Aide pour appdata local temp rarsfx0

Fermé
Bonjour,

bsr jais un problem appdata local temp rarsfx0 jais fait le scan adwcleaner le rap:

# AdwCleaner v2.301 - Rapport créé le 30/05/2013 à 19:02:58
# Mis à jour le 16/05/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : frikh - FRIKH-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\frikh\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\HHTXJTTT\AdwCleaner.exe
# Option [Recherche]

***** [Services] *****

Présent : BrowserProtect
Présent : DefaultTabUpdate
Présent : Mp3Tube Toolbar Service

***** [Fichiers / Dossiers] *****

***** [Registre] *****

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16483

[HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=ST9500325AS_5VEFS3BRXXXX5VEFS3BR&ts=1362174728
[HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=38268&st=home&tid=77
[HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=38268&st=home&tid=77
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=38268&st=home&tid=77
[HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=38268&st=home&tid=77
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=38268&st=home&tid=77
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - CustomizeSearch] = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=ST9500325AS_5VEFS3BRXXXX5VEFS3BR&ts=1362174733
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=ST9500325AS_5VEFS3BRXXXX5VEFS3BR&ts=1362174733
[HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=38268&st=bs&tid=77&q=%s
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=38268&st=bs&tid=77&q=%s
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=ST9500325AS_5VEFS3BRXXXX5VEFS3BR&ts=1362174728
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=ST9500325AS_5VEFS3BRXXXX5VEFS3BR&ts=1362174728
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=38268&st=home&tid=77
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=

-\\ Mozilla Firefox v [Impossible d'obtenir la version]

Fichier : C:\Users\frikh\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js

Présente : user_pref("browser.search.defaultenginename", "Web Search");
Présente : user_pref("browser.search.defaultengine", "Web Search");
Présente : user_pref("browser.search.selectedEngine", "Web Search");
Présente : user_pref("browser.search.order.1", "Web Search");
Présente : user_pref("browser.startup.homepage", "hxxp://search.certified-toolbar.com?si=38268&st=home&tid=77")[...]
Présente : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=");

-\\ Google Chrome v26.0.1410.64

Fichier : C:\Users\frikh\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [5140 octets] - [30/05/2013 19:02:58]

########## EOF - C:\AdwCleaner[R1].txt - [5200 octets] ##########

59 réponses

  1. après lecture complete de ton OTL

    je te demande de desinstaller des trucs , tu les desinstalle pas
    pendant la desinfection , tu installes tout et n'importe quoi
    tu cliques sur tout ce qui bouge
    je me fais ch*er pour rien depuis hier soir.
    ton pc est tellement un poubelle que ca vaut meme pas le coup de continuer
    tu joues avec des keyloggers ,
    je vois que tu es developpeur
    tu auras pas de mal à formater ton ordinateur

    moi perso je m'arrête là avec toi ca me fatigue d'etre mis à l'épreuve .

    bye ma patience a des limites

    ¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
    Windows 8 => meme flop que Vista X 10
    1. desinstalle McAfee security scan

      ==================

      Fais analyser le(s) fichier(s) suivants sur Virustotal :

      Virus Total

      clique sur "Parcourir" et trouve puis selectionne ce(s) fichier(s) :

      C:\Windows\SysNative\drivers\eve.sys

      * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
      * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
      * Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.
      1. bon on va la refaire

        Télécharge ici :OTL

        ▶ enregistre le sur ton Bureau.

        si tu as XP => double clique
        si tu as Vista ou windows 7 / 8 => clic droit "executer en tant que...."


        sur OTL.exe pour le lancer.

        ▶ => Clique ici pour voir la Configuration

        ▶ Copie et colle le contenu de ce qui suit en gras dans la partie inférieure d'OTL "Personnalisation"


        HKCU\Software
        HKLM\Software
        %Homedrive%\*
        %Homedrive%\*.
        %Userprofile%\*
        %Userprofile%\*.
        %Allusersprofile%\*
        %Allusersprofile%\*.
        %LocalAppData%\*
        %LocalAppData%\*.
        %programFiles%\*
        %programFiles%\*.
        %Systemroot%\Temp\*.exe /s
        %systemroot%\system32\*.dll /lockedfiles
        %systemroot%\system32\*.exe /lockedfiles
        %systemroot%\system32\*.in*
        %systemroot%\Tasks\*
        %systemroot%\Tasks\*.
        %systemroot%\system32\Tasks\*
        %systemroot%\system32\Tasks\*.
        %systemroot%\system32\drivers\*.sy* /lockedfiles
        %systemroot%\system32\config\*.exe /s
        %Systemroot%\ServiceProfiles\*.exe /s
        %systemroot%\system32\*.sys
        /md5start
        explorer.exe
        winlogon.exe
        wininit.exe
        volsnap.sys
        atapi.sys
        ndisuio.sys
        ndis.sys
        cdrom.sys
        i8042prt.sys
        iastor.sys
        tdx.sys
        netbt.sys
        afd.sys
        /md5stop
        netsvcs
        safebootminimal
        safebootnetwork
        CREATERESTOREPOINT


        ▶ Clic sur Analyse.

        A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

        Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\<Bureau ou Desktop>\OTL.txt)

        ▶▶▶ NE LE POSTE PAS SUR LE FORUM (il est trop long)

        heberge OTL.txt et extra.txt sur https://www.cjoint.com/ et donne les liens
        1. http://cjoint.com/?CEFbv6cQNHP jespaire que jais bien suive , Bonne fin de soirée
          1. OTL logfile created on: 30/05/2013 23:57:52 - Run 3
            OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\frikh\Desktop
            64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
            Internet Explorer (Version = 9.0.8112.16421)
            Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

            3,86 Gb Total Physical Memory | 1,45 Gb Available Physical Memory | 37,73% Memory free
            7,71 Gb Paging File | 5,05 Gb Available in Paging File | 65,47% Paging File free
            Paging file location(s): ?:\pagefile.sys [binary data]

            %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
            Drive C: | 116,44 Gb Total Space | 41,22 Gb Free Space | 35,40% Space Free | Partition Type: NTFS
            Drive D: | 327,83 Gb Total Space | 31,04 Gb Free Space | 9,47% Space Free | Partition Type: NTFS

            Computer Name: FRIKH-PC | User Name: frikh | Logged in as Administrator.
            Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
            Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

            [color=#E56717]========== Processes (All) ==========[/color]

            PRC - [2013/05/30 19:43:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\frikh\Desktop\OTL.exe

            [color=#E56717]========== Modules (All) ==========[/color]

            MOD - [2013/05/30 19:43:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\frikh\Desktop\OTL.exe
            MOD - [2013/02/27 03:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
            MOD - [2013/02/27 03:55:04 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
            MOD - [2012/11/30 03:53:59 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
            MOD - [2012/11/30 03:53:59 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
            MOD - [2012/11/22 03:45:03 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
            MOD - [2012/08/24 15:57:48 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll
            MOD - [2012/08/24 15:57:40 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
            MOD - [2012/08/24 15:53:35 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
            MOD - [2012/06/02 03:36:29 | 001,159,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll
            MOD - [2012/05/05 06:46:52 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
            MOD - [2011/12/16 06:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
            MOD - [2011/11/17 04:38:39 | 001,292,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
            MOD - [2011/08/27 03:26:27 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
            MOD - [2011/05/24 09:40:05 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
            MOD - [2011/05/24 09:39:38 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
            MOD - [2010/11/20 11:21:36 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
            MOD - [2010/11/20 11:21:34 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
            MOD - [2010/11/20 11:21:24 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
            MOD - [2010/11/20 11:21:19 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
            MOD - [2010/11/20 11:21:14 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
            MOD - [2010/11/20 11:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
            MOD - [2010/11/20 11:20:57 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
            MOD - [2010/11/20 11:20:49 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
            MOD - [2010/11/20 11:20:49 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
            MOD - [2010/11/20 11:20:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
            MOD - [2010/11/20 11:19:45 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll
            MOD - [2010/11/20 11:18:23 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
            MOD - [2010/11/20 11:18:03 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
            MOD - [2010/11/20 11:18:02 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
            MOD - [2010/11/20 11:16:50 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
            MOD - [2010/11/20 11:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
            MOD - [2010/11/20 11:08:57 | 000,663,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
            MOD - [2010/11/20 11:08:51 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
            MOD - [2010/11/20 11:08:51 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
            MOD - [2010/11/20 10:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
            MOD - [2009/07/14 00:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
            MOD - [2009/07/14 00:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
            MOD - [2009/07/14 00:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
            MOD - [2009/07/14 00:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
            MOD - [2009/07/14 00:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
            MOD - [2009/07/14 00:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
            MOD - [2009/07/14 00:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
            MOD - [2009/07/14 00:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
            MOD - [2009/07/14 00:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
            MOD - [2009/07/14 00:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
            MOD - [2009/07/14 00:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
            MOD - [2009/07/14 00:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
            MOD - [2009/07/14 00:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
            MOD - [2009/07/14 00:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
            MOD - [2009/07/14 00:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll

            [color=#E56717]========== Services (All) ==========[/color]

            SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
            SRV:[b]64bit:[/b] - [2013/03/19 04:53:58 | 000,230,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
            SRV:[b]64bit:[/b] - [2013/02/27 04:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
            SRV:[b]64bit:[/b] - [2013/01/13 18:58:28 | 001,175,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
            SRV:[b]64bit:[/b] - [2012/11/12 19:10:15 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
            SRV:[b]64bit:[/b] - [2012/10/03 16:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
            SRV:[b]64bit:[/b] - [2012/10/03 16:42:16 | 000,569,344 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\iphlpsvc.dll -- (iphlpsvc)
            SRV:[b]64bit:[/b] - [2012/07/26 02:08:14 | 000,084,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WUDFSvc.dll -- (wudfsvc)
            SRV:[b]64bit:[/b] - [2012/07/04 21:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
            SRV:[b]64bit:[/b] - [2012/06/02 21:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
            SRV:[b]64bit:[/b] - [2012/06/02 04:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
            SRV:[b]64bit:[/b] - [2012/05/01 04:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
            SRV:[b]64bit:[/b] - [2012/02/11 05:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
            SRV:[b]64bit:[/b] - [2011/11/17 05:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (VaultSvc)
            SRV:[b]64bit:[/b] - [2011/11/17 05:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
            SRV:[b]64bit:[/b] - [2011/11/17 05:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
            SRV:[b]64bit:[/b] - [2011/11/17 05:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (Netlogon)
            SRV:[b]64bit:[/b] - [2011/11/17 05:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
            SRV:[b]64bit:[/b] - [2011/11/17 05:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (EFS)
            SRV:[b]64bit:[/b] - [2011/07/05 08:42:24 | 001,255,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Wat\WatAdminSvc.exe -- (WatAdminSvc)
            SRV:[b]64bit:[/b] - [2011/05/24 10:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
            SRV:[b]64bit:[/b] - [2011/05/04 04:19:28 | 000,591,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\SearchIndexer.exe -- (WSearch)
            SRV:[b]64bit:[/b] - [2011/03/28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
            SRV:[b]64bit:[/b] - [2011/03/03 05:24:16 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:29 | 002,018,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WsmSvc.dll -- (WinRM)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:28 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:28 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:28 | 000,444,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\winhttp.dll -- (WinHttpAutoProxySvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:28 | 000,258,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WebClnt.dll -- (WebClient)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:28 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:28 | 000,117,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpdbusenum.dll -- (WPDBusEnum)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:27 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wcncsvc.dll -- (wcncsvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:26 | 001,743,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\sysmain.dll -- (SysMain)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:26 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\termsrv.dll -- (TermService)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:26 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:26 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:26 | 000,092,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TabSvc.dll -- (TabletInputService)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:25 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:25 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:25 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:25 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SessEnv.dll -- (SessionEnv)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:25 | 000,030,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:24 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:23 | 001,389,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pla.dll -- (pla)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:23 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:23 | 000,476,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\QAGENTRT.DLL -- (napagent)
            SRV:[b]64bit:[/b] - [2010/11/20 12:27:23 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:59 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:50 | 000,084,992 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Mcx2Svc.dll -- (Mcx2Svc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:46 | 000,232,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:42 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\KMSVC.DLL -- (hkmsvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:39 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:36 | 000,853,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\IKEEXT.DLL -- (IKEEXT)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:28 | 000,777,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\gpsvc.dll -- (gpsvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:07 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:07 | 000,162,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dps.dll -- (DPS)
            SRV:[b]64bit:[/b] - [2010/11/20 12:26:04 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:49 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (SCPolicySvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:49 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (CertPropSvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:45 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:44 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:42 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:42 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:33 | 001,525,248 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:28 | 001,504,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:27 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:25 | 000,533,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vds.exe -- (vds)
            SRV:[b]64bit:[/b] - [2010/11/20 12:25:04 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
            SRV:[b]64bit:[/b] - [2010/11/20 12:24:58 | 000,128,000 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
            SRV:[b]64bit:[/b] - [2010/11/20 12:24:47 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
            SRV:[b]64bit:[/b] - [2010/09/23 00:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
            SRV:[b]64bit:[/b] - [2010/09/17 07:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
            SRV:[b]64bit:[/b] - [2010/01/09 21:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
            SRV:[b]64bit:[/b] - [2009/12/07 22:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
            SRV:[b]64bit:[/b] - [2009/11/27 02:39:45 | 000,243,712 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\stacsv64.exe -- (STacSV)
            SRV:[b]64bit:[/b] - [2009/11/11 07:29:13 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
            SRV:[b]64bit:[/b] - [2009/08/06 20:17:46 | 000,118,672 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:57 | 000,012,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpcsvc.dll -- (WPCSvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,381,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\w32time.dll -- (W32Time)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,353,792 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\upnphost.dll -- (upnphost)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wecsvc.dll -- (Wecsvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wdi.dll -- (WdiSystemHost)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wdi.dll -- (WdiServiceHost)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,084,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wercplsupport.dll -- (wercplsupport)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,076,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wersvc.dll -- (WerSvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WcsPlugInService.dll -- (WcsPlugInService)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:56 | 000,038,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\uxsms.dll -- (UxSms)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:55 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\trkwks.dll -- (TrkWks)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:55 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tbssvc.dll -- (TBS)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:54 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ssdpsrv.dll -- (SSDPSRV)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:54 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\sstpsvc.dll -- (SstpSvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,438,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\p2psvc.dll -- (p2psvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\qwave.dll -- (QWAVE)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,190,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SCardSvr.dll -- (SCardSvr)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,186,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\pcasvc.dll -- (PcaSvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,159,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\regsvc.dll -- (RemoteRegistry)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,064,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\Sens.dll -- (SENS)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:28 | 000,368,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtckrm.dll -- (KtmRm)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:27 | 000,097,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\mprdim.dll -- (RemoteAccess)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (THREADORDER)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:18 | 000,300,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lltdsvc.dll -- (lltdsvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:18 | 000,023,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lmhsvc.dll -- (lmhosts)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:11 | 000,156,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\iscsiexe.dll -- (MSiSCSI)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:09 | 000,101,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IPBusEnum.dll -- (IPBusEnum)
            SRV:[b]64bit:[/b] - [2009/07/14 00:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:52 | 000,034,816 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FDResPub.dll -- (FDResPub)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:52 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fdPHost.dll -- (fdPHost)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
            SRV:[b]64bit:[/b] - [2009/07/14 00:39:55 | 000,203,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbem\WmiApSrv.exe -- (wmiApSrv)
            SRV:[b]64bit:[/b] - [2009/07/14 00:39:48 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\UI0Detect.exe -- (UI0Detect)
            SRV:[b]64bit:[/b] - [2009/07/14 00:39:41 | 000,014,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\snmptrap.exe -- (SNMPTRAP)
            SRV:[b]64bit:[/b] - [2009/07/14 00:39:21 | 000,141,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtc.exe -- (MSDTC)
            SRV:[b]64bit:[/b] - [2009/07/14 00:39:15 | 000,010,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Locator.exe -- (RpcLocator)
            SRV:[b]64bit:[/b] - [2009/07/14 00:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dllhost.exe -- (COMSysApp)
            SRV:[b]64bit:[/b] - [2009/07/14 00:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\alg.exe -- (ALG)
            SRV:[b]64bit:[/b] - [2008/07/29 13:20:28 | 004,737,024 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)
            SRV:[b]64bit:[/b] - [2008/07/10 05:31:10 | 000,157,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter)
            SRV - [2013/05/15 15:51:22 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
            SRV - [2013/05/11 21:26:17 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
            SRV - [2013/04/25 22:39:16 | 000,054,784 | ---- | M] (Macrovision) [Auto | Running] -- C:\Windows\SysWOW64\drivers\CDAC11BA.EXE -- (C-DillaCdaC11BA)
            SRV - [2013/02/28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
            SRV - [2013/02/05 14:48:00 | 000,235,216 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe -- (McComponentHostService)
            SRV - [2013/01/29 11:03:50 | 001,069,408 | ---- | M] (LULU Software) [Auto | Running] -- C:\Program Files (x86)\Soda PDF 5\HelperService.exe -- (Soda PDF 5 Helper Service)
            SRV - [2013/01/29 11:03:50 | 000,794,464 | ---- | M] (LULU Software) [Auto | Running] -- C:\Program Files (x86)\Soda PDF 5\ConversionService.exe -- (Soda PDF 5 Service)
            SRV - [2012/07/02 10:56:36 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
            SRV - [2012/06/02 03:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
            SRV - [2012/03/08 18:32:24 | 001,492,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
            SRV - [2012/01/06 13:22:42 | 000,072,704 | ---- | M] (Adobe Systems) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
            SRV - [2012/01/04 14:22:40 | 000,822,624 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE -- (cvhsvc)
            SRV - [2011/10/01 08:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
            SRV - [2011/10/01 08:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
            SRV - [2011/07/20 05:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)
            SRV - [2011/05/04 03:28:31 | 000,427,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWow64\SearchIndexer.exe -- (WSearch)
            SRV - [2011/03/14 00:47:54 | 000,135,664 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdatem)
            SRV - [2011/03/14 00:47:54 | 000,135,664 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdate)
            SRV - [2010/11/20 12:25:23 | 000,194,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\servicing\TrustedInstaller.exe -- (TrustedInstaller)
            SRV - [2010/11/20 12:24:42 | 000,696,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
            SRV - [2010/11/20 11:21:39 | 001,175,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WsmSvc.dll -- (WinRM)
            SRV - [2010/11/20 11:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\winhttp.dll -- (WinHttpAutoProxySvc)
            SRV - [2010/11/20 11:21:35 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wcncsvc.dll -- (wcncsvc)
            SRV - [2010/11/20 11:21:35 | 000,204,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WebClnt.dll -- (WebClient)
            SRV - [2010/11/20 11:21:28 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
            SRV - [2010/11/20 11:21:19 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
            SRV - [2010/11/20 11:21:08 | 000,113,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\SessEnv.dll -- (SessionEnv)
            SRV - [2010/11/20 11:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
            SRV - [2010/11/20 11:20:54 | 001,508,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\pla.dll -- (pla)
            SRV - [2010/11/20 11:18:30 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
            SRV - [2010/11/20 11:17:22 | 000,073,216 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
            SRV - [2010/11/05 00:53:03 | 000,042,856 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
            SRV - [2010/11/05 00:52:14 | 000,856,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
            SRV - [2010/03/18 17:23:04 | 000,044,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe -- (aspnet_state)
            SRV - [2010/03/18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
            SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
            SRV - [2010/01/09 21:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
            SRV - [2009/11/27 02:39:45 | 000,243,712 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe -- (STacSV)
            SRV - [2009/11/10 01:20:36 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
            SRV - [2009/10/01 01:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
            SRV - [2009/10/01 01:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
            SRV - [2009/07/14 00:39:09 | 000,127,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehsched.exe -- (ehSched)
            SRV - [2009/07/14 00:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wpcsvc.dll -- (WPCSvc)
            SRV - [2009/07/14 00:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\wdi.dll -- (WdiSystemHost)
            SRV - [2009/07/14 00:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\wdi.dll -- (WdiServiceHost)
            SRV - [2009/07/14 00:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WcsPlugInService.dll -- (WcsPlugInService)
            SRV - [2009/07/14 00:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\upnphost.dll -- (upnphost)
            SRV - [2009/07/14 00:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\Sens.dll -- (SENS)
            SRV - [2009/07/14 00:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\qwave.dll -- (QWAVE)
            SRV - [2009/07/14 00:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
            SRV - [2009/07/14 00:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess)
            SRV - [2009/07/14 00:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
            SRV - [2009/07/14 00:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
            SRV - [2009/07/14 00:14:28 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\perfhost.exe -- (PerfHost)
            SRV - [2009/07/14 00:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\dllhost.exe -- (COMSysApp)
            SRV - [2009/06/15 23:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
            SRV - [2009/06/10 20:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
            SRV - [2009/06/10 19:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
            SRV - [2008/07/10 16:33:42 | 040,999,448 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe -- (MSSQL$SQLEXPRESS)
            SRV - [2008/07/10 16:33:42 | 000,369,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE -- (SQLAgent$SQLEXPRESS)
            SRV - [2008/07/10 16:33:38 | 000,047,128 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Microsoft SQL Server\100\Shared\sqladhlp.exe -- (MSSQLServerADHelper100)
            SRV - [2008/07/10 02:49:34 | 000,258,072 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser)
            SRV - [2007/01/11 03:02:00 | 000,126,464 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE -- (EPSON_PM_RPCV4_01)
            SRV - [2005/04/04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)

            [color=#E56717]========== Driver Services (All) ==========[/color]

            DRV:[b]64bit:[/b] - [2013/04/12 13:45:08 | 001,656,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\ntfs.sys -- (Ntfs)
            DRV:[b]64bit:[/b] - [2013/04/10 05:01:53 | 000,983,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dxgkrnl.sys -- (DXGKrnl)
            DRV:[b]64bit:[/b] - [2013/02/20 16:40:30 | 000,043,016 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\eve.sys -- (Eve)
            DRV:[b]64bit:[/b] - [2013/01/24 05:01:01 | 000,223,752 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
            DRV:[b]64bit:[/b] - [2013/01/03 05:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tcpip.sys -- (TCPIP6)
            DRV:[b]64bit:[/b] - [2013/01/03 05:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tcpip.sys -- (Tcpip)
            DRV:[b]64bit:[/b] - [2012/10/18 17:09:06 | 000,131,416 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
            DRV:[b]64bit:[/b] - [2012/10/03 15:07:26 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tcpipreg.sys -- (tcpipreg)
            DRV:[b]64bit:[/b] - [2012/08/24 17:13:17 | 000,154,480 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
            DRV:[b]64bit:[/b] - [2012/08/24 17:09:34 | 000,458,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
            DRV:[b]64bit:[/b] - [2012/08/23 13:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
            DRV:[b]64bit:[/b] - [2012/08/23 13:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
            DRV:[b]64bit:[/b] - [2012/08/22 17:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ndis.sys -- (NDIS)
            DRV:[b]64bit:[/b] - [2012/07/26 03:55:47 | 000,785,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Wdf01000.sys -- (Wdf01000)
            DRV:[b]64bit:[/b] - [2012/07/26 01:26:45 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
            DRV:[b]64bit:[/b] - [2012/07/26 01:26:06 | 000,198,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFRd.sys -- (WUDFRd)
            DRV:[b]64bit:[/b] - [2012/07/06 19:07:42 | 000,552,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthport.sys -- (BTHPORT)
            DRV:[b]64bit:[/b] - [2012/06/02 04:48:16 | 000,095,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecdd.sys -- (KSecDD)
            DRV:[b]64bit:[/b] - [2012/04/28 02:55:21 | 000,210,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpwd.sys -- (RDPWD)
            DRV:[b]64bit:[/b] - [2012/03/17 06:58:57 | 000,075,120 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\partmgr.sys -- (partmgr)
            DRV:[b]64bit:[/b] - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
            DRV:[b]64bit:[/b] - [2012/03/01 05:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
            DRV:[b]64bit:[/b] - [2012/02/17 03:57:32 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tdtcp.sys -- (TDTCP)
            DRV:[b]64bit:[/b] - [2011/12/28 02:59:24 | 000,498,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\afd.sys -- (AFD)
            DRV:[b]64bit:[/b] - [2011/10/01 08:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
            DRV:[b]64bit:[/b] - [2011/10/01 08:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
            DRV:[b]64bit:[/b] - [2011/10/01 08:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
            DRV:[b]64bit:[/b] - [2011/10/01 08:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
            DRV:[b]64bit:[/b] - [2011/07/09 01:46:28 | 000,288,768 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mrxsmb10.sys -- (mrxsmb10)
            DRV:[b]64bit:[/b] - [2011/06/27 01:37:00 | 002,753,536 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
            DRV:[b]64bit:[/b] - [2011/04/29 02:06:10 | 000,467,456 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\srv.sys -- (srv)
            DRV:[b]64bit:[/b] - [2011/04/29 02:05:49 | 000,410,112 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\srv2.sys -- (srv2)
            DRV:[b]64bit:[/b] - [2011/04/29 02:05:37 | 000,168,448 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\srvnet.sys -- (srvnet)
            DRV:[b]64bit:[/b] - [2011/04/28 02:54:56 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BTHUSB.SYS -- (BTHUSB)
            DRV:[b]64bit:[/b] - [2011/04/27 01:40:40 | 000,158,208 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mrxsmb.sys -- (mrxsmb)
            DRV:[b]64bit:[/b] - [2011/04/27 01:39:37 | 000,128,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mrxsmb20.sys -- (mrxsmb20)
            DRV:[b]64bit:[/b] - [2011/03/25 02:29:26 | 000,343,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbhub.sys -- (usbhub)
            DRV:[b]64bit:[/b] - [2011/03/25 02:29:14 | 000,098,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbccgp.sys -- (usbccgp)
            DRV:[b]64bit:[/b] - [2011/03/25 02:29:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbehci.sys -- (usbehci)
            DRV:[b]64bit:[/b] - [2011/03/25 02:29:04 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbohci.sys -- (usbohci)
            DRV:[b]64bit:[/b] - [2011/03/25 02:29:03 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbuhci.sys -- (usbuhci)
            DRV:[b]64bit:[/b] - [2011/03/11 05:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstor.sys -- (nvstor)
            DRV:[b]64bit:[/b] - [2011/03/11 05:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvraid.sys -- (nvraid)
            DRV:[b]64bit:[/b] - [2011/03/11 05:41:26 | 000,410,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaStorV.sys -- (iaStorV)
            DRV:[b]64bit:[/b] - [2011/03/11 05:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
            DRV:[b]64bit:[/b] - [2011/03/11 05:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
            DRV:[b]64bit:[/b] - [2011/03/11 03:37:16 | 000,091,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBSTOR.SYS -- (USBSTOR)
            DRV:[b]64bit:[/b] - [2011/02/23 03:55:04 | 000,090,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\bowser.sys -- (bowser)
            DRV:[b]64bit:[/b] - [2010/11/20 12:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volsnap.sys -- (volsnap)
            DRV:[b]64bit:[/b] - [2010/11/20 12:34:01 | 000,363,392 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgrx.sys -- (volmgrx)
            DRV:[b]64bit:[/b] - [2010/11/20 12:34:01 | 000,071,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgr.sys -- (volmgr)
            DRV:[b]64bit:[/b] - [2010/11/20 12:34:00 | 000,215,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:57 | 000,063,360 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\termdd.sys -- (TermDD)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:54 | 000,103,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sbp2port.sys -- (sbp2port)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:53 | 000,213,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:48 | 000,184,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pci.sys -- (pci)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:45 | 000,366,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msrpc.sys -- (MsRPC)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:45 | 000,273,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msiscsi.sys -- (iScsiPrt)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:44 | 000,155,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mpio.sys -- (mpio)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:44 | 000,140,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msdsm.sys -- (msdsm)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:44 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\msahci.sys -- (msahci)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:43 | 000,094,592 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mountmgr.sys -- (mountmgr)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:36 | 000,014,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
            DRV:[b]64bit:[/b] - [2010/11/20 12:33:34 | 000,289,664 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\fltMgr.sys -- (FltMgr)
            DRV:[b]64bit:[/b] - [2010/11/20 12:32:46 | 000,334,208 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpi.sys -- (ACPI)
            DRV:[b]64bit:[/b] - [2010/11/20 10:04:09 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tssecsrv.sys -- (tssecsrv)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:37 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wanarp.sys -- (Wanarpv6)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:37 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wanarp.sys -- (WANARP)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:35 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rasl2tp.sys -- (Rasl2tp)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:34 | 000,164,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ndiswan.sys -- (NdisWan)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:32 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\raspptp.sys -- (PptpMiniport)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:20 | 000,131,584 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pacer.sys -- (Psched)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:20 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ndproxy.sys -- (NDProxy)
            DRV:[b]64bit:[/b] - [2010/11/20 09:52:19 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipfltdrv.sys -- (IpFilterDriver)
            DRV:[b]64bit:[/b] - [2010/11/20 09:51:50 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tunnel.sys -- (tunnel)
            DRV:[b]64bit:[/b] - [2010/11/20 09:50:08 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ndisuio.sys -- (Ndisuio)
            DRV:[b]64bit:[/b] - [2010/11/20 09:44:56 | 000,229,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
            DRV:[b]64bit:[/b] - [2010/11/20 09:44:37 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\umbus.sys -- (umbus)
            DRV:[b]64bit:[/b] - [2010/11/20 09:44:34 | 000,184,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbvideo.sys -- (usbvideo)
            DRV:[b]64bit:[/b] - [2010/11/20 09:44:23 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
            DRV:[b]64bit:[/b] - [2010/11/20 09:43:56 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winusb.sys -- (WinUsb)
            DRV:[b]64bit:[/b] - [2010/11/20 09:43:49 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidusb.sys -- (HidUsb)
            DRV:[b]64bit:[/b] - [2010/11/20 09:43:43 | 000,122,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hdaudbus.sys -- (HDAudBus)
            DRV:[b]64bit:[/b] - [2010/11/20 09:34:00 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sffp_sd.sys -- (sffp_sd)
            DRV:[b]64bit:[/b] - [2010/11/20 09:33:25 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbdhid.sys -- (kbdhid)
            DRV:[b]64bit:[/b] - [2010/11/20 09:33:17 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
            DRV:[b]64bit:[/b] - [2010/11/20 09:14:37 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
            DRV:[b]64bit:[/b] - [2010/11/20 09:09:59 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
            DRV:[b]64bit:[/b] - [2010/11/20 09:04:53 | 000,078,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IPMIDrv.sys -- (IPMIDRV)
            DRV:[b]64bit:[/b] - [2010/11/20 08:30:42 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
            DRV:[b]64bit:[/b] - [2010/11/20 08:27:54 | 000,309,248 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\rdbss.sys -- (rdbss)
            DRV:[b]64bit:[/b] - [2010/11/20 08:26:42 | 000,140,800 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxdav.sys -- (MRxDAV)
            DRV:[b]64bit:[/b] - [2010/11/20 08:26:32 | 000,102,400 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\dfsc.sys -- (DfsC)
            DRV:[b]64bit:[/b] - [2010/11/20 08:26:11 | 000,328,192 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\udfs.sys -- (udfs)
            DRV:[b]64bit:[/b] - [2010/11/20 08:25:14 | 000,753,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\http.sys -- (HTTP)
            DRV:[b]64bit:[/b] - [2010/11/20 08:23:20 | 000,261,632 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\netbt.sys -- (NetBT)
            DRV:[b]64bit:[/b] - [2010/11/20 08:21:56 | 000,119,296 | ---- | M] (Microsoft Corporation) [Kernel | System |
            1. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

              [color=#E56717]========== LOP Check ==========[/color]

              [2012/06/28 10:18:45 | 000,000,000 | ---D | M] -- C:\Users\arcview\AppData\Roaming\Asus WebStorage
              [2012/06/28 10:09:38 | 000,000,000 | ---D | M] -- C:\Users\arcview\AppData\Roaming\PC Suite
              [2011/12/07 21:38:17 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\2monkeys
              [2013/03/23 11:47:46 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\4Media
              [2013/03/01 21:35:58 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Aegisub
              [2011/07/15 20:54:40 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Arkadium
              [2013/04/03 23:34:39 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Asus WebStorage
              [2011/09/28 17:01:34 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Autodesk
              [2013/03/25 23:21:33 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\avidemux
              [2011/12/07 09:26:58 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Column of the Maya
              [2013/04/16 16:16:08 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
              [2012/12/27 19:02:34 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Dev-Cpp
              [2013/05/13 09:34:14 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\DMCache
              [2012/03/17 15:12:44 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\DVDVideoSoft
              [2013/03/13 17:49:48 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\e frontier
              [2012/11/29 12:06:33 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\e-academy Inc
              [2012/01/20 15:15:11 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\EeeStorageUploader
              [2012/11/12 13:11:37 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\EPSON
              [2011/11/30 21:53:34 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\ERS Game Studios
              [2012/06/28 09:17:48 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\ESRI
              [2012/08/19 01:33:16 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Firefly Studios
              [2013/05/30 23:25:30 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Free Download Manager
              [2012/07/17 10:50:00 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\FreeHideIP
              [2012/05/06 12:19:34 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\GetGo Software
              [2012/05/22 21:14:11 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\GetRightToGo
              [2013/02/17 18:04:09 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\GoforFiles
              [2012/01/06 12:09:30 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Hemera
              [2012/07/14 15:19:51 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Management-Ware
              [2012/07/14 15:18:14 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Management-Ware Solutions Inc
              [2013/05/08 12:22:19 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Mining
              [2012/01/28 09:14:19 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\MusicNet
              [2012/05/16 15:36:43 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Need for Speed World
              [2012/01/23 16:03:11 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Nitro PDF
              [2011/07/04 20:45:00 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Nuance
              [2012/03/30 12:19:35 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\PC Suite
              [2013/04/17 08:31:51 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\PDF Software
              [2012/05/12 17:42:35 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Peganza
              [2011/07/16 11:12:45 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\PlayFirst
              [2011/12/31 19:13:05 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\PunkBuster
              [2012/03/25 19:03:13 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Registry Mechanic
              [2012/03/03 13:43:09 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\RegistryKeys
              [2012/03/30 18:04:06 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Samsung
              [2012/09/14 18:07:54 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\SiNETiS
              [2012/11/05 18:18:44 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\SoftGrid Client
              [2012/11/23 17:23:56 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Systweak
              [2011/12/14 17:56:33 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Thinstall
              [2011/07/04 22:44:08 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\TP
              [2012/05/24 12:57:34 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Unity
              [2013/01/08 18:50:06 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\uTorrent
              [2011/10/08 15:02:37 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Windows Live Writer
              [2012/07/17 08:21:47 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\WNR
              [2011/07/04 20:44:58 | 000,000,000 | ---D | M] -- C:\Users\frikh\AppData\Roaming\Zeon

              [color=#E56717]========== Purity Check ==========[/color]

              [color=#E56717]========== Files - Unicode (All) ==========[/color]
              [2013/05/25 20:33:42 | 000,000,000 | ---D | M](C:\Users\frikh\Desktop\?????) -- C:\Users\frikh\Desktop\?????
              [2013/04/30 18:49:45 | 000,000,000 | ---D | C](C:\Users\frikh\Desktop\?????) -- C:\Users\frikh\Desktop\?????
              [2013/04/09 09:37:28 | 018,422,817 | ---- | C] ()(C:\Users\frikh\Desktop\??? ?????? ?? ??? + ?????? ???? ????? Kamel bourdib.mp3) -- C:\Users\frikh\Desktop\??? ?????? ?? ??? + ?????? ???? ????? Kamel bourdib.mp3
              [2013/01/03 15:21:50 | 018,422,817 | ---- | M] ()(C:\Users\frikh\Desktop\??? ?????? ?? ??? + ?????? ???? ????? Kamel bourdib.mp3) -- C:\Users\frikh\Desktop\??? ?????? ?? ??? + ?????? ???? ????? Kamel bourdib.mp3
              (C:\Users\frikh\Desktop\?????) -- C:\Users\frikh\Desktop\?????

              [color=#E56717]========== Alternate Data Streams ==========[/color]

              @Alternate Data Stream - 3020 bytes -> C:\ProgramData\rkfree:cfg
              @Alternate Data Stream - 170 bytes -> C:\ProgramData\Temp:0CE7F3C9
              @Alternate Data Stream - 155 bytes -> C:\ProgramData\Temp:981884E7
              @Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:81F83028
              @Alternate Data Stream - 150 bytes -> C:\ProgramData\Temp:41099CE9
              @Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:3AE22B1A
              @Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:52DBE86F
              @Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:029E021F
              @Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:63238B95
              @Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:D20FFA63
              @Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:5D458568
              @Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:6FB93194
              @Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:13019F4B
              @Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:553CA6CA
              @Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:3E7393FC
              @Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:D1B5B4F1

              < End of report > jais copier le bas
              1. est ce la que je la colle
              2. javais pas coché registre pardon je refait le scan
              3. pariel jais pas trouve "Personnalisation"
              4. je vous envoie le OTL es place le slvp
            2. c'est pas du tout ce qui est ecrit

              tu as collé le rapport OTL au lieu de coller le texte en gras dans l'outil

              ¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
              Windows 8 => meme flop que Vista X 10
              1. ?????????????????????????????????????

                t'as fait n importe quoi lol

                ¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
                Windows 8 => meme flop que Vista X 10
                • 1
                • 2
                • 3