Virus sweetpacks

Bonsoir,
Je pense avoir un virus sur mon pc et je ne sais pas comment m'en debarasser. Je possede pourtant bitdefender.
Merci de votre aide.

20 réponses

Résumé de la discussion

Une suspicion de virus sur PC persiste malgré Bitdefender, et les échanges tournent autour d’un possible adware ou logiciel potentiellement indésirable qui échappe aux détections initiales. Plusieurs interventions recommandent des outils de nettoyage comme ADWCleaner et Malwarebytes, avec des rapports de suppression de PUP et SweetIM, et exigent le téléchargement uniquement depuis les sites éditeurs. D’autres tentent des outils comme JRT et partagent des procédures de démarrage en mode sans échec, des scans complets et des suppressions manuelles de fichiers et clés de registre détectés. En cas de limitations, il est important de recouper les résultats entre plusieurs outils et de surveiller les répertoires temporaires et les éléments de démarrage pour éviter les réinfections.

Bobot (l’IA à votre service)
  1. salut ce n'et pas un virus c'est un adware , et les antivirus ne detectent pas ce genre de petits trucs malfaisants :D

    Télécharge et enregistre (lien direct) http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner ADWCleaner sur ton bureau :

    Lance le,(Pour vista/7/8 => clic droit "executer en tant qu'administrateur") puis clique sur scan

    une fois fait , clique sur nettoyer et poste C:\Adwcleaner[Sx].txt
    1. c'est le rapport de nettoyage qu il me faut si tu lis bien
      1. Oui je suis alle trop vite
    2. # AdwCleaner v3.010 - Rapport créé le 29/10/2013 à 00:06:49
      # Mis à jour le 20/10/2013 par Xplode
      # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
      # Nom d'utilisateur : Franck - FRANCK-PC
      # Exécuté depuis : C:\Users\Franck\Downloads\adwcleaner (1).exe
      # Option : Nettoyer

      ***** [ Services ] *****

      Service Supprimé : CltMngSvc
      [#] Service Supprimé : IBUpdaterService

      ***** [ Fichiers / Dossiers ] *****

      Dossier Supprimé : C:\Kreapixel
      Dossier Supprimé : C:\Searchprotect
      Dossier Supprimé : C:\ProgramData\Babylon
      Dossier Supprimé : C:\ProgramData\Partner
      Dossier Supprimé : C:\ProgramData\SweetIM
      Dossier Supprimé : C:\ProgramData\Tarma Installer
      Dossier Supprimé : C:\Program Files (x86)\allsearch
      Dossier Supprimé : C:\Program Files (x86)\Conduit
      Dossier Supprimé : C:\Program Files (x86)\Iminent
      Dossier Supprimé : C:\Program Files (x86)\Searchprotect
      Dossier Supprimé : C:\Program Files (x86)\Services x86
      Dossier Supprimé : C:\Program Files (x86)\SweetIM
      Dossier Supprimé : C:\Program Files (x86)\Vittalia
      Dossier Supprimé : C:\Program Files (x86)\Yontoo
      Dossier Supprimé : C:\Program Files (x86)\Plus-HD-1.3
      Dossier Supprimé : C:\Windows\Installer\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
      Dossier Supprimé : C:\Windows\SysWOW64\ARFC
      Dossier Supprimé : C:\Windows\SysWOW64\jmdp
      Dossier Supprimé : C:\Windows\SysWOW64\WNLT
      Dossier Supprimé : C:\Users\Franck\AppData\Local\Conduit
      Dossier Supprimé : C:\Users\Franck\AppData\Local\lollipop
      Dossier Supprimé : C:\Users\Franck\AppData\Local\Searchprotect
      Dossier Supprimé : C:\Users\Franck\AppData\Local\Services x86
      Dossier Supprimé : C:\Users\Franck\AppData\LocalLow\Conduit
      Dossier Supprimé : C:\Users\Franck\AppData\LocalLow\SweetIM
      Dossier Supprimé : C:\Users\Franck\AppData\LocalLow\Toolbar4
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Babylon
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\cacaoweb
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\WebPlayerBdd
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Smartbar
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\SweetPacksToolbarData
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\CT3128284
      Dossier Supprimé : C:\Program Files (x86)\Software
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\cacaoweb@cacaoweb.org
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
      Dossier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
      Dossier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnmdgidklhhnmppphpohildcefnaaflp
      Dossier Supprimé : C:\Users\Enfants\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc
      Dossier Supprimé : C:\Users\Enfants\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
      Dossier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl
      [!] Dossier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnmdgidklhhnmppphpohildcefnaaflp
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\Extensions\plugin@yontoo.com.xpi
      Fichier Supprimé : C:\END
      Fichier Supprimé : C:\Windows\System32\dmwu.exe
      Fichier Supprimé : C:\Windows\System32\ImhxxpComm.dll
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\invalidprefs.js
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\conduit-search.xml
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\MyStart Search.xml
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\MyStart.xml
      Fichier Supprimé : C:\Users\Enfants\AppData\Roaming\Mozilla\Firefox\Profiles\4cgandh1.default\searchplugins\MyStart.xml
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\SweetIm.xml
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\searchplugins\Sweetpacks Search.xml
      Fichier Supprimé : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\user.js
      Fichier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
      Fichier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage-journal
      Fichier Supprimé : C:\Users\Franck\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal
      Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
      Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-chromeinstaller
      Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
      Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-codedownloader
      Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-enabler.job
      Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-enabler
      Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
      Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-firefoxinstaller
      Fichier Supprimé : C:\Windows\Tasks\Plus-HD-1.3-updater.job
      Fichier Supprimé : C:\Windows\System32\Tasks\Plus-HD-1.3-updater

      ***** [ Raccourcis ] *****

      ***** [ Registre ] *****

      Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
      Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cacaoweb]
      Clé Supprimée : HKLM\SOFTWARE\Classes\AmiBs.Installer
      Clé Supprimée : HKLM\SOFTWARE\Classes\AmiBs.Installer.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
      Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
      Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
      Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
      Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
      Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
      Clé Supprimée : HKLM\SOFTWARE\Classes\speedupmypc
      Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
      Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
      Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
      Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
      Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api
      Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
      Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Sweetpacks Communicator]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.BHO
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.BHO.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.Sandbox
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0027096.Sandbox.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox
      Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.IEToolbar
      Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.IEToolbar.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.TBSB02681
      Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02681.TBSB02681.3
      Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02681
      Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02681.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3128284
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110211701196}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311121157}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255705596}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266706696}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440244704496}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344124457}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211701196}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110211701196}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B24D9234-CFC5-46D2-95C5-0DE695A7895E}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211701196}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211701196}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211701196}
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311121157}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255705596}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266706696}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
      Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}
      Clé Supprimée : HKCU\Software\Conduit
      Clé Supprimée : HKCU\Software\IM
      Clé Supprimée : HKCU\Software\wnlt
      Clé Supprimée : HKCU\Software\AppDataLow\Software\smartbar
      Clé Supprimée : HKLM\Software\PIP
      Clé Supprimée : HKLM\Software\Services x86
      Clé Supprimée : HKLM\Software\Plus-HD-1.3
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{77236F9C-987C-40EC-832B-5BD6181E4846}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0C9DF2B-89B5-4483-8983-18A68200F1B4}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c3e85ee9-5892-4142-b537-bceb3dac4c3d}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\allsearch
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Services x86
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vittalia
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-1.3
      Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer
      Clé Supprimée : [x64] HKLM\SOFTWARE\wnlt
      Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
      Donnée Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
      Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
      Clé Supprimée : HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
      Clé Supprimée : HKLM\Software\Classes\Installer\Features\B2FD9C0A5B9838449838816A28001F4B
      Clé Supprimée : HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
      Clé Supprimée : HKLM\Software\Classes\Installer\Products\B2FD9C0A5B9838449838816A28001F4B

      ***** [ Navigateurs ] *****

      -\\ Internet Explorer v10.0.9200.16720

      Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

      -\\ Mozilla Firefox v13.0.1 (fr)

      [ Fichier : C:\Users\Franck\AppData\Roaming\Mozilla\Firefox\Profiles\x10gylbp.default\prefs.js ]

      Ligne Supprimée : user_pref("CT3128284.1000082.isDisplayHidden", "true");
      Ligne Supprimée : user_pref("CT3128284.1000082.isPlayDisplay", "true");
      Ligne Supprimée : user_pref("CT3128284.1000082.state", "{\"state\":\"stopped\",\"text\":\"RMC\",\"description\":\"RMC\",\"url\":\"hxxp://vipicecast.yacast.net/rmc\"}");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_TMP_city", "PARIS");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_TMP_country", "FR");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_country", "FRANCE");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_locId", "FRXX0076");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_location", "Paris, France");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_region", "FR");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_temp_dis", "c");
      Ligne Supprimée : user_pref("CT3128284.1000234.TWC_wind_dis", "kmh");
      Ligne Supprimée : user_pref("CT3128284.1000234.weatherData", "{\"icon\":\"32.png\",\"temperature\":\"20°C\",\"temperatureClear\":\"20°C\",\"highTemperature\":\"21°C\",\"lowTemperature\":\"11°C\",\"feelsLike\":\"20°C\",[...]
      Ligne Supprimée : user_pref("CT3128284.3128284a129638404769606799000000paramsGK0.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzc4NjQyNzE2MTk5LCJ1cGRhdGVSZXNwVGltZSI6MTM3ODY0MjcxNjUzOSwiZGF0YSI6eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3[...]
      Ligne Supprimée : user_pref("CT3128284.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
      Ligne Supprimée : user_pref("CT3128284.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
      Ligne Supprimée : user_pref("CT3128284.FirstTime", "true");
      Ligne Supprimée : user_pref("CT3128284.FirstTimeFF3", "true");
      Ligne Supprimée : user_pref("CT3128284.LoginRevertSettingsEnabled", true);
      Ligne Supprimée : user_pref("CT3128284.RSS_Pub_Config.enc", "eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC5jb20vYmFua2ltYWdlcy9pY29uc0dhbGxlcnkvMjQvNDY2OTM4MDYzMzY2NDUyNjYxOS5wbmciLCJjb21wb25lbnRJZCI6IjEyO[...]
      Ligne Supprimée : user_pref("CT3128284.RSSapp3128284a129638404769606799000000embeddedVersion.enc", "Mi40LjA=");
      Ligne Supprimée : user_pref("CT3128284.RSSapp3128284a129638404769606799000000lastReportTime.enc", "MTM3ODY0MjcxNjU2MSA=");
      Ligne Supprimée : user_pref("CT3128284.RSSapp3128284a129638404769606799000000newFeeds.enc", "bmV3RmVlZHM=");
      Ligne Supprimée : user_pref("CT3128284.RevertSettingsEnabled", true);
      Ligne Supprimée : user_pref("CT3128284.SearchAppState.enc", "Mg==");
      Ligne Supprimée : user_pref("CT3128284.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=");
      Ligne Supprimée : user_pref("CT3128284.UserID", "UN56285467426647834");
      Ligne Supprimée : user_pref("CT3128284.addressBarTakeOverEnabledInHidden", "true");
      Ligne Supprimée : user_pref("CT3128284.browser.search.defaultthis.engineName", true);
      Ligne Supprimée : user_pref("CT3128284.countryCode", "FR");
      Ligne Supprimée : user_pref("CT3128284.defaultSearch", "true");
      Ligne Supprimée : user_pref("CT3128284.enableAlerts", "always");
      Ligne Supprimée : user_pref("CT3128284.enableFix404ByUser", "TRUE");
      Ligne Supprimée : user_pref("CT3128284.enableSearchFromAddressBar", "true");
      Ligne Supprimée : user_pref("CT3128284.firstTimeDialogOpened", "true");
      Ligne Supprimée : user_pref("CT3128284.fixPageNotFoundError", "true");
      Ligne Supprimée : user_pref("CT3128284.fixPageNotFoundErrorByUser", "true");
      Ligne Supprimée : user_pref("CT3128284.fixPageNotFoundErrorInHidden", "true");
      Ligne Supprimée : user_pref("CT3128284.fixUrls", true);
      Ligne Supprimée : user_pref("CT3128284.fullUserID", "UN56285467426647834.UP.20130908142551");
      Ligne Supprimée : user_pref("CT3128284.installId", "conduitinstaller.exe");
      Ligne Supprimée : user_pref("CT3128284.installType", "conduitnsisintegration");
      Ligne Supprimée : user_pref("CT3128284.isCheckedStartAsHidden", true);
      Ligne Supprimée : user_pref("CT3128284.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
      Ligne Supprimée : user_pref("CT3128284.isFirstTimeToolbarLoading", "false");
      Ligne Supprimée : user_pref("CT3128284.isPerformedSmartBarTransition", "true");
      Ligne Supprimée : user_pref("CT3128284.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
      Ligne Supprimée : user_pref("CT3128284.keyword", true);
      Ligne Supprimée : user_pref("CT3128284.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3128284&octid=CT3128284&SearchSource=15&CUI=UN56285467426647834&SSPV=&Lay=1&UM=\"}");
      Ligne Supprimée : user_pref("CT3128284.lastVersion", "10.20.0.513");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appStateReportTime.enc", "MTM3ODY0MjcyNTU3MA==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_CouponBuddy.enc", "b2Zm");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_Easytobook.enc", "b2Zm");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_Easytobook_targeted.enc", "b2Zm");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_PriceGong.enc", "b2Zm");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appState_WindowShopper.enc", "b2Zm");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsInNjcmlwdFVybCI6bnVsbCwib3B0aW9uc0Rp[...]
      Ligne Supprimée : user_pref("CT3128284.mam_gk_appsDefaultEnabled.enc", "ZmFsc2U=");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_calledSetupService.enc", "MQ==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiIzOThmZjhkMS02YzRmLTQ5OTAtYWM5Ny03NTNlYzkxYmI0YzYiLCJ[...]
      Ligne Supprimée : user_pref("CT3128284.mam_gk_currentVersion.enc", "MS4xMC40LjA=");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_eventsCache.enc", "eyJmZDFlODdmNS1lMTA0LTQ2MmMtYThmMS03ZDNmMzZlNzJmYWUiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXciLCJsYWJlbCI6I[...]
      Ligne Supprimée : user_pref("CT3128284.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_first_time.enc", "MQ==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_gadgetOpen.enc", "MA==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_lastLoginTime.enc", "MTM3ODY0MjcxODgyNQ==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_localization.enc", "eyJkbWJveDEiOnsiVGV4dCI6IlByb21vXG5kdSBqb3VyIn0sImRtYm94MiI6eyJUZXh0IjoiTGl2cmFpc29uXG5ncmF0dWl0ZSJ9LCJkbWJ1bGxldDEiOnsiVGV4dCI6IkVjb25vbWlzZXogZGUgbOKA[...]
      Ligne Supprimée : user_pref("CT3128284.mam_gk_mamEnabled.enc", "ZmFsc2U=");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_new_welcome_experience.enc", "MQ==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_settings1.10.4.0.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNDZfMCIsImlzVGVzdCI6dHJ1ZSwiVXNlckNvdW50cnlDb2RlIjoiRlIiLCJpc1dlbGNvbWVFeHBl[...]
      Ligne Supprimée : user_pref("CT3128284.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_userId.enc", "NGUwZjhjMTctNmVmZi00MTJmLTk3MzAtNzBjMDE0YjE2MzNi");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_user_approval_interacted.enc", "MA==");
      Ligne Supprimée : user_pref("CT3128284.mam_gk_welcomeDialogMode.enc", "MA==");
      Ligne Supprimée : user_pref("CT3128284.migrateAppsAndComponents", true);
      Ligne Supprimée : user_pref("CT3128284.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.sweetpacks-search.com%2F%3Fbarid%3D%26src%3D10%26\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TO[...]
      Ligne Supprimée : user_pref("CT3128284.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
      Ligne Supprimée : user_pref("CT3128284.openThankYouPage", "false");
      Ligne Supprimée : user_pref("CT3128284.openUninstallPage", "true");
      Ligne Supprimée : user_pref("CT3128284.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=");
      Ligne Supprimée : user_pref("CT3128284.revertSettingsEnabled", "false");
      Ligne Supprimée : user_pref("CT3128284.search.searchAppId", "129638404645388048");
      Ligne Supprimée : user_pref("CT3128284.search.searchCount", "0");
      Ligne Supprimée : user_pref("CT3128284.searchInNewTabEnabledByUser", "true");
      Ligne Supprimée : user_pref("CT3128284.searchInNewTabEnabledInHidden", "true");
      Ligne Supprimée : user_pref("CT3128284.searchSuggestEnabledByUser", "true");
      Ligne Supprimée : user_pref("CT3128284.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3128284\"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://01NETcom.OurToolbar.com//xpi\"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"01NET.com \"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_Configuration_lastUpdate", "1383001307861");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1378642832043");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_appsMetadata_lastUpdate", "1378642720408");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1378642831355");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_location_lastUpdate", "1378642832143");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.13.511.4_lastUpdate", "1371378106470");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.16.2.509_lastUpdate", "1378642831260");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.19.2.505_lastUpdate", "1379239760538");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_login_10.20.0.513_lastUpdate", "1383001308077");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1378642831445");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_searchAPI_lastUpdate", "1383001307234");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_serviceMap_lastUpdate", "1383001307773");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_toolbarContextMenu_lastUpdate", "1378642831160");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_toolbarSettings_lastUpdate", "1383001307349");
      Ligne Supprimée : user_pref("CT3128284.serviceLayer_services_translation_lastUpdate", "1383001307316");
      Ligne Supprimée : user_pref("CT3128284.settingsINI", true);
      Ligne Supprimée : user_pref("CT3128284.shouldFirstTimeDialog", "false");
      Ligne Supprimée : user_pref("CT3128284.showToolbarPermission", "false");
      Ligne Supprimée : user_pref("CT3128284.smartbar.CTID", "CT3128284");
      Ligne Supprimée : user_pref("CT3128284.smartbar.Uninstall", "0");
      Ligne Supprimée : user_pref("CT3128284.smartbar.homepage", true);
      Ligne Supprimée : user_pref("CT3128284.smartbar.toolbarName", "01NET.com ");
      Ligne Supprimée : user_pref("CT3128284.toolbarBornServerTime", "11-3-2013");
      Ligne Supprimée : user_pref("CT3128284.toolbarCurrentServerTime", "29-10-2013");
      Ligne Supprimée : user_pref("CT3128284.toolbarLoginClientTime", "Sat Jun 29 2013 11:44:36 GMT+0200");
      Ligne Supprimée : user_pref("CT3128284.twitter_v1.8.0_twitter_app_open_t_f.enc", "ZmFsc2U=");
      Ligne Supprimée : user_pref("CT3128284_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1383001305314,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
      Ligne Supprimée : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3128284&octid=CT3128284&SearchSource=61&CUI=SB_CUI&UP=SP55EBA8E4-C698-4FB3-8BE4-E4E93AB75873&SSPV=SP_FFWSP01");
      Ligne Supprimée : user_pref("Smartbar.ConduitSearchEngineList", "01NET.com Customized Web Search");
      Ligne Supprimée : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=");
      Ligne Supprimée : user_pref("Smartbar.keywordURLSelectedCTID", "CT3128284");
      Ligne Supprimée : user_pref("browser.search.defaultenginename", "01NET.com Customized Web Search");
      Ligne Supprimée : user_pref("browser.search.selectedEngine", "Sweetpacks Search");
      Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://www.sweetpacks-search.com/?barid=&src=10&");
      Ligne Supprimée : user_pref("extensions.a217e8200a3b343dfb9518ec01d483d7fb98c68091f3f41a1bb1c692cf84781e9com27096.27096.internaldb.Resources_meta.value", "%7B%22cssSlider.css%22%3A%7B%22id%22%3A341894%2C%22ver%22%3A80%[...]
      Ligne Supprimée : user_pref("extensions.a217e8200a3b343dfb9518ec01d483d7fb98c68091f3f41a1bb1c692cf84781e9com27096.27096.internaldb.Resources_queue.value", "%7B%22cssSlider.css%22%3A%7B%22id%22%3A341894%2C%22ver%22%3A80[...]
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.InstallationThankYouPage", false);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.InstallationTime", 1382999844);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.active", true);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.addressbar", "NA");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.addressbarenhanced", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.asyncdb_dbWasSet", true);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.asyncinternaldb_dbWasSet", true);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.backgroundver", 2);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.certdomaininstaller", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.changeprevious", false);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.cookie.InstallationTime.value", "1382999844");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.description", "Turn YouTube videos to High Definition by default");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.domain", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.enablesearch", false);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.homepage", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.iframe", false);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%225C2D35F8EDAF4A6D98BF422F2A193[...]
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_appVer.value", "82");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_lastVersion.value", "1");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_meta.value", "%7B%7D");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_nextCheck.expiration", "Tue Oct 29 2013 06:01:49 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_nextCheck.value", "true");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.Resources_queue.value", "%7B%7D");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%225C2D35F8[...]
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.lastDailyReport", "1382999843877");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.lastUpdate", "1382999843621");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.manifesturl", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.name", "Plus-HD-1.3");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.newtab", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.opensearch", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/31257/plugins/092/ff/plugins.json");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.pluginsversion", 76);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.publisher", "Plus HD");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.searchstatus", 0);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.setnewtab", false);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.thankyou", "");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.updateinterval", 360);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.ver", 82);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.apps", "31257");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.bic", "13e03258a959577af45b85a018d0873e");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.cid", 31257);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.firstrun", false);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.hadappinstalled", true);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.installationdate", 1382999830);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.modetype", "production");
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.reportInstall", true);
      Ligne Supprimée : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.statsDailyCounter", 1);
      Ligne Supprimée : user_pref("extensions.crossrider.bic", "13e03258a959577af45b85a018d0873e");
      Ligne Supprimée : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
      Ligne Supprimée : user_pref("extentions.y2layers.installId", "e1ef4eac-0997-4605-847c-d4bae6115c58");
      Ligne Supprimée : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3128284&SearchSource=2&CUI=UN56285467426647834&UM=&q=");
      Ligne Supprimée : user_pref("smartbar.addressBarOwnerCTID", "CT3128284");
      Ligne Supprimée : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=13&CUI=SB_CUI,hxxp://search.conduit.com/?ctid=CT3128284&octid=CT3128284&SearchSource=6[...]
      Ligne Supprimée : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?SSPV=SP_FFWSP01&ctid=CT3128284&SearchSource=2&CUI=SB_CUI&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=[...]
      Ligne Supprimée : user_pref("smartbar.machineId", "ZGGL8OAUP9HE9HWF1+AE6Y4T2YYVIGO+XGMQXYGLFGCZT/+1CRQIR47SQELW2YYDOYZSFK37EEJ6B+1FQXUWJQ");
      Ligne Supprimée : user_pref("smartbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
      Ligne Supprimée : user_pref("smartbar.originalSearchAddressUrl", "");
      Ligne Supprimée : user_pref("smartbar.originalSearchEngine", false);
      Ligne Supprimée : user_pref("sweetim.toolbar.RevertDialog.enable", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "0");
      Ligne Supprimée : user_pref("sweetim.toolbar.Visibility.enable", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
      Ligne Supprimée : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.cda.returnValue", "hide");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.height", "335");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?lang=$locale_id;&toolbar_version=$ITEM_VERSION;&crg=$cargo;");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.0.width", "761");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.height", "300");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.1.width", "500");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handler.js");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.height", "150");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
      Ligne Supprimée : user_pref("sweetim.toolbar.dialogs.2.width", "530");
      Ligne Supprimée : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.*.google.es/.*|.*.youtube.com/.*|.*.yahoo.com/.*|.[...]
      Ligne Supprimée : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
      Ligne Supprimée : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
      Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
      Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
      Ligne Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
      Ligne Supprimée : user_pref("sweetim.toolbar.mode.debug", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.newtab.created", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.newtab.enable", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.previous.keyword.URL", "");
      Ligne Supprimée : user_pref("sweetim.toolbar.rc.url", "hxxp://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_VERSION;&crg=$cargo;");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.enable", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.enable", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.callback", "");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.sweetim.com.*");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.enable", "false");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
      Ligne Supprimée : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?si=3104&tid=chff1"); <
      1. je n'ai pas réussi avec JRT; je suis donc passé au suivant.
        1. l'écran restait sur checking startup pendant plus 10mn... et il ne se passait rien
          1. tu l'as bien executé clic droit "executer en tant qu'administrateur" ?

            sinon retente en mode sans echec quand tu pourras
            1. oui oui bien sur.....si je te réponds plus c'est que je suis parti dormir , auquel cas on continuera demain :)
              1. ok... moi aussi je vais arrêter pour ce soir après Malwarebytes... merci dans tous les cas
                1. :) faut penser à dormir ^^ lol
                2. bonjour,

                  voici le rapport après Malwarebytes:
                  Malwarebytes Anti-Malware (Essai) 1.75.0.1300
                  www.malwarebytes.org

                  Version de la base de données: v2013.10.28.11

                  Windows 7 Service Pack 1 x64 NTFS
                  Internet Explorer 10.0.9200.16721
                  Franck :: FRANCK-PC [administrateur]

                  Protection: Activé

                  29/10/2013 08:58:57
                  mbam-log-2013-10-29 (08-58-57).txt

                  Type d'examen: Examen complet (C:\|D:\|)
                  Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
                  Options d'examen désactivées: P2P
                  Elément(s) analysé(s): 394265
                  Temps écoulé: 1 heure(s), 6 minute(s), 8 seconde(s)

                  Processus mémoire détecté(s): 0
                  (Aucun élément nuisible détecté)

                  Module(s) mémoire détecté(s): 0
                  (Aucun élément nuisible détecté)

                  Clé(s) du Registre détectée(s): 1
                  HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Mis en quarantaine et supprimé avec succès.

                  Valeur(s) du Registre détectée(s): 1
                  HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Données: {2748EF81-4BAE-11E2-B0C4-5404A6087A82} -> Mis en quarantaine et supprimé avec succès.

                  Elément(s) de données du Registre détecté(s): 0
                  (Aucun élément nuisible détecté)

                  Dossier(s) détecté(s): 0
                  (Aucun élément nuisible détecté)

                  Fichier(s) détecté(s): 15
                  C:\Users\Enfants\AppData\Local\Temp\SecondStepInstaller.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Enfants\AppData\Local\Temp\AU\AutoUpdate.zip (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Enfants\AppData\Local\Temp\AU\SPUpdater.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Enfants\Downloads\FlvMPlayer.exe (PUP.Optional.Solimba) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Enfants\Downloads\installer_minecraft_French.exe (PUP.Optional.Vittalia) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Franck\.frostwire5\updates\frostwire-5.5.6.windows.exe (PUP.Optional.OpenCandy) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Franck\AppData\Local\Temp\mgsqlite3.7z (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Franck\AppData\Local\Temp\mgsqlite3.dll (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Franck\AppData\Local\Temp\SweetIESetup.exe (PUP.Optional.SweetPacks.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Franck\AppData\Local\Temp\SweetIESetup.exe.7z (PUP.Optional.SweetPacks.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Franck\AppData\Local\Temp\nsn3759.tmp\SPtool.dll (PUP.Optional.SearchProtect.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Franck\AppData\Local\Temp\nsr14FB.tmp\SPtool.dll (PUP.Optional.SearchProtect.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Users\Public\AutoUpdate.exe (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
                  C:\Windows\Installer\478572.msi (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
                  C:\Windows\Installer\478578.msi (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.

                  (fin)
                3. par contre JRT ne fonctionne pas sur mon PC...
                4. tu peux preciser ?
              2. Comment aller en Mode sans échec :

                Attention !!! : NE JAMAIS DEMARRER EN MODE SANS ECHEC AVEC L'UTILITAIRE MSCONFIG !!!!

                ▶ Redémarres ton ordi
                ▶ Tapote la touche F8 immédiatement, (F4,F5, ou suppr sur certains PC) juste après le "Bip"
                ▶ Tu verras un écran avec options de démarrage apparaître
                ▶ Choisis la première option : Sans Échec, et valide avec "Entrée"
                ▶ Choisis ton compte habituel
                1. J'ai réussi....

                  Voici le résultat:

                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                  Junkware Removal Tool (JRT) by Thisisu
                  Version: 6.0.7 (10.15.2013:3)
                  OS: Windows 7 Home Premium x64
                  Ran by Franck on 30/10/2013 at 11:25:47,07
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

                  ~~~ Services

                  ~~~ Registry Values

                  Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL

                  ~~~ Registry Keys

                  Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller
                  Successfully deleted: [Registry Key] HKEY_USERS\.DEFAULT\Software\SearchProtect
                  Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220222702296}
                  Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322122257}
                  Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220222702296}
                  Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322122257}

                  ~~~ Files

                  Successfully deleted: [File] "C:\Users\Franck\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"
                  Successfully deleted: [File] "C:\Users\Franck\appdata\locallow\SkwConfig.bin"

                  ~~~ Folders

                  Successfully deleted: [Folder] "C:\ProgramData\big fish games"
                  Successfully deleted: [Folder] "C:\ProgramData\software"
                  Successfully deleted: [Folder] "C:\Users\Franck\appdata\local\cre"
                  Successfully deleted: [Folder] "C:\Users\Franck\appdata\local\software"
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{019EFC31-05BB-4E47-BBA2-ED960D4305C0}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{01CEE0B4-7BA2-4954-BBA4-6DA5AA4CAD0B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{01E9AA1C-4567-4101-B258-C3EBC128EE31}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{02DB9E95-EC49-42D0-BBCB-CDD06D8163B2}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{03A2822E-FB50-4CDD-8091-4578AF533F34}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0980AB34-5FDE-463D-BA6D-3F146C9FF92F}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0AD5973A-4235-44A6-A71A-A4CE963E2907}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0AE0EF7D-11F4-4EFC-B264-48D2B5DE30E7}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0DFB0817-9F5E-463D-BBD1-A44703C19168}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{0F383655-EDB4-4309-B7DE-827C1334CADF}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{129BCA9E-3CF7-4788-9F6E-AF69106D5EDB}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{14D1AE61-91DE-4CFB-9EE8-C39A8AC53782}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{166EE9BC-5F53-4375-8E7D-9D2F17000312}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{18557289-1D00-4AEB-8773-75456FC3EC8B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{18F87CF6-0DDC-44C4-A0BE-837C8FE29D73}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{1B669338-ED97-4F15-AE2B-421849685F38}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{1C1F0475-3CB4-4405-98DC-3473BF2EBFAB}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{216E7931-FB90-42D6-8FCF-567C754EFFE1}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2240E6B1-534B-431D-BA50-3FC2C163A906}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{243E6355-9EA4-488E-8C8D-EBCBAB099498}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{279B92FB-93D7-4AFC-A756-8AF35ECECAA4}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{27F21BBC-AB76-4F87-AAB0-2BE041C9F705}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{27F3EFF8-C135-4BDD-B6F3-6BC398D4480B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2B03F8F3-9CA6-4264-A7EE-B749A0DA2517}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2BC5ED54-A2CC-4503-A79B-F0B25602C0F7}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2DB376C2-C5EC-44DA-897F-BA91C4BB5825}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{2EB817C3-C6E5-4A86-8671-D0B3B92BD065}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{337082D4-6DD0-4839-B40F-B3D325BADBDE}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{3EB00072-0692-4B26-B8E1-129E591E2338}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{3F912A95-3B99-44D1-A02A-78863FFE05A0}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{3FF7C192-2772-482B-88F8-3E8D9BF9E36D}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4085C18F-07BB-4CF8-944D-AF36C9BE81D0}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{410810E4-CDB1-475C-B623-5F27CF5F6104}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{414C5D76-7ABE-43B2-ACCC-C889A0D8E2DD}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4203E784-B451-4825-AB5C-B06B2C3A7C0B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{44CCBF40-C5A6-4217-B729-4E4AF90AD93C}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{493907E4-0EA2-4704-AE31-85C0577BBFC4}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4B551553-1B54-4933-B86F-5F201E8E0723}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4CA49D70-2F08-49D8-B2AE-E506114D9F28}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4CCBF72B-07EE-45CD-B591-F34C9432C964}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{4DC2D51A-37CD-4442-AB66-C7E8B99269D0}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{504B05D7-DA4C-42B2-AB58-E831DE9A65F5}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{56B2C121-AA06-4877-AB9C-34E958819D71}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{573C5768-24C7-46BD-B437-026C2B56A2CE}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{598041C7-DD7B-499E-BB4A-11336AAE4F5A}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5C4059C5-8963-44A0-AA35-4845D732888A}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5CB7D08E-20ED-4EAA-9A88-A5F68F52CD35}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5E4035FA-D296-4EC5-94D0-C239EC1AE83C}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5E46EFE8-611A-4DC1-AB44-29678EC05FBD}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5E805907-2720-4116-BFA0-4B53BC6094D4}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5F6F5FBC-A640-4290-AA7A-B400615B82C5}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{5FA4B2CE-DC69-468C-93FC-BD7E6DB004CC}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{64FF5B2F-FC59-45D0-B2DC-744EBFE12D03}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{659BF3A5-3F97-4F67-BD0D-A2F9C909A76F}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{65A70831-0647-4B9B-84BC-2471F9FA17C6}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{66CB1BC6-0F1D-42E1-AC9D-4A9DFD9BE598}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{684C1FDB-12BF-49FD-8121-DA2D1C2D9FD8}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6886AC8C-9C5F-40E4-8261-60A93514C404}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{688A1397-1CE3-462C-A947-8613249D59F3}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6CF63169-D16E-45DB-9B28-60AB1DC408E5}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6D5AC9D4-592E-474A-B8E4-0CDC87B90ACE}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{6F42F013-C03D-4166-A1F9-4C53304D7D85}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{70256E70-92FE-4859-A434-8303B5228713}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{70EBAF83-B375-4B40-A1E6-830C2BEFC3A9}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7424318F-5812-4276-BFD1-B8F97E87C715}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7525D211-09BA-4289-8CFB-28E83FD9DAEA}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{77F4A363-5383-46BE-8862-48DB0C9D584C}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{792B8215-7723-44C9-968D-BB2CA63326F0}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7B8E713B-F812-41BE-BCBA-884CDF87C9F1}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7D220377-F97C-4006-9E9F-B2C2C28F88AE}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7E010AC4-0342-47CA-BCF8-7A5C8EEBE302}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7E3A09B7-64D8-4268-AF40-C66DB2ADBF9E}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{7FD02C3B-8544-4298-9E06-180351C9CA80}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{80DB783D-5DD9-472F-AAD8-8B8E30275D51}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{81364D7C-06ED-4D64-B65F-42787C25FD4F}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8560DC05-31BC-40A7-96BF-F2952754052A}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8778D5C5-9FE3-4A79-8FD8-451B92753B3B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{87A80741-B1DE-4CA0-8D63-37CBCE87C0D7}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{87C527D8-0401-4B15-B642-6D5140E3D323}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8B449B5A-CD35-4176-915C-37BF68785B05}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8B8C7568-B59D-43A7-8540-B939CEA808F2}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8D74C768-34E8-4A1F-83C1-BB2C6C83E998}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8DF259AE-CB92-4DA3-82BE-5A8805C89F4D}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{8FC51D41-07D9-45D5-84AA-F23B7F185632}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{955FA388-F286-4ECF-BB36-F6AC75F76B1B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{9AC959A8-DCCA-404A-A359-95DAC6519F89}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{9E7022CB-5AF2-4B67-ACB6-14E120DA1D59}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{9EB1F066-0366-4361-9584-F5D454E9971A}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A040BCE5-E1A9-4788-8792-6B60CE2F192E}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A3BC0147-8E77-45DD-AA79-8D08348B5060}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A41594DF-465A-402D-8DF8-15CAC0B4E0D0}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A7805DDA-01E4-41B8-8D52-3661C1A47CB6}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{A9BDE722-4A29-462C-9929-0FBEF79A63AC}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{AA2A610B-CBD4-43EB-8E0C-6D93A204BFA2}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{AE46ABB4-CD81-4831-9DB6-5BFC52D522EF}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B07D47E5-361A-4696-990A-47EF83074B2D}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B1761717-CF86-46CC-83FC-2A50C3A97B42}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B5446E05-9B88-4EF6-A1B1-96DB3352F499}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{B8D78769-6D79-4D52-8AB5-8E74ECB7D28E}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BBA40505-0F0C-41CD-91B5-BD7BC0040354}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BBA61F07-6197-460C-959C-D51F0CF8D033}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BCF31578-3EF2-41A3-BF21-0AC5CC17D2E1}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{BE885EE9-0FDD-42E2-886F-28E7006A2E81}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C0A8B07E-75A6-498B-AD12-47A754D89FF2}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C231DDDD-C7D8-431E-A72F-34F23C4A36D3}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C4919903-4A5D-42BE-B54A-476B1146D5B7}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C5D40FAE-3D68-429F-9443-99927ACF8265}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C5EC3BCA-F3A2-4F81-9AED-6E4DB56D616F}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{C601FF5A-E15F-4BF2-8904-BB15C4491C59}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{CC028CBC-0BFE-4CE6-BCCA-8A9F12984883}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{CFB3FEC4-D674-4051-8E8B-D2EE20318B08}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D3AAD617-7AA4-4EB1-BD27-1F5A1122177B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D6197675-C1DB-4AF2-B19B-734004A2013B}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D946BA29-2706-4C81-8304-21B67532D7C8}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{D9B3F0D6-C686-44C6-9E75-DA41DE718B95}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{DA28109A-1471-40C0-972B-D54C2D130DBE}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{DA5438EC-3F73-4757-A96C-6411AD1748F4}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{E1C69B4B-E6D4-4682-BF37-DBD17244EF36}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{E4DF6227-640E-4EB3-A21A-5998E16F1748}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{E853A093-406F-4692-B049-DC5B67A844D3}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{EC13A976-FF7F-4713-AAAD-6893FEF65080}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{ECD3EF49-AB83-4E48-B51B-E5DF4998C013}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{ED38F5A4-E313-41E0-A044-60FF695D0154}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F0ADD4E7-70D1-45EE-8E4C-D332E8620387}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F0C29423-F78F-4F53-B09E-48CDF3E8AEA3}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F336C072-68E6-4815-AB7D-519C6DBC347E}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F4A38C2F-3CEB-49A0-B0F2-9EE86397E400}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F8A356E0-193B-42D9-ADDD-3C1CCD4F69F9}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{F8AA5796-5B77-4791-BA8C-DC2B474CF7D3}
                  Successfully deleted: [Empty Folder] C:\Users\Franck\appdata\local\{FB3593B3-1078-4F91-988A-A3ECF31CF86C}

                  ~~~ Event Viewer Logs were cleared

                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                  Scan was completed on 30/10/2013 at 11:27:43,36
                  End of JRT log
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                  1. Bonjour,

                    Avec un peu de retard... j'ai fait tourné OTL en mode sans échec
                    1. ben sans rapport je peux pas finir de t'aider......:(
                    2. Oups !!!

                      OTL logfile created on: 02/11/2013 10:53:09 - Run 3
                      OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Franck\Desktop
                      64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
                      Internet Explorer (Version = 9.10.9200.16721)
                      Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

                      5,91 Gb Total Physical Memory | 4,87 Gb Available Physical Memory | 82,36% Memory free
                      11,82 Gb Paging File | 10,79 Gb Available in Paging File | 91,24% Paging File free
                      Paging file location(s): ?:\pagefile.sys [binary data]

                      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
                      Drive C: | 293,03 Gb Total Space | 213,19 Gb Free Space | 72,75% Space Free | Partition Type: NTFS
                      Drive D: | 380,60 Gb Total Space | 380,47 Gb Free Space | 99,96% Space Free | Partition Type: NTFS

                      Computer Name: FRANCK-PC | User Name: Franck | Logged in as Administrator.
                      Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
                      Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

                      [color=#E56717]========== Processes (All) ==========[/color]

                      PRC - [2013/10/29 10:15:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Franck\Desktop\OTL.exe

                      [color=#E56717]========== Modules (All) ==========[/color]

                      MOD - [2013/10/29 10:15:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Franck\Desktop\OTL.exe
                      MOD - [2013/08/29 02:50:30 | 001,292,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
                      MOD - [2013/08/29 02:48:17 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
                      MOD - [2013/08/02 02:50:42 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
                      MOD - [2013/08/02 02:50:41 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
                      MOD - [2013/07/26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
                      MOD - [2013/07/26 02:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
                      MOD - [2013/07/09 05:52:33 | 000,663,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
                      MOD - [2013/07/09 05:52:10 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll
                      MOD - [2013/07/09 05:46:31 | 001,166,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll
                      MOD - [2013/06/06 05:57:01 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
                      MOD - [2012/11/22 05:45:03 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
                      MOD - [2012/06/02 05:40:42 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
                      MOD - [2012/06/02 05:34:09 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
                      MOD - [2012/05/05 08:46:52 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
                      MOD - [2011/12/16 08:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
                      MOD - [2011/08/27 05:26:27 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
                      MOD - [2011/05/24 11:40:05 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
                      MOD - [2011/05/24 11:39:38 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
                      MOD - [2010/11/20 13:21:38 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
                      MOD - [2010/11/20 13:21:36 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
                      MOD - [2010/11/20 13:21:26 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
                      MOD - [2010/11/20 13:21:20 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
                      MOD - [2010/11/20 13:21:16 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
                      MOD - [2010/11/20 13:20:58 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
                      MOD - [2010/11/20 13:20:50 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
                      MOD - [2010/11/20 13:20:50 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
                      MOD - [2010/11/20 13:19:46 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll
                      MOD - [2010/11/20 13:18:24 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
                      MOD - [2010/11/20 13:18:04 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
                      MOD - [2010/11/20 13:16:52 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
                      MOD - [2010/11/20 13:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
                      MOD - [2010/11/20 13:08:52 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
                      MOD - [2010/11/20 13:08:52 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
                      MOD - [2010/11/20 12:55:10 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
                      MOD - [2009/07/14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
                      MOD - [2009/07/14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
                      MOD - [2009/07/14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
                      MOD - [2009/07/14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
                      MOD - [2009/07/14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
                      MOD - [2009/07/14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
                      MOD - [2009/07/14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
                      MOD - [2009/07/14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
                      MOD - [2009/07/14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
                      MOD - [2009/07/14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
                      MOD - [2009/07/14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
                      MOD - [2009/07/14 02:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll

                      [color=#E56717]========== Services (All) ==========[/color]

                      SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
                      SRV:[b]64bit:[/b] - [2013/07/09 06:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
                      SRV:[b]64bit:[/b] - [2013/07/04 13:57:22 | 000,259,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WebClnt.dll -- (WebClient)
                      SRV:[b]64bit:[/b] - [2013/05/27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
                      SRV:[b]64bit:[/b] - [2013/03/19 06:53:58 | 000,230,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
                      SRV:[b]64bit:[/b] - [2013/02/27 06:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
                      SRV:[b]64bit:[/b] - [2013/01/13 20:58:28 | 001,175,552 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
                      SRV:[b]64bit:[/b] - [2012/10/03 18:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
                      SRV:[b]64bit:[/b] - [2012/10/03 18:42:16 | 000,569,344 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\iphlpsvc.dll -- (iphlpsvc)
                      SRV:[b]64bit:[/b] - [2012/07/26 04:08:14 | 000,084,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WUDFSvc.dll -- (wudfsvc)
                      SRV:[b]64bit:[/b] - [2012/07/15 13:55:02 | 001,255,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Wat\WatAdminSvc.exe -- (WatAdminSvc)
                      SRV:[b]64bit:[/b] - [2012/07/14 12:43:02 | 000,053,224 | ---- | M] (BitDefender S.R.L.) [Auto | Stopped] -- C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe -- (Updatesrv)
                      SRV:[b]64bit:[/b] - [2012/07/14 12:40:58 | 002,660,624 | ---- | M] (BitDefender S.R.L.) [Auto | Stopped] -- C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe -- (VSSERV)
                      SRV:[b]64bit:[/b] - [2012/07/04 23:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\browser.dll -- (Browser)
                      SRV:[b]64bit:[/b] - [2012/06/02 23:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
                      SRV:[b]64bit:[/b] - [2012/05/01 06:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
                      SRV:[b]64bit:[/b] - [2012/02/11 07:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
                      SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (VaultSvc)
                      SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
                      SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
                      SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (Netlogon)
                      SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
                      SRV:[b]64bit:[/b] - [2011/11/17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (EFS)
                      SRV:[b]64bit:[/b] - [2011/05/24 12:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
                      SRV:[b]64bit:[/b] - [2011/05/11 11:53:24 | 001,007,208 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Windows\SysNative\nvvsvc.exe -- (NVSvc)
                      SRV:[b]64bit:[/b] - [2011/05/04 14:44:45 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
                      SRV:[b]64bit:[/b] - [2011/05/04 06:19:28 | 000,591,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\SearchIndexer.exe -- (WSearch)
                      SRV:[b]64bit:[/b] - [2011/05/02 22:27:50 | 001,517,328 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
                      SRV:[b]64bit:[/b] - [2011/05/02 22:13:54 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
                      SRV:[b]64bit:[/b] - [2011/05/02 22:10:26 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
                      SRV:[b]64bit:[/b] - [2011/03/28 20:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
                      SRV:[b]64bit:[/b] - [2011/03/04 00:57:58 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
                      SRV:[b]64bit:[/b] - [2010/11/30 06:18:06 | 000,467,248 | ---- | M] (BitDefender) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Update Server)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 002,018,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WsmSvc.dll -- (WinRM)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,444,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\winhttp.dll -- (WinHttpAutoProxySvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:30 | 000,117,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpdbusenum.dll -- (WPDBusEnum)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 001,743,360 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\sysmain.dll -- (SysMain)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\termsrv.dll -- (TermService)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wcncsvc.dll -- (wcncsvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:28 | 000,092,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TabSvc.dll -- (TabletInputService)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SessEnv.dll -- (SessionEnv)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:26 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 001,389,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pla.dll -- (pla)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 000,476,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\QAGENTRT.DLL -- (napagent)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:24 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:27:00 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:52 | 000,084,992 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Mcx2Svc.dll -- (Mcx2Svc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:48 | 000,232,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:44 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\KMSVC.DLL -- (hkmsvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:40 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:38 | 000,853,504 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\IKEEXT.DLL -- (IKEEXT)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:30 | 000,777,728 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\gpsvc.dll -- (gpsvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:08 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:08 | 000,162,816 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dps.dll -- (DPS)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:26:06 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:50 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (SCPolicySvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:50 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (CertPropSvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:46 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:46 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:44 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:44 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:34 | 001,525,248 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:30 | 001,504,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:28 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:26 | 000,533,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vds.exe -- (vds)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:06 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:25:00 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
                      SRV:[b]64bit:[/b] - [2010/11/20 14:24:48 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
                      SRV:[b]64bit:[/b] - [2010/09/23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
                      SRV:[b]64bit:[/b] - [2010/09/17 09:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [On_Demand | Stopped] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
                      SRV:[b]64bit:[/b] - [2010/04/17 00:07:42 | 000,134,928 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
                      SRV:[b]64bit:[/b] - [2010/01/09 20:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:57 | 000,012,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpcsvc.dll -- (WPCSvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,381,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\w32time.dll -- (W32Time)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,353,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\upnphost.dll -- (upnphost)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wecsvc.dll -- (Wecsvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wdi.dll -- (WdiSystemHost)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wdi.dll -- (WdiServiceHost)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,084,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wercplsupport.dll -- (wercplsupport)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,076,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wersvc.dll -- (WerSvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WcsPlugInService.dll -- (WcsPlugInService)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:56 | 000,038,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\uxsms.dll -- (UxSms)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:55 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\trkwks.dll -- (TrkWks)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:55 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tbssvc.dll -- (TBS)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ssdpsrv.dll -- (SSDPSRV)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sstpsvc.dll -- (SstpSvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,438,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\p2psvc.dll -- (p2psvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\qwave.dll -- (QWAVE)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,190,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SCardSvr.dll -- (SCardSvr)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,186,368 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\pcasvc.dll -- (PcaSvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,159,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\regsvc.dll -- (RemoteRegistry)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,064,512 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\Sens.dll -- (SENS)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netman.dll -- (Netman)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:28 | 000,368,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtckrm.dll -- (KtmRm)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 000,097,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\mprdim.dll -- (RemoteAccess)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (THREADORDER)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:18 | 000,300,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lltdsvc.dll -- (lltdsvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:18 | 000,023,552 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\lmhsvc.dll -- (lmhosts)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:11 | 000,156,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\iscsiexe.dll -- (MSiSCSI)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:09 | 000,101,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IPBusEnum.dll -- (IPBusEnum)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:52 | 000,034,816 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\FDResPub.dll -- (FDResPub)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:52 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fdPHost.dll -- (fdPHost)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\es.dll -- (EventSystem)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:39:55 | 000,203,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbem\WmiApSrv.exe -- (wmiApSrv)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:39:48 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\UI0Detect.exe -- (UI0Detect)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:39:41 | 000,014,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\snmptrap.exe -- (SNMPTRAP)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:39:21 | 000,141,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtc.exe -- (MSDTC)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:39:15 | 000,010,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Locator.exe -- (RpcLocator)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dllhost.exe -- (COMSysApp)
                      SRV:[b]64bit:[/b] - [2009/07/14 02:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
                      SRV - [2013/10/25 15:44:39 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
                      SRV - [2013/07/09 05:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
                      SRV - [2013/07/04 12:57:28 | 000,205,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WebClnt.dll -- (WebClient)
                      SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
                      SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
                      SRV - [2013/02/28 17:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
                      SRV - [2012/08/21 17:52:54 | 000,194,032 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
                      SRV - [2012/03/08 17:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
                      SRV - [2011/05/11 10:22:24 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
                      SRV - [2011/05/10 19:47:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
                      SRV - [2011/05/04 05:28:31 | 000,427,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWow64\SearchIndexer.exe -- (WSearch)
                      SRV - [2011/04/13 03:33:21 | 000,135,664 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdatem)
                      SRV - [2011/04/13 03:33:21 | 000,135,664 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdate)
                      SRV - [2010/11/20 14:25:24 | 000,194,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\servicing\TrustedInstaller.exe -- (TrustedInstaller)
                      SRV - [2010/11/20 14:24:44 | 000,696,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
                      SRV - [2010/11/20 13:21:40 | 001,175,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WsmSvc.dll -- (WinRM)
                      SRV - [2010/11/20 13:21:38 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\winhttp.dll -- (WinHttpAutoProxySvc)
                      SRV - [2010/11/20 13:21:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wcncsvc.dll -- (wcncsvc)
                      SRV - [2010/11/20 13:21:30 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
                      SRV - [2010/11/20 13:21:20 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
                      SRV - [2010/11/20 13:21:10 | 000,113,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\SessEnv.dll -- (SessionEnv)
                      SRV - [2010/11/20 13:20:58 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
                      SRV - [2010/11/20 13:20:56 | 001,508,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\pla.dll -- (pla)
                      SRV - [2010/11/20 13:18:32 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
                      SRV - [2010/11/20 13:17:24 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
                      SRV - [2010/11/05 02:53:04 | 000,042,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
                      SRV - [2010/11/05 02:52:16 | 000,856,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
                      SRV - [2010/03/18 13:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
                      SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
                      SRV - [2010/01/09 20:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
                      SRV - [2009/12/15 18:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
                      SRV - [2009/07/14 02:39:09 | 000,127,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehsched.exe -- (ehSched)
                      SRV - [2009/07/14 02:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wpcsvc.dll -- (WPCSvc)
                      SRV - [2009/07/14 02:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wdi.dll -- (WdiSystemHost)
                      SRV - [2009/07/14 02:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wdi.dll -- (WdiServiceHost)
                      SRV - [2009/07/14 02:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WcsPlugInService.dll -- (WcsPlugInService)
                      SRV - [2009/07/14 02:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\upnphost.dll -- (upnphost)
                      SRV - [2009/07/14 02:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\Sens.dll -- (SENS)
                      SRV - [2009/07/14 02:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\qwave.dll -- (QWAVE)
                      SRV - [2009/07/14 02:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
                      SRV - [2009/07/14 02:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess)
                      SRV - [2009/07/14 02:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
                      SRV - [2009/07/14 02:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
                      SRV - [2009/07/14 02:14:28 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\perfhost.exe -- (PerfHost)
                      SRV - [2009/07/14 02:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\dllhost.exe -- (COMSysApp)
                      SRV - [2009/06/16 01:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
                      SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
                      SRV - [2009/06/10 21:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)

                      [color=#E56717]========== Driver Services (All) ==========[/color]

                      DRV:[b]64bit:[/b] - [2013/09/14 02:10:19 | 000,497,152 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\afd.sys -- (AFD)
                      DRV:[b]64bit:[/b] - [2013/09/08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tcpip.sys -- (TCPIP6)
                      DRV:[b]64bit:[/b] - [2013/09/08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tcpip.sys -- (Tcpip)
                      DRV:[b]64bit:[/b] - [2013/08/01 13:09:36 | 000,983,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dxgkrnl.sys -- (DXGKrnl)
                      DRV:[b]64bit:[/b] - [2013/07/12 11:41:35 | 000,185,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbvideo.sys -- (usbvideo)
                      DRV:[b]64bit:[/b] - [2013/07/12 11:41:12 | 000,100,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbcir.sys -- (usbcir)
                      DRV:[b]64bit:[/b] - [2013/07/04 11:11:35 | 000,140,800 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxdav.sys -- (MRxDAV)
                      DRV:[b]64bit:[/b] - [2013/06/25 23:55:52 | 000,785,624 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Wdf01000.sys -- (Wdf01000)
                      DRV:[b]64bit:[/b] - [2013/06/15 05:32:16 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tssecsrv.sys -- (tssecsrv)
                      DRV:[b]64bit:[/b] - [2013/04/12 15:45:08 | 001,656,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\ntfs.sys -- (Ntfs)
                      DRV:[b]64bit:[/b] - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
                      DRV:[b]64bit:[/b] - [2013/01/24 07:01:01 | 000,223,752 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
                      DRV:[b]64bit:[/b] - [2012/10/03 17:07:26 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tcpipreg.sys -- (tcpipreg)
                      DRV:[b]64bit:[/b] - [2012/08/22 19:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ndis.sys -- (NDIS)
                      DRV:[b]64bit:[/b] - [2012/07/26 03:26:45 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
                      DRV:[b]64bit:[/b] - [2012/07/26 03:26:06 | 000,198,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFRd.sys -- (WUDFRd)
                      DRV:[b]64bit:[/b] - [2012/07/14 12:40:07 | 000,431,176 | ---- | M] (BitDefender) [File_System | Boot | Stopped] -- C:\Windows\SysNative\drivers\bdfsfltr.sys -- (bdfsfltr)
                      DRV:[b]64bit:[/b] - [2012/07/06 21:07:42 | 000,552,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthport.sys -- (BTHPORT)
                      DRV:[b]64bit:[/b] - [2012/06/02 06:50:10 | 000,458,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
                      DRV:[b]64bit:[/b] - [2012/06/02 06:48:16 | 000,151,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
                      DRV:[b]64bit:[/b] - [2012/06/02 06:48:16 | 000,095,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecdd.sys -- (KSecDD)
                      DRV:[b]64bit:[/b] - [2012/04/28 04:55:21 | 000,210,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpwd.sys -- (RDPWD)
                      DRV:[b]64bit:[/b] - [2012/03/17 08:58:57 | 000,075,120 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\partmgr.sys -- (partmgr)
                      DRV:[b]64bit:[/b] - [2012/03/08 17:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
                      DRV:[b]64bit:[/b] - [2012/03/01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
                      DRV:[b]64bit:[/b] - [2012/02/17 05:57:32 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tdtcp.sys -- (TDTCP)
                      DRV:[b]64bit:[/b] - [2011/07/09 03:46:28 | 000,288,768 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxsmb10.sys -- (mrxsmb10)
                      DRV:[b]64bit:[/b] - [2011/06/02 18:32:50 | 000,401,896 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmtxhci.sys -- (asmtxhci)
                      DRV:[b]64bit:[/b] - [2011/06/02 18:32:50 | 000,128,488 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmthub3.sys -- (asmthub3)
                      DRV:[b]64bit:[/b] - [2011/05/10 19:47:00 | 013,050,088 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvlddmkm.sys -- (nvlddmkm)
                      DRV:[b]64bit:[/b] - [2011/05/10 19:47:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
                      DRV:[b]64bit:[/b] - [2011/05/04 14:43:12 | 000,090,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bowser.sys -- (bowser)
                      DRV:[b]64bit:[/b] - [2011/05/01 22:33:06 | 008,593,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
                      DRV:[b]64bit:[/b] - [2011/04/29 04:06:10 | 000,467,456 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\srv.sys -- (srv)
                      DRV:[b]64bit:[/b] - [2011/04/29 04:05:49 | 000,410,112 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\srv2.sys -- (srv2)
                      DRV:[b]64bit:[/b] - [2011/04/29 04:05:37 | 000,168,448 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\srvnet.sys -- (srvnet)
                      DRV:[b]64bit:[/b] - [2011/04/28 04:54:56 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BTHUSB.SYS -- (BTHUSB)
                      DRV:[b]64bit:[/b] - [2011/04/27 03:40:40 | 000,158,208 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxsmb.sys -- (mrxsmb)
                      DRV:[b]64bit:[/b] - [2011/04/27 03:39:37 | 000,128,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxsmb20.sys -- (mrxsmb20)
                      DRV:[b]64bit:[/b] - [2011/04/12 22:18:08 | 000,142,632 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
                      DRV:[b]64bit:[/b] - [2011/03/25 04:29:26 | 000,343,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbhub.sys -- (usbhub)
                      DRV:[b]64bit:[/b] - [2011/03/25 04:29:14 | 000,098,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbccgp.sys -- (usbccgp)
                      DRV:[b]64bit:[/b] - [2011/03/25 04:29:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbehci.sys -- (usbehci)
                      DRV:[b]64bit:[/b] - [2011/03/25 04:29:04 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbohci.sys -- (usbohci)
                      DRV:[b]64bit:[/b] - [2011/03/25 04:29:03 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbuhci.sys -- (usbuhci)
                      DRV:[b]64bit:[/b] - [2011/03/11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstor.sys -- (nvstor)
                      DRV:[b]64bit:[/b] - [2011/03/11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvraid.sys -- (nvraid)
                      DRV:[b]64bit:[/b] - [2011/03/11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaStorV.sys -- (iaStorV)
                      DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
                      DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
                      DRV:[b]64bit:[/b] - [2011/03/11 05:37:16 | 000,091,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBSTOR.SYS -- (USBSTOR)
                      DRV:[b]64bit:[/b] - [2011/01/27 01:57:12 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
                      DRV:[b]64bit:[/b] - [2011/01/13 12:58:30 | 000,413,800 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
                      DRV:[b]64bit:[/b] - [2010/11/29 13:14:36 | 001,186,272 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avckf.sys -- (avckf)
                      DRV:[b]64bit:[/b] - [2010/11/29 13:14:30 | 000,591,968 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avc3.sys -- (avc3)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:34:04 | 000,295,808 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volsnap.sys -- (volsnap)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:34:02 | 000,363,392 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgrx.sys -- (volmgrx)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:34:02 | 000,215,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:34:02 | 000,071,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgr.sys -- (volmgr)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:58 | 000,063,360 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\termdd.sys -- (TermDD)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:56 | 000,103,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sbp2port.sys -- (sbp2port)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:54 | 000,213,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:50 | 000,184,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pci.sys -- (pci)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,366,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msrpc.sys -- (MsRPC)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,273,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msiscsi.sys -- (iScsiPrt)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,155,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mpio.sys -- (mpio)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,140,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msdsm.sys -- (msdsm)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:46 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\msahci.sys -- (msahci)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:44 | 000,094,592 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mountmgr.sys -- (mountmgr)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:38 | 000,014,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:36 | 000,289,664 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\fltMgr.sys -- (FltMgr)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
                      DRV:[b]64bit:[/b] - [2010/11/20 14:32:48 | 000,334,208 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpi.sys -- (ACPI)
                      DRV:[b]64bit:[/b] - [2010/11/20 12:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
                      DRV:[b]64bit:[/b] - [2010/11/20 12:07:06 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:38 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\wanarp.sys -- (Wanarpv6)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:38 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wanarp.sys -- (WANARP)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:36 | 000,164,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndiswan.sys -- (NdisWan)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:36 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rasl2tp.sys -- (Rasl2tp)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:34 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\raspptp.sys -- (PptpMiniport)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:22 | 000,131,584 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\pacer.sys -- (Psched)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:22 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndproxy.sys -- (NDProxy)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:52:20 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipfltdrv.sys -- (IpFilterDriver)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:51:52 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tunnel.sys -- (tunnel)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:50:10 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndisuio.sys -- (Ndisuio)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:44:58 | 000,229,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:44:38 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\umbus.sys -- (umbus)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:44:24 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:43:58 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winusb.sys -- (WinUsb)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:43:50 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidusb.sys -- (HidUsb)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:43:44 | 000,122,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hdaudbus.sys -- (HDAudBus)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:34:02 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sffp_sd.sys -- (sffp_sd)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:33:26 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbdhid.sys -- (kbdhid)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:33:18 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:14:38 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:10:00 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
                      DRV:[b]64bit:[/b] - [2010/11/20 11:04:54 | 000,078,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IPMIDrv.sys -- (IPMIDRV)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:30:44 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:27:56 | 000,309,248 | ---- | M] (Microsoft Corporation) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\rdbss.sys -- (rdbss)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:26:34 | 000,102,400 | ---- | M] (Microsoft Corporation) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\dfsc.sys -- (DfsC)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:26:12 | 000,328,192 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\udfs.sys -- (udfs)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:25:16 | 000,753,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\http.sys -- (HTTP)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:23:22 | 000,261,632 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\netbt.sys -- (NetBT)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:21:58 | 000,119,296 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\tdx.sys -- (tdx)
                      DRV:[b]64bit:[/b] - [2010/11/20 10:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cdrom.sys -- (cdrom)
                      DRV:[b]64bit:[/b] - [2010/10/14 17:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
                      DRV:[b]64bit:[/b] - [2010/09/22 02:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
                      DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,144,464 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
                      DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,105,552 | ---- | M] (Trend Micro Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
                      DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,090,704 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
                      DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,067,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
                      DRV:[b]64bit:[/b] - [2010/09/13 11:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
                      DRV:[b]64bit:[/b] - [2010/08/20 17:42:04 | 000,099,408 | ---- | M] (BitDefender) [Kernel | System | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys -- (bdfwfpf)
                      DRV:[b]64bit:[/b] - [2010/08/20 14:42:08 | 000,088,144 | ---- | M] (BitDefender) [Kernel | System | Stopped] -- c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys -- (Bdfndisf)
                      DRV:[b]64bit:[/b] - [2010/05/13 15:52:08 | 000,162,896 | ----
                  2. http://cjoint.com/?CKcoEy4DhMS
                    https://www.cjoint.com/c/CKcoE4YzmsG
                    1. ca a l'air propre t'as encore des soucis ?
                    2. Non c'est nickel.... je ne suis plus ennuyé !!!
                    3. ok finis avec ce menage et cest bon : http://www.security-helpzone.com/gen-hackman/nettoyage-en-fin-de-desinfection/