4248 ew_usbenumfilter - ok 16:48:53.0828 4248 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys 16:48:53.0830 4248 exfat - ok 16:48:53.0846 4248 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys 16:48:53.0848 4248 fastfat - ok 16:48:53.0890 4248 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe 16:48:53.0898 4248 Fax - ok 16:48:53.0927 4248 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys 16:48:53.0928 4248 fdc - ok 16:48:53.0950 4248 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll 16:48:53.0953 4248 fdPHost - ok 16:48:53.0964 4248 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll 16:48:53.0967 4248 FDResPub - ok 16:48:53.0980 4248 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 16:48:53.0982 4248 FileInfo - ok 16:48:54.0002 4248 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 16:48:54.0003 4248 Filetrace - ok 16:48:54.0015 4248 flpydisk - ok 16:48:54.0041 4248 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 16:48:54.0045 4248 FltMgr - ok 16:48:54.0094 4248 [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache C:\Windows\system32\FntCache.dll 16:48:54.0128 4248 FontCache - ok 16:48:54.0191 4248 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 16:48:54.0194 4248 FontCache3.0.0.0 - ok 16:48:54.0213 4248 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 16:48:54.0215 4248 FsDepends - ok 16:48:54.0249 4248 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 16:48:54.0251 4248 Fs_Rec - ok 16:48:54.0300 4248 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 16:48:54.0304 4248 fvevol - ok 16:48:54.0332 4248 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 16:48:54.0334 4248 gagp30kx - ok 16:48:54.0400 4248 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll 16:48:54.0424 4248 gpsvc - ok 16:48:54.0503 4248 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe 16:48:54.0506 4248 gupdate - ok 16:48:54.0537 4248 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 16:48:54.0539 4248 gupdatem - ok 16:48:54.0593 4248 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 16:48:54.0596 4248 gusvc - ok 16:48:54.0623 4248 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 16:48:54.0625 4248 hcw85cir - ok 16:48:54.0671 4248 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 16:48:54.0674 4248 HdAudAddService - ok 16:48:54.0705 4248 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 16:48:54.0709 4248 HDAudBus - ok 16:48:54.0732 4248 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 16:48:54.0733 4248 HidBatt - ok 16:48:54.0741 4248 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 16:48:54.0743 4248 HidBth - ok 16:48:54.0762 4248 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 16:48:54.0763 4248 HidIr - ok 16:48:54.0791 4248 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll 16:48:54.0796 4248 hidserv - ok 16:48:54.0855 4248 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 16:48:54.0856 4248 HidUsb - ok 16:48:54.0889 4248 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll 16:48:54.0895 4248 hkmsvc - ok 16:48:54.0933 4248 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 16:48:54.0941 4248 HomeGroupListener - ok 16:48:54.0989 4248 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 16:48:54.0997 4248 HomeGroupProvider - ok 16:48:55.0033 4248 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 16:48:55.0035 4248 HpSAMD - ok 16:48:55.0074 4248 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys 16:48:55.0080 4248 HTTP - ok 16:48:55.0095 4248 huawei_enumerator - ok 16:48:55.0111 4248 hwdatacard - ok 16:48:55.0156 4248 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 16:48:55.0158 4248 hwpolicy - ok 16:48:55.0202 4248 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 16:48:55.0204 4248 i8042prt - ok 16:48:55.0290 4248 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 16:48:55.0294 4248 iaStorV - ok 16:48:55.0354 4248 [ A7FFC60F06929C5433B452C7F13650E0 ] IDMWFP C:\Windows\system32\DRIVERS\idmwfp.sys 16:48:55.0356 4248 IDMWFP - ok 16:48:55.0417 4248 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 16:48:55.0452 4248 idsvc - ok 16:48:55.0711 4248 [ 8266AE06DF974E5BA047B3E9E9E70B3F ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys 16:48:55.0811 4248 igfx - ok 16:48:55.0848 4248 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 16:48:55.0850 4248 iirsp - ok 16:48:55.0899 4248 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll 16:48:55.0933 4248 IKEEXT - ok 16:48:55.0986 4248 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys 16:48:55.0988 4248 intelide - ok 16:48:56.0012 4248 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 16:48:56.0014 4248 intelppm - ok 16:48:56.0045 4248 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll 16:48:56.0054 4248 IPBusEnum - ok 16:48:56.0068 4248 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 16:48:56.0070 4248 IpFilterDriver - ok 16:48:56.0119 4248 [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 16:48:56.0141 4248 iphlpsvc - ok 16:48:56.0182 4248 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 16:48:56.0183 4248 IPMIDRV - ok 16:48:56.0191 4248 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys 16:48:56.0194 4248 IPNAT - ok 16:48:56.0232 4248 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys 16:48:56.0234 4248 IRENUM - ok 16:48:56.0269 4248 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys 16:48:56.0270 4248 isapnp - ok 16:48:56.0329 4248 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 16:48:56.0332 4248 iScsiPrt - ok 16:48:56.0395 4248 [ AE2200BA12EB181FD512B38B19953F4F ] jrdusbser C:\Windows\system32\DRIVERS\jrdusbser.sys 16:48:56.0398 4248 jrdusbser - ok 16:48:56.0446 4248 [ A16B3C62473F0EB6B25D3FE01D94D20A ] kavbootc C:\Windows\system32\drivers\kavbootc.sys 16:48:56.0447 4248 kavbootc - ok 16:48:56.0487 4248 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\drivers\kbdclass.sys 16:48:56.0489 4248 kbdclass - ok 16:48:56.0517 4248 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys 16:48:56.0518 4248 kbdhid - ok 16:48:56.0646 4248 [ 19A32BA59DF059B4DCBE28C5B5431ABA ] KDHacker c:\program files\kingsoft\kingsoft antivirus\security\kxescan\kdhacker.sys 16:48:56.0648 4248 KDHacker - ok 16:48:56.0671 4248 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe 16:48:56.0679 4248 KeyIso - ok 16:48:56.0729 4248 [ 79AF9B1395D7B69A51B59776327545B6 ] kisknl C:\Windows\system32\drivers\kisknl.sys 16:48:56.0732 4248 kisknl - ok 16:48:56.0801 4248 [ 78942EF5E22E2D4107638A6148CD3BB5 ] ksapi C:\Windows\system32\drivers\ksapi.sys 16:48:56.0805 4248 ksapi - ok 16:48:56.0850 4248 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 16:48:56.0852 4248 KSecDD - ok 16:48:56.0879 4248 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 16:48:56.0884 4248 KSecPkg - ok 16:48:56.0920 4248 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll 16:48:56.0941 4248 KtmRm - ok 16:48:56.0984 4248 [ 25D7B881312C8400E61E3963FCC1F002 ] KUsbGuard C:\Program Files\kingsoft\kingsoft antivirus\kusbquery.sys 16:48:56.0985 4248 KUsbGuard - ok 16:48:57.0080 4248 [ D475D06DE67A3A1D9AD9E632B4C1501C ] kxescore c:\program files\kingsoft\kingsoft antivirus\kxescore.exe 16:48:57.0082 4248 kxescore - ok 16:48:57.0120 4248 [ 6C32BFEAB708915D6BBF4B20D4F3EF7B ] L1C C:\Windows\system32\DRIVERS\L1C62x86.sys 16:48:57.0122 4248 L1C - ok 16:48:57.0172 4248 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll 16:48:57.0182 4248 LanmanServer - ok 16:48:57.0226 4248 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 16:48:57.0236 4248 LanmanWorkstation - ok 16:48:57.0287 4248 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 16:48:57.0288 4248 lltdio - ok 16:48:57.0334 4248 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll 16:48:57.0342 4248 lltdsvc - ok 16:48:57.0365 4248 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll 16:48:57.0371 4248 lmhosts - ok 16:48:57.0410 4248 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 16:48:57.0412 4248 LSI_FC - ok 16:48:57.0431 4248 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 16:48:57.0433 4248 LSI_SAS - ok 16:48:57.0448 4248 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 16:48:57.0450 4248 LSI_SAS2 - ok 16:48:57.0471 4248 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 16:48:57.0473 4248 LSI_SCSI - ok 16:48:57.0485 4248 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys 16:48:57.0488 4248 luafv - ok 16:48:57.0579 4248 Mattel_Mauritel Wave Modem Device Helper - ok 16:48:57.0621 4248 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 16:48:57.0627 4248 Mcx2Svc - ok 16:48:57.0647 4248 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 16:48:57.0649 4248 megasas - ok 16:48:57.0679 4248 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 16:48:57.0682 4248 MegaSR - ok 16:48:57.0726 4248 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll 16:48:57.0731 4248 MMCSS - ok 16:48:57.0754 4248 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys 16:48:57.0755 4248 Modem - ok 16:48:57.0783 4248 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 16:48:57.0785 4248 monitor - ok 16:48:57.0812 4248 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 16:48:57.0814 4248 mouclass - ok 16:48:57.0823 4248 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 16:48:57.0825 4248 mouhid - ok 16:48:57.0862 4248 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 16:48:57.0864 4248 mountmgr - ok 16:48:57.0928 4248 [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 16:48:57.0930 4248 MozillaMaintenance - ok 16:48:57.0967 4248 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys 16:48:57.0970 4248 mpio - ok 16:48:57.0988 4248 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 16:48:57.0990 4248 mpsdrv - ok 16:48:58.0057 4248 [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc C:\Windows\system32\mpssvc.dll 16:48:58.0072 4248 MpsSvc - ok 16:48:58.0099 4248 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 16:48:58.0102 4248 MRxDAV - ok 16:48:58.0166 4248 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 16:48:58.0169 4248 mrxsmb - ok 16:48:58.0181 4248 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 16:48:58.0185 4248 mrxsmb10 - ok 16:48:58.0234 4248 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 16:48:58.0237 4248 mrxsmb20 - ok 16:48:58.0305 4248 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys 16:48:58.0307 4248 msahci - ok 16:48:58.0348 4248 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys 16:48:58.0351 4248 msdsm - ok 16:48:58.0377 4248 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe 16:48:58.0387 4248 MSDTC - ok 16:48:58.0444 4248 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys 16:48:58.0445 4248 Msfs - ok 16:48:58.0463 4248 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 16:48:58.0465 4248 mshidkmdf - ok 16:48:58.0514 4248 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 16:48:58.0516 4248 msisadrv - ok 16:48:58.0563 4248 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 16:48:58.0570 4248 MSiSCSI - ok 16:48:58.0577 4248 msiserver - ok 16:48:58.0623 4248 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 16:48:58.0625 4248 MSKSSRV - ok 16:48:58.0648 4248 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 16:48:58.0649 4248 MSPCLOCK - ok 16:48:58.0672 4248 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 16:48:58.0674 4248 MSPQM - ok 16:48:58.0692 4248 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 16:48:58.0695 4248 MsRPC - ok 16:48:58.0721 4248 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 16:48:58.0723 4248 mssmbios - ok 16:48:58.0768 4248 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 16:48:58.0770 4248 MSTEE - ok 16:48:58.0786 4248 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 16:48:58.0788 4248 MTConfig - ok 16:48:58.0796 4248 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys 16:48:58.0799 4248 Mup - ok 16:48:58.0851 4248 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll 16:48:58.0873 4248 napagent - ok 16:48:58.0921 4248 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS wifi.sys 16:48:58.0925 4248 NativeWifiP - ok 16:48:58.0983 4248 [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS C:\Windows\system32\drivers dis.sys 16:48:58.0993 4248 NDIS - ok 16:48:59.0031 4248 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS discap.sys 16:48:59.0033 4248 NdisCap - ok 16:48:59.0058 4248 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS distapi.sys 16:48:59.0060 4248 NdisTapi - ok 16:48:59.0091 4248 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS disuio.sys 16:48:59.0093 4248 Ndisuio - ok 16:48:59.0136 4248 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS diswan.sys 16:48:59.0139 4248 NdisWan - ok 16:48:59.0159 4248 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 16:48:59.0161 4248 NDProxy - ok 16:48:59.0203 4248 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS etbios.sys 16:48:59.0205 4248 NetBIOS - ok 16:48:59.0246 4248 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS etbt.sys 16:48:59.0249 4248 NetBT - ok 16:48:59.0261 4248 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe 16:48:59.0268 4248 Netlogon - ok 16:48:59.0308 4248 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32 etman.dll 16:48:59.0329 4248 Netman - ok 16:48:59.0342 4248 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32 etprofm.dll 16:48:59.0353 4248 netprofm - ok 16:48:59.0392 4248 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 16:48:59.0395 4248 NetTcpPortSharing - ok 16:48:59.0420 4248 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS frd960.sys 16:48:59.0422 4248 nfrd960 - ok 16:48:59.0485 4248 [ 54FCEA3A63C9A75FDCCF1EE512E29E93 ] NitroReaderDriverReadSpool2 C:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe 16:48:59.0488 4248 NitroReaderDriverReadSpool2 - ok 16:48:59.0525 4248 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32 lasvc.dll 16:48:59.0547 4248 NlaSvc - ok 16:48:59.0586 4248 [ 3BC430CF68BC9ED111042BDE2DDD72FA ] nlsX86cc C:\Windows\system32\NLSSRV32.EXE 16:48:59.0593 4248 nlsX86cc - ok 16:48:59.0616 4248 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys 16:48:59.0618 4248 Npfs - ok 16:48:59.0666 4248 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32 sisvc.dll 16:48:59.0673 4248 nsi - ok 16:48:59.0716 4248 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers siproxy.sys 16:48:59.0718 4248 nsiproxy - ok 16:48:59.0801 4248 [ 81189C3D7763838E55C397759D49007A ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 16:48:59.0847 4248 Ntfs - ok 16:48:59.0865 4248 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys 16:48:59.0867 4248 Null - ok 16:48:59.0938 4248 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers vraid.sys 16:48:59.0940 4248 nvraid - ok 16:48:59.0990 4248 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers vstor.sys 16:48:59.0993 4248 nvstor - ok 16:49:00.0016 4248 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers v_agp.sys 16:49:00.0019 4248 nv_agp - ok 16:49:00.0158 4248 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 16:49:00.0164 4248 odserv - ok 16:49:00.0204 4248 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 16:49:00.0206 4248 ohci1394 - ok 16:49:00.0248 4248 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 16:49:00.0251 4248 ose - ok 16:49:00.0291 4248 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 16:49:00.0313 4248 p2pimsvc - ok 16:49:00.0353 4248 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll 16:49:00.0376 4248 p2psvc - ok 16:49:00.0407 4248 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys 16:49:00.0409 4248 Parport - ok 16:49:00.0451 4248 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys 16:49:00.0453 4248 partmgr - ok 16:49:00.0485 4248 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys 16:49:00.0486 4248 Parvdm - ok 16:49:00.0513 4248 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll 16:49:00.0522 4248 PcaSvc - ok 16:49:00.0550 4248 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys 16:49:00.0553 4248 pci - ok 16:49:00.0566 4248 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys 16:49:00.0568 4248 pciide - ok 16:49:00.0588 4248 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 16:49:00.0592 4248 pcmcia - ok 16:49:00.0629 4248 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys 16:49:00.0631 4248 pcw - ok 16:49:00.0779 4248 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys 16:49:00.0786 4248 PEAUTH - ok 16:49:00.0834 4248 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll 16:49:00.0880 4248 PeerDistSvc - ok 16:49:00.0971 4248 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll 16:49:01.0029 4248 pla - ok 16:49:01.0070 4248 [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay C:\Windows\system32\umpnpmgr.dll 16:49:01.0093 4248 PlugPlay - ok 16:49:01.0122 4248 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 16:49:01.0131 4248 PNRPAutoReg - ok 16:49:01.0169 4248 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 16:49:01.0180 4248 PNRPsvc - ok 16:49:01.0208 4248 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 16:49:01.0239 4248 PolicyAgent - ok 16:49:01.0283 4248 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll 16:49:01.0295 4248 Power - ok 16:49:01.0332 4248 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS aspptp.sys 16:49:01.0334 4248 PptpMiniport - ok 16:49:01.0364 4248 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys 16:49:01.0366 4248 Processor - ok 16:49:01.0405 4248 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll 16:49:01.0427 4248 ProfSvc - ok 16:49:01.0462 4248 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe 16:49:01.0468 4248 ProtectedStorage - ok 16:49:01.0506 4248 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys 16:49:01.0510 4248 Psched - ok 16:49:01.0650 4248 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 16:49:01.0665 4248 ql2300 - ok 16:49:01.0726 4248 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 16:49:01.0729 4248 ql40xx - ok 16:49:01.0778 4248 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll 16:49:01.0800 4248 QWAVE - ok 16:49:01.0814 4248 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 16:49:01.0816 4248 QWAVEdrv - ok 16:49:01.0837 4248 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS asacd.sys 16:49:01.0839 4248 RasAcd - ok 16:49:01.0887 4248 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 16:49:01.0889 4248 RasAgileVpn - ok 16:49:01.0909 4248 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32 asauto.dll 16:49:01.0922 4248 RasAuto - ok 16:49:01.0942 4248 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS asl2tp.sys 16:49:01.0944 4248 Rasl2tp - ok 16:49:01.0998 4248 [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan C:\Windows\System32 asmans.dll 16:49:02.0020 4248 RasMan - ok 16:49:02.0034 4248 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS aspppoe.sys 16:49:02.0037 4248 RasPppoe - ok 16:49:02.0048 4248 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS assstp.sys 16:49:02.0051 4248 RasSstp - ok 16:49:02.0110 4248 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS dbss.sys 16:49:02.0113 4248 rdbss - ok 16:49:02.0130 4248 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS dpbus.sys 16:49:02.0132 4248 rdpbus - ok 16:49:02.0179 4248 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 16:49:02.0181 4248 RDPCDD - ok 16:49:02.0221 4248 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers dpdr.sys 16:49:02.0224 4248 RDPDR - ok 16:49:02.0253 4248 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers dpencdd.sys 16:49:02.0255 4248 RDPENCDD - ok 16:49:02.0268 4248 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers dprefmp.sys 16:49:02.0271 4248 RDPREFMP - ok 16:49:02.0310 4248 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 16:49:02.0314 4248 RDPWD - ok 16:49:02.0365 4248 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers dyboost.sys 16:49:02.0368 4248 rdyboost - ok 16:49:02.0419 4248 RealNetworks Downloader Resolver Service - ok 16:49:02.0452 4248 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll 16:49:02.0462 4248 RemoteAccess - ok 16:49:02.0506 4248 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32 egsvc.dll 16:49:02.0517 4248 RemoteRegistry - ok 16:49:02.0540 4248 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 16:49:02.0551 4248 RpcEptMapper - ok 16:49:02.0584 4248 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe 16:49:02.0592 4248 RpcLocator - ok 16:49:02.0617 4248 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32 pcss.dll 16:49:02.0634 4248 RpcSs - ok 16:49:02.0690 4248 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS spndr.sys 16:49:02.0693 4248 rspndr - ok 16:49:02.0740 4248 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys 16:49:02.0742 4248 s3cap - ok 16:49:02.0796 4248 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe 16:49:02.0802 4248 SamSs - ok 16:49:02.0855 4248 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 16:49:02.0858 4248 sbp2port - ok 16:49:02.0905 4248 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll 16:49:02.0916 4248 SCardSvr - ok 16:49:02.0938 4248 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 16:49:02.0940 4248 scfilter - ok 16:49:02.0994 4248 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll 16:49:03.0040 4248 Schedule - ok 16:49:03.0063 4248 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll 16:49:03.0065 4248 SCPolicySvc - ok 16:49:03.0139 4248 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll 16:49:03.0149 4248 SDRSVC - ok 16:49:03.0198 4248 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys 16:49:03.0200 4248 secdrv - ok 16:49:03.0239 4248 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll 16:49:03.0248 4248 seclogon - ok 16:49:03.0285 4248 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll 16:49:03.0295 4248 SENS - ok 16:49:03.0326 4248 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll 16:49:03.0336 4248 SensrSvc - ok 16:49:03.0353 4248 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 16:49:03.0355 4248 Serenum - ok 16:49:03.0376 4248 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys 16:49:03.0378 4248 Serial - ok 16:49:03.0404 4248 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 16:49:03.0406 4248 sermouse - ok 16:49:03.0456 4248 [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv C:\Windows\system32\sessenv.dll 16:49:03.0464 4248 SessionEnv - ok 16:49:03.0503 4248 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 16:49:03.0504 4248 sffdisk - ok 16:49:03.0525 4248 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 16:49:03.0527 4248 sffp_mmc - ok 16:49:03.0554 4248 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 16:49:03.0555 4248 sffp_sd - ok 16:49:03.0570 4248 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 16:49:03.0571 4248 sfloppy - ok 16:49:03.0606 4248 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll 16:49:03.0614 4248 SharedAccess - ok 16:49:03.0657 4248 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 16:49:03.0681 4248 ShellHWDetection - ok 16:49:03.0716 4248 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys 16:49:03.0718 4248 sisagp - ok 16:49:03.0748 4248 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 16:49:03.0750 4248 SiSRaid2 - ok 16:49:03.0770 4248 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 16:49:03.0773 4248 SiSRaid4 - ok 16:49:03.0899 4248 [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe 16:49:03.0902 4248 SkypeUpdate - ok 16:49:03.0932 4248 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys 16:49:03.0934 4248 Smb - ok 16:49:03.0972 4248 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 16:49:03.0981 4248 SNMPTRAP - ok 16:49:04.0018 4248 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys 16:49:04.0020 4248 spldr - ok 16:49:04.0056 4248 [ 866A43013535DC8587C258E43579C764 ] Spooler C:\Windows\System32\spoolsv.exe 16:49:04.0091 4248 Spooler - ok 16:49:04.0205 4248 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe 16:49:04.0307 4248 sppsvc - ok 16:49:04.0336 4248 [ 7773AD40221ECBBD18053EC75AFF229B ] sppuinotify C:\Windows\system32\sppuinotify.dll 16:49:04.0358 4248 sppuinotify - ok 16:49:04.0395 4248 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys 16:49:04.0400 4248 srv - ok 16:49:04.0433 4248 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 16:49:04.0437 4248 srv2 - ok 16:49:04.0471 4248 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 16:49:04.0474 4248 srvnet - ok 16:49:04.0522 4248 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 16:49:04.0544 4248 SSDPSRV - ok 16:49:04.0576 4248 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll 16:49:04.0587 4248 SstpSvc - ok 16:49:04.0625 4248 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 16:49:04.0627 4248 stexstor - ok 16:49:04.0695 4248 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll 16:49:04.0729 4248 StiSvc - ok 16:49:04.0765 4248 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys 16:49:04.0767 4248 storflt - ok 16:49:04.0820 4248 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll 16:49:04.0831 4248 StorSvc - ok 16:49:04.0861 4248 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys 16:49:04.0863 4248 storvsc - ok 16:49:04.0889 4248 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys 16:49:04.0895 4248 swenum - ok 16:49:04.0935 4248 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll 16:49:04.0958 4248 swprv - ok 16:49:05.0016 4248 [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain C:\Windows\system32\sysmain.dll 16:49:05.0052 4248 SysMain - ok 16:49:05.0076 4248 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll 16:49:05.0086 4248 TabletInputService - ok 16:49:05.0122 4248 [ 2D631E8B09C2D6DA3EF8D12797A9FA44 ] taphss6 C:\Windows\system32\DRIVERS aphss6.sys 16:49:05.0124 4248 taphss6 - ok 16:49:05.0156 4248 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32 apisrv.dll 16:49:05.0177 4248 TapiSrv - ok 16:49:05.0199 4248 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32 bssvc.dll 16:49:05.0207 4248 TBS - ok 16:49:05.0271 4248 [ 7FA2E0F8B072BD04B77B421480B6CC22 ] Tcpip C:\Windows\system32\drivers cpip.sys 16:49:05.0283 4248 Tcpip - ok 16:49:05.0337 4248 [ 7FA2E0F8B072BD04B77B421480B6CC22 ] TCPIP6 C:\Windows\system32\DRIVERS cpip.sys 16:49:05.0349 4248 TCPIP6 - ok 16:49:05.0405 4248 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers cpipreg.sys 16:49:05.0406 4248 tcpipreg - ok 16:49:05.0445 4248 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers dpipe.sys 16:49:05.0447 4248 TDPIPE - ok 16:49:05.0470 4248 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers dtcp.sys 16:49:05.0471 4248 TDTCP - ok 16:49:05.0514 4248 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS dx.sys 16:49:05.0516 4248 tdx - ok 16:49:05.0552 4248 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers ermdd.sys 16:49:05.0553 4248 TermDD - ok 16:49:05.0601 4248 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32 ermsrv.dll 16:49:05.0624 4248 TermService - ok 16:49:05.0647 4248 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32 hemeservice.dll 16:49:05.0653 4248 Themes - ok 16:49:05.0675 4248 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll 16:49:05.0678 4248 THREADORDER - ok 16:49:05.0688 4248 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32 rkwks.dll 16:49:05.0696 4248 TrkWks - ok 16:49:05.0776 4248 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 16:49:05.0778 4248 TrustedInstaller - ok 16:49:05.0825 4248 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS ssecsrv.sys 16:49:05.0826 4248 tssecsrv - ok 16:49:05.0894 4248 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers susbflt.sys 16:49:05.0895 4248 TsUsbFlt - ok 16:49:05.0952 4248 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS unnel.sys 16:49:05.0954 4248 tunnel - ok 16:49:05.0976 4248 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 16:49:05.0977 4248 uagp35 - ok 16:49:06.0021 4248 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys 16:49:06.0024 4248 udfs - ok 16:49:06.0057 4248 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe 16:49:06.0064 4248 UI0Detect - ok 16:49:06.0101 4248 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 16:49:06.0102 4248 uliagpkx - ok 16:49:06.0146 4248 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys 16:49:06.0148 4248 umbus - ok 16:49:06.0176 4248 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 16:49:06.0178 4248 UmPass - ok 16:49:06.0233 4248 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll 16:49:06.0241 4248 UmRdpService - ok 16:49:06.0280 4248 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll 16:49:06.0301 4248 upnphost - ok 16:49:06.0343 4248 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 16:49:06.0345 4248 usbccgp - ok 16:49:06.0393 4248 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys 16:49:06.0395 4248 usbcir - ok 16:49:06.0417 4248 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 16:49:06.0418 4248 usbehci - ok 16:49:06.0471 4248 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 16:49:06.0473 4248 usbhub - ok 16:49:06.0498 4248 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\drivers\usbohci.sys 16:49:06.0499 4248 usbohci - ok 16:49:06.0545 4248 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 16:49:06.0546 4248 usbprint - ok 16:49:06.0589 4248 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 16:49:06.0592 4248 USBSTOR - ok 16:49:06.0610 4248 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 16:49:06.0612 4248 usbuhci - ok 16:49:06.0658 4248 [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 16:49:06.0661 4248 usbvideo - ok 16:49:06.0699 4248 [ D82F43D15FDAA666856C0190CB73E7C9 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys 16:49:06.0701 4248 usb_rndisx - ok 16:49:06.0722 4248 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll 16:49:06.0733 4248 UxSms - ok 16:49:06.0754 4248 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe 16:49:06.0760 4248 VaultSvc - ok 16:49:06.0791 4248 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 16:49:06.0794 4248 vdrvroot - ok 16:49:06.0837 4248 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe 16:49:06.0851 4248 vds - ok 16:49:06.0883 4248 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 16:49:06.0886 4248 vga - ok 16:49:06.0907 4248 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys 16:49:06.0910 4248 VgaSave - ok 16:49:06.0942 4248 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 16:49:06.0945 4248 vhdmp - ok 16:49:06.0970 4248 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys 16:49:06.0973 4248 viaagp - ok 16:49:06.0993 4248 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys 16:49:06.0995 4248 ViaC7 - ok 16:49:07.0030 4248 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys 16:49:07.0032 4248 viaide - ok 16:49:07.0052 4248 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys 16:49:07.0056 4248 vmbus - ok 16:49:07.0083 4248 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys 16:49:07.0085 4248 VMBusHID - ok 16:49:07.0105 4248 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys 16:49:07.0108 4248 volmgr - ok 16:49:07.0135 4248 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 16:49:07.0139 4248 volmgrx - ok 16:49:07.0164 4248 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys 16:49:07.0169 4248 volsnap - ok 16:49:07.0202 4248 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 16:49:07.0205 4248 vsmraid - ok 16:49:07.0265 4248 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe 16:49:07.0284 4248 VSS - ok 16:49:07.0297 4248 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 16:49:07.0299 4248 vwifibus - ok 16:49:07.0316 4248 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 16:49:07.0318 4248 vwififlt - ok 16:49:07.0362 4248 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll 16:49:07.0384 4248 W32Time - ok 16:49:07.0411 4248 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 16:49:07.0414 4248 WacomPen - ok 16:49:07.0441 4248 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 16:49:07.0443 4248 WANARP - ok 16:49:07.0450 4248 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 16:49:07.0452 4248 Wanarpv6 - ok 16:49:07.0511 4248 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 16:49:07.0526 4248 WatAdminSvc - ok 16:49:07.0582 4248 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe 16:49:07.0604 4248 wbengine - ok 16:49:07.0623 4248 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 16:49:07.0645 4248 WbioSrvc - ok 16:49:07.0727 4248 [ EE8A9734B448836B0127C76066119E9C ] WCMVCAM C:\Windows\system32\DRIVERS\wcmvcam.sys 16:49:07.0740 4248 WCMVCAM - ok 16:49:07.0781 4248 [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc C:\Windows\System32\wcncsvc.dll 16:49:07.0803 4248 wcncsvc - ok 16:49:07.0817 4248 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 16:49:07.0828 4248 WcsPlugInService - ok 16:49:07.0866 4248 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys 16:49:07.0868 4248 Wd - ok 16:49:07.0891 4248 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 16:49:07.0898 4248 Wdf01000 - ok 16:49:07.0918 4248 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll 16:49:07.0930 4248 WdiServiceHost - ok 16:49:07.0937 4248 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll 16:49:07.0949 4248 WdiSystemHost - ok 16:49:07.0993 4248 [ A9D880F97530D5B8FEE278923349929D ] WebClient C:\Windows\System32\webclnt.dll 16:49:08.0016 4248 WebClient - ok 16:49:08.0034 4248 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll 16:49:08.0057 4248 Wecsvc - ok 16:49:08.0079 4248 [

lotfi rx · Answer

mon ami
Electricien 69
le moderature m'a envoyer un message dise que "Votre message intitulé « problème kernel » datant du 20 mars 2013 à 12:35 vient d'être supprimé par un modérateur (baladur13) 
Voici le commentaire laissé par le modérateur à votre attention : * Le message était posté en double dans le forum.
alors svp mon probleme n'est pas résolu jusqu'à ce moment.
comment je peux faire
je vous remercie beaucoup et désolé pour le derangement

Utilisateur anonyme · Answer

tu avais un poste en doublon, les doublon sont supprimé illico presto du forum !

*		/!\Avertissement :
Ce logiciel n'est à utiliser que prescrit par un helper qualifié.
Ne pas utiliser en dehors de ce cas de figure : dangereux! 



	
&#9658; Télécharges ComboFix à partir de ce lien et enregistres le sur ton bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
ou ici :
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm 
A lire 
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix 

Avant d'utiliser ComboFix :
 
&#9658; ferme les fenêtres de tous les programmes en cours.
 
&#9658; Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 
Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

/!\Utilisateur de Vista & Windows7 : Clique droit sur le logo de Combofix, « exécuter en tant qu'Administrateur »

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
 
- il se peut que Combofix ait besoin de se connecter à internet pour trouver les mises à jour, donc il faut l'autoriser.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.
 
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\ComboFix\ComboFix.txt) 
&#9658; Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 
&#9658; Reviens sur le forum, et copie et colle la totalité du contenu de Combofix.txt dans ton prochain message.

lotfi rx · Answer

ComboFix 13-04-05.01 - pc 05/04/2013 20:54:39.1.2 - x86 Microsoft Windows 7 Professionnel 6.1.7600.1.1252.33.1036.18.1977.1275 [GMT 1:00] Lancé depuis: c:\users\pc\Downloads\Programs\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Un nouveau point de restauration a été créé . . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\pc\AppData\Local\Minibar c:\users\pc\AppData\Local\Minibar\chrome\background.html c:\users\pc\AppData\Local\Minibar\chrome\cached_http_request.js c:\users\pc\AppData\Local\Minibar\chrome\extension_info.json c:\users\pc\AppData\Local\Minibar\chrome\icons\icon128.png c:\users\pc\AppData\Local\Minibar\chrome\icons\icon19.png c:\users\pc\AppData\Local\Minibar\chrome\icons\icon32.png c:\users\pc\AppData\Local\Minibar\chrome\icons\icon48.png c:\users\pc\AppData\Local\Minibar\chrome\includes\content.js c:\users\pc\AppData\Local\Minibar\chrome\includes\content_kango.js c:\users\pc\AppData\Local\Minibar\chrome\includes\content_messaging.js c:\users\pc\AppData\Local\Minibar\chrome\includes\content_userscript.js c:\users\pc\AppData\Local\Minibar\chrome\kango-ui\button.js c:\users\pc\AppData\Local\Minibar\chrome\kango-ui\ui.js c:\users\pc\AppData\Local\Minibar\chrome\kango\browser.js c:\users\pc\AppData\Local\Minibar\chrome\kango\console.js c:\users\pc\AppData\Local\Minibar\chrome\kango\event_listener.js c:\users\pc\AppData\Local\Minibar\chrome\kango\initialize.js c:\users\pc\AppData\Local\Minibar\chrome\kango\io.js c:\users\pc\AppData\Local\Minibar\chrome\kango\jsonstorage.js c:\users\pc\AppData\Local\Minibar\chrome\kango\kango.js c:\users\pc\AppData\Local\Minibar\chrome\kango\lang.js c:\users\pc\AppData\Local\Minibar\chrome\kango\messaging.js c:\users\pc\AppData\Local\Minibar\chrome\kango\userscript_engine.js c:\users\pc\AppData\Local\Minibar\chrome\kango\xhr.js c:\users\pc\AppData\Local\Minibar\chrome\main.js c:\users\pc\AppData\Local\Minibar\chrome\manifest.json c:\users\pc\AppData\Local\Minibar\chrome\minibar\actions.js c:\users\pc\AppData\Local\Minibar\chrome\minibar\cachedxhr.js c:\users\pc\AppData\Local\Minibar\chrome\minibar\config.js c:\users\pc\AppData\Local\Minibar\chrome\minibar\macros.js c:\users\pc\AppData\Local\Minibar\chrome\minibar\minibar.js c:\users\pc\AppData\Local\Minibar\chrome\popup.html c:\users\pc\AppData\Local\Minibar\chrome\popup.js c:\users\pc\AppData\Local\Minibar\chrome ab.html c:\users\pc\AppData\Local\Minibar\chrome ab.js c:\users\pc\AppData\Local\Minibar\chrome_installer.js c:\users\pc\AppData\Local\Minibar\common.js c:\users\pc\AppData\Local\Minibar\firefox\chrome.manifest c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\cached_http_request.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\content.xul c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\extension_info.json c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\icons\icon128.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\icons\icon19.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\icons\icon32.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\icons\icon48.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui\button.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.xul c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble\bottom-left.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble\bottom-middle.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble\bottom-right.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble\middle-left.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble\middle-right.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble\style.css c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble ail-bottom.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble ail-left.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble ail-right.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble ail-top.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble op-left.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble op-middle.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui heme\bubble op-right.png c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango-ui\ui.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\browser.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\console.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\event_listener.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\initialize.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\io.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\jsonstorage.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\kango.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\lang.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\messaging.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\storage.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\uninstall_observer.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\userscript_engine.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\kango\xhr.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\main.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\actions.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\cachedxhr.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\config.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\config.json c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\homepage_helper.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\macros.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\minibar.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\search_helper.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar\search_hook.js c:\users\pc\AppData\Local\Minibar\firefox\chrome\content\minibar abpage_helper.js c:\users\pc\AppData\Local\Minibar\firefox\install.rdf c:\users\pc\AppData\Local\Minibar\firefox_installer.js c:\users\pc\AppData\Local\Minibar\ie_installer.js c:\users\pc\AppData\Local\Minibar\install.json c:\users\pc\AppData\Local\Minibar\minibar.crx c:\users\pc\AppData\Local\Minibar\minibar.xpi c:\users\pc\AppData\Local\Minibar\sqlite3.exe c:\users\pc\AppData\Local\Minibar\Uninstall.exe . Une copie infectée de c:\windows\system32\winlogon.exe a été trouvée et désinfectée Copie restaurée à partir de - c:\windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe . Une copie infectée de c:\windows\System32\slui.exe a été trouvée et désinfectée Copie restaurée à partir de - c:\windows\winsxs\x86_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.1.7601.17514_none_5dc908a6fd144a83\slui.exe . . ((((((((((((((((((((((((((((( Fichiers créés du 2013-03-05 au 2013-04-05 )))))))))))))))))))))))))))))))))))) . . 2013-04-05 20:31 . 2013-04-05 20:33 -------- d-----w- c:\users\pc\AppData\Local emp 2013-04-05 20:31 . 2013-04-05 20:31 -------- d-----w- c:\users\Default\AppData\Local emp 2013-04-04 11:51 . 2013-04-04 11:51 512 ----a-w- C:\PhysicalDisk0_MBR.bin 2013-04-04 11:39 . 2013-04-04 11:51 -------- d-----w- C:\ZHP 2013-04-04 11:39 . 2013-04-04 11:51 -------- d-----w- c:\program files\ZHPDiag 2013-04-02 23:50 . 2013-04-02 23:50 -------- d-----w- c:\program files\Readon Technology 2013-04-02 14:40 . 2013-04-02 14:40 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1AD59DBF-9C18-4B7C-B6E8-DA52806E8739}\offreg.dll 2013-04-02 14:40 . 2013-04-02 14:40 -------- d-----w- c:\windows\system32\Extensions 2013-04-02 14:39 . 2013-04-02 14:39 -------- d-----w- c:\windows\system32\searchplugins 2013-04-02 13:54 . 2013-04-02 13:54 -------- d-----w- c:\users\pc\AppData\Local\Babylon 2013-04-02 11:35 . 2013-04-02 12:01 -------- d-----w- c:\users\pc\AppData\Local\Readon_Technology 2013-04-01 22:34 . 2013-04-01 22:34 899184 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2013-04-01 22:31 . 2013-04-01 22:31 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2013-04-01 22:31 . 2013-04-01 22:31 639312 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2013-03-26 10:14 . 2013-03-26 10:14 -------- d-----w- c:\program files\Common Files\Java 2013-03-26 10:13 . 2013-03-26 10:13 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2013-03-25 10:57 . 2013-03-25 12:18 -------- d-----w- c:\program files\DefaultTab 2013-03-24 13:44 . 2013-03-24 13:45 -------- d-----w- c:\users\pc\AppData\Roaming\MyEmoticons 2013-03-21 23:45 . 2013-03-21 23:45 -------- d-----w- c:\users\Default\AppData\Local\Google 2013-03-21 12:31 . 2009-07-14 02:03 -------- d-----w- C:\LiveKernelReports 2013-03-21 09:05 . 2011-06-20 08:00 106112 ----a-w- c:\windows\system32\drivers\jrdusbser.sys 2013-03-20 16:16 . 2013-03-20 16:16 -------- d-----w- c:\programdata\KRSHistory 2013-03-14 23:01 . 2013-03-14 23:46 -------- d-----w- c:\users\pc\AppData\Roaming\EurekaLog 2013-03-11 11:50 . 2009-07-14 11:27 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll 2013-03-11 11:50 . 2009-07-14 11:27 1461992 ----a-w- c:\windows\system32\drivers\WdfCoInstaller01009.dll 2013-03-09 19:06 . 2013-03-21 14:15 -------- d-----w- c:\users\pc\AppData\Roaming\{4f7d2ba9-9012-4e67-be1e-1d00701f1f30} 2013-03-09 18:02 . 2013-03-21 14:15 -------- d-----w- c:\users\pc\AppData\Roaming\{af2daa6c-32dd-4ccc-b953-e1008568b206} . . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2013-03-26 10:13 . 2012-12-27 18:27 861088 ----a-w- c:\windows\system32 pDeployJava1.dll 2013-03-26 10:13 . 2012-12-27 18:27 782240 ----a-w- c:\windows\system32\deployJava1.dll 2013-03-14 22:28 . 2012-08-25 10:57 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-03-14 22:28 . 2012-07-14 20:24 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-03-09 18:20 . 2009-06-10 21:38 113543 ----a-w- c:\windows\system32\slmgr.vbs 2013-03-09 14:28 . 2012-05-28 07:08 14336 ----a-w- c:\windows\system32\slwga.dll 2013-03-09 14:28 . 2009-07-13 23:36 118784 ----a-w- c:\windows\system32\sppwmi.dll 2013-03-09 14:28 . 2012-05-28 07:08 53760 ----a-w- c:\windows\system32\sppuinotify.dll 2013-03-09 14:28 . 2009-07-13 23:36 345088 ----a-w- c:\windows\system32\sppcommdlg.dll 2013-02-12 20:59 . 2013-02-12 20:59 37064 ----a-w- c:\windows\system32\drivers aphss6.sys 2013-02-12 20:45 . 2013-02-12 20:45 36040 ----a-w- c:\windows\system32\drivers\hssdrv6.sys 2013-01-06 15:10 . 2013-01-06 15:10 499712 ----a-w- c:\windows\system32\msvcp71.dll 2013-01-06 15:10 . 2013-01-06 15:10 348160 ----a-w- c:\windows\system32\msvcr71.dll 2013-03-08 17:34 . 2013-03-08 17:34 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . [code]

c:\windows\svchost .exe

/code . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [-] 2010-11-20 . 8626F0C30D4E3564FFDD25C90F4426F1 . 811520 . . [6.1.7601.17514] . . c:\windows\System32\user32.dll [7] 2010-11-20 . F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 . 811520 . . [6.1.7601.17514] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll [7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll . [7] 2012-04-02 . 9D19079820928D72A5708A668B5B62AE . 3958128 . . [6.1.7600.16988] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16988_none_6c09c4061573e2c8 tkrnlpa.exe [7] 2012-03-31 . C6D1D128DE4148E35B6C04B6892EB71A . 3970928 . . [6.1.7600.21179] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.21179_none_6c9f09292e88b33a tkrnlpa.exe [7] 2012-03-31 . 8F6D5704D7522AAB8B4B82C0D35D9184 . 3968368 . . [6.1.7601.17803] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.17803_none_6e41a0e0125deda0 tkrnlpa.exe [7] 2012-03-31 . 93358348D0B79812CAAA83A1377E4449 . 3971952 . . [6.1.7601.21955] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.21955_none_6e972ea32ba24bcd tkrnlpa.exe [7] 2012-03-06 . 43711ABF8AE553A7B5FFFF61E60C419D . 3968368 . . [6.1.7601.17790] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.17790_none_6ddd4ed012a99fed tkrnlpa.exe [7] 2012-03-06 . 06EF177FE7FEBB1314E42F568FCB55A3 . 3958128 . . [6.1.7600.16973] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16973_none_6c0f928015704824 tkrnlpa.exe [7] 2012-03-06 . 3B237D98A0DFC9395C7D97E33AA38ACF . 3971440 . . [6.1.7600.21163] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.21163_none_6ca3d7592e85ff3f tkrnlpa.exe [7] 2012-03-06 . 07B026E7A2C873D09F0073141EE2099E . 3972464 . . [6.1.7601.21936] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.21936_none_6eadcec52b912d42 tkrnlpa.exe [7] 2011-10-26 . FC9183A26D2AD7BD68F471262CF3946D . 3970928 . . [6.1.7601.21847] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.21847_none_6ea3fd3d2b986563 tkrnlpa.exe [7] 2011-10-26 . 0E725E4D29CBA35E680DD51099EB6598 . 3970416 . . [6.1.7600.21077] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.21077_none_6c9d06af2e8a8365 tkrnlpa.exe [7] 2011-10-26 . F2368C2A4B126B2EAEF1985116B88A1D . 3967856 . . [6.1.7601.17713] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.17713_none_6e36cf0e12660c6a tkrnlpa.exe [7] 2011-10-26 . 0E5E92C8AA8ADA52D37D551E322BF1FA . 3957104 . . [6.1.7600.16905] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16905_none_6c5d42881535b73b tkrnlpa.exe [-] 2010-12-20 . 6BB5D70720DB62A363404836140C97E6 . 3958792 . . [6.1.7600.20738] . . c:\windows\System32 tkrnlpa.exe [7] 2010-11-20 . 144BD78C6103C8616DE047B3532142DB . 3966848 . . [6.1.7601.17514] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.17514_none_6e37cb8c12652b73 tkrnlpa.exe [7] 2010-10-27 . A6DCF9F73F2FCA7A96D9585817A08B43 . 3957120 . . [6.1.7600.16695] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16695_none_6bfbed8a157ebb3f tkrnlpa.exe [7] 2010-10-27 . 8E641A407A795DFB7B3A34053EF8DB39 . 3966848 . . [6.1.7600.20826] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.20826_none_6cd23bf92e62adf0 tkrnlpa.exe [7] 2009-12-08 . 9961859237C15878493ADE2119991614 . 3954776 . . [6.1.7600.20591] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.20591_none_6c8185612e9ffb5f tkrnlpa.exe [7] 2009-12-08 . 92345529A07F31547D73FF6E32E1AFE9 . 3955288 . . [6.1.7600.16481] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16481_none_6c02b882157a3fa4 tkrnlpa.exe [7] 2009-07-14 . E2A8596576873BC5D509031DECD8C95D . 3954768 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16385_none_6c06b7c41576a7d9 tkrnlpa.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{DCC39ACE-709B-44EA-B062-5F6BE2774644}] 2013-02-28 06:58 214896 ----a-w- c:\users\pc\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-03-07 00:15 123536 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 2013-03-07 15:31 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2013-03-07 15:31 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}] 2013-03-07 15:31 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 2013-03-07 15:31 576976 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension] @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 2011-05-30 16:50 21864 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2011-06-09 3380632] "WebcamMaxAutoRun"="c:\program files\WebcamMax\wcmmon.exe" [2011-07-17 1038848] "SDP"="c:\program files\FilesFrog Update Checker\update_checker.exe" [2013-01-31 201808] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18705664] "Piratrax"="c:\program files\Piratrax\piratrax_launch.exe" [2013-03-04 418448] "Facebook Update"="c:\users\pc\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2013-03-26 138096] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 136216] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 171032] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 170520] "avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2012-03-07 4241512] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352] "kxesc"="c:\program files\kingsoft\kingsoft antivirus\kxetray.exe" [2013-03-20 1595056] "Mattel_Mauritel Wave ModemListener"="c:\program files\Mauritel 3G+\BackgroundService\ModemListener.exe" [2011-06-20 102400] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] . c:\users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Outil de notification de cadeaux MSN.lnk - c:\users\pc\AppData\Roaming\Microsoft\Outil de notification de cadeaux MSN\msnotif.exe [2012-5-29 183096] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe [N/A] . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan] 2011-06-09 12:55 3380632 ----a-w- c:\program files\Internet Download Manager\IDMan.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2013-01-08 11:59 18705664 ----a-r- c:\program files\Skype\Phone\Skype.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuperCopier2.exe] 2009-08-16 19:36 955392 ----a-w- c:\program files\SuperCopier2\SuperCopier2.exe . R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader ndlresolversvc.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [x] R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys [x] R3 ewusbmbb;HUAWEI USB-WWAN miniport;c:\windows\system32\DRIVERS\ewusbwwan.sys [x] R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [x] R3 jrdusbser;Mobile Connector Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\jrdusbser.sys [x] R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS aphss6.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers susbflt.sys [x] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 kavbootc;kavbootc;c:\windows\system32\drivers\kavbootc.sys [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 KDHacker;KDHacker;c:\program files\kingsoft\kingsoft antivirus\security\kxescan\kdhacker.sys [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x] S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [x] S2 kisknl;kisknl;c:\windows\system32\drivers\kisknl.sys [x] S2 kxescore;Kingsoft Core Service;c:\program files\kingsoft\kingsoft antivirus\kxescore.exe [x] S2 Mattel_Mauritel Wave Modem Device Helper;Mattel_Mauritel Wave Modem Device Helper;c:\program files\Mauritel 3G+\BackgroundService\ServiceManager.exe [x] S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\program files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe [x] S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\NLSSRV32.EXE [x] S2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam.sys [x] S3 ksapi;ksapi;c:\windows\system32\drivers\ksapi.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [x] S4 KUsbGuard;KUsbGuard;c:\program files\kingsoft\kingsoft antivirus\kusbquery.sys [x] . . --- Autres Services/Pilotes en mémoire --- . *NewlyCreated* - WS2IFSL . Contenu du dossier 'Tâches planifiées' . 2013-04-05 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-25 22:28] . 2013-04-04 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-784792315-1463112541-3058373257-1000Core.job - c:\users\pc\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-26 23:05] . 2013-04-05 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-784792315-1463112541-3058373257-1000UA.job - c:\users\pc\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-26 23:05] . 2013-04-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-05-26 09:09] . 2013-04-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-05-26 09:09] . 2013-03-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-784792315-1463112541-3058373257-1000Core.job - c:\users\pc\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-08 12:54] . 2013-04-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-784792315-1463112541-3058373257-1000UA.job - c:\users\pc\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-08 12:54] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId=9015C80AA908AE40 mStart Page = hxxp://start.myplaycity.com/ IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000 IE: Télécharger avec IDM - c:\program files\Internet Download Manager\IEExt.htm IE: Télécharger tous les liens avec IDM - c:\program files\Internet Download Manager\IEGetAll.htm FF - ProfilePath - c:\users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\ FF - prefs.js: Keyword.Enabled - true FF - prefs.js: browser.search.selectedEngine - Delta Search FF - prefs.js: browser.startup.homepage - hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId=9015C80AA908AE40 FF - ExtSQL: 2013-03-02 21:24; {FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}; c:\program files\IB Updater\Firefox FF - ExtSQL: 2013-03-14 11:27; myemoticons@myemoticons.com; c:\users\pc\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com-1.6.1 FF - user.js: extensions.incredibar_i.newTab - false FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6OyTuWxvWg&loc=IB_TB&i=26&search= FF - user.js: extensions.incredibar_i.id - 9015fa99000000000000001e101fe70e FF - user.js: extensions.incredibar_i.instlDay - 15701 FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14 FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14 FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.1418:04 FF - user.js: extensions.incredibar_i.prtnrId - Incredibar FF - user.js: extensions.incredibar_i.prdct - incredibar FF - user.js: extensions.incredibar_i.aflt - orgnl FF - user.js: extensions.incredibar_i.smplGrp - none FF - user.js: extensions.incredibar_i.tlbrId - base FF - user.js: extensions.incredibar_i.instlRef - FF - user.js: extensions.incredibar_i.dfltLng - FF - user.js: extensions.incredibar_i.excTlbr - false FF - user.js: extensions.incredibar_i.ms_url_id - FF - user.js: extensions.incredibar_i.upn2 - 6OyTuWxvWg FF - user.js: extensions.incredibar_i.upn2n - 92262411815394352 FF - user.js: extensions.incredibar_i.productid - 26 FF - user.js: extensions.incredibar_i.installerproductid - 26 FF - user.js: extensions.incredibar_i.did - 10643 FF - user.js: extensions.incredibar_i.ppd - 666661 FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=9015fa99000000000000001e101f8924&q= FF - user.js: extensions.BabylonToolbar.id - 9015fa99000000000000001e101f8924 FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB} FF - user.js: extensions.BabylonToolbar.instlDay - 15722 FF - user.js: extensions.BabylonToolbar.vrsn - 1.8.7.2 FF - user.js: extensions.BabylonToolbar.vrsni - 1.8.7.2 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.8.7.221:54 FF - user.js: extensions.BabylonToolbar.prtnrId - babylon FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar.tlbrId - base FF - user.js: extensions.BabylonToolbar.instlRef - sst FF - user.js: extensions.BabylonToolbar.dfltLng - en FF - user.js: extensions.BabylonToolbar_i.excTlbr - false FF - user.js: extensions.BabylonToolbar.excTlbr - false FF - user.js: extensions.BabylonToolbar.admin - false FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=116988&tt=0313_7 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar.autoRvrt - false FF - user.js: extensions.BabylonToolbar.rvrt - false FF - user.js: extensions.BabylonToolbar_i.newTab - false FF - user.js: extensions.delta.tlbrSrchUrl - FF - user.js: extensions.delta.id - 9015fa99000000000000000000000000 FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} FF - user.js: extensions.delta.instlDay - 15797 FF - user.js: extensions.delta.vrsn - 1.8.10.0 FF - user.js: extensions.delta.vrsni - 1.8.10.0 FF - user.js: extensions.delta.vrsnTs - 1.8.10.012:28 FF - user.js: extensions.delta.prtnrId - delta FF - user.js: extensions.delta.prdct - delta FF - user.js: extensions.delta.aflt - babsst FF - user.js: extensions.delta.smplGrp - none FF - user.js: extensions.delta.tlbrId - base FF - user.js: extensions.delta.instlRef - sst FF - user.js: extensions.delta.dfltLng - en FF - user.js: extensions.delta.excTlbr - false FF - user.js: extensions.delta.admin - false FF - user.js: extensions.delta.autoRvrt - false FF - user.js: extensions.delta.rvrt - false FF - user.js: extensions.delta.newTab - false . - - - - ORPHELINS SUPPRIMES - - - - . Toolbar-10 - (no file) . . . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_USERS\S-1-5-21-784792315-1463112541-3058373257-1000\Software\Microsoft\Notification de cadeaux MSN] @DACL=(02 0000) . [HKEY_USERS\S-1-5-21-784792315-1463112541-3058373257-1000_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}] @Denied: (Full) (Everyone) "scansk"=hex(0):71,98,d4,ff,a0,c2,a2,e0,ff,1c,81,bc,43,8e,84,d0,af,de,14,bb,f2, 06,ef,89,91,44,71,ab,e6,34,14,1d,52,a6,3d,62,0b,a1,6f,76,00,00,00,00,00,00,\ . [HKEY_USERS\S-1-5-21-784792315-1463112541-3058373257-1000_Classes\CLSID\{fb8b178f-ff02-4fe7-a815-74de7cdcb8d4}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "Model"=dword:0000010c "Therad"=dword:0000001e "MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26, 38,95,44,75,07,18,dd,fb,11,42,94,27,b7,99,0d,2a,ba,05,1a,a2,02,c9,3e,9b,f9,\ . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\Windows\system32\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\Windows\system32\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*] @="?????????????????? v1" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID] @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*] @="?????????????????? v2" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID] @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- DLLs chargées dans les processus actifs --------------------- . - - - - - - - > 'Explorer.exe'(3024) c:\program files\kingsoft\kingsoft antivirus\kwsui.dll c:\program files\kingsoft\kingsoft antivirus\kswebshield.dll c:\program files\kingsoft\kingsoft antivirus\ktaskbar.dll . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\AUDIODG.EXE c:\program files\Alwil Software\Avast5\AvastSvc.exe c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe c:\windows\system32 askhost.exe c:\windows\system32\conhost.exe c:\windows\system32\sppsvc.exe . ************************************************************************** . Heure de fin: 2013-04-05 21:38:10 - La machine a redémarré ComboFix-quarantined-files.txt 2013-04-05 20:38 . Avant-CF: 183 742 283 776 octets libres Après-CF: 183 767 814 144 octets libres . - - End Of File - - 302C52B5871C06DD238339656621949E

lotfi rx · Answer

vraiment je vous remercie beaucoup cher ami 
il parait que le problème est résolu parce que lors de plusieurs démarrages effectues le message n'a pas apparaît sur l'écran de mon pc
bravo bravo bravo
et désolé pour le dérangement
mais je veux connaitre quel était ce problème

Utilisateur anonyme · Answer

bonjour,

ton pc n'est pas tiré d'affaire,

remets moi un nouveau zhpdiag s'il te plait !

lotfi rx · Answer

https://www.cjoint.com/?CDhaqJ2OHx0

Utilisateur anonyme · Answer

tu as deux antivirus sur ton pc :

Avast et  Kingsoft !

il faut en désinstaller un !!!


aide toi de ceci pour exporter la valeur de registre de cette clé :

https://toolslib.net




[HKLM\Software\HAL7600]

copie et colle le contenu dans ton prochain rapport!



/!\ Attention : 
de plus en plus de programmes proposent l'installation des barres d'outils (Toolbars, case précochée), donc n'oublie pas de décocher la/les cases correspondantes pendant l'installation.

De plus de ceci, évite fortement les sites comme 01@net (en voie de guérison !)  et Softonic, les logiciels gratuits et libres sont repackés avec leurs barres d'outils !



?	Télécharger et enregistre ADWcleaner sur ton bureau (Merci à Xplode) :

https://toolslib.net


Lance le, 

clique sur rechercher et poste son rapport.

lotfi rx · Answer

rapport ADWcleaner# AdwCleaner v2.200 - Rapport créé le 07/04/2013 à 12:20:51
# Mis à jour le 02/04/2013 par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
# Nom d'utilisateur : pc - PC-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\pc\Downloads\Programs\adwcleaner.exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Présent : C:\Program Files\allsearch
Dossier Présent : C:\Program Files\DefaultTab
Dossier Présent : C:\Program Files\FilesFrog Update Checker
Dossier Présent : C:\Program Files\IB Updater
Dossier Présent : C:\Program Files\LayoutsExpress
Dossier Présent : C:\Program Files\Rpidity
Dossier Présent : C:\ProgramData\Babylon
Dossier Présent : C:\ProgramData\boost_interprocess
Dossier Présent : C:\ProgramData\Tarma Installer
Dossier Présent : C:\Users\pc\AppData\Local\Babylon
Dossier Présent : C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Dossier Présent : C:\Users\pc\AppData\LocalLow\Minibar
Dossier Présent : C:\Users\pc\AppData\LocalLow\Softonic
Dossier Présent : C:\Users\pc\AppData\Roaming\Babylon
Dossier Présent : C:\Users\pc\AppData\Roaming\eType
Dossier Présent : C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Dossier Présent : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\extensions\{97A78363-B868-4B48-AC91-A783A31215AF}
Dossier Présent : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\extensions\ffxtlbr@incredibar.com
Dossier Présent : C:\Users\pc\AppData\Roaming\WebPlayerBdd
Dossier Présent : C:\Windows\system32\WNLT
Fichier Présent : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Fichier Présent : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
Fichier Présent : C:\user.js
Fichier Présent : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\searchplugins\babylon1.xml
Fichier Présent : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\searchplugins\delta.xml
Fichier Présent : C:\Windows\system32\dmwu.exe
Fichier Présent : C:\Windows\system32\ImhxxpComm.dll

***** [Registre] *****

Clé Présente : HKCU\Software\526dfdce26de548
Clé Présente : HKCU\Software\BabylonToolbar
Clé Présente : HKCU\Software\DataMngr_Toolbar
Clé Présente : HKCU\Software\DSNR Labs
Clé Présente : HKCU\Software\IM
Clé Présente : HKCU\Software\ImInstaller
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Clé Présente : HKCU\Software\Minibar
Clé Présente : HKCU\Software\Softonic
Clé Présente : HKCU\Software\Somoto
Clé Présente : HKCU\Software\WNLT
Clé Présente : HKLM\SOFTWARE\526dfdce26de548
Clé Présente : HKLM\Software\Babylon
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Clé Présente : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Clé Présente : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{0F6ECBD3-98B1-4044-8520-69407A70C83C}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8A41F062-A222-4322-A8C4-26218BE869B9}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C0207057-3461-4F7F-B689-D016B7A03964}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C6A61AAE-D30B-4E7A-A3D8-8A34E5BA3414}
Clé Présente : HKLM\SOFTWARE\Classes\Prod.cap
Clé Présente : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Clé Présente : HKLM\SOFTWARE\Google\Chrome\Extensions\hcdolklkjeckmmhijeoimikandkdeknn
Clé Présente : HKLM\Software\IB Updater
Clé Présente : HKLM\Software\IB Updater
Clé Présente : HKLM\Software\Iminent
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\rpidity_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\rpidity_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LayoutsExpress
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Clé Présente : HKLM\Software\Minibar
Clé Présente : HKLM\Software\WNLT
Clé Présente : HKU\S-1-5-21-784792315-1463112541-3058373257-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Présente : HKU\S-1-5-21-784792315-1463112541-3058373257-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Valeur Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
Valeur Présente : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Valeur Présente : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Valeur Présente : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}]

***** [Navigateurs] *****

-\ Internet Explorer v9.0.8112.16448

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId=9015C80AA908AE40

-\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\prefs.js

Présente : user_pref("browser.search.selectedEngine", "Delta Search");
Présente : user_pref("browser.startup.homepage", "hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId[...]
Présente : user_pref("extensions.BabylonToolbar.admin", false);
Présente : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Présente : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Présente : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Présente : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Présente : user_pref("extensions.BabylonToolbar.excTlbr", false);
Présente : user_pref("extensions.BabylonToolbar.id", "9015fa99000000000000001e101f8924");
Présente : user_pref("extensions.BabylonToolbar.instlDay", "15722");
Présente : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Présente : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Présente : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Présente : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Présente : user_pref("extensions.BabylonToolbar.rvrt", "false");
Présente : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Présente : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Présente : user_pref("extensions.BabylonToolbar.vrsn", "1.8.7.2");
Présente : user_pref("extensions.BabylonToolbar.vrsni", "1.8.7.2");
Présente : user_pref("extensions.BabylonToolbar_i.babExt", "");
Présente : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=116988&tt=0313_7");
Présente : user_pref("extensions.BabylonToolbar_i.excTlbr", false);
Présente : user_pref("extensions.BabylonToolbar_i.newTab", false);
Présente : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Présente : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Présente : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.7.221:54:24");
Présente : user_pref("extensions.delta.admin", false);
Présente : user_pref("extensions.delta.aflt", "babsst");
Présente : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Présente : user_pref("extensions.delta.autoRvrt", "false");
Présente : user_pref("extensions.delta.dfltLng", "en");
Présente : user_pref("extensions.delta.excTlbr", false);
Présente : user_pref("extensions.delta.id", "9015fa99000000000000000000000000");
Présente : user_pref("extensions.delta.instlDay", "15797");
Présente : user_pref("extensions.delta.instlRef", "sst");
Présente : user_pref("extensions.delta.newTab", false);
Présente : user_pref("extensions.delta.prdct", "delta");
Présente : user_pref("extensions.delta.prtnrId", "delta");
Présente : user_pref("extensions.delta.rvrt", "false");
Présente : user_pref("extensions.delta.smplGrp", "none");
Présente : user_pref("extensions.delta.tlbrId", "base");
Présente : user_pref("extensions.delta.tlbrSrchUrl", "");
Présente : user_pref("extensions.delta.vrsn", "1.8.10.0");
Présente : user_pref("extensions.delta.vrsnTs", "1.8.10.012:28:35");
Présente : user_pref("extensions.delta.vrsni", "1.8.10.0");
Présente : user_pref("extensions.incredibar.actvtyRptTime", "1363777088225");
Présente : user_pref("extensions.incredibar.admin", false);
Présente : user_pref("extensions.incredibar.aflt", "orgnl");
Présente : user_pref("extensions.incredibar.afterInstallRpt", "sent");
Présente : user_pref("extensions.incredibar.cntry", "MR");
Présente : user_pref("extensions.incredibar.dfltLng", "EN");
Présente : user_pref("extensions.incredibar.dfltSrch", false);
Présente : user_pref("extensions.incredibar.dfltlng", "en");
Présente : user_pref("extensions.incredibar.dfltsrch", "false");
Présente : user_pref("extensions.incredibar.did", "10643");
Présente : user_pref("extensions.incredibar.envrmnt", "production");
Présente : user_pref("extensions.incredibar.excTlbr", false);
Présente : user_pref("extensions.incredibar.hdrMd5", "6879B881BA35EE1FBF92FCF187EFEA44");
Présente : user_pref("extensions.incredibar.hmpg", false);
Présente : user_pref("extensions.incredibar.hrdid", "9015fa99000000000000001e101fe70e");
Présente : user_pref("extensions.incredibar.id", "9015fa99000000000000001e101fe70e");
Présente : user_pref("extensions.incredibar.installerproductid", "26");
Présente : user_pref("extensions.incredibar.instlDay", "15701");
Présente : user_pref("extensions.incredibar.instlRef", "");
Présente : user_pref("extensions.incredibar.instlday", "15701");
Présente : user_pref("extensions.incredibar.instlref", "");
Présente : user_pref("extensions.incredibar.isDcmntCmplt", false);
Présente : user_pref("extensions.incredibar.isdcmntcmplt", true);
Présente : user_pref("extensions.incredibar.keywordurl", "");
Présente : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1418:04:18");
Présente : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Présente : user_pref("extensions.incredibar.newTab", false);
Présente : user_pref("extensions.incredibar.newtab", "false");
Présente : user_pref("extensions.incredibar.newtaburl", "");
Présente : user_pref("extensions.incredibar.noFFXTlbr", false);
Présente : user_pref("extensions.incredibar.ppd", "666661");
Présente : user_pref("extensions.incredibar.prdct", "incredibar");
Présente : user_pref("extensions.incredibar.productid", "26");
Présente : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Présente : user_pref("extensions.incredibar.prtnrid", "Incredibar");
Présente : user_pref("extensions.incredibar.sg", "none");
Présente : user_pref("extensions.incredibar.smplGrp", "none");
Présente : user_pref("extensions.incredibar.smplgrp", "none");
Présente : user_pref("extensions.incredibar.srch", "");
Présente : user_pref("extensions.incredibar.srchprvdr", "");
Présente : user_pref("extensions.incredibar.tlbrId", "base");
Présente : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyTuWxvWg&loc=IB_T[...]
Présente : user_pref("extensions.incredibar.tlbrid", "base");
Présente : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6OyTuWxvWg&loc=IB_T[...]
Présente : user_pref("extensions.incredibar.upn2", "6OyTuWxvWg");
Présente : user_pref("extensions.incredibar.upn2n", "92262411815394352");
Présente : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Présente : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1418:04:18");
Présente : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Présente : user_pref("extensions.incredibar.vrsnts", "1.5.11.1418:04:18");
Présente : user_pref("extensions.incredibar_i.aflt", "orgnl");
Présente : user_pref("extensions.incredibar_i.dfltLng", "");
Présente : user_pref("extensions.incredibar_i.did", "10643");
Présente : user_pref("extensions.incredibar_i.excTlbr", false);
Présente : user_pref("extensions.incredibar_i.id", "9015fa99000000000000001e101fe70e");
Présente : user_pref("extensions.incredibar_i.installerproductid", "26");
Présente : user_pref("extensions.incredibar_i.instlDay", "15701");
Présente : user_pref("extensions.incredibar_i.instlRef", "");
Présente : user_pref("extensions.incredibar_i.ms_url_id", "");
Présente : user_pref("extensions.incredibar_i.newTab", false);
Présente : user_pref("extensions.incredibar_i.ppd", "666661");
Présente : user_pref("extensions.incredibar_i.prdct", "incredibar");
Présente : user_pref("extensions.incredibar_i.productid", "26");
Présente : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Présente : user_pref("extensions.incredibar_i.smplGrp", "none");
Présente : user_pref("extensions.incredibar_i.tlbrId", "base");
Présente : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyTuWxvWg&loc=IB[...]
Présente : user_pref("extensions.incredibar_i.upn2", "6OyTuWxvWg");
Présente : user_pref("extensions.incredibar_i.upn2n", "92262411815394352");
Présente : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Présente : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1418:04:18");
Présente : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Présente : user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Layouts Express\",\"description\":[...]
Présente : user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANS[...]
Présente : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...]
Présente : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]
Présente : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...]
Présente : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_temp_referer", "hxxp://us.yhs4.sear[...]
Présente : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

-\ Google Chrome v26.0.1410.43

Fichier : C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Preferences

Présente [l.2816] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId=9015C80AA908AE40" ]

*************************

AdwCleaner[R1].txt - [18078 octets] - [07/04/2013 12:20:51]

########## EOF - C:\AdwCleaner[R1].txt - [18139 octets] ##########

lotfi rx · Answer

j'ai desinstaller kinofsat antivirus par program et fonctionalites ds le panneau de configuration"et pour le regtool il me demande un cle?

Utilisateur anonyme · Answer

copie et colle la clé de registre dans la fenêtre de Regtool, clique sur Exporter, enregistre l'export sur ton bureau,

héberge le fichier (format .txt) sur un site et colle son contenu ici.



pour ADWC, relance le, puis clique sur Supprimer,

poste son rapport après le redémarrage du pc !

lotfi rx · Answer

# AdwCleaner v2.200 - Rapport créé le 07/04/2013 à 18:43:01
# Mis à jour le 02/04/2013 par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
# Nom d'utilisateur : pc - PC-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\pc\Downloads\Programs\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files\allsearch
Dossier Supprimé : C:\Program Files\DefaultTab
Dossier Supprimé : C:\Program Files\FilesFrog Update Checker
Dossier Supprimé : C:\Program Files\IB Updater
Dossier Supprimé : C:\Program Files\LayoutsExpress
Dossier Supprimé : C:\Program Files\Rpidity
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\Users\pc\AppData\Local\Babylon
Dossier Supprimé : C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Dossier Supprimé : C:\Users\pc\AppData\LocalLow\Minibar
Dossier Supprimé : C:\Users\pc\AppData\LocalLow\Softonic
Dossier Supprimé : C:\Users\pc\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\pc\AppData\Roaming\eType
Dossier Supprimé : C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Dossier Supprimé : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\extensions\{97A78363-B868-4B48-AC91-A783A31215AF}
Dossier Supprimé : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\extensions\ffxtlbr@incredibar.com
Dossier Supprimé : C:\Users\pc\AppData\Roaming\WebPlayerBdd
Dossier Supprimé : C:\Windows\system32\WNLT
Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Fichier Supprimé : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\searchplugins\babylon1.xml
Fichier Supprimé : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\searchplugins\delta.xml
Fichier Supprimé : C:\Windows\system32\dmwu.exe
Fichier Supprimé : C:\Windows\system32\ImhxxpComm.dll

***** [Registre] *****

Clé Supprimée : HKCU\Software\526dfdce26de548
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\DSNR Labs
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\ImInstaller
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Clé Supprimée : HKCU\Software\Minibar
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\Somoto
Clé Supprimée : HKCU\Software\WNLT
Clé Supprimée : HKLM\SOFTWARE\526dfdce26de548
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0F6ECBD3-98B1-4044-8520-69407A70C83C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8A41F062-A222-4322-A8C4-26218BE869B9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C0207057-3461-4F7F-B689-D016B7A03964}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C6A61AAE-D30B-4E7A-A3D8-8A34E5BA3414}
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\hcdolklkjeckmmhijeoimikandkdeknn
Clé Supprimée : HKLM\Software\IB Updater
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\rpidity_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\rpidity_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LayoutsExpress
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Clé Supprimée : HKLM\Software\Minibar
Clé Supprimée : HKLM\Software\WNLT
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}]

***** [Navigateurs] *****

-\ Internet Explorer v9.0.8112.16448

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId=9015C80AA908AE40 --> hxxp://www.google.com

-\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\prefs.js

C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\f2jfwxc6.default\user.js ... Supprimé !

Supprimée : user_pref("browser.search.selectedEngine", "Delta Search");
Supprimée : user_pref("browser.startup.homepage", "hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId[...]
Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Supprimée : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Supprimée : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Supprimée : user_pref("extensions.BabylonToolbar.excTlbr", false);
Supprimée : user_pref("extensions.BabylonToolbar.id", "9015fa99000000000000001e101f8924");
Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15722");
Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Supprimée : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar.rvrt", "false");
Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Supprimée : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.8.7.2");
Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.8.7.2");
Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=116988&tt=0313_7");
Supprimée : user_pref("extensions.BabylonToolbar_i.excTlbr", false);
Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", false);
Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.7.221:54:24");
Supprimée : user_pref("extensions.delta.admin", false);
Supprimée : user_pref("extensions.delta.aflt", "babsst");
Supprimée : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Supprimée : user_pref("extensions.delta.autoRvrt", "false");
Supprimée : user_pref("extensions.delta.dfltLng", "en");
Supprimée : user_pref("extensions.delta.excTlbr", false);
Supprimée : user_pref("extensions.delta.id", "9015fa99000000000000000000000000");
Supprimée : user_pref("extensions.delta.instlDay", "15797");
Supprimée : user_pref("extensions.delta.instlRef", "sst");
Supprimée : user_pref("extensions.delta.newTab", false);
Supprimée : user_pref("extensions.delta.prdct", "delta");
Supprimée : user_pref("extensions.delta.prtnrId", "delta");
Supprimée : user_pref("extensions.delta.rvrt", "false");
Supprimée : user_pref("extensions.delta.smplGrp", "none");
Supprimée : user_pref("extensions.delta.tlbrId", "base");
Supprimée : user_pref("extensions.delta.tlbrSrchUrl", "");
Supprimée : user_pref("extensions.delta.vrsn", "1.8.10.0");
Supprimée : user_pref("extensions.delta.vrsnTs", "1.8.10.012:28:35");
Supprimée : user_pref("extensions.delta.vrsni", "1.8.10.0");
Supprimée : user_pref("extensions.incredibar.actvtyRptTime", "1363777088225");
Supprimée : user_pref("extensions.incredibar.admin", false);
Supprimée : user_pref("extensions.incredibar.aflt", "orgnl");
Supprimée : user_pref("extensions.incredibar.afterInstallRpt", "sent");
Supprimée : user_pref("extensions.incredibar.cntry", "MR");
Supprimée : user_pref("extensions.incredibar.dfltLng", "EN");
Supprimée : user_pref("extensions.incredibar.dfltSrch", false);
Supprimée : user_pref("extensions.incredibar.dfltlng", "en");
Supprimée : user_pref("extensions.incredibar.dfltsrch", "false");
Supprimée : user_pref("extensions.incredibar.did", "10643");
Supprimée : user_pref("extensions.incredibar.envrmnt", "production");
Supprimée : user_pref("extensions.incredibar.excTlbr", false);
Supprimée : user_pref("extensions.incredibar.hdrMd5", "6879B881BA35EE1FBF92FCF187EFEA44");
Supprimée : user_pref("extensions.incredibar.hmpg", false);
Supprimée : user_pref("extensions.incredibar.hrdid", "9015fa99000000000000001e101fe70e");
Supprimée : user_pref("extensions.incredibar.id", "9015fa99000000000000001e101fe70e");
Supprimée : user_pref("extensions.incredibar.installerproductid", "26");
Supprimée : user_pref("extensions.incredibar.instlDay", "15701");
Supprimée : user_pref("extensions.incredibar.instlRef", "");
Supprimée : user_pref("extensions.incredibar.instlday", "15701");
Supprimée : user_pref("extensions.incredibar.instlref", "");
Supprimée : user_pref("extensions.incredibar.isDcmntCmplt", false);
Supprimée : user_pref("extensions.incredibar.isdcmntcmplt", true);
Supprimée : user_pref("extensions.incredibar.keywordurl", "");
Supprimée : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1418:04:18");
Supprimée : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Supprimée : user_pref("extensions.incredibar.newTab", false);
Supprimée : user_pref("extensions.incredibar.newtab", "false");
Supprimée : user_pref("extensions.incredibar.newtaburl", "");
Supprimée : user_pref("extensions.incredibar.noFFXTlbr", false);
Supprimée : user_pref("extensions.incredibar.ppd", "666661");
Supprimée : user_pref("extensions.incredibar.prdct", "incredibar");
Supprimée : user_pref("extensions.incredibar.productid", "26");
Supprimée : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Supprimée : user_pref("extensions.incredibar.prtnrid", "Incredibar");
Supprimée : user_pref("extensions.incredibar.sg", "none");
Supprimée : user_pref("extensions.incredibar.smplGrp", "none");
Supprimée : user_pref("extensions.incredibar.smplgrp", "none");
Supprimée : user_pref("extensions.incredibar.srch", "");
Supprimée : user_pref("extensions.incredibar.srchprvdr", "");
Supprimée : user_pref("extensions.incredibar.tlbrId", "base");
Supprimée : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyTuWxvWg&loc=IB_T[...]
Supprimée : user_pref("extensions.incredibar.tlbrid", "base");
Supprimée : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6OyTuWxvWg&loc=IB_T[...]
Supprimée : user_pref("extensions.incredibar.upn2", "6OyTuWxvWg");
Supprimée : user_pref("extensions.incredibar.upn2n", "92262411815394352");
Supprimée : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Supprimée : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1418:04:18");
Supprimée : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Supprimée : user_pref("extensions.incredibar.vrsnts", "1.5.11.1418:04:18");
Supprimée : user_pref("extensions.incredibar_i.aflt", "orgnl");
Supprimée : user_pref("extensions.incredibar_i.dfltLng", "");
Supprimée : user_pref("extensions.incredibar_i.did", "10643");
Supprimée : user_pref("extensions.incredibar_i.excTlbr", false);
Supprimée : user_pref("extensions.incredibar_i.id", "9015fa99000000000000001e101fe70e");
Supprimée : user_pref("extensions.incredibar_i.installerproductid", "26");
Supprimée : user_pref("extensions.incredibar_i.instlDay", "15701");
Supprimée : user_pref("extensions.incredibar_i.instlRef", "");
Supprimée : user_pref("extensions.incredibar_i.ms_url_id", "");
Supprimée : user_pref("extensions.incredibar_i.newTab", false);
Supprimée : user_pref("extensions.incredibar_i.ppd", "666661");
Supprimée : user_pref("extensions.incredibar_i.prdct", "incredibar");
Supprimée : user_pref("extensions.incredibar_i.productid", "26");
Supprimée : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Supprimée : user_pref("extensions.incredibar_i.smplGrp", "none");
Supprimée : user_pref("extensions.incredibar_i.tlbrId", "base");
Supprimée : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyTuWxvWg&loc=IB[...]
Supprimée : user_pref("extensions.incredibar_i.upn2", "6OyTuWxvWg");
Supprimée : user_pref("extensions.incredibar_i.upn2n", "92262411815394352");
Supprimée : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Supprimée : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1418:04:18");
Supprimée : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Supprimée : user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Layouts Express\",\"description\":[...]
Supprimée : user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANS[...]
Supprimée : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...]
Supprimée : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]
Supprimée : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...]
Supprimée : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_temp_referer", "hxxp://us.yhs4.sear[...]
Supprimée : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

-\ Google Chrome v26.0.1410.43

Fichier : C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.2820] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119403&babsrc=HP_ss&mntrId[...]

*************************

AdwCleaner[R1].txt - [18209 octets] - [07/04/2013 12:20:51]
AdwCleaner[R2].txt - [18270 octets] - [07/04/2013 18:42:36]
AdwCleaner[S1].txt - [18094 octets] - [07/04/2013 18:43:01]

########## EOF - C:\AdwCleaner[S1].txt - [18155 octets] ##########

lotfi rx · Answer

cher ami
je n'arrive pas a comprendre c'est quoi la clé de registre

Utilisateur anonyme · Answer

relance ADWC, clique sur Désinstaller,


tu as déjà Regtoolexport sur ton bureau normalement :

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/61-regtoolexport 


fais un clique droit dessus, lance le en tant qu'administrateur,

dans la fenêtre , fais un copier coller de ceci :


[HKLM\Software\HAL7600] 


puis clique sur Exporter.

enregistre l'exporte de cette clé sur ton bureau.

héberge le sur Cjoint, 

si tu n'y arrives pas, mets le dans un répertoire, puis compresse le, et passe pas Cjoint,

copie et colle le lien du fichier hébergé sur ton prochain message

lotfi rx · Answer

Regtoolexport


https://www.cjoint.com/?CDhuuboa6Vw

Utilisateur anonyme · Answer

relance Zhpdiag,

/!\Utilisateur de Vista, Seven et W8 : 

* Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

* clique sur la flèche verte pour lancer une mise à jour,

* Clique sur le tourne vis, sélectionne tous les modules.

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic ») 
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette 
* Héberge le rapport ZHPDiag.txt sur Cjoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :


https://www.cjoint.com/  => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

lotfi rx · Answer

https://www.cjoint.com/?CDibbPsmBRV

Utilisateur anonyme · Answer

*	/!\ Avertissement /!\,
*	ce script est seulement valable pour ce pc, en cours du nettoyage, à ne pas utiliser sur un autre pc, risque de plantage !

*	Lance ZHPFix via le raccourci sur ton Bureau

/!\Utilisateur de Vista, Seven et W8 : 

* Clique droit sur le logo de ZHPfix, « exécuter en tant qu'Administrateur »

*	* Copie ( Ctrl + C ) et colle ( Ctrl + V ) les lignes suivantes en gras dans Zhpfix :
---------------------------------------------------------

R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.rpidity.com    
O45 - LFCP:[MD5.32923FF277B3775C726AEB7CF2FA313B] - 26/03/2013 - 15:06:57 ---A- - C:\Windows\Prefetch\SVCHOST .EXE-0B75ADE4.pf   
[HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32]   
[HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS]   
O61 - LFC: 05/04/2013 - 03:25:12 ---A- C:\Users\pc\Application Data\Microsoft\OIS\Toolbars.dat   [855]
O45 - LFCP:[MD5.712A5FAD50717459D6E0DB689B158D22] - 21/03/2013 - 09:42:02 ---A- - C:\Windows\Prefetch\UPDATETASK.EXE-7C757890.pf    
O45 - LFCP:[MD5.BB04BE15A9FD5E2AF5A3E0447D894276] - 21/03/2013 - 09:44:03 ---A- - C:\Windows\Prefetch\BINGAPP.EXE-3B09BA75.pf   
O45 - LFCP:[MD5.C9107A11B98A4504717FD534B97F0F22] - 21/03/2013 - 09:44:07 ---A- - C:\Windows\Prefetch\BINGBAR.EXE-F1001C21.pf   
O45 - LFCP:[MD5.583C75DF076B94B8952CFCE0C0CF3E0A] - 21/03/2013 - 09:44:18 ---A- - C:\Windows\Prefetch\BINGSURROGATE.EXE-3EE4280C.pf   
O69 - SBI: SearchScopes [HKCU] {FD130C83-9025-4157-A945-262A2CC3135B} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis    [HKLM\Software\Microsoft\Tracing\BingBar_RASMANCS]    
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv]   
[HKLM\Software\Microsoft\Tracing\BingBar_RASAPI32]    
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]    
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]    
[HKLM\Software\Microsoft\Tracing\Setup_RASAPI32]    
[HKLM\Software\Microsoft\Tracing\Setup_RASMANCS]    
Emptytemp
EmptyClsid
Firewallraz


---------------------------------------------------------- 

- Si tu ne trouves pas le bouton GO, clique sur l'icone représentant le presse-papier (L'icone entre l'appareil photo et le parchemin, en haut à gauche de la page d'outil)

- Clique sur le bouton « GO » pour lancer le nettoyage,
- confirme le nettoyage
- Copie/colle la totalité du rapport dans ta prochaine réponse

lotfi rx · Answer

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : 
Run by pc at 08/04/2013 19:25:19
High Elevated Privileges : OK
Windows 7 Business Edition, 32-bit Service Pack 1 (Build 7600)

Corbeille vidée

========== Clé(s) du Registre ==========
SUPPRIME Key: HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
SUPPRIME Key: HKLM\Software\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
SUPPRIME Key: SearchScopes :{FD130C83-9025-4157-A945-262A2CC3135B}
SUPPRIME Key: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv
SUPPRIME Key: HKLM\Software\Microsoft\Tracing\BingBar_RASAPI32
SUPPRIME Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SUPPRIME Key: HKLM\Software\Microsoft\Tracing\Setup_RASAPI32
SUPPRIME Key: HKLM\Software\Microsoft\Tracing\Setup_RASMANCS

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz : 
ABSENT Valeur Domain Profile: FirewallRaz : 
SUPPRIME FirewallRaz (Public) : TCP Query User{F0638805-395F-47E8-B311-105EB4B3C65F}C:\program files\google\chrome\application\chrome.exe
SUPPRIME FirewallRaz (Public) : UDP Query User{C3D362CC-81B3-4A5D-A07B-1C0A95AA1382}C:\program files\google\chrome\application\chrome.exe
SUPPRIME FirewallRaz (Public) : {6D8E3E0E-1869-4F4F-8A97-4AAA608B6F8E}
SUPPRIME FirewallRaz (Public) : {4754D20C-A390-4402-AACC-8CCE681D6933}
SUPPRIME FirewallRaz (Public) : {22AE4E48-EAA2-4778-AC32-CE7171141C83}
SUPPRIME FirewallRaz (Public) : {6F9A71CE-0976-4936-8D5A-AB1276F6B059}

========== Elément(s) de donnée du Registre ==========
SUPPRIME R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\pc\AppData\Local\{003C35CD-C3A7-4666-9732-158852DB38AE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{009C52F2-5741-40E7-9B9B-77F8BC656D59}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{016FF763-EAD8-46CD-A961-56462DD2D889}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{02334586-36A8-4153-AD2E-9B838B7AF78D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{02A05CB2-E91D-465E-A8B5-A8E5EE1092E7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{02F2801D-6F06-4F1A-AEC5-7C6661C0D89B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{037A065B-3D15-4C92-A46A-47241412D294}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{03D3BD6C-312A-4785-9CBE-09947ADC664E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{041FA3BD-651E-4A57-A30E-6D28E1812613}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0437CF88-E284-4819-AAB2-8A024A64B1E0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{045397DD-CFA4-4CA3-A7E1-D45CD9A2116A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{05814F31-7089-4ACF-89CE-8BB9D76239AF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{05D9A664-837B-4FDF-BD1E-FD848EB33C5D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{05FB2E57-46A8-4193-BA5D-E1583BD41F65}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{06507175-1481-4160-9C9D-280339070EAB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0655F25F-4D47-47EE-ABF6-161AF06B8B78}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{065D2B78-ABD1-4F6A-8B29-6659AF553352}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{07148546-F66E-4B78-BFCD-F1E8BBF20006}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{08726ABA-BDA8-4E50-A049-F1A251DE9682}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{087EED24-E28B-4B4D-896A-3B663DDCA4DA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{08C72502-EF1F-426F-8593-53BF197B0B09}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{090EAC10-2A71-48E3-B4D7-BF379F9F190A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{094DABD0-971B-478C-97C9-E6463EA9802C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0A1A5DD3-B0D3-459E-912A-97E09FA3777E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0A7EBB6C-1A92-4CF4-B604-062537529CC2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0A968CB3-7422-476E-AE70-FCCD3386AC04}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0ACB9B45-D6E1-464E-82AC-7B2D7B12788F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0B714B9A-1428-4EDE-925D-F5493F85FA93}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0C54A6B3-D5AF-4391-965F-6583A260C546}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0C8F862B-E4D1-4B3C-96E3-803D7A2CF294}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0CE14094-DFC9-4455-9B13-B8F885EE850C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0D1A25A5-75CA-461A-BE7F-6FC11602C65B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0D88B862-EF3C-46FF-A69A-C605DCE2BA40}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0DA70E69-F4D0-46E2-8A02-9A903D9F542A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0E25937A-C499-444E-B52A-C701D04BA2C8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0E45F66B-4BB7-4D79-9A6E-CAD60903B8CA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0E554C3E-9BC4-4762-983F-24A170C4EFBB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0EE380D6-3B4F-477E-8997-ED6EEF12D7C2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0F714BB7-6ED6-4F5D-A4F9-D249D88787FE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{0FE18BAC-4685-417E-864F-99E17D3CC66B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{106ABFC4-F1F3-4670-921B-F42F46FC37CB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{108969E0-60A7-42FC-9429-BAE551E2C1BD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{10DF6E82-B447-4EDF-BE2D-79BEDF00D1F2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{110E2B0E-F109-4BBA-BDC8-D1BA7E4A55A2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{11C000D5-409F-481C-B56E-0C4E26EF6CD8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{11CFADAD-1A88-4213-B9F2-D1AF2A454FB0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{12E26B93-BA5D-4D43-A91E-C151E3D8E5D3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{132D5038-4099-466F-9672-807355C70D89}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1349E152-1022-49B8-A483-36FBC0F8C150}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{13AB1853-CAD4-4097-92B9-4DD5D5164291}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{13DD6FD8-D93F-4A40-9B4A-17B9F68BE37A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{13EAE3C8-795E-4784-A992-73CBEC1A6056}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{141AEB39-C158-426E-856B-491FFD4560A0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{14705785-6E2E-40C6-B8CF-FE1026F41C2C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{14867083-53D0-4491-8773-BE7C5EC002F1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{14A6A42B-9CBB-4D47-8494-B5BD03A13016}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{14BB68DA-BE1E-4607-A33C-FE99B85FCB9B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{150A6EC8-2443-4E23-94B0-6F7B6C4CD282}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{15648B87-820C-41F2-AC24-DCEC3A1477D3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{159848F0-38FD-4B7A-AF9B-D829CE73AE01}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{15D93057-3508-4CE3-8069-F6515E67096A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{15F00FB8-2B8F-416F-9333-577F0CF2B5CE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{16AD2614-725E-4034-BB0A-AB3672E2E73A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{17048AA9-A884-45FD-B8C8-319BACA5C541}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1742DB6F-AE57-483A-B5EE-9E5643474948}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{19077650-5AEA-4906-8DEA-30453E1D17B7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{19A76615-55EE-4A52-93CE-F224EF73FA64}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{19D4C833-E25A-497B-8230-DAE2CE0BE221}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1A345B59-2674-47E1-A1A4-E4870B644E68}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1A5764F8-F936-4CE0-ADE2-BF859BD02C08}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1A7735B5-8B85-4829-8EB7-EF8BEE442FE1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1AA0D9AC-DC2F-49C0-A0D8-19E68D9732AF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1AFA67A4-3C6B-46B5-B8E2-2AB0FDD72835}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1B3926ED-B4B0-4F6F-9A6A-67B90A5EF72D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1B6DC69B-1397-4045-80AD-CF3C26ECD0C6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1BCFEC39-6F1B-4A1B-93B4-1C3E9A7F4981}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1C2601F1-3B4B-4F49-891C-9A240FAE7286}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1C3D8625-8D73-4377-B605-C28E616E7BFD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1C9644E1-88D6-47B7-A410-CDA623CD8710}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1E90E2DA-970E-4AB5-9752-A092FF5A41E3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1F556AA4-6B38-4A4A-B338-8558B18402FB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{1FC30228-E8DD-40EB-A311-AFE4EFCC70BC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{21CA9B59-6D07-4F2E-8F90-44EA1BAFC20B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{222C4448-DEE1-41E2-A3DD-F40BF0A6E88D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{224FBFDE-FDC0-4725-8125-B2CCA69EB08A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{228CF0B4-F681-48C6-8CFC-3DFDAAB390C5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{22AB3D77-519C-4EF2-A5F6-D29A17D40778}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{23054CA5-2F83-4787-BF51-2EC8BF17AA0D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{23180A94-F711-4AA5-828D-65B858A88CBA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{23672511-D98E-417C-AE0D-EBA53DCBD72D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{24333854-52D8-45AD-B4F9-02F15E9364E7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{247AC8CB-0E37-4709-B66B-5E0E4996768B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{274DF7A7-AD53-434B-8E4F-1E18C962989B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{27B692B0-2C50-4EDE-A366-CE00FF31523D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{27C91D6D-AC42-4E61-8DB6-5E489104BBDE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{28610E9C-B18A-42F1-894B-69D3E450F94B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{286C3FB0-B3EF-46A4-85C3-ACEAFB3364D3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{28A2BBBF-6344-4FE5-9E9B-13BCA5ECFCE3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{28ADF4A8-FC0A-4258-BB11-CAC9266337D2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{295B2CD3-F389-45D3-8C6F-2696496FACDA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{298C92BE-45FF-4B3A-8007-8F2375CC4B38}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2ABF6DA2-6144-452B-BED6-33F82C0CF028}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2C418FD1-98CE-441A-B902-0B1B8128A706}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2D2CB545-DFF7-45B3-A7FB-0D09F490E3F0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2DC2595D-D4DE-4E54-99AC-D30BDF16B1BE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2E386C95-58F6-4BCA-8683-C142A82C2C73}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2E4E7E34-F950-4004-8E62-D4AAA9926496}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2E9F747D-715A-4CCA-B28A-5AD1ED1253CD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2ED89BB1-4995-42F0-A7C2-A8581D35BCEF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2F8D99A5-882D-44E2-B4BC-44194F3005F2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{2FB66EAA-2F99-4437-B6DF-B336EF6714D2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{30A56658-C23A-44B7-984E-58BF2488689D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{30DB425B-E72E-4AA4-9216-37B899C8EE20}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{30F78334-A00C-44CD-8449-02C6A03AAEA9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{31095C97-C465-483C-94F3-8906C86E7A26}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{31E01A1F-B315-4A79-8E80-AB35E11A384A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{328BD535-B9DF-4818-BCB5-1BE3D8AB7423}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{329CA3B6-2656-4EFB-9505-359F9D540922}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{32BC4FAC-B84D-4AC4-AC17-A452C58F2176}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{32D914D9-5A33-42DA-8C0A-A4BB80A07901}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3348C176-24BE-4E6D-AA92-DE66566963E6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3396A8AF-4EA8-49C7-851A-CA1E41D85421}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{364F6334-C018-4EAE-B995-383B766D34C5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{36FFFE07-AFA2-4853-A53B-6F5C9F5D4523}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{375609F9-4C1C-4E68-8FCC-EB597B9DB88F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{37F3CF6C-C77F-493D-B0FB-A6F117A6F643}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{37FD0DD8-1DF6-46AB-8E5C-BF00D0BE1D36}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{38DE420F-563D-4177-9D11-6EA05E53B5FE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{39EE6143-F6BC-46DD-922B-59D97C02A4BB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3B6688C4-D6C6-46F2-9380-545E484BAC73}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3B8819C4-9D91-4549-872B-63253418265F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3C738CFE-77E8-495C-9283-2639D007767C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3C8FBC80-936C-402E-B2C9-AC21D9B12C60}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3E2A00AA-AAA2-482B-8CE4-A6D8319F7405}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3F4029D0-7385-4316-8B1A-0EB741A360CC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{3FD02218-D41A-4CD6-922F-B1375669DEF8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{402C1971-EAB4-45D2-87EF-951E53FCEB63}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{40566828-C62D-452B-8297-0BB3E5CCEF7F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{40AA91D7-3145-4559-830C-6B8E0E94C312}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{40BDD30D-F808-4879-B876-F6F3C46155BA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{40CE80AF-1CDD-4F02-BB76-0F04B3689AEA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{410CEC86-FF54-4282-9DFD-41EBE1B81325}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{41A5E28E-353F-47D3-90C1-E99D3383F6CE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{41EB5DB1-0E57-47D6-AE14-730097B65FE7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4302EEC9-E958-48E9-AE2F-D6F0C83C25C8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{430C6AAB-F167-4BDC-8CDC-2DE12F561428}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{43E0CEB7-828F-43BD-A25D-7823A839AA1A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{44076891-1820-42B7-B35C-8502DBBBA392}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{440FDC4A-1373-41FA-B06A-3F0E6C434857}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{44BC9647-C69A-4B6A-A393-D7E3BE9D1BD0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{450072FC-8C64-4246-97BB-15BEAC721E9B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{45B2D0B1-949F-466B-A82D-257A6EC945BA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4600B8D0-0CCC-493D-96C4-6AA22C1B7A6B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{469CAEEF-8B6F-43D4-B1A3-B62E0A55B784}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{470FEFCA-2B49-494A-BEB5-C4174DE3E3E8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4790C4FC-B7A6-4660-963A-DD2E74EBBF15}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{485CB28E-BC8C-458D-9AFF-F6874E19424F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{498002DE-FE7D-48DE-99F3-4EAB12C36F7F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4983E100-107D-466C-BAE2-9E770E03F99A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{49E5F4F0-CE55-4315-85AF-69216EAAC44A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4AA375E9-C40F-4CDB-97FA-D3CB88D53A25}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4AB3E97F-FF9B-400C-845E-CE1B83AE6277}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4ADBA8DC-BAC5-402F-9B06-2891603EF812}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4B20D55C-2BFD-4EFF-B119-8BF744E1403A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4BF07EC5-C96F-4FE2-BD49-F0D7C031171C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4C377282-CBD6-42CA-B56F-E46B8248F3B6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4C667921-F439-4F4A-B9C9-B2E3DA2623DB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4C71554A-0FF1-4D21-832D-E4D1487F9F9D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4D4393E8-1BF1-464E-8CBD-A24FA444BD81}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4DEECF16-BF95-42C6-80D0-77FE57F18B4E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4E03CFAF-EB8E-470E-A15D-C0751E77FDBF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4E774675-DA0A-4378-B1A5-B573CD6C5980}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4E9DD288-529B-4FF5-A706-2A281837EF1B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4EDCC362-9B94-4A28-AB92-142AF3E73429}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{4FAA4D69-72DF-46B8-8C12-077AF25A46E9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{503DACD0-D0D5-47ED-BEEA-F3209E3D9AAE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{50DC7275-0BF3-4F42-BA43-19B52EBBD90B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{510754EC-AF9E-4CBE-8BB1-3627050B5611}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{514C82CD-735A-4E7C-8985-B2B036FBA3E0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5188D301-47AF-487A-8830-84D490D0142D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5193924D-A2F4-4EAE-A74F-4527ECD2E43B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{51BA6D47-27D2-4283-8DF4-A07569A1FFC6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{532874BB-8D7F-458F-BF5F-73EEA8A78959}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{54C0A65D-6EB0-4054-9818-F5E6683592F1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{54CD0FCB-00E7-4954-83B4-72FE2DD7B679}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5510C028-6B90-4CF1-BD2B-DEE9EF51244C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{564B37E0-1AAA-42A8-B67C-CB5F02EBF764}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{56627E89-F310-4B77-9295-C9AD7848D393}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{567C8F4D-C8D9-45C2-A746-52F1E5BC3AFC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{56F4B236-607E-4ABF-878C-CE04E2BD78F9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{576D3236-14D7-4A14-B58F-C488E72665B3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{578968A2-A874-4E56-84F7-8B0AE967EF80}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{579EC0D7-A2F4-45E7-A957-1599E5249B35}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{59744830-CCED-472E-8FE8-AEE885FF3F0A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5B1484D8-5214-4C24-88C3-A7E1BA0129D3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5B2A23B3-D2A3-4BC4-8F4D-26BC9412C4CE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5BD7973A-3D88-4688-AACE-624D99789F10}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5C1529DC-F312-4D2C-8716-62AC597B4F8F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5D6A94A9-7F47-4B9F-94AF-F9BB9C12A695}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5DD773DC-ADF3-4CCA-B6E5-7408C9009AC0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5DFCB47F-B60A-4720-9B35-89A97DD6418C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5E230CEB-EC8B-4D3F-9C34-0F78E9AA99F5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5E5842D2-AF68-4DEA-A48F-A26871A2C5DF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5E8FF3FB-486C-4869-BD73-52D88E6CDAFE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{5F4CC8AC-3DC1-4A8D-825F-F7597DC6AD58}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{60014DB9-E647-47B3-A793-C846C22CBF02}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{60B25844-4409-46AD-9CF2-FD04CC89659F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6161A78E-037C-40FD-BD47-FBF26A002C80}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{620B6DB2-443D-405B-9D85-2BAC88F9CB87}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{625EAC90-CC10-441E-9FC7-7D5A87B55EB7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{62647597-01A4-42AD-959A-D6377BBEF890}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{62923231-710D-4191-847E-9C57D55ACAFC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{62BE9224-7E78-4BFA-ABC0-8BF610CE9985}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{62D95F90-9B1A-47C0-97BE-80E6772D2F1E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{62E2E11C-0653-40F7-AB83-4BEB84DC78B1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{637616A2-B269-4827-B045-7A233F482202}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{63E67CD9-3B30-4119-ACF6-FED8434B061D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{644266AC-D025-4629-A14D-3806E042AC39}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{65CB4296-57C5-4359-9D0A-E7C0040BD113}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{65E1F9B9-7A53-48BD-863F-B8DCC8BF60A5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{66B60625-8098-47D8-8C1E-38A5521AD93B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{66F8C800-B59F-4DCE-ACD1-8A4051CBECAB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6736E91B-B764-4982-8544-3DE44D1E9B64}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{67D245EA-0A06-4D1A-8E91-48ECF327B21D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{67DFCAFC-5193-4E9E-88DF-46F2B9B5A45A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{680362F5-4BA2-4DA1-A80F-511F1AE8119E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6889D017-DD02-4D36-BE5A-15659CF4FD07}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{68A0409F-A4EB-4386-8AE2-82A77D3DD781}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{69B4B56D-9DF4-4E9D-8B3B-3C5891567E2E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6A956339-D34E-4BAC-A5F1-E665799E0599}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6B155791-63CE-4070-8456-A1EED07F993A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6B1709C0-81CF-4D38-8A66-6524975D7930}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6B4CEEA7-103F-47AB-8100-78F40D5DF62F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6B7D84C1-7684-4715-BE08-CDB90F2FAFF0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6BA6BFB7-7212-4D3B-A2EB-EDCFBF788BEF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6BB78BAC-B924-4D00-8085-12756D40EC47}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6BF70436-2F4C-49B6-B309-DC067DCEF461}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6CFFA3BC-60F0-4C78-8B74-E38247AE13DA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6D018C02-EDBD-4FA8-BD58-D6A3E3FB299B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6D2A0807-C97D-417A-B88A-F1AE68077BC6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6D57E83E-7676-41A6-9055-637295BA976A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6E0EB1CF-E90A-4344-ACCB-A50194CDFF69}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6E1BD39A-AD6C-47C8-8705-CA44C34C86CE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6E2E149A-0D7D-45FC-B79D-4049325309F4}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6EBAB303-908B-46FF-84A7-67301779B803}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6EDAABDB-797B-47C1-B0F4-BDA7A9807A2B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6EF6FA77-91CB-49D5-9DFB-BCAC19A3B7DC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{6F3B44DE-FDF3-4457-9AE6-53D6C2B4BA3C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7005E0DB-C4AC-490F-821B-808968D78875}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{700749CB-3881-4192-8ED9-5EC905EC2A2F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{70438DE9-B976-4ED7-BC8C-A92F454BD818}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{70A761E4-02B2-4656-B863-09FA252CB9C8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{710753F5-7158-435F-80FB-856DF8A7D14F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7234C6D6-5A61-4D45-A62D-F89C5FF142C7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{72882D8E-BFB2-491B-A938-8C614AC1614A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7361AADC-D47B-4F91-A7A4-7506F3F34F79}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{738964C8-AA8C-4909-B165-EDB25BABC857}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{73E05836-69D4-4E4A-A0BD-56F63B1B0D49}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{740CE722-9409-464F-B258-9F9C6C03C45E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7461538B-6778-412D-BC86-E0866D3271DD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{74D4C088-2F67-4A01-BD86-C3D6C6F74324}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{759FC504-50FD-4FA6-AE14-32FBD6770343}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{75AA41E2-2C90-48BD-B791-9E91602BB7FF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{75E54AB2-9826-4B11-8B4B-B51F9DD43C37}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{76227927-53A8-47B1-8D54-28F4829E71CB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{768D965A-CE54-4ADF-8417-4C7291EBF427}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{76C0DF5F-6572-4586-BC14-B8C95EF324AA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{77F26E94-2851-4B85-9819-2EA151276CC3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{781C8A90-72BB-4E0A-8A85-C9320B485C51}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7851A1EB-7C6C-4B03-8210-8177D1FB6DD6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{78C5E948-1908-4BCE-9894-05A6410E2BDB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{79C0C145-3C17-4D06-A4F7-542F30ACD326}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7B427DEB-012D-43D1-A985-983F5F22108E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7B6DAAAE-D245-4AEC-88EE-EDC838C4A685}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7B8C5696-7226-4B16-AFD2-C37C19855458}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7B90F560-AFBB-474F-A24B-243C6C51161B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7CB0F932-D35D-43BE-A22D-44560151697E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7CB443AD-B52D-4D7E-A646-80F52A78795D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7CEE9E1A-0D21-486E-A98D-C571B956DF45}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7DC30AA2-1A5C-49EE-B819-04902C9E4DFA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7DC5829B-6B21-420E-A0A3-B7A1FB9D8219}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7DC5BC42-3FBB-4A92-B930-E59D1805F4BA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{7F6F0EF2-8640-4101-A5E3-AE8B210F82F3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{80F6451D-4D68-49B8-AAEB-6EF9F07EC806}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8109B607-B649-46C7-B96B-ACBD9506E238}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{81303421-1BB7-45B6-8AF2-F7CC03680EF2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{819AC894-1DE3-49F6-A646-306F095E3D56}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{81F7B0F8-BEAC-456C-9B95-1A94FFE3D257}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{82DFD72D-27AB-4681-9014-7ECD7890F698}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{83054856-5D53-4896-A7AF-0F9E2427ABE9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8329A2CC-3588-4871-A771-2E8CCA6ACE7C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{833944D2-EC77-4085-BCB1-AD2437D31EA6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{849FB1A5-789B-44A2-A603-C80D798DF71E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{84F6001E-D6DF-4AD4-A664-E98C93839B7B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{852B64C2-26A9-4F17-A905-09B4B25960CF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8552FDC5-8BA4-498B-8010-DE2375C6B964}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{85E805BC-9C2C-4B08-8941-C647E1C27567}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{86D04248-FFD2-48AB-9243-1E1508947D67}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{86D1F1E2-C02B-4E3F-8602-1E3ADD578502}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{86F77F3E-2E38-47F6-91F4-953520A96A70}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{87C28FEC-08E4-4828-B21D-1AC79A8F1120}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8844EC8C-D22B-430F-A458-7A2AE73E0053}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{89A70512-631B-4DA0-AAAE-DAF445D07B89}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8A17CAC3-77BD-4218-833F-D4CBECECB006}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8B0963C7-7AE1-4807-810C-52F88F37BBB0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8B4BF954-3D20-4C0B-867D-B15EA42C666E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8C2FE7E3-5282-41F6-AF89-BC183380998A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8C80B8C2-C00E-4090-8647-53C9C26DA0CE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8D26A3AD-575F-4A6F-AC8A-D0CDA5A69B49}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8D9B7041-9B34-4297-9DF3-CFE9CE40D7D2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8DAC2961-F177-4E8F-9092-2AB1690FBB18}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8DDB894E-E2F5-41D0-8874-4007B07F75E7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8DF426AC-826F-48B4-A7FA-4131BB654F37}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8E1D7441-EB82-4B81-9F12-AC9B061FADF0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8F305C4C-F720-4E36-835D-8B482F425B42}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{8F418D6A-B151-4F3F-AFD2-D79738CA4E3A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{90B75C6D-DFA3-476B-8081-2E64A4994EC4}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{90F5550B-C79C-4D09-A9B3-35852C201383}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{90FE88F7-E11D-4810-B884-85CCCBB5627D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9123925D-309A-4C97-ADD4-00E7CA213971}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{91B07C95-F578-41EF-ACC9-0F76D9F778B2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{92295886-18FF-4B45-B0F9-610641345883}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9271E7F1-241F-40F0-A115-06522D5F415C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{92ACF1FC-ADA0-4BC9-8DE5-8760DEAFAD66}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{932E5D63-5B9C-4A20-B56B-DA6A7183162A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{934E31CE-C6B9-417D-94BA-75E0062B11BF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{94EE4A72-4447-4D0E-991E-79C02F3B329B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{95294916-872D-4718-9E28-F7E9A02ADE25}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{959579DB-4921-4F2C-84F8-6928F2175EE1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9650A26C-EB58-4C67-BC50-C69368D845C8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{96525C37-BA55-45EA-ADCB-792EC6EEA9A7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{96A2238A-3178-4FE9-A508-9F535F198055}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{96F152A5-577E-401A-9006-426E21C284CA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{979B0AA2-4CD3-4FF7-93BE-2F0EA162F12E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{97A2151B-7ECC-4C98-90B9-0EF0640D36A0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{97B6D4C0-CB95-4918-92CF-3BF837262421}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{97D98047-5761-49C1-AF07-E3C341ED08A0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{97E0423F-8150-4F5F-8BE6-23FE8F940C7A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{97FACC4B-F222-4985-AFC9-B56CD201C7A1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{98877E2A-EE3E-47A7-8457-AA529E187C40}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{997B9EEA-8D4C-4769-A822-4AE2470543CC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{99F8DBF5-BB40-42EC-A576-E8A35ED408E7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9A2EB9C1-14D4-4AE4-81B9-00DF6A4653A5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9ABEB04C-7FB6-487B-AE50-598E805A8959}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9AE880A8-3F92-4347-9C63-CB65D7298C7D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9B24444E-561B-4003-B2E9-A3DDBFE0CF00}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9B31791F-3F0E-4712-8A60-0CC903909961}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9B9DB3F1-3D85-422C-9AE4-4E4A630C72BA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9BE591EC-494F-411F-973B-E580DFC9B686}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9C67F87D-7B0A-44C4-9292-55A0386D1437}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9D46F1B5-0821-4652-99F2-BBCE6C85E8DC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9D818173-02B9-45BC-8CC5-C55B6EE57A92}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9F33820C-DFED-4024-AA16-DBE41F85C822}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9FC2A4C7-BEA1-4318-8264-9E16CFDCE9DD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{9FC52337-B1D0-4067-B2CC-AA685530899D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A0FFC47C-8AD0-4805-9C02-49876E4D56F5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A1DF1BCD-C4A4-4148-9448-181AB0900509}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A21D8D80-82DB-43D5-AE15-9EFEC57F55E0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A23FEDA8-6126-45FF-A8E0-599BF0F75FF3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A25544DC-C110-4774-9710-62C5FDC82B19}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A3D3BBFF-7784-4C7B-9BF0-7CF7B471467D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A3F48858-8517-4B98-A7B2-D7F85468F68C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A5250B2A-1E8B-4F1E-BA77-300D9AC57D56}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A53312E4-EB6F-4C54-8735-C83ECBB24B47}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A5A15CA3-BD9D-4606-A889-214BE20D0B0C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A6FB2324-E49E-4224-8F76-43A8748EE8D9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A843A975-A5CB-417D-9628-DE06EF5499C7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A899BF95-57A5-4B94-A237-CFBC98EBB6D6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A8C7FB93-EF18-41A5-AFB0-C3B4853EC1F7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A94D0029-0B7D-42E6-A2BB-D8DF23298BD2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{A971BC59-99BD-4B4A-B07A-B9932F5752CB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AACEEC76-60CE-4494-80A9-F43AA22D66AA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AB6F9099-0DDF-447B-9C1D-10CD65738AB5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{ABF1AB34-B47C-445B-8AD9-92B62E8832BF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AC44F970-30A0-46DD-8371-EDF95067067B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{ACA55DB7-2236-44D1-8C6D-85494C173401}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{ACBE152D-B006-4434-BF82-FCFA3C88360F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{ACEBD3FD-627A-4F80-B164-F9EC3DCC8790}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AD16E4B6-742D-47C8-A629-AC06EFCC4EB3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AD2577F3-E5EB-4E90-8CF1-116C882F69B4}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AD7552CB-EE6F-4E71-87DF-109641CC8634}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AE6892B1-BADF-404C-8E06-13E5C36FB700}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AE767589-3292-46E7-AD51-B575C298892F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{AF6147C8-6917-4060-AABA-4689AC84F9EB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B009ABAC-6548-4E09-AEDA-C5C44D8A874A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B07CAB57-043E-4793-9247-AA802314F4CB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B08A710B-9D31-47CC-9C8B-CB7BBA84A0AC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B08C98AC-AC12-4E73-AA91-7A5F0259E7E1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B0E7B019-C999-4F1D-801D-692ECC4650F2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B15C1F81-4C1E-45EB-92AF-5B7E38EECF1B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B23D978F-FCC8-411C-8331-B997D942D464}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B2CA82D3-9A1D-4A6C-9D70-A607FDAEE54B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B30860AC-1EF3-4596-8CE5-F547637721B2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B33CB240-4DCF-4C5F-9239-147B61B07B76}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B36CF44B-23F1-4E4C-9C34-E6B0DEC3313C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B37F8244-06BC-4634-9620-1DFB5A167222}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B393DC9C-65BB-472C-9302-3FF2D8FD2353}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B4B27117-FD23-458E-92F8-5E84D49DD554}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B4BB1E08-271D-43A0-94B8-AA554CF98454}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B63F64F7-59AF-4EE2-9659-2BCB9852BF57}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B71297A9-A679-475B-ADA2-F9450498C8B8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B796D712-36E6-4D48-A85A-14EC85FCC358}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B7F2319C-265C-435F-9EAB-337DCC8017B3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B8ABA7FD-0C43-4E1C-8D0B-745705FF6BDB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B8EACAD4-A2C7-4AA9-A23C-6B4CC1E63CBB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B8FDB48E-4677-47AA-9688-3B316BA2EDE7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B9497100-537C-4795-8748-1008B5EDD894}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B97E6183-8123-4723-BE67-08E415C5CB36}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{B980F189-4839-41C9-936F-D8D51B851C3A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BA4399D0-56F0-433A-85AF-40D70F94E324}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BAC94C6A-A492-463D-9063-24D5D0DAF398}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BC483312-5BBE-4E27-9C1B-8EFB29E29E92}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BC803798-C0BE-4F45-8FBE-330836ACA553}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BCE604C0-64E9-49DD-AF09-64693154141A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BD754F90-023D-45A0-BAEA-7D4E49C1CD94}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BDBA87C5-5B2F-424F-A591-89CCB2D46100}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BDBBE822-0998-4F9D-A70A-4642CF579706}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BDC020D8-7EB3-4613-9AAE-732DDB8A0733}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BF0B6610-E7A1-4F3A-9A1D-C82763D5C0A8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{BF5336AF-D0D9-4638-BAA5-B3841EE4B6E0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C00D3307-97A1-46CC-AAB9-9C0BB1B06C2C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C10E7476-12CF-4CE6-BB1C-A9CB8BD8C70B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C144D4C4-974E-42E2-B3A6-7472C08BC06D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C1A7643B-A4FF-43D9-A707-1F13E9EC4DF9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C1B99091-EF3E-43C1-BF54-73E5180A391E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C25132D6-7578-45F6-B47D-6FC7DA9A70A1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C26F8CE6-4776-4FA7-9289-F70CB12F9826}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C2C836C0-976C-4840-AC77-4812B4A03B90}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C2DD1726-E2E7-40E4-857F-B9235E50ECB3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C2FD04F7-D1D5-40D7-BA47-188C3A08194E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C4761A16-FD53-4AAE-91A7-3CC7F6AF824B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C4D1517A-D104-44C8-9C2D-65790EA699EA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C4D6B8A8-1CF7-41D0-B96B-A8C1147A688F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C533D2C1-156F-4A50-AF32-87EA8DFFA19C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C5694642-05D5-41F2-9137-A1527C0E9041}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C57836D8-9DFB-4528-9A4C-31878EB04C43}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C67F5FEC-0A74-45A2-8E71-5BE19736B2E3}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C689E0CC-244B-49B0-BF81-91B586956F57}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C6E9ECAC-6313-4B05-8536-2255E5348F23}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C746D2CB-CFA5-4751-A6D8-685518F877BC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C7540F16-CAB8-479B-B7AA-01F769D3CC64}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C75E59DC-04FF-49D4-9F06-A6D678D40731}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C86B0C0F-C4CA-4022-81F5-3141F24EC8C9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C8857C80-E990-4EA2-8119-AC577D0C8CC8}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C8ACF77A-E55C-4F88-B0CB-6CCED5FB05CB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C960C494-1231-43E1-AC23-02749CCF0EFC}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C98AB7C8-2E40-4CAD-B4CF-543F04567DE6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{C98FF8FB-F984-4B28-80E4-CE4B4B1BF209}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CB6D7A86-D240-4098-8437-EFDC21A0CBD2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CB9A95FA-C481-4FF0-834E-F19582FEED9A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CC209DC7-D579-4EA9-8CCF-96634A768EAB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CC8D5F7C-4DBF-4695-B61B-05527309AAD5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CCAFCD80-E42C-4DDC-B3AC-B1AB3D9D50E0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CCE2EBBE-7B2F-4749-A6EC-1D9DC2B9365F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CCFEDBB0-B574-4A15-A4FF-DF61187DDFC4}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CD056748-89F9-4978-81E1-D23E04D105BF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CD4499EB-9764-494F-A0F3-5062E42D318A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CD6B8047-C97A-4218-99A1-83908A88A878}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CDA3FD57-659E-4BBF-B3CF-C899549C7362}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CDB7CA2E-461E-4A64-B346-110CCEB94C25}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CF4F0E13-02CF-40E6-870A-BB5E9C63400B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CF61E1FF-B966-454B-867D-FD0ADB62C1D9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CF89CC84-7024-42D8-B4B0-7FEF64ACD404}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{CFB7ECB7-CCCE-4E38-A633-DAABFD4DF6CA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D0C21553-6E0A-4CB8-A543-DD3897480FDE}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D0CAD9AD-3A6F-45BD-BA2D-65CB082C6B19}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D112900E-D078-44FA-9345-4651D238D2AD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D142C4EF-8821-409D-8D5F-062DB7F34A96}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D2280FA5-48CA-42E3-A89F-58BF504C7C32}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D3297870-E481-4756-8E42-37DCE16A4B96}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D34D5FCB-61AF-420B-A187-BDC87757C075}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D4BDF9D0-08ED-42F3-9DD4-43E5794188B2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D4CDF9D9-8197-45AB-953D-266431BDC047}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D5100E74-3063-4B19-B43A-1E4C56CFF75A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D5B8D000-DF18-4B64-8591-90187B4E3296}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D606A068-7C35-471E-BF82-37CA106196C1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D69CCCCC-C2DD-424F-A68E-5F08D462D56E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D70B5926-AC4F-4043-9A5E-FBB9559F8DA6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D726A8AB-A3EE-42BC-8949-3F414E9CED69}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D7835EF8-09B1-4D80-B109-4F72D84B4E9C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D7E12350-4FB0-41B2-9C4D-40A21F0E4034}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D85AB5F4-A107-4578-B9B9-B76F61C50BBA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D86EFFD1-FD5E-4C2E-96BB-7E3FFBB4EAC9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D9A0980A-0063-4AA3-ABF8-5335905C4140}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{D9D673A7-316F-48C2-9F92-14710568FEDD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DB372138-8757-462D-A6B1-CCCCC946B91E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DB44123C-BCA1-469F-B52F-FCC4F91EEF34}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DB6B109F-F968-4E7F-8719-37670135A55E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DB838CB2-7A48-4472-8787-38F130B612EF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DC2EEB10-5413-4155-B3BA-16DF6D649C26}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DCFC7963-8EE6-43F3-84A9-288A0C14E987}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DF10EEE0-482A-454B-BE04-9176780FA824}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DFEF3978-A2C4-4B9A-8DBD-79E5968EFD7A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{DFFDA8EF-581A-4008-99BB-1AE5B6364209}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E019B093-CE07-4012-A090-99325B1FBD8F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E05F2A46-63A8-4644-84FC-53A9779A3FA9}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E07B9300-D29D-4B70-B6C7-A3DD82BCA28E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E221C637-FE8A-4C4D-9CEB-DDA06362EC59}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E3336BD8-129C-4CD4-B33D-352F395D466C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E46879E8-52A8-4ED9-B964-60731A1DE667}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E517C59C-48A5-44F4-9EAC-B6C9ED26B96F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E520274F-2872-43DD-9351-6DFD9824A95B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E542D206-55EE-4794-982E-D0FCA63AF5D4}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E5810166-99E8-4C0C-899C-1D69A4C7E66F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E59CC8F8-3663-4748-9880-A1CBE13722AD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E5BE5557-62A4-4F3E-9FFC-56C5F3EFBEC6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E5E4E189-7FBA-45F1-AB7E-F361165C90EA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E5F9C3C1-3876-4041-8431-30E82245700A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E5FB7661-0DB6-4F11-BABD-E666D628DF59}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E76F205D-150E-4B25-84FE-E6FEECF09E6C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E7A92F55-9BCF-439C-98E7-5FC6DA8AC2E6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E7D3A5E5-2292-4A7B-9FA3-AD1FA9E14FF5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E8237D45-3854-4CD8-8364-9A4471F53072}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E9B40824-3858-415A-A3FB-426E0B9255A1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{E9BF9EF6-63F9-4B1D-AE7E-DE04A246FB0D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EAE372CD-4922-4756-B8B8-9B59E4764996}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EAFD0653-3BD0-4D32-9AF0-085E5E0AAE8B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EB0C3F55-310B-4D29-9553-616DD972CB3C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EB898934-5DD1-4EE9-810B-7F468BF64C5E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EBA969A1-DFA0-4A58-BACC-0C07A875D345}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EC0B4608-7D65-41F8-B0C1-8955A15351B5}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{ED4B671B-35E9-4A01-B24F-2374C3129A4B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EDE3A74D-C889-49FF-BD57-89B6736F64DB}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EE30812B-66FC-4332-99E5-54785B5AC86C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EEBE7541-BF6C-4E12-B134-D7EF846294DA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EEDB4C1C-BF04-4B95-B74A-614EB1EBAACA}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EF62DA5D-DD5D-412D-B50E-CEF9AED18FAF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EF9C9550-EF45-4776-81F6-1AAE336A4570}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EFA592E5-8801-418C-80DF-9320D40B045B}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{EFE528A5-EE36-4EE1-B986-6EB2157D89DF}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F0324736-C372-4E81-BD65-DD606C9E371D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F064E061-4387-4160-A6DB-5027B222D122}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F0765E84-2A32-4DFE-AC97-71614627FCE2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F0862761-D6BF-4A96-8799-3DB5CCA1CF3C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F0B0F945-CF1E-48C6-A825-AB2322BECE22}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F35D614E-56DD-402E-984A-74180CC7816E}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F3983C6A-EBD0-4623-8D49-5C6D71864524}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F3F60024-7F71-4486-B101-9AA3A13AFB23}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F441C50F-8710-4F34-B707-20B163FE3A2F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F4F93761-2C53-4B7F-8A6D-E2528CDA79A1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F54AC2BB-4C63-4714-A2D4-C1E62383FD3A}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F566E944-7BBC-484A-BF11-D48E9A15ACC2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F58EC568-E129-42DC-856D-185860A7FAC0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F5FCFCF3-2627-42BB-834A-A63EBC715AD7}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F64D7CD2-28DE-4EC5-ADBE-9AA1B6BE78CD}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F6A7271A-CAB3-4658-9A8B-69850E5A2A14}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F6A769BA-362A-4AA0-83F6-1D8F4DF23D7C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F797C3D9-602D-4F56-B2A3-93017DBAFE8C}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F7B3A3C9-0140-4D7C-AF0A-DF693EF40818}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F7BB57D0-3919-40CF-8FCC-8286A1FC39D2}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F80D5196-49B7-4E92-8937-DF18FA8D30E1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F843DE23-AA62-4201-9EDF-50413BF68198}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F9578757-16F5-47CD-A9B6-1BE075CFB050}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F9A7CD8F-7922-4013-8E71-C6CA506173A1}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{F9DF5017-3E64-401F-889C-1A9143FAF443}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FA2B8A89-79FF-4B6D-B87D-1334D8503A11}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FA63CB57-A4A5-4076-A24F-362D03616D84}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FAFF9BBE-123A-4294-8802-991A8541740D}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FB356AC7-DB27-407B-9654-20FFC71366C6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FB42B22D-766D-442D-9EEC-4074190F7481}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FC0B0B80-8A49-4D5D-89BF-D7AD4F892393}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FEA55880-5FE9-41AE-808E-01300210C91F}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FEF910DC-5B8D-4969-B661-3BCF2DA2CBE6}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FF1EB3CF-6793-49D1-844B-7833E9A86FC0}
SUPPRIME Folder: C:\Users\pc\AppData\Local\{FFB43CCE-1829-4BB0-8590-C8D88C25F567}

========== Fichier(s) ==========
SUPPRIME File: c:\windows\prefetch\svchost .exe-0b75ade4.pf 
SUPPRIME File: c:\users\pc\application data\microsoft\ois	oolbars.dat 
SUPPRIME File: c:\windows\prefetch\updatetask.exe-7c757890.pf 
SUPPRIME File: c:\windows\prefetch\bingapp.exe-3b09ba75.pf 
SUPPRIME File: c:\windows\prefetch\bingbar.exe-f1001c21.pf 
SUPPRIME File: c:\windows\prefetch\bingsurrogate.exe-3ee4280c.pf 
SUPPRIME Temporaires Windows


========== Récapitulatif ==========
9 : Clé(s) du Registre
8 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
565 : Dossier(s)
7 : Fichier(s)


End of clean in 01mn 09s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 08/04/2013 19:25:20 [49500]

Utilisateur anonyme · Answer

je t'informe tout simplement que tu as du utilisé un activateur de Windows, donc il est recommandé de te procurer une licence, si tu ne veux pas avoir de soucis avec Windows !!!



redémarre ton pc

Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton bureau:

https://fr.malwarebytes.com/mwb-download/
ou :

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
 
 
/!\Utilisateur de Vista, Windows 7 et W8 : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu'Administrateur »

. Double cliques sur le fichier téléchargé pour lancer le processus d'installation. 
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour 
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes 
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche 
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre. 
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Clique sur 'Afficher les résultats' pour afficher tous les objets trouvés. 
. Cliques sur Ok pour poursuivre. 
. Si des malwares ont été détectés, cliques sur Afficher les résultats 
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. 
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. 
. rends toi dans l'onglet rapport/log 
. tu cliques dessus pour l'afficher une fois affiché 
. tu cliques sur édition en haut du boc notes, et puis sur sélectionner tous 
. tu recliques sur édition et puis sur copier et tu reviens sur le forum et dans ta réponse 
. Tu cliques droit dans le cadre de la réponse et coller 
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!

Si tu as besoin d'aide regarde ce tutoriel : 
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

lotfi rx · Answer

[Perflib]
Base Index=1847
Last Counter=7062
Last Help=7063

[PERF_.NET CLR Data]
First Counter=4202
First Help=4203
Last Counter=4214
Last Help=4215

[PERF_.NET CLR Networking]
First Counter=4160
First Help=4161
Last Counter=4170
Last Help=4171

[PERF_.NET CLR Networking 4.0.0.0]
First Counter=5660
First Help=5661
Last Counter=5686
Last Help=5687

[PERF_.NET Data Provider for Oracle]
First Counter=4392
First Help=4393
Last Counter=4420
Last Help=4421

[PERF_.NET Data Provider for SqlServer]
First Counter=4172
First Help=4173
Last Counter=4200
Last Help=4201

[PERF_.NETFramework]
First Counter=4216
First Help=4217
Last Counter=4390
Last Help=4391

[PERF_BITS]
First Counter=2002
First Help=2003
Last Counter=2018
Last Help=2019

[PERF_ESENT]
First Counter=2602
First Help=2603
Last Counter=3698
Last Help=3699

[PERF_MSDTC]
First Counter=3700
First Help=3701
Last Counter=3726
Last Help=3727

[PERF_MSDTC Bridge 3.0.0.0]
First Counter=5110
First Help=5111
Last Counter=5132
Last Help=5133

[PERF_MSDTC Bridge 4.0.0.0]
First Counter=6822
First Help=6823
Last Counter=6844
Last Help=6845

[PERF_Outlook]
First Counter=7026
First Help=7027
Last Counter=7062
Last Help=7063

[PERF_rdyboost]
First Counter=4788
First Help=4789
Last Counter=4808
Last Help=4809

[PERF_RemoteAccess]
First Counter=2046
First Help=2047
Last Counter=2084
Last Help=2085

[PERF_ServiceModelEndpoint 3.0.0.0]
First Counter=4896
First Help=4897
Last Counter=4934
Last Help=4935

[PERF_ServiceModelOperation 3.0.0.0]
First Counter=5078
First Help=5079
Last Counter=5108
Last Help=5109

[PERF_ServiceModelService 3.0.0.0]
First Counter=4936
First Help=4937
Last Counter=5002
Last Help=5003

[PERF_SMSvcHost 3.0.0.0]
First Counter=5048
First Help=5049
Last Counter=5076
Last Help=5077

[PERF_SMSvcHost 4.0.0.0]
First Counter=6792
First Help=6793
Last Counter=6820
Last Help=6821

[PERF_TapiSrv]
First Counter=2026
First Help=2027
Last Counter=2044
Last Help=2045

[PERF_TermService]
First Counter=3728
First Help=3729
Last Counter=3848
Last Help=3849

[PERF_UGatherer]
First Counter=4482
First Help=4483
Last Counter=4586
Last Help=4587

[PERF_UGTHRSVC]
First Counter=4588
First Help=4589
Last Counter=4658
Last Help=4659

[PERF_usbhub]
First Counter=4124
First Help=4125
Last Counter=4158
Last Help=4159

[PERF_Windows Workflow Foundation 3.0.0.0]
First Counter=5004
First Help=5005
Last Counter=5046
Last Help=5047

[PERF_WSearchIdxPi]
First Counter=4660
First Help=4661
Last Counter=4786
Last Help=4787

[PerfStrings_009]
1=1847
2=System
3=The System performance object consists of counters that apply to more than one instance of a component processors on the computer.
4=Memory
5=The Memory performance object  consists of counters that describe the behavior of physical and virtual memory on the computer.  Physical memory is the amount of random access memory on the computer.  Virtual memory consists of the space in physical memory and on disk.  Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory.  Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes.
6=% Processor Time
7=% Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idle thread that consumes cycles when no other threads are ready to run). This counter is the primary indicator of processor activity, and displays the average percentage of busy time observed during the sample interval. It should be noted that the accounting calculation of whether the processor is idle is performed at an internal sampling interval of the system clock (10ms). On todays fast processors, % Processor Time can therefore underestimate the processor utilization as the processor may be spending a lot of time servicing threads between the system clock sampling interval. Workload based timer applications are one example  of applications  which are more likely to be measured inaccurately as timers are signaled just after the sample is taken.
9=% Total DPC Time is the average percentage of time that all processors spend receiving and servicing deferred procedure calls (DPCs).  (DPCs are interrupts that run at a lower priority than the standard interrupts). It is the sum of Processor: % DPC Time for all processors on the computer, divided by the number of processors.  System: % Total DPC Time is a component of System: % Total Privileged Time because DPCs are executed in privileged mode.  DPCs are counted separately and are not a component of the interrupt count.  This counter displays the average busy time as a percentage of the sample time.
10=File Read Operations/sec
11=File Read Operations/sec is the combined rate of file system read requests to all devices on the computer, including requests to read from the file system cache.  It is measured in numbers of reads.  This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
12=File Write Operations/sec
13=File Write Operations/sec is the combined rate of the file system write requests to all devices on the computer, including requests to write to data in the file system cache.  It is measured in numbers of writes. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
14=File Control Operations/sec
15=File Control Operations/sec is the combined rate of file system operations that are neither reads nor writes, such as file system control requests and requests for information about device characteristics or status.  This is the inverse of System: File Data Operations/sec and is measured in number of operations perf second.  This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
16=File Read Bytes/sec
17=File Read Bytes/sec is the overall rate at which bytes are read to satisfy  file system read requests to all devices on the computer, including reads from the file system cache.  It is measured in number of bytes per second.  This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
18=File Write Bytes/sec
19=File Write Bytes/sec is the overall rate at which bytes are written to satisfy file system write requests to all devices on the computer, including writes to the file system cache.  It is measured in number of bytes per second.  This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
20=File Control Bytes/sec
21=File Control Bytes/sec is the overall rate at which bytes are transferred for all file system operations that are neither reads nor writes, including file system control requests and requests for information about device characteristics or status.  It is measured in numbers of bytes.  This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
23=% Total Interrupt Time is the average percentage of time that all processors spend receiving and servicing hardware interrupts during sample intervals, where the value is an indirect indicator of the activity of devices that generate interrupts. It is the sum of Processor: % Interrupt Time for of all processors on the computer, divided by the number of processors.  DPCs are counted separately and are not a component of the interrupt count.  This value is an indirect indicator of the activity of devices that generate interrupts, such as the system timer, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices.
24=Available Bytes
25=Available Bytes is the amount of physical memory, in bytes, immediately available for allocation to a process or for system use. It is equal to the sum of memory assigned to the standby (cached), free and zero page lists. For a full explanation of the memory manager, refer to MSDN and/or the System Performance and Troubleshooting Guide chapter in the Windows Server 2003 Resource Kit.
26=Committed Bytes
27=Committed Bytes is the amount of committed virtual memory, in bytes. Committed memory is the physical memory which has space reserved on the disk paging file(s). There can be one or more paging files on each physical drive. This counter displays the last observed value only; it is not an average.
28=Page Faults/sec
29=Page Faults/sec is the average number of pages faulted per second. It is measured in number of pages faulted per second because only one page is faulted in each fault operation, hence this is also equal to the number of page fault operations. This counter includes both hard faults (those that require disk access) and soft faults (where the faulted page is found elsewhere in physical memory.) Most processors can handle large numbers of soft faults without significant consequence. However, hard faults, which require disk access, can cause significant delays.
30=Commit Limit
31=Commit Limit is the amount of virtual memory that can be committed without having to extend the paging file(s).  It is measured in bytes. Committed memory is the physical memory which has space reserved on the disk paging files. There can be one paging file on each logical drive). If the paging file(s) are be expanded, this limit increases accordingly.  This counter displays the last observed value only; it is not an average.
32=Write Copies/sec
33=Write Copies/sec is the rate at which page faults are caused by attempts to write that have been satisfied by coping of the page from elsewhere in physical memory. This is an economical way of sharing data since pages are only copied when they are written to; otherwise, the page is shared. This counter shows the number of copies, without regard for the number of pages copied in each operation.
34=Transition Faults/sec
35=Transition Faults/sec is the rate at which page faults are resolved by recovering pages that were being used by another process sharing the page, or were on the modified page list or the standby list, or were being written to disk at the time of the page fault. The pages were recovered without additional disk activity. Transition faults are counted in numbers of faults; because only one page is faulted in each operation, it is also equal to the number of pages faulted.
36=Cache Faults/sec
37=Cache Faults/sec is the rate at which faults occur when a page sought in the file system cache is not found and must be retrieved from elsewhere in memory (a soft fault) or from disk (a hard fault). The file system cache is an area of physical memory that stores recently used pages of data for applications. Cache activity is a reliable indicator of most application I/O operations. This counter shows the number of faults, without regard for the number of pages faulted in each operation.
38=Demand Zero Faults/sec
39=Demand Zero Faults/sec is the rate at which a zeroed page is required to satisfy the fault.  Zeroed pages, pages emptied of previously stored data and filled with zeros, are a security feature of Windows that prevent processes from seeing data stored by earlier processes that used the memory space. Windows maintains a list of zeroed pages to accelerate this process. This counter shows the number of faults, without regard to the number of pages retrieved to satisfy the fault. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
40=Pages/sec
41=Pages/sec is the rate at which pages are read from or written to disk to resolve hard page faults. This counter is a primary indicator of the kinds of faults that cause system-wide delays.  It is the sum of Memory\Pages Input/sec and Memory\Pages Output/sec.  It is counted in numbers of pages, so it can be compared to other counts of pages, such as Memory\Page Faults/sec, without conversion. It includes pages retrieved to satisfy faults in the file system cache (usually requested by applications) non-cached mapped memory files.
42=Page Reads/sec
43=Page Reads/sec is the rate at which the disk was read to resolve hard page faults. It shows the number of reads operations, without regard to the number of pages retrieved in each operation. Hard page faults occur when a process references a page in virtual memory that is not in working set or elsewhere in physical memory, and must be retrieved from disk. This counter is a primary indicator of the kinds of faults that cause system-wide delays. It includes read operations to satisfy faults in the file system cache (usually requested by applications) and in non-cached mapped memory files. Compare the value of Memory\Pages Reads/sec to the value of Memory\Pages Input/sec to determine the average number of pages read during each operation.
44=Processor Queue Length
45=Processor Queue Length is the number of threads in the processor queue.  Unlike the disk counters, this counter counters, this counter shows ready threads only, not threads that are running.  There is a single queue for processor time even on computers with multiple processors. Therefore, if a computer has multiple processors, you need to divide this value by the number of processors servicing the workload. A sustained processor queue of less than 10 threads per processor is normally acceptable, dependent of the workload.
46=Thread State
47=Thread State is the current state of the thread.  It is 0 for Initialized, 1 for Ready, 2 for Running, 3 for Standby, 4 for Terminated, 5 for Wait, 6 for Transition, 7 for Unknown.  A Running thread is using a processor; a Standby thread is about to use one.  A Ready thread wants to use a processor, but is waiting for a processor because none are free.  A thread in Transition is waiting for a resource in order to execute, such as waiting for its execution stack to be paged in from disk.  A Waiting thread has no use for the processor because it is waiting for a peripheral operation to complete or a resource to become free.
48=Pages Output/sec
49=Pages Output/sec is the rate at which pages are written to disk to free up space in physical memory. Pages are written back to disk only if they are changed in physical memory, so they are likely to hold data, not code. A high rate of pages output might indicate a memory shortage. Windows writes more pages back to disk to free up space when physical memory is in short supply.  This counter shows the number of pages, and can be compared to other counts of pages, without conversion.
50=Page Writes/sec
51=Page Writes/sec is the rate at which pages are written to disk to free up space in physical memory. Pages are written to disk only if they are changed while in physical memory, so they are likely to hold data, not code.  This counter shows write operations, without regard to the number of pages written in each operation.  This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
52=Browser
53=The Browser performance object consists of counters that measure the rates of announcements, enumerations, and other Browser transmissions.
54=Announcements Server/sec
55=Announcements Server/sec is the rate at which the servers in this domain have announced themselves to this server.
56=Pool Paged Bytes
57=Pool Paged Bytes is the size, in bytes, of the paged pool, an area of system memory (physical memory used by the operating system) for objects that can be written to disk when they are not being used.  Memory\Pool Paged Bytes is calculated differently than Process\Pool Paged Bytes, so it might not equal Process\Pool Paged Bytes\_Total. This counter displays the last observed value only; it is not an average.
58=Pool Nonpaged Bytes
59=Pool Nonpaged Bytes is the size, in bytes, of the nonpaged pool, an area of system memory (physical memory used by the operating system) for objects that cannot be written to disk, but must remain in physical memory as long as they are allocated.  Memory\Pool Nonpaged Bytes is calculated differently than Process\Pool Nonpaged Bytes, so it might not equal Process\Pool Nonpaged Bytes\_Total.  This counter displays the last observed value only; it is not an average.
60=Pool Paged Allocs
61=Pool Paged Allocs is the number of calls to allocate space in the paged pool. The paged pool is an area of system memory (physical memory used by the operating system) for objects that can be written to disk when they are not being used. It is measured in numbers of calls to allocate space, regardless of the amount of space allocated in each call.  This counter displays the last observed value only; it is not an average.
63=Pool Paged Resident Bytes is the current size, in bytes, of the paged pool. The paged pool is an area of system memory (physical memory used by the operating system) for objects that can be written to disk when they are not being used. Space used by the paged and nonpaged pools are taken from physical memory, so a pool that is too large denies memory space to processes. This counter displays the last observed value only; it is not an average.
64=Pool Nonpaged Allocs
65=Pool Nonpaged Allocs is the number of calls to allocate space in the nonpaged pool. The nonpaged pool is an area of system memory area for objects that cannot be written to disk, and must remain in physical memory as long as they are allocated.  It is measured in numbers of calls to allocate space, regardless of the amount of space allocated in each call.  This counter displays the last observed value only; it is not an average.
66=Pool Paged Resident Bytes
67=Bytes Total/sec is the total rate of bytes sent to or received from the network by the protocol, but only for the frames (packets) which carry data. This is the sum of Frame Bytes/sec and Datagram Bytes/sec.
68=System Code Total Bytes
69=System Code Total Bytes is the size, in bytes, of the pageable operating system code currently in virtual memory. It is a measure of the amount of physical memory being used by the operating system that can be written to disk when not in use. This value is calculated by summing the bytes in Ntoskrnl.exe, Hal.dll, the boot drivers, and file systems loaded by Ntldr/osloader.  This counter does not include code that must remain in physical memory and cannot be written to disk. This counter displays the last observed value only; it is not an average.
70=System Code Resident Bytes
71=System Code Resident Bytes is the size, in bytes of the operating system code currently in physical memory that can be written to disk when not in use. This value is a component of Memory\System Code Total Bytes, which also includes operating system code on disk. Memory\System Code Resident Bytes (and Memory\System Code Total Bytes) does not include code that must remain in physical memory and cannot be written to disk. This counter displays the last observed value only; it is not an average.
72=System Driver Total Bytes
73=System Driver Total Bytes is the size, in bytes, of the pageable virtual memory currently being used by device drivers. Pageable memory can be written to disk when it is not being used. It includes physical memory (Memory\System Driver Resident Bytes) and code and data paged to disk. It is a component of Memory\System Code Total Bytes. This counter displays the last observed value only; it is not an average.
74=System Driver Resident Bytes
75=System Driver Resident Bytes is the size, in bytes, of the pageable physical memory being used by device drivers. It is the working set (physical memory area) of the drivers. This value is a component of Memory\System Driver Total Bytes, which also includes driver memory that has been written to disk. Neither Memory\System Driver Resident Bytes nor Memory\System Driver Total Bytes includes memory that cannot be written to disk.
76=System Cache Resident Bytes
77=System Cache Resident Bytes is the size, in bytes, of the pageable operating system code in the file system cache. This value includes only current physical pages and does not include any virtual memory pages not currently resident. It does equal the System Cache value shown in Task Manager. As a result, this value may be smaller than the actual amount of virtual memory in use by the file system cache. This value is a component of Memory\System Code Resident Bytes which represents all pageable operating system code that is currently in physical memory. This counter displays the last observed value only; it is not an average.
78=Announcements Domain/sec
79=Announcements Domain/sec is the rate at which a domain has announced itself to the network.
80=Election Packets/sec
81=Election Packets/sec is the rate at which browser election packets have been received by this workstation.
82=Mailslot Writes/sec
83=Mailslot Writes/sec is the rate at which mailslot messages have been successfully received.
84=Server List Requests/sec
85=Server List Requests/sec is the rate at which requests to retrieve a list of browser servers have been processed by this workstation.
86=Cache
87=The Cache performance object  consists of counters that monitor the file system cache, an area of physical memory that stores recently used data as long as possible to permit access to the data without having to read from the disk.  Because applications typically use the cache, the cache is monitored as an indicator of application I/O operations.  When memory is plentiful, the cache can grow, but when memory is scarce, the cache can become too small to be effective.
88=Data Maps/sec
89=Data Maps/sec is the frequency that a file system such as NTFS, maps a page of a file into the file system cache to read the page.
90=Sync Data Maps/sec
91=Sync Data Maps/sec counts the frequency that a file system, such as NTFS, maps a page of a file into the file system cache to read the page, and wishes to wait for the page to be retrieved if it is not in main memory.
92=Async Data Maps/sec
93=Async Data Maps/sec is the frequency that an application using a file system, such as NTFS, to map a page of a file into the file system cache to read the page, and does not wait for the page to be retrieved if it is not in main memory.
94=Data Map Hits %
95=Data Map Hits is the percentage of data maps in the file system cache that could be resolved without having to retrieve a page from the disk, because the page was already in physical memory.
96=Data Map Pins/sec
97=Data Map Pins/sec is the frequency of data maps in the file system cache that resulted in pinning a page in main memory, an action usually preparatory to writing to the file on disk.   While pinned, a page's physical address in main memory and virtual address in the file system cache will not be altered.
98=Pin Reads/sec
99=Pin Reads/sec is the frequency of reading data into the file system cache preparatory to writing the data back to disk.  Pages read in this fashion are pinned in memory at the completion of the read.  While pinned, a page's physical address in the file system cache will not be altered.
100=Sync Pin Reads/sec
101=Sync Pin Reads/sec is the frequency of reading data into the file system cache preparatory to writing the data back to disk.  Pages read in this fashion are pinned in memory at the completion of the read.  The file system will not regain control until the page is pinned in the file system cache, in particular if the disk must be accessed to retrieve the page.  While pinned, a page's physical address in the file system cache will not be altered.
102=Async Pin Reads/sec
103=Async Pin Reads/sec is the frequency of reading data into the file system cache preparatory to writing the data back to disk.  Pages read in this fashion are pinned in memory at the completion of the read.  The file system will regain control immediately even if the disk must be accessed to retrieve the page.  While pinned, a page's physical address will not be altered.
104=Pin Read Hits %
105=Pin Read Hits is the percentage of pin read requests that hit the file system cache, i.e., did not require a disk read in order to provide access to the page in the file system cache.  While pinned, a page's physical address in the file system cache will not be altered.  The LAN Redirector uses this method for retrieving data from the cache, as does the LAN Server for small transfers.  This is usually the method used by the disk file systems as well.
106=Copy Reads/sec
107=Copy Reads/sec is the frequency of reads from pages of the file system cache that involve a memory copy of the data from the cache to the application's buffer.  The LAN Redirector uses this method for retrieving information from the file system cache, as does the LAN Server for small transfers.  This is a method used by the disk file systems as well.
108=Sync Copy Reads/sec
109=Sync Copy Reads/sec is the frequency of reads from pages of the file system cache that involve a memory copy of the data from the cache to the application's buffer.  The file system will not regain control until the copy operation is complete, even if the disk must be accessed to retrieve the page.
110=Async Copy Reads/sec
111=Async Copy Reads/sec is the frequency of reads from pages of the file system cache that involve a memory copy of the data from the cache to the application's buffer.  The application will regain control immediately even if the disk must be accessed to retrieve the page.
112=Copy Read Hits %
113=Copy Read Hits is the percentage of cache copy read requests that hit the cache, that is, they did not require a disk read in order to provide access to the page in the cache.  A copy read is a file read operation that is satisfied by a memory copy from a page in the cache to the application's buffer.  The LAN Redirector uses this method for retrieving information from the cache, as does the LAN Server for small transfers.  This is a method used by the disk file systems as well.
114=MDL Reads/sec
115=MDL Reads/sec is the frequency of reads from the file system cache that use a Memory Descriptor List (MDL) to access the data.  The MDL contains the physical address of each page involved in the transfer, and thus can employ a hardware Direct Memory Access (DMA) device to effect the copy.  The LAN Server uses this method for large transfers out of the server.
116=Sync MDL Reads/sec
117=Sync MDL Reads/sec is the frequency of reads from the file system cache that use a Memory Descriptor List (MDL) to access the pages.  The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages.  If the accessed page(s) are not in main memory, the caller will wait for the pages to fault in from the disk.
118=Async MDL Reads/sec
119=Async MDL Reads/sec is the frequency of reads from the file system cache that use a Memory Descriptor List (MDL) to access the pages.  The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages.  If the accessed page(s) are not in main memory, the calling application program will not wait for the pages to fault in from disk.
120=MDL Read Hits %
121=MDL Read Hits is the percentage of Memory Descriptor List (MDL) Read requests to the file system cache that hit the cache, i.e., did not require disk accesses in order to provide memory access to the page(s) in the cache.
122=Read Aheads/sec
123=Read Aheads/sec is the frequency of reads from the file system cache in which the Cache detects sequential access to a file.  The read aheads permit the data to be transferred in larger blocks than those being requested by the application, reducing the overhead per access.
124=Fast Reads/sec
125=Fast Reads/sec is the frequency of reads from the file system cache that bypass the installed file system and retrieve the data directly from the cache.  Normally, file I/O requests invoke the appropriate file system to retrieve data from a file, but this path permits direct retrieval of data from the cache without file system involvement if the data is in the cache.  Even if the data is not in the cache, one invocation of the file system is avoided.
126=Sync Fast Reads/sec
127=Sync Fast Reads/sec is the frequency of reads from the file system cache that bypass the installed file system and retrieve the data directly from the cache.  Normally, file I/O requests invoke the appropriate file system to retrieve data from a file, but this path permits direct retrieval of data from the cache without file system involvement if the data is in the cache.  Even if the data is not in the cache, one invocation of the file system is avoided.  If the data is not in the cache, the request (application program call) will wait until the data has been retrieved from disk.
128=Async Fast Reads/sec
129=Async Fast Reads/sec is the frequency of reads from the file system cache that bypass the installed file system and retrieve the data directly from the cache.  Normally, file I/O requests will invoke the appropriate file system to retrieve data from a file, but this path permits data to be retrieved from the cache directly (without file system involvement) if the data is in the cache.  Even if the data is not in the cache, one invocation of the file system is avoided.  If the data is not in the cache, the request (application program call) will not wait until the data has been retrieved from disk, but will get control immediately.
130=Fast Read Resource Misses/sec
131=Fast Read Resource Misses/sec is the frequency of cache misses necessitated by the lack of available resources to satisfy the request.
132=Fast Read Not Possibles/sec
133=Fast Read Not Possibles/sec is the frequency of attempts by an Application Program Interface (API) function call to bypass the file system to get to data in the file system cache that could not be honored without invoking the file system.
134=Lazy Write Flushes/sec
135=Lazy Write Flushes/sec is the rate at which the Lazy Writer thread has written to disk.  Lazy Writing is the process of updating the disk after the page has been changed in memory, so that the application that changed the file does not have to wait for the disk write to be complete before proceeding.  More than one page can be transferred by each write operation.
136=Lazy Write Pages/sec
137=Lazy Write Pages/sec is the rate at which the Lazy Writer thread has written to disk.  Lazy Writing is the process of updating the disk after the page has been changed in memory, so that the application that changed the file does not have to wait for the disk write to be complete before proceeding.  More than one page can be transferred on a single disk write operation.
138=Data Flushes/sec
139=Data Flushes/sec is the rate at which the file system cache has flushed its contents to disk as the result of a request to flush or to satisfy a write-through file write request.  More than one page can be transferred on each flush operation.
140=Data Flush Pages/sec
141=Data Flush Pages/sec is the number of pages the file system cache has flushed to disk as a result of a request to flush or to satisfy a write-through file write request.  More than one page can be transferred on each flush operation.
142=% User Time
143=% User Time is the percentage of elapsed time the processor spends in the user mode. User mode is a restricted processing mode designed for applications, environment subsystems, and integral subsystems.  The alternative, privileged mode, is designed for operating system components and allows direct access to hardware and all memory.  The operating system switches application threads to privileged mode to access operating system services. This counter displays the average busy time as a percentage of the sample time.
144=% Privileged Time
145=% Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode.  When a Windows system service in called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
146=Context Switches/sec
147=Context Switches/sec is the combined rate at which all processors on the computer are switched from one thread to another.  Context switches occur when a running thread voluntarily relinquishes the processor, is preempted by a higher priority ready thread, or switches between user-mode and privileged (kernel) mode to use an Executive or subsystem service.  It is the sum of Thread\Context Switches/sec for all threads running on all processors in the computer and is measured in numbers of switches.  There are context switch counters on the System and Thread objects. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
148=Interrupts/sec
149=Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced hardware interrupts. It does not include deferred procedure calls (DPCs), which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards, and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended. The system clock typically interrupts the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
150=System Calls/sec
151=System Calls/sec is the combined rate of calls to operating system service routines by all processes running on the computer. These routines perform all of the basic scheduling and synchronization of activities on the computer, and provide access to non-graphic devices, memory management, and name space management. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
152=Level 1 TLB Fills/sec
153=Level 1 TLB Fills/sec is the frequency of faults that occur when reference is made to memory whose Page Table Entry (PTE) is not in the Translation Lookaside Buffer (TLB).  On some computers this fault is handled by software loading the PTE into the TLB, and this counter is incremented.
154=Level 2 TLB Fills/sec
155=Level 2 TLB Fills/sec is the frequency of faults that occur when reference is made to memory whose Page Table Entry (PTE) is not in the Translation Lookaside Buffer (TLB), nor is the page containing the PTE.  On some computers this fault is handled by software loading the PTE into the TLB, and this counter is incremented.
156=Enumerations Server/sec
157=% User Time is the percentage of elapsed time that the process threads spent executing code in user mode. Applications, environment subsystems, and integral subsystems execute in user mode. Code executing in user mode cannot damage the integrity of the Windows executive, kernel, and device drivers. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
158=Enumerations Domain/sec
159=% Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode. When a Windows system service is called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
160=Enumerations Other/sec
161=Enumerations Server/sec is the rate at which server browse requests have been processed by this workstation.
162=Missed Server Announcements
163=Enumerations Domain/sec is the rate at which domain browse requests have been processed by this workstation.
164=Missed Mailslot Datagrams
165=Enumerations Other/sec is the rate at which browse requests processed by this workstation are not domain or server browse requests.
166=Missed Server List Requests
167=Missed Server Announcements is the number of server announcements that have been missed due to configuration or allocation limits.
168=Server Announce Allocations Failed/sec
169=Missed Mailslot Datagrams is the number of Mailslot Datagrams that have been discarded due to configuration or allocation limits.
170=Mailslot Allocations Failed
171=Missed Server List Requests is the number of requests to retrieve a list of browser servers that were received by this workstation, but could not be processed.
172=Virtual Bytes Peak
173=Virtual Bytes Peak is the maximum size, in bytes, of virtual address space the process has used at any one time. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. However, virtual space is finite, and the process might limit its ability to load libraries.
174=Virtual Bytes
175=Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
177=Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring.  A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
178=Working Set Peak
179=Working Set Peak is the maximum size, in bytes, of the Working Set of this process at any point in time. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before they leave main memory.
180=Working Set
181=Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use.  When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
182=Page File Bytes Peak
183=Page File Bytes Peak is the maximum amount of virtual memory, in bytes, that this process has reserved for use in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files.  Paging files are shared by all processes, and the lack of space in paging files can prevent other processes from allocating memory. If there is no paging file, this counter reflects the maximum amount of virtual memory that the process has reserved for use in physical memory.
184=Page File Bytes
185=Page File Bytes is the current amount of virtual memory, in bytes, that this process has reserved for use in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files. Paging files are shared by all processes, and the lack of space in paging files can prevent other processes from allocating memory. If there is no paging file, this counter reflects the current amount of virtual memory that the process has reserved for use in physical memory.
186=Private Bytes
187=Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes.
188=Announcements Total/sec
189=% Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
190=Enumerations Total/sec
191=% Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
193=% User Time is the percentage of elapsed time that this thread has spent executing code in user mode.  Applications, environment subsystems, and integral subsystems execute in user mode.  Code executing in user mode cannot damage the integrity of the Windows NT Executive, Kernel, and device drivers.  Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes.  These subsystem processes provide additional protection.  Therefore, some work done by Windows NT on behalf of your application might appear in other subsystem processes in addition to the privileged time in your process.
195=% Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode.  When a Windows system service in called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
197=Context Switches/sec is the rate of switches from one thread to another.  Thread switches can occur either inside of a single process or across processes.  A thread switch can be caused either by one thread asking another for information, or by a thread being preempted by another, higher priority thread becoming ready to run.  Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes.  These subsystem processes provide additional protection.  Therefore, some work done by Windows NT on behalf of an application  appear in other subsystem processes in addition to the privileged time in the application.  Switching to the subsystem process causes one Context Switch in the application thread.  Switching back causes another Context Switch in the subsystem thread.
198=Current Disk Queue Length
199=Current Disk Queue Length is the number of requests outstanding on the disk at the time the performance data is collected. It also includes requests in service at the time of the collection. This is a instantaneous snapshot, not an average over the time interval. Multi-spindle disk devices can have multiple requests that are active at one time, but other concurrent requests are awaiting service. This counter might reflect a transitory high or low queue length, but if there is a sustained load on the disk drive, it is likely that this will be consistently high. Requests experience delays proportional to the length of this queue minus the number of spindles on the disks. For good performance, this difference should average less than two.
200=% Disk Time
201=% Disk Time is the percentage of elapsed time that the selected disk drive was busy servicing read or write requests.
202=% Disk Read Time
203=% Disk Read Time is the percentage of elapsed time that the selected disk drive was busy servicing read requests.
204=% Disk Write Time
205=% Disk Write Time is the percentage of elapsed time that the selected disk drive was busy servicing write requests.
206=Avg. Disk sec/Transfer
207=Avg. Disk sec/Transfer is the time, in seconds, of the average disk transfer.
208=Avg. Disk sec/Read
209=Avg. Disk sec/Read is the average time, in seconds, of a read of data from the disk.
210=Avg. Disk sec/Write
211=Avg. Disk sec/Write is the average time, in seconds, of a write of data to the disk.
212=Disk Transfers/sec
213=Disk Transfers/sec is the rate of read and write operations on the disk.
214=Disk Reads/sec
215=Disk Reads/sec is the rate of read operations on the disk.
216=Disk Writes/sec
217=Disk Writes/sec is the rate of write operations on the disk.
218=Disk Bytes/sec
219=Disk Bytes/sec is the rate bytes are transferred to or from the disk during write or read operations.
220=Disk Read Bytes/sec
221=Disk Read Bytes/sec is the rate at which bytes are transferred from the disk during read operations.
222=Disk Write Bytes/sec
223=Disk Write Bytes/sec is rate at which bytes are transferred to the disk during write operations.
224=Avg. Disk Bytes/Transfer
225=Avg. Disk Bytes/Transfer is the average number of bytes transferred to or from the disk during write or read operations.
226=Avg. Disk Bytes/Read
227=Avg. Disk Bytes/Read is the average number of bytes transferred from the disk during read operations.
228=Avg. Disk Bytes/Write
229=Avg. Disk Bytes/Write is the average number of bytes transferred to the disk during write operations.
230=Process
231=The Process performance object consists of counters that monitor running application program and system processes.  All the threads in a process share the same address space and have access to the same data.
232=Thread
233=The Thread performance object consists of counters that measure aspects of thread behavior.  A thread is the basic object that executes instructions on a processor.  All running processes have at least one thread.
234=PhysicalDisk
235=The Physical Disk performance object consists of counters that monitor hard or fixed disk drive on a computer.  Disks are used to store file, program, and paging data and are read to retrieve these items, and written to record changes to them.  The values of physical disk counters are sums of the values of the logical disks (or partitions) into which they are divided.
236=LogicalDisk
237=The Logical Disk performance object consists of counters that monitor logical partitions of a hard or fixed disk drives.  Performance Monitor identifies logical disks by their a drive letter, such as C.
238=Processor
239=The Processor performance object consists of counters that measure aspects of processor activity. The processor is the part of the computer that performs arithmetic and logical computations, initiates operations on peripherals, and runs the threads of processes.  A computer can have multiple processors.  The processor object represents each processor as an instance of the object.
240=% Total Processor Time
241=% Total Processor Time is the average percentage of time that all processors on the computer are executing non-idle threads.   This counter was designed as the primary indicator of processor activity on multiprocessor computers.  It is equal to the sum of Process: % Processor Time for all processors, divided by the number of processors.  It is calculated by summing the time that all processors spend executing the thread of the Idle process in each sample interval, subtracting that value from 100%, and dividing the difference by the number of processors on the computer.  (Each processor has an Idle thread which consumes cycles when no other threads are ready to run). For example, on a multiprocessor computer, a value of 50% means that all processors are busy for half of the sample interval, or that half of the processors are busy for all of the sample interval.  This counter displays the average percentage of busy time observed during the sample interval.  It is calculated by monitoring the time the service was inactive, and then subtracting that value from 100%.
242=% Total User Time
243=% Total User Time is the average percentage of non-idle time all processors spend in user mode.  It is the sum of Processor: % User Time for all processors on the computer, divided by the number of processors.  System: % Total User Time and System: % Total Privileged Time sum to % Total Processor Time, but not always to 100%.  (User mode is a restricted processing mode designed for applications, environment subsystems, and integral subsystems.  The alternative, privileged mode, is designed for operating system components and allows direct access to hardware and all memory.  The operating system switches application threads to privileged mode to access operating system services). This counter displays the average busy time as a percentage of the sample time.
244=% Total Privileged Time
245=% Total Privileged Time is the average percentage of non-idle time all processors spend in privileged (kernel) mode.  It is the sum of Processor: % Privileged Time for all processors on the computer, divided by the number of processors.  System: % Total User Time and System: % Total Privileged Time sum to % Total Processor Time, but not always to 100%.  (Privileged mode is an processing mode designed for operating system components which allows direct access to hardware and all memory.  The operating system switches application threads to privileged mode to access operating system services.  The alternative, user mode, is a restricted processing mode designed for applications and environment subsystems). This counter displays the average busy time as a percentage of the sample time.
246=Total Interrupts/sec
247=Total Interrupts/sec is the combined rate of hardware interrupts received and serviced by all processors on the computer It is the sum of Processor: Interrupts/sec for all processors, and divided by the number of processors, and is measured in numbers of interrupts.  It does not include DPCs, which are counted separately.  This value is an indirect indicator of the activity of devices that generate interrupts, such as the system timer, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices.  These devices normally interrupt the processor when they have completed a task or require attention.  Normal thread execution is suspended during interrupts.  Most system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity.  This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
248=Processes
249=Processes is the number of processes in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval.  Each process represents the running of a program.
250=Threads
251=Threads is the number of threads in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval.  A thread is the basic executable entity that can execute instructions in a processor.
252=Events
253=Events is the number of events in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval.  An event is used when two or more threads try to synchronize execution.
254=Semaphores
255=Semaphores is the number of semaphores in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval.  Threads use semaphores to obtain exclusive access to data structures that they share with other threads.
256=Mutexes
257=Mutexes counts the number of mutexes in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval.  Mutexes are used by threads to assure only one thread is executing a particular section of code.
258=Sections
259=Sections is the number of sections in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval.  A section is a portion of virtual memory created by a process for storing data. A process can share sections with other processes.
260=Objects
261=The Object performance object consists of counters that monitor  logical objects in the system, such as processes, threads, mutexes, and semaphores.  This information can be used to detect the unnecessary consumption of computer resources.  Each object requires memory to store basic information about the object.
262=Redirector
263=The Redirector performance object consists of counter that monitor network connections originating at the local computer.
264=Bytes Received/sec
265=Bytes Received/sec is the rate of bytes coming in to the Redirector from the network.  It includes all application data as well as network protocol information (such as packet headers).
266=Packets Received/sec
267=Packets Received/sec is the rate at which the Redirector is receiving packets (also called SMBs or Server Message Blocks).  Network transmissions are divided into packets.  The average number of bytes received in a packet can be obtained by dividing Bytes Received/sec by this counter.  Some packets received might not contain incoming data (for example an acknowledgment to a write made by the Redirector would count as an incoming packet).
268=Read Bytes Paging/sec
269=Read Bytes Paging/sec is the rate at which the Redirector is attempting to read bytes in response to page faults.  Page faults are caused by loading of modules (such as programs and libraries), by a miss in the Cache (see Read Bytes Cache/sec), or by files directly mapped into the address space of applications (a high-performance feature of Windows NT).
270=Read Bytes Non-Paging/sec
271=Read Bytes Non-Paging/sec are those bytes read by the Redirector in response to normal file requests by an application when they are redirected to come from another computer.  In addition to file requests, this counter includes other methods of reading across the network such as Named Pipes and Transactions.  This counter does not count network protocol information, just application data.
272=Read Bytes Cache/sec
273=Read Bytes Cache/sec is the rate at which applications are accessing the file system cache by using the Redirector.  Some of these data requests are satisfied by retrieving the data from the cache.  Requests that miss the Cache cause a page fault (see Read Bytes Paging/sec).
274=Read Bytes Network/sec
275=Read Bytes Network/sec is the rate at which applications are reading data across the network. This occurs when data sought in the file system cache is not found there and must be retrieved from the network.  Dividing this value by Bytes Received/sec indicates the proportion of application data traveling across the network. (see Bytes Received/sec).
276=Bytes Transmitted/sec
277=Bytes Transmitted/sec is the rate at which bytes are leaving the Redirector to the network.  It includes all application data as well as network protocol information (such as packet headers and the like).
278=Packets Transmitted/sec
279=Packets Transmitted/sec is the rate at which the Redirector is sending packets (also called SMBs or Server Message Blocks).  Network transmissions are divided into packets.  The average number of bytes transmitted in a packet can be obtained by dividing Bytes Transmitted/sec by this counter.
280=Write Bytes Paging/sec
281=Write Bytes Paging/sec is the rate at which the Redirector is attempting to write bytes changed in the pages being used by applications.  The program data changed by modules (such as programs and libraries) that were loaded over the network are 'paged out' when no longer needed.  Other output pages come from the file system cache (see Write Bytes Cache/sec).
282=Write Bytes Non-Paging/sec
283=Write Bytes Non-Paging/sec is the rate at which bytes are written by the Redirector in response to normal file outputs by an application when they are redirected to another computer.  In addition to file requests, this count includes other methods of writing across the network, such as Named Pipes and Transactions.  This counter does not count network protocol information, just application data.
284=Write Bytes Cache/sec
285=Write Bytes Cache/sec is the rate at which applications on your computer are writing to the file system cache by using the Redirector.  The data might not leave your computer immediately; it can be retained in the cache for further modification before being written to the network.  This saves network traffic.  Each write of a byte into the cache is counted here.
286=Write Bytes Network/sec
287=Write Bytes Network/sec is the rate at which applications are writing data across the network. This occurs when the file system cache is bypassed, such as for Named Pipes or Transactions, or when the cache writes the bytes to disk to make room for other data.  Dividing this counter by Bytes Transmitted/sec will indicate the proportion of application data being to the network (see Transmitted Bytes/sec).
288=Read Operations/sec
289=File Read Operations/sec is the rate at which applications are asking the Redirector for data. Each call to a file system or similar Application Program Interface (API) call counts as one operation.
290=Read Operations Random/sec
291=Read Operations Random/sec counts the rate at which, on a file-by-file basis, reads are made that are not sequential.  If a read is made using a particular file handle, and then is followed by another read that is not immediately the contiguous next byte, this counter is incremented by one.
292=Read Packets/sec
293=Read Packets/sec is the rate at which read packets are being placed on the network.  Each time a single packet is sent with a request to read data remotely, this counter is incremented by one.
294=Reads Large/sec
295=Reads Large/sec is the rate at which reads over 2 times the server's negotiated buffer size are made by applications.  Too many of these could place a strain on server resources.  This counter is incremented once for each read. It does not count packets.
296=Read Packets Small/sec
297=Read Packets Small/sec is the rate at which reads less than one-fourth of the server's negotiated buffer size are made by applications.  Too many of these could indicate a waste of buffers on the server.  This counter is incremented once for each read. It does not count packets.
298=Write Operations/sec
299=File Write Operations/sec is the rate at which applications are sending data to the Redirector. Each call to a file system or similar Application Program Interface (API) call counts as one operation.
300=Write Operations Random/sec
301=Write Operations Random/sec is the rate at which, on a file-by-file basis, writes are made that are not sequential.  If a write is made using a particular file handle, and then is followed by another write that is not immediately the next contiguous byte, this counter is incremented by one.
302=Write Packets/sec
303=Write Packets/sec is the rate at which writes are being sent to the network.  Each time a single packet is sent with a request to write remote data, this counter is incremented by one.
304=Writes Large/sec
305=Writes Large/sec is the rate at which writes are made by applications that are over 2 times the server's negotiated buffer size.  Too many of these could place a strain on server resources.  This counter is incremented once for each write: it counts writes, not packets.
306=Write Packets Small/sec
307=Write Packets Small/sec is the rate at which writes are made by applications that are less than one-fourth of the server's negotiated buffer size.  Too many of these could indicate a waste of buffers on the server.  This counter is incremented once for each write: it counts writes, not packets.
308=Reads Denied/sec
309=Reads Denied/sec is the rate at which the server is unable to accommodate requests for Raw Reads.  When a read is much larger than the server's negotiated buffer size, the Redirector requests a Raw Read which, if granted, would permit the transfer of the data without lots of protocol overhead on each packet.  To accomplish this the server must lock out other requests, so the request is denied if the server is really busy.
310=Writes Denied/sec
311=Writes Denied/sec is the rate at which the server is unable to accommodate requests for Raw Writes.  When a write is much larger than the server's negotiated buffer size, the Redirector requests a Raw Write which, if granted, would permit the transfer of the data without lots of protocol overhead on each packet.  To accomplish this the server must lock ou

Utilisateur anonyme · Answer

c'est quoi cette chose ?

lotfi rx · Answer

j'ai fais les étapes que vs m'avez envoyé dans le commentaire précédent
    qu'est ce qu'il y a svp?

Utilisateur anonyme · Answer

ceci est tout sauf le rapport de MBAM !

https://forums.commentcamarche.net/forum/affich-27512996-problem-kernel?page=2#32

lotfi rx · Answer

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.04.10.08

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
pc :: PC-PC [administrateur]

Protection: Activé

10/04/2013 16:20:13
mbam-log-2013-04-10 (16-20-13).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 328694
Temps écoulé: 1 heure(s), 13 minute(s), 43 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 2
C:\Users\pc\Downloads\Compressed\M2D_WebcamMax__v7.5.6.2.BY.Engh3.rar (RiskWare.Tool.CK) -> Mis en quarantaine et supprimé avec succès.
C:\Users\pc\Downloads\Compressed\Windows Loader v2.1.8.rar (Trojan.Agent) -> Mis en quarantaine et supprimé avec succès.

(fin)

Utilisateur anonyme · Answer

ok,

on termine,

* pour désinstaller les outils de désinfection 
: 
Télecharge Delfix sur ton bureau : 

ICI

ou
	
 

	Coche les cases suivantes :
	=> Réactive l'Uac (juste pour Vista, Seven et W8)
	=> Supprimer les outils de désinfection (coché par défaut)
=> Purger la restauration système 
=> Réinitialisation des paramètres système
	

* Clique ensuite sur Exécuter puis patiente pendant le processus de suppression.
* Lorsque les procédures seront terminées, l'outil va se fermer et disparaître du bureau
* Un rapport est sauvegardé dans le presse-papier : il te suffit de faire un clic droit et "coller" dans ta prochaine réponse pour me poster le rapport
** le rapport est stocké à cet emplacement : C:\DelFix.txt
Attention : Le rapport est unique et est supprimé à chaque fois que l'on ré-exécute une ou plusieurs options de DelFix.
 






* fais une mise à jour de ton antivirus, lance un scan complet de ton pc, tiens moi au courant du résultat :-)

lotfi rx · Answer

# DelFix v10.2 - Rapport créé le 10/04/2013 à 22:26:24
# Mis à jour le 02/04/2013 par Xplode
# Nom d'utilisateur : pc - PC-PC

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\Qoobox
Supprimé : C:\Combofix
Supprimé : C:\ZHP
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\ComboFix.txt
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\TDSSKiller.2.8.16.0_05.04.2013_16.48.22_log.txt
Supprimé : C:\Users\pc\Desktop\ZHPDiag.txt
Supprimé : C:\Users\pc\Desktop\ZHPDiag2 - Raccourci.lnk
Supprimé : C:\Users\pc\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\pc\Downloads\JavaRa (1).zip
Supprimé : C:\Windows\grep.exe
Supprimé : C:\Windows\PEV.exe
Supprimé : C:\Windows\NIRCMD.exe
Supprimé : C:\Windows\MBR.exe
Supprimé : C:\Windows\SED.exe
Supprimé : C:\Windows\SWREG.exe
Supprimé : C:\Windows\SWSC.exe
Supprimé : C:\Windows\SWXCACLS.exe
Supprimé : C:\Windows\Zip.exe
Supprimée : HKLM\SOFTWARE\Swearware
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~ Purge de la restauration système ...

Supprimé : RP #135 [Removed Java 7 Update 10 | 03/26/2013 00:43:36]
Supprimé : RP #136 [Removed Ma-Config.com | 03/26/2013 00:48:06]
Supprimé : RP #137 [Installed Java 7 Update 17 | 03/26/2013 10:12:31]
Supprimé : RP #138 [Removed Facebook Video Calling 1.2.0.287 | 03/26/2013 13:11:29]
Supprimé : RP #139 [Sauvegarde Windows | 03/31/2013 20:41:48]
Supprimé : RP #140 [Installed Readon TV Movie Radio Player 7.2.0.0 | 04/02/2013 11:34:07]
Supprimé : RP #141 [Installé Readon TV Movie Radio Player 7.6.0.0 | 04/02/2013 11:55:31]
Supprimé : RP #142 [Supprimé Readon TV Movie Radio Player 7.6.0.0 | 04/02/2013 23:49:02]
Supprimé : RP #143 [Installé Readon TV Movie Radio Player 7.6.0.0 | 04/02/2013 23:50:27]
Supprimé : RP #144 [ComboFix created restore point | 04/05/2013 19:44:21]
Supprimé : RP #145 [Sauvegarde Windows | 04/07/2013 18:00:25]
Supprimé : RP #146 [Supprimé Readon TV Movie Radio Player 7.6.0.0 | 04/09/2013 14:08:34]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

Utilisateur anonyme · Answer

super,

que dit ton antivirus ?

lotfi rx · Answer

vraiment merci maître
avast : aucune menace a été detectee

Utilisateur anonyme · Answer

super,

sur ce, bon surf  ;-)

lotfi rx · Answer

vraiment vs êtes très gentille et très professionnelle 
merci cher ami

Utilisateur anonyme · Answer

;-)

lotfi rx · Answer

CHER AMI
          Electricien 69
Bonjour, 

svp j'ai un problème dans l'installation de java. 
l'installation ne se termine pas et il affiche le message<l'installation a échoué > 
comment je peux résoudre ce problème et 
et ca c'est la capture d'écran https://www.cjoint.com/?CDwoLvmeNkb 

                                                                                         merci d'avance

Problem kernel - Page 3

Discussions similaires

Newsletters