Problème SYSTEM CARE ANTIVIRUS

Bonjour,
ma compagne est victime du virus SYSTEM CARE ANTIVIRUS.
Plus rien n'est accessible, notamment AVG et CCleaner (avec lequel je pensais me débarasser du logiciel avant de me rendre compte que c'était un virus !!!)
J'ai vu sur le site qu'il existait un protocole pour s'en débarasser. Est-il encore valable ?
Quelqu'un peut-il m'accompagner dans la tentative d'éradication ?
Merci de vos réponse... sans quoi, eh bien... plus d'ordi...
Merci.

30 réponses

Résumé de la discussion

Le virus SYSTEM CARE ANTIVIRUS bloque l'accès au système et empêche l'utilisation d'outils comme AVG et CCleaner, tout en évoquant un protocole de désinfection potentiellement valable qui nécessiterait un accompagnement. Des solutions proposées incluent le démarrage en mode sans échec avec prise en charge réseau, l'utilisation d'un live CD pour lancer un pré-scan et l'hébergement du rapport de diagnostic en ligne. D'autres conseils recommandent de transmettre le rapport via des services en ligne, d'utiliser le Gestionnaire des tâches (Ctrl+Alt+Suppr) pour diagnostiquer les processus, puis de relancer le système après nettoyage.

Bobot (l’IA à votre service)
  1. Moi je veut bien t'aider mais il faut savoir qu'un virus ce bestiaire pas rien. La prochaine
    fois fait très attention au virus. Rien de pire qu'un virus.
    0
    1. oui, oui je ferai bien attention... Promis ;-).
      Apparemment ça pourrait être dû à une mauvaise mise à jour de java ou d'Adobe. Ca fait effectivement un certain temps que j'ai du mal à gérer ces mises à jour...
      Enfin bon... Une idée pour me sortir de ce mauvais pas ?
      Merci encore pour la réponse rapide.
      0
      1. Re

        Ton problème est résolu?

        @+
        0
        1. Bonsoir Guillaume,
          Alors, non, mon problème n'est pas résolu....
          Et puis après tout un tas d'essais, je n'arrive pas à démarrer en mode sans echec.
          J'arrive à aller dans le Bios en appuyant sur esc, mais f8 ne fais rien.
          Je retombe toujours en démarrage de windows et, du coup, démarrage de system care !!!!
          Enfin merci pour ta réponse, j'espère que tu sauras faire quelque chose pour moi....
          @ +.
          0
          1. Re

            Tu disposes de quel système d'exploitation?

            @+
            0
            1. Re

              Tu procèdes avec OTLPE sous environnement Seven.
              Télécharge ici http://www.security-helpzone.com/Tools/g3n/7pe_x___86_E.exe => OTLPE sous environnement windows 7 en CD Live (Merci à "g3n-h@ckm@n")

              double-clique sur le fichier , patiente quelques secondes , puis un logiciel de gravure va s'ouvrir

              insère un cd dans ton graveur puis clique sur "BURN ISO"

              (normalement le fichier à graver est déjà sélectionné)
              Note : Le CD gravé, il faut maintenant redémarrer la machine sur le lecteur CDROM
              Pour ce faire suivre ce lien : Booter sur un CD

              Tu lances l'iso d'OTLPE que tu as gravé.
              * Double-clique sur l'icone OTLPE
              * Une fenêtre s'ouvre: « Choose Windows Directory »

              Tu choisis le lecteur qui embarque Windows (C par défaut) et ensuite tu pointes vers ce fichier Windows.
              Une autre fenêtre mentionne :"Do you wish to loadremote user profile(s) for scanning ?"
              Tu cliques sur Oui
              Tu choisis ensuite ta session (logiquement la première ligne de cette fenêtre)
              La ligne en bas du tableau est cochée (sinon le faire)

              Cliquer sur Ok

              Tu cliques sur OK

              Ensuite
              * sous custom scans /fixes
              1) copie_colle le contenu du cadre ci dessous:

              netsvcs
              msconfig
              safebootminimal
              safebootnetwork
              activex
              drivers32
              %ALLUSERSPROFILE%\Application Data\*.
              %ALLUSERSPROFILE%\Application Data\*.exe /s
              %SYSTEMDRIVE%\*.exe
              /md5start
              eventlog.dll
              scecli.dll
              netlogon.dll
              cngaudit.dll
              sceclt.dll
              ntelogon.dll
              logevent.dll
              iaStor.sys
              nvstor.sys
              atapi.sys
              cdrom.sys
              disk.sys
              ndis.sys
              mountmgr.sys
              aec.sys
              rasacd.sys
              mrxsmb10.sys
              mrxsmb20.sys
              termdd.sys
              mrxsmb.sys
              win32k.sys
              storport.sys
              IdeChnDr.sys
              viasraid.sys
              explorer.exe
              winlogon.exe
              wininit.exe
              AGP440.sys
              vaxscsi.sys
              nvatabus.sys
              viamraid.sys
              nvata.sys
              nvgts.sys
              iastorv.sys
              ViPrt.sys
              eNetHook.dll
              ahcix86.sys
              KR10N.sys
              nvstor32.sys
              ahcix86s.sys
              nvrd32.sys
              /md5stop
              %systemroot%\*. /mp /s
              %systemroot%\system32\*.dll /lockedfiles
              %systemroot%\Tasks\*.job /lockedfiles
              %systemroot%\system32\drivers\*.sys /lockedfiles
              %systemroot%\System32\config\*.sav
              CREATERESTOREPOINT


              * copie colle ce texte dans un fichier texte|bloc note que tu enregistres sur clé usb que tu brancheras sous reatogo tu pourras alors facilement le copier\coller.

              * 2) Clic Run Scan pour démarrer le scan.
              * Une fois terminé , le fichier se trouve là C:\OTL.txt
              * Copie_colle le contenu dans ta prochaine réponse.

              @+
              0
              1. hello....
                Pas possible de télécharger http://www.security-helpzone.com/Tools/g3n/7pe_x___86_E.exe.
                filtre smart screen le considère dangereux....
                Je n'ai jamais eu ce problème...
                Je fais quoi ?
                @ +
                0
                1. Bonsoir tardif...
                  Bon ça a été compliqué, mais finalement voilà le scan :

                  OTL logfile created on: 03/05/2013 23:07:12 - Run
                  OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Program Files\OTLPE
                  64bit-Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
                  Internet Explorer (Version = 9.10.9200.16540)
                  Locale: 00000413 | Country: Belgique | Language: FRB | Date Format: d/MM/yyyy

                  3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 80,00% Memory free
                  3,00 Gb Paging File | 3,00 Gb Available in Paging File | 79,00% Paging File free
                  Paging file location(s): ?:\pagefile.sys [binary data]

                  %SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files (x86)
                  Drive C: | 199,00 Mb Total Space | 165,23 Mb Free Space | 83,03% Space Free | Partition Type: NTFS
                  Drive D: | 444,21 Gb Total Space | 305,57 Gb Free Space | 68,79% Space Free | Partition Type: NTFS
                  Drive E: | 17,39 Gb Total Space | 1,85 Gb Free Space | 10,63% Space Free | Partition Type: NTFS
                  Drive F: | 3,96 Gb Total Space | 1,08 Gb Free Space | 27,37% Space Free | Partition Type: FAT32
                  Drive G: | 327,04 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
                  Drive H: | 5,45 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
                  Drive I: | 3,81 Gb Total Space | 0,82 Gb Free Space | 21,54% Space Free | Partition Type: FAT32
                  Drive X: | 255,33 Mb Total Space | 252,90 Mb Free Space | 99,05% Space Free | Partition Type: NTFS

                  Computer Name: MININT-UKSSUUJ | User Name: Système
                  Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
                  Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
                  Using ControlSet: ControlSet001

                  [color=#E56717]========== Win32 Services (SafeList) ==========[/color]

                  SRV:[b]64bit:[/b] - [2011/07/06 08:08:26 | 000,204,288 | ---- | M] (AMD) [Auto] -- D:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
                  SRV:[b]64bit:[/b] - [2011/07/05 11:27:04 | 000,365,568 | ---- | M] (Advanced Micro Devices, Inc.) [Auto] -- D:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
                  SRV:[b]64bit:[/b] - [2011/06/16 18:57:44 | 001,083,680 | ---- | M] (Broadcom Corporation.) [Auto] -- D:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
                  SRV:[b]64bit:[/b] - [2010/10/11 01:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto] -- D:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
                  SRV:[b]64bit:[/b] - [2010/09/22 17:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled] -- D:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
                  SRV:[b]64bit:[/b] - [2009/11/18 02:14:00 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto] -- D:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
                  SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
                  SRV - [2013/03/12 20:36:36 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- D:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
                  SRV - [2013/03/01 11:11:32 | 000,161,384 | R--- | M] (Skype Technologies) [Auto] -- D:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
                  SRV - [2013/02/27 22:42:12 | 004,937,264 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent)
                  SRV - [2013/02/19 14:18:28 | 000,968,880 | ---- | M] () [Auto] -- D:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe -- (vToolbarUpdater14.2.0)
                  SRV - [2013/02/19 03:02:02 | 001,418,184 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- D:\Program Files (x86)\AVG\AVG2013\avgfws.exe -- (avgfws)
                  SRV - [2013/02/19 03:02:02 | 000,282,624 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe -- (avgwd)
                  SRV - [2012/12/18 06:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto] -- D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
                  SRV - [2012/10/02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto] -- D:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
                  SRV - [2012/09/27 11:55:16 | 000,086,528 | ---- | M] (Hewlett-Packard Company) [Auto] -- D:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe -- (HP Support Assistant Service)
                  SRV - [2012/09/06 10:32:12 | 000,197,536 | ---- | M] (Hewlett-Packard Company) [Auto] -- D:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
                  SRV - [2012/08/28 07:41:08 | 000,092,632 | ---- | M] (TomTom) [Auto] -- D:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
                  SRV - [2012/02/15 12:58:00 | 000,034,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto] -- D:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
                  SRV - [2011/10/01 08:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
                  SRV - [2011/10/01 08:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
                  SRV - [2010/12/28 00:30:00 | 001,817,088 | ---- | M] (Realsil Microelectronics Inc.) [Auto] -- D:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
                  SRV - [2010/10/12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand] -- D:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
                  SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- D:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
                  SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled] -- D:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
                  SRV - [2007/01/11 03:02:00 | 000,126,464 | ---- | M] (SEIKO EPSON CORPORATION) [Auto] -- D:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)

                  [color=#E56717]========== Driver Services (SafeList) ==========[/color]

                  DRV:[b]64bit:[/b] - [2013/02/26 22:40:46 | 000,246,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- D:\Windows\System32\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
                  DRV:[b]64bit:[/b] - [2013/02/19 14:18:28 | 000,039,768 | ---- | M] (AVG Technologies) [Kernel | System] -- D:\Windows\System32\drivers\avgtpx64.sys -- (avgtp)
                  DRV:[b]64bit:[/b] - [2013/02/14 02:52:46 | 000,239,416 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- D:\Windows\System32\drivers\avgtdia.sys -- (Avgtdia)
                  DRV:[b]64bit:[/b] - [2013/02/08 03:37:56 | 000,116,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- D:\Windows\System32\drivers\avgmfx64.sys -- (Avgmfx64)
                  DRV:[b]64bit:[/b] - [2013/02/08 03:37:54 | 000,311,096 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot] -- D:\Windows\System32\drivers\avgloga.sys -- (Avgloga)
                  DRV:[b]64bit:[/b] - [2013/02/08 03:37:50 | 000,071,480 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot] -- D:\Windows\System32\drivers\avgidsha.sys -- (AVGIDSHA)
                  DRV:[b]64bit:[/b] - [2013/02/08 03:37:42 | 000,206,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- D:\Windows\System32\drivers\avgldx64.sys -- (Avgldx64)
                  DRV:[b]64bit:[/b] - [2013/02/08 03:37:40 | 000,045,880 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- D:\Windows\System32\drivers\avgrkx64.sys -- (Avgrkx64)
                  DRV:[b]64bit:[/b] - [2012/09/04 09:39:32 | 000,050,296 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- D:\Windows\System32\drivers\avgfwd6a.sys -- (Avgfwfd)
                  DRV:[b]64bit:[/b] - [2012/04/25 11:11:36 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\usbaapl64.sys -- (USBAAPL64)
                  DRV:[b]64bit:[/b] - [2011/11/09 00:42:53 | 004,729,408 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\BCMWL664.SYS -- (BCM43XX)
                  DRV:[b]64bit:[/b] - [2011/10/01 08:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
                  DRV:[b]64bit:[/b] - [2011/10/01 08:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
                  DRV:[b]64bit:[/b] - [2011/10/01 08:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- D:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
                  DRV:[b]64bit:[/b] - [2011/10/01 08:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
                  DRV:[b]64bit:[/b] - [2011/07/06 08:50:28 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
                  DRV:[b]64bit:[/b] - [2011/07/06 07:32:20 | 000,309,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
                  DRV:[b]64bit:[/b] - [2011/06/16 11:26:14 | 000,133,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\bcbtums.sys -- (bcbtums)
                  DRV:[b]64bit:[/b] - [2011/06/10 05:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand] -- D:\Windows\System32\drivers\Rt64win7.sys -- (RTL8167)
                  DRV:[b]64bit:[/b] - [2011/05/21 08:49:36 | 000,089,640 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\btwdpan.sys -- (BTWDPAN)
                  DRV:[b]64bit:[/b] - [2011/04/16 11:37:50 | 000,079,488 | ---- | M] (Advanced Micro Devices) [Kernel | Boot] -- D:\Windows\System32\drivers\amd_sata.sys -- (amd_sata)
                  DRV:[b]64bit:[/b] - [2011/04/16 11:37:50 | 000,040,064 | ---- | M] (Advanced Micro Devices) [Kernel | Boot] -- D:\Windows\System32\drivers\amd_xata.sys -- (amd_xata)
                  DRV:[b]64bit:[/b] - [2011/02/15 19:37:00 | 000,335,464 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\RtsPStor.sys -- (RSPCIESTOR)
                  DRV:[b]64bit:[/b] - [2010/11/30 01:50:38 | 000,044,672 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand] -- D:\Windows\System32\drivers\usbfilter.sys -- (usbfilter)
                  DRV:[b]64bit:[/b] - [2010/11/21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
                  DRV:[b]64bit:[/b] - [2010/11/21 04:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\sdbus.sys -- (sdbus)
                  DRV:[b]64bit:[/b] - [2010/11/21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD)
                  DRV:[b]64bit:[/b] - [2010/07/28 09:13:50 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\clwvd.sys -- (clwvd)
                  DRV:[b]64bit:[/b] - [2010/02/18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand] -- D:\Windows\System32\drivers\amdiox64.sys -- (amdiox64)
                  DRV:[b]64bit:[/b] - [2009/06/10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\VSTDPV6.SYS -- (SrvHsfV92)
                  DRV:[b]64bit:[/b] - [2009/06/10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
                  DRV:[b]64bit:[/b] - [2009/06/10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
                  DRV:[b]64bit:[/b] - [2009/06/10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- D:\Windows\System32\wbem\ntfs.mof -- (Ntfs)
                  DRV:[b]64bit:[/b] - [2009/06/10 21:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nvm62x64.sys -- (NVENETFD)
                  DRV:[b]64bit:[/b] - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\evbda.sys -- (ebdrv)
                  DRV:[b]64bit:[/b] - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\bxvbda.sys -- (b06bdrv)
                  DRV:[b]64bit:[/b] - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a)

                  [color=#E56717]========== Standard Registry (SafeList) ==========[/color]

                  [color=#E56717]========== Internet Explorer ==========[/color]

                  IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

                  IE - HKU\Glenn_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/nl-be?cobrand=compaq.msn.com&ocid=HPDHP&pc=CPDTDF&checklang=1
                  IE - HKU\Glenn_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/
                  IE - HKU\Glenn_ON_D\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: Key error. File not found
                  IE - HKU\Glenn_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
                  IE - HKU\Glenn_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

                  [color=#E56717]========== FireFox ==========[/color]

                  FF - prefs.js..extensions.enabledItems: MapShare-status@tomtom.com:1.7.1
                  FF - prefs.js..extensions.enabledItems: baseTheme@tomtom.com:1.0.2

                  FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: D:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
                  FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: File not found
                  FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=:
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: D:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\\npsitesafety.dll ()
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@canon.com/EPPEX: D:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: D:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: D:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: D:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE: File not found
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: D:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: D:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: D:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: D:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Skype.com/Skype Web Plugin: D:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll (Skype)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.1: D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: D:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\7\NP_wtapp.dll ()
                  FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: D:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
                  FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: D:\Users\Glenn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

                  FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/01/26 22:18:58 | 000,000,000 | ---D | M]
                  FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\14.2.0.1 [2013/02/19 14:18:37 | 000,000,000 | ---D | M]

                  [2012/02/10 10:58:26 | 000,000,000 | ---D | M] (No name found) -- D:\Users\Glenn\AppData\Roaming\mozilla\Extensions
                  [2012/02/10 10:58:26 | 000,000,000 | ---D | M] (No name found) -- D:\Users\Glenn\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
                  [2012/08/19 22:26:23 | 000,000,000 | ---D | M] (Map status indicator) -- D:\PROGRAM FILES (X86)\TOMTOM HOME 2\XUL\EXTENSIONS\MAPSHARE-STATUS@TOMTOM.COM

                  O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts
                  O2:[b]64bit:[/b] - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
                  O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
                  O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
                  O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - D:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
                  O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - D:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
                  O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
                  O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
                  O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - D:\Program Files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll ()
                  O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
                  O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
                  O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
                  O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - D:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
                  O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - D:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
                  O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
                  O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - D:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
                  O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - D:\Program Files (x86)\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll ()
                  O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
                  O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - D:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
                  O3 - HKU\Glenn_ON_D\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
                  O3 - HKU\Glenn_ON_D\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
                  O3 - HKU\Glenn_ON_D\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - D:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
                  O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] D:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
                  O4:[b]64bit:[/b] - HKLM..\Run: [SetDefault] D:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe (Hewlett-Packard Development Company, L.P.)
                  O4 - HKLM..\Run: [] File not found
                  O4 - HKLM..\Run: [ApnUpdater] D:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
                  O4 - HKLM..\Run: [APSDaemon] D:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
                  O4 - HKLM..\Run: [AVG_UI] D:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
                  O4 - HKLM..\Run: [DivXUpdate] D:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
                  O4 - HKLM..\Run: [HPOSD] D:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.)
                  O4 - HKLM..\Run: [StartCCC] D:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
                  O4 - HKLM..\Run: [SweetIM] D:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
                  O4 - HKLM..\Run: [vProt] D:\Program Files (x86)\AVG Secure Search\vprot.exe ()
                  O4 - HKU\LocalService_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
                  O4 - HKU\NetworkService_ON_D..\Run: [Sidebar] D:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
                  O4 - HKU\Glenn_ON_D..\RunOnce: [9A3EC63FB0DD88CE00009A3E2C068DD7] D:\ProgramData\9A3EC63FB0DD88CE00009A3E2C068DD7\9A3EC63FB0DD88CE00009A3E2C068DD7.exe ()
                  O4 - HKU\LocalService_ON_D..\RunOnce: [mctadmin] File not found
                  O4 - HKU\NetworkService_ON_D..\RunOnce: [mctadmin] File not found
                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
                  O7 - HKU\Glenn_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
                  O7 - HKU\Glenn_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
                  O8:[b]64bit:[/b] - Extra context menu item: Envoyer au périphérique &Bluetooth... - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
                  O8:[b]64bit:[/b] - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
                  O8:[b]64bit:[/b] - Extra context menu item: Rechercher sur le Web - D:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html ()
                  O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
                  O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
                  O8 - Extra context menu item: Rechercher sur le Web - D:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html ()
                  O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
                  O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
                  O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
                  O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - D:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
                  O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - D:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
                  O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
                  O9 - Extra Button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
                  O9 - Extra 'Tools' menuitem : Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
                  O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - D:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
                  O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - D:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
                  O13:[b]64bit:[/b] - gopher Prefix: missing
                  O13 - gopher Prefix: missing
                  O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} http://game.zylom.com/activex/zylomgamesplayer.cab (Zylom Games Player)
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
                  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
                  O18:[b]64bit:[/b] - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - Reg Error: Key error. File not found
                  O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
                  O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
                  O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
                  O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
                  O18:[b]64bit:[/b] - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - Reg Error: Key error. File not found
                  O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
                  O18:[b]64bit:[/b] - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
                  O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation)
                  O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - D:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
                  O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
                  O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
                  O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
                  O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
                  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
                  O32 - HKLM CDRom: AutoRun - 1
                  O32 - AutoRun File - [2006/12/11 21:03:59 | 000,000,277 | R--- | M] () - H:\autorun.inf -- [ CDFS ]
                  O33 - MountPoints2\{ac9b6509-556f-11e2-8748-9439e5cddd57}\Shell - "" = AutoRun
                  O33 - MountPoints2\{ac9b6509-556f-11e2-8748-9439e5cddd57}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
                  O34 - HKLM BootExecute: (autocheck autochk *) - File not found
                  [b]64bit:[/b] O35 - HKLM\..comfile [open] -- "%1" %* File not found
                  [b]64bit:[/b] O35 - HKLM\..exefile [open] -- "%1" %* File not found
                  O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
                  O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
                  O37 - HKLM\...com [@ = comfile] -- "%1" %*
                  O37 - HKLM\...exe [@ = exefile] -- "%1" %*

                  MsConfig:64bit - StartUpReg: [b]CanonMyPrinter[/b] - hkey= - key= - D:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
                  MsConfig:64bit - StartUpReg: [b]CanonSolutionMenuEx[/b] - hkey= - key= - D:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
                  MsConfig:64bit - StartUpReg: [b]Easybits Recovery[/b] - hkey= - key= - File not found
                  MsConfig:64bit - StartUpReg: [b]EPSON Stylus DX7400 Series[/b] - hkey= - key= - D:\Windows\System32\spool\DRIVERS\x64\3\E_IATICDE.EXE (SEIKO EPSON CORPORATION)
                  MsConfig:64bit - StartUpReg: [b]HP Quick Launch[/b] - hkey= - key= - D:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
                  MsConfig:64bit - StartUpReg: [b]HPQuickWebProxy[/b] - hkey= - key= - D:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (Hewlett-Packard Company)
                  MsConfig:64bit - StartUpReg: [b]iTunesHelper[/b] - hkey= - key= - D:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
                  MsConfig:64bit - StartUpReg: [b]msnmsgr[/b] - hkey= - key= - File not found
                  MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - D:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
                  MsConfig:64bit - StartUpReg: [b]TomTomHOME.exe[/b] - hkey= - key= - D:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
                  MsConfig:64bit - State: "startup" - 2
                  MsConfig:64bit - State: "bootini" - 2

                  SafeBootMin:[b]64bit:[/b] AppMgmt - Service
                  SafeBootMin:[b]64bit:[/b] Base - Driver Group
                  SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
                  SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
                  SafeBootMin:[b]64bit:[/b] File system - Driver Group
                  SafeBootMin:[b]64bit:[/b] Filter - Driver Group
                  SafeBootMin:[b]64bit:[/b] HelpSvc - Service
                  SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
                  SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
                  SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
                  SafeBootMin:[b]64bit:[/b] sacsvr - Service
                  SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
                  SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
                  SafeBootMin:[b]64bit:[/b] vmms - Service
                  SafeBootMin:[b]64bit:[/b] WinDefend - D:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
                  SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
                  SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
                  SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
                  SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
                  SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
                  SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
                  SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
                  SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
                  SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
                  SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
                  SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
                  SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
                  SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
                  SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
                  SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
                  SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
                  SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
                  SafeBootMin: AppMgmt - Service
                  SafeBootMin: Base - Driver Group
                  SafeBootMin: Boot Bus Extender - Driver Group
                  SafeBootMin: Boot file system - Driver Group
                  SafeBootMin: File system - Driver Group
                  SafeBootMin: Filter - Driver Group
                  SafeBootMin: HelpSvc - Service
                  SafeBootMin: PCI Configuration - Driver Group
                  SafeBootMin: PNP Filter - Driver Group
                  SafeBootMin: Primary disk - Driver Group
                  SafeBootMin: sacsvr - Service
                  SafeBootMin: SCSI Class - Driver Group
                  SafeBootMin: System Bus Extender - Driver Group
                  SafeBootMin: vmms - Service
                  SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
                  SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
                  SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
                  SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
                  SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
                  SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
                  SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
                  SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
                  SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
                  SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
                  SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
                  SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
                  SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
                  SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
                  SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
                  SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
                  SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

                  SafeBootNet:[b]64bit:[/b] AppMgmt - Service
                  SafeBootNet:[b]64bit:[/b] Base - Driver Group
                  SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
                  SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
                  SafeBootNet:[b]64bit:[/b] File system - Driver Group
                  SafeBootNet:[b]64bit:[/b] Filter - Driver Group
                  SafeBootNet:[b]64bit:[/b] HelpSvc - Service
                  SafeBootNet:[b]64bit:[/b] Messenger - Service
                  SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
                  SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
                  SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
                  SafeBootNet:[b]64bit:[/b] Network - Driver Group
                  SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
                  SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
                  SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
                  SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
                  SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
                  SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
                  SafeBootNet:[b]64bit:[/b] sacsvr - Service
                  SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
                  SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
                  SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
                  SafeBootNet:[b]64bit:[/b] TDI - Driver Group
                  SafeBootNet:[b]64bit:[/b] vmms - Service
                  SafeBootNet:[b]64bit:[/b] WinDefend - D:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
                  SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
                  SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
                  SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
                  SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
                  SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
                  SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
                  SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
                  SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
                  SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
                  SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
                  SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
                  SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
                  SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
                  SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
                  SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
                  SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
                  SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
                  SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
                  SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
                  SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
                  SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
                  SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
                  SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
                  SafeBootNet: AppMgmt - Service
                  SafeBootNet: Base - Driver Group
                  SafeBootNet: Boot Bus Extender - Driver Group
                  SafeBootNet: Boot file system - Driver Group
                  SafeBootNet: File system - Driver Group
                  SafeBootNet: Filter - Driver Group
                  SafeBootNet: HelpSvc - Service
                  SafeBootNet: Messenger - Service
                  SafeBootNet: NDIS Wrapper - Driver Group
                  SafeBootNet: NetBIOSGroup - Driver Group
                  SafeBootNet: NetDDEGroup - Driver Group
                  SafeBootNet: Network - Driver Group
                  SafeBootNet: NetworkProvider - Driver Group
                  SafeBootNet: PCI Configuration - Driver Group
                  SafeBootNet: PNP Filter - Driver Group
                  SafeBootNet: PNP_TDI - Driver Group
                  SafeBootNet: Primary disk - Driver Group
                  SafeBootNet: rdsessmgr - Service
                  SafeBootNet: sacsvr - Service
                  SafeBootNet: SCSI Class - Driver Group
                  SafeBootNet: Streams Drivers - Driver Group
                  SafeBootNet: System Bus Extender - Driver Group
                  SafeBootNet: TDI - Driver Group
                  SafeBootNet: vmms - Service
                  SafeBootNet: WudfUsbccidDriver - Driver
                  SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
                  SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
                  SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
                  SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
                  SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
                  SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
                  SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
                  SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
                  SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
                  SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
                  SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
                  SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
                  SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
                  SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
                  SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
                  SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
                  SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
                  SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
                  SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
                  SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
                  SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
                  SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

                  ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
                  ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
                  ActiveX:[b]64bit:[/b] {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
                  ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
                  ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
                  ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
                  ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
                  ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
                  ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
                  ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
                  ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
                  ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
                  ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
                  ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
                  ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
                  ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
                  ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
                  ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
                  ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
                  ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
                  ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
                  ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
                  ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
                  ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
                  ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
                  ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
                  ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
                  ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
                  ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
                  ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
                  ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
                  ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
                  ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
                  ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
                  ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
                  ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
                  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
                  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
                  ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
                  ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
                  ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
                  ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
                  ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
                  ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
                  ActiveX: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
                  ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

                  Drivers32:[b]64bit:[/b] aux - D:\Windows\System32\wdmaud.drv (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] midi - D:\Windows\System32\wdmaud.drv (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] midi1 - D:\Windows\System32\wdmaud.drv (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] midimapper - D:\Windows\System32\midimap.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] mixer - D:\Windows\System32\wdmaud.drv (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] mixer1 - D:\Windows\System32\wdmaud.drv (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] msacm.imaadpcm - D:\Windows\System32\imaadp32.acm (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] msacm.l3acm - D:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
                  Drivers32:[b]64bit:[/b] msacm.msadpcm - D:\Windows\System32\msadp32.acm (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] msacm.msg711 - D:\Windows\System32\msg711.acm (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] msacm.msgsm610 - D:\Windows\System32\msgsm32.acm (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] MSVideo8 - D:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] vidc.i420 - D:\Windows\System32\iyuv_32.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] VIDC.IYUV - D:\Windows\System32\iyuv_32.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] vidc.mrle - D:\Windows\System32\msrle32.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] vidc.msvc - D:\Windows\System32\msvidc32.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] VIDC.UYVY - D:\Windows\System32\msyuv.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] VIDC.YUY2 - D:\Windows\System32\msyuv.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] VIDC.YVU9 - D:\Windows\System32\tsbyuv.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] VIDC.YVYU - D:\Windows\System32\msyuv.dll (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] wave - D:\Windows\System32\wdmaud.drv (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] wave1 - D:\Windows\System32\wdmaud.drv (Microsoft Corporation)
                  Drivers32:[b]64bit:[/b] wavemapper - D:\Windows\System32\msacm32.drv (Microsoft Corporation)
                  Drivers32: msacm.l3acm - D:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
                  Drivers32: MSVideo8 - D:\Windows\SysWow64\vfwwdm32.dll (Microsoft Corporation)

                  [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

                  [2013/05/03 18:39:15 | 000,000,000 | ---D | C] -- D:\Users\Glenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Care Antivirus
                  [2013/05/03 18:32:16 | 000,000,000 | ---D | C] -- D:\ProgramData\9A3EC63FB0DD88CE00009A3E2C068DD7
                  [2013/05/01 07:03:35 | 001,054,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\MsSpellCheckingFacility.exe
                  [2013/05/01 07:03:34 | 000,226,304 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\elshyph.dll
                  [2013/05/01 07:03:34 | 000,185,344 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\elshyph.dll
                  [2013/05/01 07:03:34 | 000,071,680 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\RegisterIEPKEYs.exe
                  [2013/05/01 07:03:33 | 000,158,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msls31.dll
                  [2013/05/01 07:03:31 | 000,163,840 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msrating.dll
                  [2013/05/01 07:03:30 | 000,719,360 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmlmedia.dll
                  [2013/05/01 07:03:30 | 000,082,432 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\inseng.dll
                  [2013/05/01 07:03:28 | 000,150,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iexpress.exe
                  [2013/05/01 07:03:28 | 000,138,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\wextract.exe
                  [2013/05/01 07:03:26 | 000,493,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeeds.dll
                  [2013/05/01 07:03:26 | 000,079,872 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmled.dll
                  [2013/05/01 07:03:23 | 000,057,344 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\pngfilt.dll
                  [2013/05/01 07:03:22 | 000,137,216 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieUnatt.exe
                  [2013/05/01 07:03:22 | 000,125,440 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\occache.dll
                  [2013/05/01 07:03:22 | 000,038,400 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\imgutil.dll
                  [2013/05/01 07:03:21 | 000,690,688 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript.dll
                  [2013/05/01 07:03:21 | 000,117,248 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iepeers.dll
                  [2013/05/01 07:03:21 | 000,110,592 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\IEAdvpack.dll
                  [2013/05/01 07:03:21 | 000,011,776 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeedssync.exe
                  [2013/05/01 07:03:20 | 002,877,440 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript9.dll
                  [2013/05/01 07:03:20 | 000,391,168 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieui.dll
                  [2013/05/01 07:03:20 | 000,109,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iesysprep.dll
                  [2013/05/01 07:03:20 | 000,073,728 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\SetIEInstalledDate.exe
                  [2013/05/01 07:03:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmler.dll
                  [2013/05/01 07:03:19 | 000,361,984 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\html.iec
                  [2013/05/01 07:03:19 | 000,061,952 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\tdc.ocx
                  [2013/05/01 07:03:18 | 001,441,280 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\inetcpl.cpl
                  [2013/05/01 07:03:18 | 001,400,416 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dat
                  [2013/05/01 07:03:18 | 000,629,248 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dll
                  [2013/05/01 07:03:18 | 000,357,888 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtmsft.dll
                  [2013/05/01 07:03:18 | 000,232,960 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\url.dll
                  [2013/05/01 07:03:18 | 000,226,816 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtrans.dll
                  [2013/05/01 07:03:18 | 000,069,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\icardie.dll
                  [2013/05/01 07:03:17 | 000,033,280 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iernonce.dll
                  [2013/05/01 07:03:17 | 000,023,040 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\licmgr10.dll
                  [2013/05/01 07:03:16 | 000,061,440 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iesetup.dll
                  [2013/05/01 07:03:15 | 000,089,600 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\RegisterIEPKEYs.exe
                  [2013/05/01 07:03:14 | 000,197,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msrating.dll
                  [2013/05/01 07:03:13 | 000,452,096 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dxtmsft.dll
                  [2013/05/01 07:03:13 | 000,441,856 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\html.iec
                  [2013/05/01 07:03:13 | 000,281,600 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dxtrans.dll
                  [2013/05/01 07:03:13 | 000,216,064 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msls31.dll
                  [2013/05/01 07:03:12 | 001,400,416 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dat
                  [2013/05/01 07:03:12 | 000,762,368 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dll
                  [2013/05/01 07:03:12 | 000,081,408 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\icardie.dll
                  [2013/05/01 07:03:12 | 000,051,712 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ie4uinit.exe
                  [2013/05/01 07:03:12 | 000,039,936 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iernonce.dll
                  [2013/05/01 07:03:11 | 001,509,376 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inetcpl.cpl
                  [2013/05/01 07:03:11 | 000,905,728 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmlmedia.dll
                  [2013/05/01 07:03:11 | 000,235,008 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\url.dll
                  [2013/05/01 07:03:11 | 000,067,072 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iesetup.dll
                  [2013/05/01 07:03:10 | 000,027,648 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\licmgr10.dll
                  [2013/05/01 07:03:09 | 000,603,136 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeeds.dll
                  [2013/05/01 07:03:09 | 000,167,424 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iexpress.exe
                  [2013/05/01 07:03:09 | 000,144,896 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\wextract.exe
                  [2013/05/01 07:03:09 | 000,102,912 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inseng.dll
                  [2013/05/01 07:03:09 | 000,097,280 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmled.dll
                  [2013/05/01 07:03:08 | 000,599,552 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\vbscript.dll
                  [2013/05/01 07:03:08 | 000,173,568 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieUnatt.exe
                  [2013/05/01 07:03:07 | 000,855,552 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript.dll
                  [2013/05/01 07:03:07 | 000,149,504 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\occache.dll
                  [2013/05/01 07:03:07 | 000,062,976 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\pngfilt.dll
                  [2013/05/01 07:03:07 | 000,051,200 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\imgutil.dll
                  [2013/05/01 07:03:07 | 000,013,824 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshta.exe
                  [2013/05/01 07:03:06 | 000,136,192 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iepeers.dll
                  [2013/05/01 07:03:05 | 000,135,680 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\IEAdvpack.dll
                  [2013/05/01 07:03:05 | 000,012,800 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeedssync.exe
                  [2013/05/01 07:03:04 | 003,958,784 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript9.dll
                  [2013/05/01 07:03:04 | 000,526,336 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieui.dll
                  [2013/05/01 07:03:04 | 000,136,704 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iesysprep.dll
                  [2013/05/01 07:03:04 | 000,092,160 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\SetIEInstalledDate.exe
                  [2013/05/01 07:03:04 | 000,048,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmler.dll
                  [2013/05/01 07:03:02 | 000,077,312 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\tdc.ocx
                  [2013/04/19 11:26:20 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\SSC Service Utility
                  [2013/04/19 11:26:20 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\SSC Service Utility
                  [2013/04/10 12:54:50 | 003,717,632 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mstscax.dll
                  [2013/04/10 12:54:49 | 003,217,408 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mstscax.dll
                  [2013/04/10 12:54:47 | 000,158,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\aaclient.dll
                  [2013/04/10 12:54:47 | 000,131,584 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\aaclient.dll
                  [2013/04/10 12:54:47 | 000,044,032 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\tsgqec.dll
                  [2013/04/10 12:54:47 | 000,036,864 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\tsgqec.dll
                  [2013/04/10 12:54:23 | 005,550,424 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ntoskrnl.exe
                  [2013/04/10 12:54:22 | 003,913,560 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ntoskrnl.exe
                  [2013/04/10 12:54:21 | 003,968,856 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ntkrnlpa.exe
                  [2013/04/10 12:54:21 | 000,112,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\smss.exe
                  [2013/04/10 12:54:21 | 000,043,520 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\csrsrv.dll
                  [2013/04/10 12:54:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\apisetschema.dll
                  [2013/04/09 08:00:58 | 000,000,000 | ---D | C] -- D:\Users\Glenn\Documents\tibidi
                  [2013/04/06 08:17:16
                  0
                  1. Re

                    Ton rapport est incomplet

                    Pour transmettre le rapport clique sur ce lien :

                    http://pjjoint.malekal.com/

                    Si problème utilise un des suivants

                    https://forums-fec.be/upload
                    https://www.cjoint.com/

                    Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
                    Clique sur Ouvrir.

                    Clique sur "Envoyer le fichier".

                    Un lien de cette forme :

                    http://pjjoint.malekal.com/cjlink.php?file=cj200905/cijSKAP5fU.txt

                    est ajouté dans la page.

                    Copie ce lien dans ta réponse.

                    @+
                    0
                    1. ok. sorry...
                      Voici le cjoint :
                      http://cjoint.com/?CEeabHXcK3Q
                      C'est mieux ?
                      @+ et merci
                      big
                      0
                      1. Re

                        Le rapport posté correspond à la session ou au PC de ta compagne?

                        @+
                        0
                        1. C'est le pc de ma compagne.
                          @ +
                          0
                          1. Re

                            Désolé je en vois rien

                            @+
                            0
                            1. Hello.
                              Pourtant il est bien là... Un problème possible avec le scan ?
                              @ +
                              0
                              1. salut je suis le concepteur du live cd

                                regarde dans le menu demarrer/programmes lance pre_scan puis heberge le rapport sur https://www.cjoint.com/ et donne le lien

                                il se trouvera en fin de scan dans c:\pre_scan\pre_scan_live\pre_scan....blabla....txt
                                0
                                1. en fait, guillaume m'a demandé un scan du lecteur qui embarque windows en me disant C par défaut. Mais chez moi, je trouve Windows sous D. Donc j'ai fait un scan de D... J'ai bien fait ? Ou il faut tout de même faire C qui contient SRECYCLE.BIN et BOOT ?
                                  Merci pour la réponse, je lance quand même le scan de D:
                                  On verra....
                                  @ +
                                  0
                                  1. oui d:\

                                    c, en general est la partition de réparation
                                    0
                                    • 1
                                    • 2