Supprimer live security platinum

Résolu
Bonjour,
Mon ordinateur portable a été infecté par ce virus.
Après lecture sur le net, je l'ai redémarré en mode sans échec, et lancer OTL.

Après je suis perdue, que devrai-je faire ???

Merci d'avance

Chloerinon

2 réponses

  1. bonjour,

    Je viens d'avoir le meme problème ce matin et j'ai réussi à l'ejecter de mon ordinateur.
    Je suis sous windows 7. Mon ordinateur etait bloqué avec live security platinum. Je ne pouvais rien faire, ni atteindre mon gestionnaire avec ctrl, alt, suppr, ni le supprimer de mes programmes dans le panneau de configuration, ni restaurer mon ordinateur a une date antérieure.
    J'ai actuellement microsoft security essential sur mon ordinateur en anti-virus.
    Donc j'ai eteinds mon ordinateur et j'ai reussi dès le démarrage à atteindre mon anti-virus avant que live security platinum se mette en marche. a partier de là, j'ai lancé une analyse complète de mon ordinateur qui a echoué à un moment.
    J'ai donc redemarré mon ordi et refais le meme parcours ci-dessus sans lancer l'analyse. j'ai donc laissé et non fermé la page de mon anti-virus et là j'ai pu acceder à la restauration systeme. Ce que j'ai fait et maintenant il mon ordi marche comme avant ce gros soucis.

    Voilà en espérant que ca puisse marcher pour vous egalement.
    1. Voilà le rapport OTL si jamais

      OTL logfile created on: 26/08/2012 21:37:26 - Run 1
      OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\Chloé et David\Desktop
      Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
      Internet Explorer (Version = 8.0.6001.19088)
      Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

      3,00 Gb Total Physical Memory | 2,50 Gb Available Physical Memory | 83,47% Memory free
      6,19 Gb Paging File | 5,89 Gb Available in Paging File | 95,19% Paging File free
      Paging file location(s): ?:\pagefile.sys [binary data]

      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
      Drive C: | 224,72 Gb Total Space | 24,00 Gb Free Space | 10,68% Space Free | Partition Type: NTFS

      Computer Name: PC-DE-CHLOÉETDA | User Name: Chloé et David | Logged in as Administrator.
      Boot Mode: SafeMode with Networking | Scan Mode: All users
      Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

      [color=#E56717]========== Processes (SafeList) ==========[/color]

      PRC - [2012/08/26 21:29:39 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Chloé et David\Desktop\OTL.exe
      PRC - [2008/10/29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
      PRC - [2008/01/09 16:50:22 | 000,767,976 | ---- | M] (McAfee, Inc.) -- C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
      PRC - [2007/11/01 19:12:38 | 000,265,040 | ---- | M] (McAfee, Inc.) -- c:\PROGRA~1\mcafee\msc\mcuimgr.exe
      PRC - [2007/08/03 22:33:14 | 000,582,992 | ---- | M] (McAfee, Inc.) -- c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      PRC - [2007/07/18 15:54:42 | 000,856,864 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MPF\MPFSrv.exe

      [color=#E56717]========== Modules (No Company Name) ==========[/color]

      [color=#E56717]========== Services (SafeList) ==========[/color]

      SRV - File not found [Auto | Stopped] -- C:\Program Files\Spybot -- (SBSDWSCService)
      SRV - [2012/08/14 20:03:17 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
      SRV - [2012/07/26 14:16:14 | 000,092,632 | ---- | M] (TomTom) [Auto | Stopped] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
      SRV - [2012/06/15 12:26:22 | 000,095,232 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service)
      SRV - [2012/06/14 19:40:08 | 000,828,032 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Windows\Temp\0007691345698310mcinst.exe -- (0007691345698310mcinstcleanup)
      SRV - [2010/01/15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
      SRV - [2008/11/18 22:33:41 | 000,068,865 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe -- (AntiVirScheduler)
      SRV - [2008/11/18 22:33:38 | 000,151,297 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe -- (AntiVirService)
      SRV - [2008/07/07 12:28:04 | 000,182,112 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service)
      SRV - [2008/07/03 08:06:17 | 000,104,992 | ---- | M] (Realtek Semiconductor) [Auto | Stopped] -- C:\Windows\RTKAUDIOSERVICE.EXE -- (RtkAudioService)
      SRV - [2008/06/27 21:01:36 | 000,299,008 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\Network Utility\NSUService.exe -- (NSUService)
      SRV - [2008/06/20 08:56:44 | 000,415,744 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe -- (VCFw)
      SRV - [2008/06/19 19:53:20 | 000,411,488 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe -- (VAIO Power Management)
      SRV - [2008/06/19 08:55:48 | 000,279,848 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -- (Vcsw)
      SRV - [2008/06/11 23:13:24 | 000,337,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr)
      SRV - [2008/06/11 23:10:48 | 000,083,232 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe -- (VcmXmlIfHelper)
      SRV - [2008/05/22 14:23:10 | 000,192,512 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe -- (VzCdbSvc)
      SRV - [2008/05/22 14:21:44 | 000,073,728 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe -- (VAIO Entertainment TV Device Arbitration Service)
      SRV - [2008/05/20 19:05:40 | 000,353,568 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media plus\SOHDms.exe -- (SOHDms)
      SRV - [2008/05/20 19:05:40 | 000,103,712 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe -- (SOHCImp)
      SRV - [2008/05/20 19:05:40 | 000,062,752 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media plus\SOHDs.exe -- (SOHDs)
      SRV - [2008/05/20 01:51:34 | 000,077,824 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
      SRV - [2008/05/20 01:49:04 | 000,053,248 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
      SRV - [2008/05/20 01:29:06 | 000,053,248 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
      SRV - [2008/04/30 19:41:12 | 000,815,104 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
      SRV - [2008/04/30 19:10:10 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
      SRV - [2008/01/25 02:38:12 | 002,458,128 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe -- (McNASvc)
      SRV - [2008/01/21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
      SRV - [2008/01/16 10:46:24 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)
      SRV - [2008/01/09 16:50:22 | 000,767,976 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe -- (mcmscsvc)
      SRV - [2007/12/05 11:04:10 | 000,695,624 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe -- (McSysmon)
      SRV - [2007/11/26 11:46:14 | 000,023,880 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\MSK\MskSrver.exe -- (MSK80Service)
      SRV - [2007/11/07 10:35:40 | 000,378,184 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe -- (McODS)
      SRV - [2007/10/01 18:27:46 | 000,423,584 | ---- | M] (Canal+ Active) [On_Demand | Stopped] -- C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe -- (Service CANALPLAY)
      SRV - [2007/08/15 12:36:04 | 000,359,248 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe -- (McProxy)
      SRV - [2007/07/24 12:02:14 | 000,144,704 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe -- (McShield)
      SRV - [2007/07/18 15:54:42 | 000,856,864 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\McAfee\MPF\MPFSrv.exe -- (MpfService)
      SRV - [2007/01/04 19:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Stopped] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)

      [color=#E56717]========== Driver Services (SafeList) ==========[/color]

      DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys)
      DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
      DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
      DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
      DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\igdkmd32.sys -- (igfx)
      DRV - [2009/05/27 17:36:56 | 000,075,096 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
      DRV - [2009/05/27 17:36:53 | 000,052,056 | ---- | M] (Avira GmbH) [File_System | On_Demand | Stopped] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys -- (avgntflt)
      DRV - [2009/05/27 17:36:50 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys -- (avgio)
      DRV - [2008/07/09 02:05:17 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
      DRV - [2008/06/28 02:33:45 | 000,068,608 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
      DRV - [2008/06/27 18:37:42 | 000,010,216 | ---- | M] (Sony Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\DMICall.sys -- (DMICall)
      DRV - [2008/06/21 02:03:04 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\risdptsk.sys -- (risdptsk)
      DRV - [2008/06/10 02:04:47 | 000,909,824 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
      DRV - [2008/06/07 02:02:55 | 000,131,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr)
      DRV - [2008/04/28 06:29:26 | 003,658,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32)
      DRV - [2008/03/10 13:01:26 | 000,009,344 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SFEP.sys -- (SFEP)
      DRV - [2008/01/25 04:14:25 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
      DRV - [2007/12/02 13:51:42 | 000,040,488 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfesmfk.sys -- (mfesmfk)
      DRV - [2007/11/22 07:44:08 | 000,201,320 | ---- | M] (McAfee, Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\mfehidk.sys -- (mfehidk)
      DRV - [2007/11/22 07:44:08 | 000,079,304 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfeavfk.sys -- (mfeavfk)
      DRV - [2007/11/22 07:44:08 | 000,035,240 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfebopk.sys -- (mfebopk)
      DRV - [2007/11/22 07:44:04 | 000,033,832 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mferkdk.sys -- (mferkdk)
      DRV - [2007/07/31 18:45:50 | 000,076,800 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ser2pl.sys -- (Ser2pl)
      DRV - [2007/07/13 09:21:12 | 000,125,728 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\Mpfp.sys -- (MPFP)
      DRV - [2007/04/17 20:09:28 | 000,011,032 | ---- | M] (InterVideo) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\regi.sys -- (regi)
      DRV - [2007/03/01 11:34:22 | 000,028,352 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)

      [color=#E56717]========== Standard Registry (SafeList) ==========[/color]

      [color=#E56717]========== Internet Explorer ==========[/color]

      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
      IE - HKLM\..\SearchScopes,DefaultScope = {7E1DDACE-0EB4-440A-AE99-C13214A82071}
      IE - HKLM\..\SearchScopes\{7E1DDACE-0EB4-440A-AE99-C13214A82071}: "URL" = https://www.google.fr/webhp?hl=fr&gws_rd=ssl{searchTerms}&meta=

      IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/toolbar/ie8/sidebar.html
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..\SearchScopes,DefaultScope = {7E1DDACE-0EB4-440A-AE99-C13214A82071}
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = http://127.0.0.1:4664/search&s=grESZ7OJ0jSHFVJeVXg7OT6I9iE?q={searchTerms}
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..\SearchScopes\{7E1DDACE-0EB4-440A-AE99-C13214A82071}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SNYK_fr
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
      IE - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

      [color=#E56717]========== FireFox ==========[/color]

      FF - prefs.js..extensions.enabledItems: MapShare-status@tomtom.com:1.7.1
      FF - prefs.js..extensions.enabledItems: baseTheme@tomtom.com:1.0.2
      FF - user.js - File not found

      FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
      FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
      FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
      FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
      FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=4.0: C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
      FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Chloé et David\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )

      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/08/12 17:34:50 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\Firefox [2011/08/12 17:35:36 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2011/08/13 08:10:02 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files\McAfee\SiteAdvisor [2012/08/26 21:27:14 | 000,000,000 | ---D | M]
      FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/08/12 17:34:50 | 000,000,000 | ---D | M]

      [2012/08/10 20:50:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chloé et David\AppData\Roaming\mozilla\Extensions
      [2012/08/10 20:50:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chloé et David\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
      [2012/08/10 20:49:43 | 000,000,000 | ---D | M] (Map status indicator) -- C:\PROGRAM FILES\TOMTOM HOME 2\XUL\EXTENSIONS\MAPSHARE-STATUS@TOMTOM.COM

      [color=#E56717]========== Chrome ==========[/color]

      CHR - homepage: https://www.google.com/?gws_rd=ssl
      CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\8.0.552.224\pdf.dll
      CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files\Google\Chrome\Application\8.0.552.224\gears.dll
      CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\8.0.552.224\gcswf32.dll
      CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
      CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
      CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
      CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
      CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
      CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
      CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
      CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
      CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
      CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
      CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
      CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
      CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
      CHR - plugin: Facebook Plugin (Enabled) = C:\Users\Chlo\u00E9 et David\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll
      CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll
      CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
      CHR - plugin: Default Plug-in (Enabled) = default_plugin

      O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
      O1 - Hosts: 127.0.0.1 localhost
      O1 - Hosts: ::1 localhost
      O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
      O2 - BHO: (McAfee Phishing Filter) - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll ()
      O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
      O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
      O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll (McAfee, Inc.)
      O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll (Google Inc.)
      O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
      O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\PROGRA~1\GOOGLE~1\BAE.dll (Your Company Name)
      O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
      O4 - HKLM..\Run: [] File not found
      O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH)
      O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
      O4 - HKLM..\Run: [MarketingTools] C:\Program Files\Sony\Marketing Tools\MarketingTools.exe (Sony Corporation)
      O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
      O4 - HKLM..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide File not found
      O4 - HKLM..\Run: [Partage de CD ou DVD] C:\Program Files\Partage de CD ou DVD\ODSAgent.exe (Apple Inc.)
      O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
      O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
      O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe (Sun Microsystems, Inc.)
      O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
      O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
      O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
      O4 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003..\Run: [NSUFloatingUI] C:\Program Files\Sony\Network Utility\LANUtil.exe (Sony Corporation)
      O4 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
      O4 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
      O4 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
      O4 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003..\RunOnce: [036DFF98D93EDF987D5122436C44B161] C:\ProgramData\036DFF98D93EDF987D5122436C44B161\036DFF98D93EDF987D5122436C44B161.exe ()
      O7 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
      O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
      O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
      O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
      O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
      O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
      O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
      O13 - gopher Prefix: missing
      O15 - HKLM\..Trusted Domains: canalplay.com ([]* in Trusted sites)
      O15 - HKLM\..Trusted Domains: canalplusactive.com ([]* in Trusted sites)
      O15 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..Trusted Domains: canalplay.com ([]* in Trusted sites)
      O15 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..Trusted Domains: canalplusactive.com ([]* in Trusted sites)
      O15 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..Trusted Domains: localhost ([]http in Local intranet)
      O15 - HKU\S-1-5-21-3946948943-2259036903-3079956957-1003\..Trusted Ranges: GD ([http] in Local intranet)
      O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab (GMNRev Class)
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{66C4B0A9-916A-440E-8CB7-26DE169A73B3}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A130AC0B-8469-4FF2-A0D7-85A54CAC285F}: DhcpNameServer = 192.168.1.1
      O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
      O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
      O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
      O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
      O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
      O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
      O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL (Google)
      O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
      O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found
      O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
      O24 - Desktop WallPaper: C:\Users\Chloé et David\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
      O24 - Desktop BackupWallPaper: C:\Users\Chloé et David\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
      O32 - HKLM CDRom: AutoRun - 1
      O32 - AutoRun File - [2006/09/18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
      O33 - MountPoints2\{1022f208-ff94-11df-90dd-001dba20e778}\Shell\AutoRun\command - "" = I:\PMBP_Win.exe
      O33 - MountPoints2\{7884f0b7-5a2c-11de-9eec-001dba20e778}\Shell - "" = AutoRun
      O33 - MountPoints2\{7884f0b7-5a2c-11de-9eec-001dba20e778}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
      O33 - MountPoints2\{8cf64389-ab4c-11df-aafa-001dba20e778}\Shell - "" = AutoRun
      O33 - MountPoints2\{8cf64389-ab4c-11df-aafa-001dba20e778}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
      O34 - HKLM BootExecute: (autocheck autochk *)
      O35 - HKLM\..comfile [open] -- "%1" %*
      O35 - HKLM\..exefile [open] -- "%1" %*
      O37 - HKLM\...com [@ = comfile] -- "%1" %*
      O37 - HKLM\...exe [@ = exefile] -- "%1" %*
      O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
      O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

      NetSvcs: FastUserSwitchingCompatibility - File not found
      NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
      NetSvcs: Nla - File not found
      NetSvcs: Ntmssvc - File not found
      NetSvcs: NWCWorkstation - File not found
      NetSvcs: Nwsapagent - File not found
      NetSvcs: SRService - File not found
      NetSvcs: WmdmPmSp - File not found
      NetSvcs: LogonHours - File not found
      NetSvcs: PCAudit - File not found
      NetSvcs: helpsvc - File not found
      NetSvcs: uploadmgr - File not found

      MsConfig - State: "services" - 0
      MsConfig - State: "startup" - 0

      Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
      Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
      Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
      Drivers32: VIDC.dvsd - C:\Program Files\Common Files\Sony Shared\VideoLib\sonydv.dll (Sony Corporation)

      ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
      ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
      ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
      ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
      ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
      ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
      ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
      ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
      ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
      ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
      ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
      ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
      ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
      ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
      ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
      ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
      ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
      ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
      ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
      ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
      ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
      ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
      ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
      ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
      ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
      ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
      ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
      ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
      ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
      ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

      CREATERESTOREPOINT
      Unable to start System Restore Service. Error code 1084

      [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

      [2012/08/26 21:29:37 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Users\Chloé et David\Desktop\OTL.exe
      [2012/08/26 21:03:02 | 000,000,000 | ---D | C] -- C:\Users\Chloé et David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
      [2012/08/26 20:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\036DFF98D93EDF987D5122436C44B161
      [2012/08/10 20:50:44 | 000,000,000 | ---D | C] -- C:\Users\Chloé et David\Documents\TomTom
      [2012/08/10 20:50:40 | 000,000,000 | ---D | C] -- C:\ProgramData\TomTom
      [2012/08/10 20:50:31 | 000,000,000 | ---D | C] -- C:\Users\Chloé et David\AppData\Roaming\Mozilla
      [2012/08/10 20:50:30 | 000,000,000 | ---D | C] -- C:\Users\Chloé et David\AppData\Roaming\TomTom
      [2012/08/10 20:50:30 | 000,000,000 | ---D | C] -- C:\Users\Chloé et David\AppData\Local\TomTom
      [2012/08/10 20:49:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
      [2012/08/10 20:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom HOME 2
      [2012/08/10 20:47:22 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom International B.V
      [2012/08/10 20:45:59 | 000,000,000 | ---D | C] -- C:\Users\Chloé et David\AppData\Local\Downloaded Installations

      [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

      [2012/08/26 21:31:54 | 000,740,642 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
      [2012/08/26 21:31:54 | 000,650,112 | ---- | M] () -- C:\Windows\System32\perfh009.dat
      [2012/08/26 21:31:54 | 000,152,814 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
      [2012/08/26 21:31:54 | 000,124,742 | ---- | M] () -- C:\Windows\System32\perfc009.dat
      [2012/08/26 21:29:39 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Chloé et David\Desktop\OTL.exe
      [2012/08/26 21:28:31 | 000,037,493 | ---- | M] () -- C:\Windows\System32\Config.MPF
      [2012/08/26 21:27:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
      [2012/08/26 21:25:10 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
      [2012/08/26 21:25:10 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
      [2012/08/26 21:03:03 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
      [2012/08/26 20:42:01 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
      [2012/08/26 18:00:00 | 000,000,462 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration3.job
      [2012/08/26 18:00:00 | 000,000,460 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration.job
      [2012/08/25 21:42:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
      [2012/08/18 07:08:43 | 000,137,728 | ---- | M] () -- C:\Users\Chloé et David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      [2012/08/14 20:03:14 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
      [2012/08/14 20:03:14 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
      [2012/08/09 13:53:42 | 000,008,296 | ---- | M] () -- C:\Users\Chloé et David\AppData\Local\d3d9caps.dat

      [color=#E56717]========== Files Created - No Company Name ==========[/color]

      [2011/08/16 20:20:37 | 000,192,940 | ---- | C] () -- C:\Windows\hpoins51.dat
      [2011/08/12 14:32:59 | 000,192,990 | ---- | C] () -- C:\Windows\hpoins51.dat.temp
      [2011/08/12 14:32:56 | 000,000,572 | ---- | C] () -- C:\Windows\hpomdl51.dat.temp
      [2008/12/05 20:06:55 | 000,137,728 | ---- | C] () -- C:\Users\Chloé et David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      [2008/11/15 22:32:23 | 000,008,296 | ---- | C] () -- C:\Users\Chloé et David\AppData\Local\d3d9caps.dat

      [color=#E56717]========== Custom Scans ==========[/color]

      [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
      [2008/10/29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
      [2008/10/29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\explorer.exe
      [2008/10/29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
      [2008/10/30 05:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
      [2009/04/11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
      [2008/10/28 04:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
      [2008/01/21 04:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

      [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
      [2008/01/21 04:24:48 | 000,279,040 | ---- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C -- C:\Windows\System32\services.exe
      [2008/01/21 04:24:48 | 000,279,040 | ---- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
      [2009/04/11 08:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe

      [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
      [2008/01/21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
      [2008/01/21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe

      [color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
      [2008/01/21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe
      [2008/01/21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe

      [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
      [2009/04/11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
      [2008/01/21 04:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\System32\winlogon.exe
      [2008/01/21 04:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

      [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

      [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]

      [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]

      [color=#A23BEC]< %APPDATA%\*. >[/color]
      [2008/11/16 20:09:59 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Adobe
      [2011/04/26 07:20:06 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Apple Computer
      [2008/08/10 10:46:02 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\ATI
      [2011/11/28 22:13:36 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Audacity
      [2012/03/17 02:48:52 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\DriverCure
      [2010/04/10 16:02:11 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Facebook
      [2008/11/18 22:17:01 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Google
      [2011/08/12 20:53:56 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\HP
      [2011/08/20 18:55:48 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\HpUpdate
      [2008/01/21 03:43:07 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Identities
      [2008/08/10 09:59:57 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\InstallShield
      [2008/12/30 17:42:42 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Intel
      [2010/07/16 08:46:08 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\InterVideo
      [2008/08/10 10:18:26 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Macromedia
      [2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Media Center Programs
      [2011/06/13 17:26:24 | 000,000,000 | --SD | M] -- C:\Users\Chloé et David\AppData\Roaming\Microsoft
      [2012/08/10 20:50:34 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Mozilla
      [2011/05/29 09:45:38 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\MP-Manager
      [2011/05/29 09:31:21 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\MPMAN
      [2010/05/15 09:41:54 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Red Kawa
      [2010/05/24 20:36:10 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Regensoft
      [2010/01/08 16:51:57 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Skype
      [2008/11/16 20:17:33 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\Sony Corporation
      [2012/08/10 20:50:30 | 000,000,000 | ---D | M] -- C:\Users\Chloé et David\AppData\Roaming\TomTom

      [color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
      [2010/04/10 16:02:11 | 000,050,354 | ---- | M] (Facebook, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\Facebook\uninstall.exe
      [2009/09/05 21:30:21 | 001,961,720 | ---- | M] (Adobe Systems Incorporated) -- C:\Users\Chloé et David\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
      [2008/08/10 10:12:27 | 000,010,134 | R--- | M] () -- C:\Users\Chloé et David\AppData\Roaming\Microsoft\Installer\{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}\ARPPRODUCTICON.exe
      [2011/05/29 09:33:02 | 000,037,345 | R--- | M] () -- C:\Users\Chloé et David\AppData\Roaming\Microsoft\Installer\{A961111D-90E9-42DD-8B68-3A88763B51A1}\controlPanelIcon.exe
      [2011/05/29 09:33:03 | 000,010,134 | R--- | M] () -- C:\Users\Chloé et David\AppData\Roaming\Microsoft\Installer\{A961111D-90E9-42DD-8B68-3A88763B51A1}\SystemFolder_msiexec.exe
      [2011/08/12 15:10:18 | 000,010,134 | R--- | M] () -- C:\Users\Chloé et David\AppData\Roaming\Microsoft\Installer\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}\ARPPRODUCTICON.exe
      [2010/09/02 11:32:04 | 007,579,648 | ---- | M] () -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\encoder.exe
      [2010/09/06 11:37:10 | 000,553,352 | ---- | M] (MPMAN) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\MP Manager.exe
      [2009/07/25 05:23:06 | 000,033,056 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\java-rmi.exe
      [2009/07/25 05:23:06 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\java.exe
      [2009/07/25 05:23:06 | 000,059,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\javacpl.exe
      [2009/07/25 05:23:08 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\javaw.exe
      [2009/07/25 05:23:08 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\javaws.exe
      [2009/07/25 05:23:08 | 000,079,648 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\jbroker.exe
      [2009/07/25 05:23:10 | 000,022,816 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\jp2launcher.exe
      [2009/07/25 05:23:10 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\jqs.exe
      [2009/07/25 05:23:10 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\jqsnotify.exe
      [2009/07/25 05:23:22 | 000,386,872 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\jucheck.exe
      [2009/07/25 05:23:12 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\jureg.exe
      [2009/07/25 05:23:12 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\jusched.exe
      [2009/07/25 05:23:14 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\keytool.exe
      [2009/07/25 05:23:14 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\kinit.exe
      [2009/07/25 05:23:14 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\klist.exe
      [2009/07/25 05:23:16 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\ktab.exe
      [2009/07/25 05:23:16 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\orbd.exe
      [2009/07/25 05:23:16 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\pack200.exe
      [2009/07/25 05:23:18 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\policytool.exe
      [2009/07/25 05:23:18 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\rmid.exe
      [2009/07/25 05:23:18 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\rmiregistry.exe
      [2009/07/25 05:23:20 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\servertool.exe
      [2009/07/25 05:23:20 | 000,018,208 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\ssvagent.exe
      [2009/07/25 05:23:20 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\tnameserv.exe
      [2009/07/25 05:23:22 | 000,132,896 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Chloé et David\AppData\Roaming\MPMAN\MP Manager\jre\bin\unpack200.exe

      [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

      [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

      [color=#A23BEC]< %systemroot%\syswow64\*.dll /lockedfiles >[/color]

      [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

      [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

      [color=#A23BEC]< %systemroot%\syswow64\drivers\*.sys /lockedfiles >[/color]

      [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color]
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2011/05/28 06:32:51 | 000,173,568 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2011/05/28 06:32:51 | 000,173,568 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2011/05/28 06:32:51 | 000,173,568 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2011/05/28 08:09:21 | 000,638,232 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2011/05/28 08:09:21 | 000,638,232 | ---- | M] (Microsoft Corporation)

      [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color]
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2012/08/18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2011/05/28 06:32:51 | 000,173,568 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2011/05/28 06:32:51 | 000,173,568 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2011/05/28 06:32:51 | 000,173,568 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2011/05/28 08:09:21 | 000,638,232 | ---- | M] (Microsoft Corporation)
      HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2011/05/28 08:09:21 | 000,638,232 | ---- | M] (Microsoft Corporation)

      [color=#A23BEC]< >[/color]

      < End of report >