Ordinateur au ralenti

leelee64 -  
Bonjour,

Depuis quelques jours mon ordinateur met plusieurs minutes pour se mettre en marche, et pour afficher les pages, après un quart environ la vitesse d'affichage redevient normal, mais dans la journée il y a de nouveau ralentissement. Je ne sais pas s'il s'agit d'un virus ou autre chose, car je suis maman au foyer et je ne connais rien à l'informatique. Je serai très reconnaissante de toute aide pour sauver mon ordinateur, car je n'ai pas les moyens d'en racheter un pour le moment.
Merci d'avance

52 réponses

Résumé de la discussion

Le problème central est un ordinateur qui met longtemps à démarrer et à afficher les pages, avec un ralentissement récurrent durant la journée et une amélioration limitée après quelques minutes. Plusieurs réponses évoquent une infection potentielle, avec des mesures de nettoyage guidé (suppression d'extensions, nettoyage du registre) et l'installation puis l'exécution d'un antivirus et de Malwarebytes. D'autres interventions soulignent la saturation du disque C et proposent de déplacer des fichiers vers disque D pour libérer de l'espace, ce qui améliore le temps d'ouverture des pages mais ne garantit pas la résolution. En dernier élément, des conseils pratiques incluent de fermer les applications lors des analyses et d'utiliser Malwarebytes, un rapport de scan est utile pour poursuivre le diagnostic.

Bobot (l’IA à votre service)
  1. leelee64 Auteur
    Daccord merci pour me l'avoir dit, j'en suis soulagée. Bonne soirée à vous deux.
    2. Utilisateur anonyme
      le problème est t-il résolu ?
    3. leelee64 Auteur
      non ce n'est pas résolu, mais on s'est apperçu que le disque C était assez saturé, alors on a déplacé des tas de fichiers vers le disque D. Depuis la page après démarrage s'ouvre au bout de 7 mn ... comparé au 15 mn d'avant il y a un mieux. On (mon mari et moi) va essayer de déplacer encore d'autres dossiers, pour faire encore de la place sur le disque C. Je ne crois qas que ça résoudra le problème mais ça améliore un peu. Merci d'avoir demandé.
    4. g3n-h@ckm@n
      tu as combien de place libre sur C:\ ?sur combien de place totale ?
    5. leelee64 Auteur
      138 Go libres sur 297 Go
  2. leelee64 Auteur
    je fais ici un copié collé du message que tu m'as écrit et sans doute éffacé aussitôt après de ce post, mais mon mail l'a retenu :

    je te cite donc :

    "
    Bonjour leelee64,

    Vous avez demandé à recevoir les réponses au message de leelee64 intitulé « ordinateur au ralenti » datant du 22 juillet 2013 à 19:08 posté dans « Virus / Sécurité ».

    Ce message vient de recevoir la réponse suivante de g3n-h@ckm@n :

    dis-moi tu te prends pour qui ? tu crois que je suis à tes ordres ?

    Bon moi je ne comprends pas du tout cette agressivité, tu m'as dit que tu arrêttais de m'aider, et je trouves que c'est mieux, car sinon tu vas encore t'enerver à chaque erreur que je suis apte à faire. Je te ne prends pour personne, ni en bien ni en mal, je suis sure que tu es un super informaticien, mais pour la patience avec un novice comme moi ça ne marche pas. Donc laissons cela, car je n'ai pas besoin, ni toi non plus de stress en plus.
    Je préfère trouver une personne plus patiente, j'espère que j'en trouverai une, sinon tanpis pour moi.
    1. g3n-h@ckm@n
      ca ne t'étais pas destiné un autre message a été posté entre temps
    2. lilidurhone Contributeur sécurité
      Ce message ne t'était pas destiné mais à une autre personne
  4. leelee64 Auteur
    Je ne comprends pas ce que j'ai fait d'inexact. J'ai posté le rapport demandé, en utilsant cjoint. C'est bien le rapport qui est apparu après OTL. Et j'ai bien copié le texte en gras comme tu l'as posté...
    Bien si tu es enervé il vaut mieux arrêtter effectivement. Merci quand même pour m'avoir aidé.
    Comme je l'ai dit "je ne fais pas nimporte quoi, je suis juste une maman au foyer, qui ne connait pratiquement rien à l'informatique, et les choses qui sont simples pour certains sont diffciles à suivre pour moi. J'essaies de faire de mon mieux.
    J'aurai besoin d'aide avec une personne qui comprenne ma position et qui ai une grosse marge de patience pour me guider distance. Je remercie d'avance toute personne qui s'en sent capable.
    2. g3n-h@ckm@n
      bon tu fais n'importe quoi j'arrête ici avec toi , tu vas planter ta machine
      2. leelee64 Auteur
        Merci bonbon blanc mais j'ai déjà fait des restaurations et cela n'a rien changé. Pour l'antivirus la mise à jour est cher et je vais attendre un peu avant de le faire.

        Ah oui je n'avais pas copier le texte en gras... je ne savais qu'il fallait le refaire, j'ai hésité mais je ne l'ai pas fait. Bon maintenant je vais le faire pas de souci. Merci.
        1. g3n-h@ckm@n
          t'as toujours pas suivi les indications tant pis

          ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!

          si tu as XP => double clique
          si tu as Vista ou windows 7 => clic droit "executer en tant que...."

          sur OTL.exe pour le lancer.

          ▶Copie la liste qui se trouve en gras ci-dessous,

          ▶ colle-la dans la zone sous "Personnalisation" :


          :processes
          explorer.exe
          iexplore.exe
          firefox.exe
          msnmsgr.exe
          Teatimer.exe

          :OTL
          FF - HKLM\Software\MozillaPlugins\@exent.com/npExentCtl,version=7.0.0.0: C:\Program Files (x86)\Free Ride Games\npExentCtl.dll File not found
          FF - HKLM\Software\MozillaPlugins\www.exent.com/GameTreatWidget: C:\Program Files (x86)\Free Ride Games\NPGameTreatPlugin.dll File not found
          CHR - plugin: Babylon ToolBar (Enabled) = C:\Users\nathalie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\BabylonChromeToolBar.dll
          O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found
          O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll File not found
          O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
          O3 - HKU\S-1-5-21-265306646-2638300606-1389047012-1001\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
          O4 - HKLM\..\Run: [4StoryPrePatch] C:\Program Files (x86)\Gameforge4D\4Story_FR\PrePatch.exe File not found

          :commands
          [emptytemp]


          ▶ Clique sur "Correction" pour lancer la suppression.

          ▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

          3. leelee64 Auteur
            oui j'avais mis les liens cjoint mais j'ai cru comprendre que tu voulais que je colle les rapports (copie colle), je suis désolée mais je ne comprends pas toujours, l'informatique pour moi c'est du chinois, même si tu expliques très clairement et simplement, parfois je ne comprends pas comme il faudrait. Encore desolée, ce n'est pas volontaire.
            Donc je ne comprends pas ce que tu entends par "tu as oublié de coller", j'ai bien copier collé les liens pourtant.
            2. leelee64 Auteur
              et Extras :

              OTL Extras logfile created on: 21/07/2013 18:12:06 - Run 2
              OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\nathalie\Desktop
              64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
              Internet Explorer (Version = 9.10.9200.16635)
              Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

              5,86 Gb Total Physical Memory | 4,08 Gb Available Physical Memory | 69,60% Memory free
              11,73 Gb Paging File | 9,28 Gb Available in Paging File | 79,15% Paging File free
              Paging file location(s): ?:\pagefile.sys [binary data]

              %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
              Drive C: | 297,45 Gb Total Space | 137,38 Gb Free Space | 46,19% Space Free | Partition Type: NTFS
              Drive D: | 298,33 Gb Total Space | 289,75 Gb Free Space | 97,12% Space Free | Partition Type: NTFS

              Computer Name: NATHALIE-TOSH | User Name: nathalie | Logged in as Administrator.
              Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
              Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

              [color=#E56717]========== Extra Registry (All) ==========[/color]

              [color=#E56717]========== File Associations ==========[/color]

              [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
              .chm[@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
              .cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation)
              .hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
              .hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
              .html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
              .inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
              .ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
              .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
              .js[@ = JSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
              .jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
              .reg[@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
              .txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
              .vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
              .vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
              .wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
              .wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)

              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
              .bat [@ = batfile] -- "%1" %*
              .chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
              .cmd [@ = cmdfile] -- "%1" %*
              .com [@ = comfile] -- "%1" %*
              .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
              .exe [@ = exefile] -- "%1" %*
              .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
              .hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
              .html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
              .inf [@ = inffile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
              .ini [@ = inifile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
              .url [@ = InternetShortcut] -- C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation)
              .js [@ = JSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
              .jse [@ = JSEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
              .pif [@ = piffile] -- "%1" %*
              .reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)
              .scr [@ = scrfile] -- "%1" /S
              .txt [@ = txtfile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
              .vbe [@ = VBEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
              .vbs [@ = VBSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
              .wsf [@ = WSFFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
              .wsh [@ = WSHFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)

              [HKEY_USERS\S-1-5-21-265306646-2638300606-1389047012-1001\SOFTWARE\Classes\<extension>]
              .html [@ = ChromeHTML] -- Reg Error: Key error. File not found

              [color=#E56717]========== Shell Spawning ==========[/color]

              [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
              batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
              batfile [open] -- "%1" %*
              batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
              cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
              cmdfile [open] -- "%1" %*
              cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              comfile [open] -- "%1" %*
              cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
              exefile [open] -- "%1" %*
              helpfile [open] -- Reg Error: Key error.
              hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
              htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
              htmlfile [edit] -- Reg Error: Key error.
              htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
              htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
              htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
              http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
              https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
              inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
              inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
              inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
              inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
              InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
              jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
              jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
              jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
              jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
              jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
              jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
              piffile [open] -- "%1" %*
              regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
              regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
              regfile [merge] -- Reg Error: Key error.
              regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
              scrfile [config] -- "%1"
              scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
              scrfile [open] -- "%1" /S
              txtfile [edit] -- Reg Error: Key error.
              txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
              txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
              vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
              vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
              vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
              vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
              wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
              wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
              wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
              Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
              Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
              Directory [Parcourir avec Corel PaintShop Pro X4] -- "c:\Program Files (x86)\Corel\Corel PaintShop Pro X4\Corel PaintShop Pro.exe" "%L" (Corel, Inc.)
              Folder [open] -- C:\Windows\Explorer.exe (Microsoft Corporation)
              Folder [explore] -- Reg Error: Value error.
              Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
              Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
              CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
              batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
              batfile [open] -- "%1" %*
              batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
              cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
              cmdfile [open] -- "%1" %*
              cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              comfile [open] -- "%1" %*
              cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
              exefile [open] -- "%1" %*
              helpfile [open] -- Reg Error: Key error.
              hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
              htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
              htmlfile [edit] -- Reg Error: Key error.
              htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
              htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
              htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
              http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
              https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
              inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
              inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
              inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
              inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
              InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
              jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
              jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
              jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
              jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
              jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
              jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
              piffile [open] -- "%1" %*
              regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
              regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
              regfile [merge] -- Reg Error: Key error.
              regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
              scrfile [config] -- "%1"
              scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
              scrfile [open] -- "%1" /S
              txtfile [edit] -- Reg Error: Key error.
              txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
              txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
              txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
              vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
              vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
              vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
              vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
              wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
              wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
              wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
              Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
              Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
              Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
              Directory [Parcourir avec Corel PaintShop Pro X4] -- "c:\Program Files (x86)\Corel\Corel PaintShop Pro X4\Corel PaintShop Pro.exe" "%L" (Corel, Inc.)
              Folder [open] -- C:\Windows\Explorer.exe (Microsoft Corporation)
              Folder [explore] -- Reg Error: Value error.
              Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
              Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
              CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

              [color=#E56717]========== Security Center Settings ==========[/color]

              [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
              "cval" = 1

              [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

              [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
              "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
              "AntiVirusOverride" = 0
              "AntiSpywareOverride" = 0
              "FirewallOverride" = 0

              [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

              [color=#E56717]========== Firewall Settings ==========[/color]

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
              "DisableNotifications" = 0
              "EnableFirewall" = 1

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
              "DisableNotifications" = 0
              "EnableFirewall" = 1

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
              "DisableNotifications" = 0
              "EnableFirewall" = 1

              [color=#E56717]========== Authorized Applications List ==========[/color]

              [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
              "{01BE7D73-15E0-4483-B078-6A7ED9C0F1AB}" = rport=137 | protocol=17 | dir=out | app=system |
              "{054F0707-2D13-4A5D-B6C4-FC4DCEAE844F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
              "{1CB91615-E0F2-473E-9B7B-EAAF6977EAA8}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
              "{22F7DAA6-8238-44E6-93F8-9C861CDE60A0}" = lport=137 | protocol=17 | dir=in | app=system |
              "{24863E60-AF12-450B-AFCA-9CAD38874279}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
              "{268697B6-D6B2-41D1-A9D5-2D5FF3BF3588}" = lport=138 | protocol=17 | dir=in | app=system |
              "{2EAC7828-32E7-4F12-8153-79083C4897C2}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
              "{31934BC4-5970-4B9E-A4A4-1236A416F713}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
              "{3DF283E4-8C12-41F6-95EE-A8ED8E45A049}" = lport=10243 | protocol=6 | dir=in | app=system |
              "{4B380838-FCD4-415D-9BC3-064B77243CDB}" = lport=445 | protocol=6 | dir=in | app=system |
              "{503ADFE3-8A5F-4409-AB9D-30347F2FBA5C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
              "{59BFFB57-F90B-4980-9DBF-9A33DB13D75B}" = rport=10243 | protocol=6 | dir=out | app=system |
              "{658899E0-5841-4E9A-A370-D789D313B8CA}" = rport=138 | protocol=17 | dir=out | app=system |
              "{76330D80-2372-4DFC-9340-9CB5D2C0EEE6}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
              "{77EF0C5F-AFCF-4044-9C82-680BAA36097A}" = lport=2869 | protocol=6 | dir=in | app=system |
              "{83453FF1-98AA-43D0-9395-10A2F20B2A16}" = lport=139 | protocol=6 | dir=in | app=system |
              "{8849EECC-3783-419D-8297-5D8331580834}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
              "{9E37AA6C-7F24-4FDD-A601-E240742EF3DD}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
              "{9E7DBFFE-FC7E-4462-9D20-5E2710ED7E31}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
              "{AE5321CA-766F-465E-8847-10574BAD7300}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
              "{B909D6A9-158C-423A-94E2-2615556DF368}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
              "{D32945F5-0269-4733-BC51-F9E0527F54D0}" = rport=139 | protocol=6 | dir=out | app=system |
              "{D3BF8704-1346-4B7E-918A-C910B9BF7F2B}" = rport=445 | protocol=6 | dir=out | app=system |
              "{DB18A9E5-0A25-469D-8A13-501A8C23A607}" = lport=2869 | protocol=6 | dir=in | app=system |
              "{EAC08A46-B6FD-4E73-B2FC-8161731C2628}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
              "{F710CAA6-E566-4BF7-9D64-F3CCC6867712}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

              [color=#E56717]========== Vista Active Application Exception List ==========[/color]

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
              "{00325280-B2D1-4C33-93E8-33BCFAE72532}" = protocol=17 | dir=in | app=c:\aeriagames\edeneternal-fr\launcher.exe |
              "{009D5300-4CA7-4404-8ACA-BB4E4ECA3F18}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
              "{089EE8A7-C187-4784-8EF0-E69A6CEA980E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
              "{0E0ABCA1-6C4B-4004-A07B-348FCC2E4309}" = protocol=6 | dir=in | app=c:\users\nathalie\appdata\local\akamai\netsession_win.exe |
              "{0FD69B55-E7A3-4028-BE62-20C549D01A93}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
              "{1146BBD0-1010-42A1-96B2-397F2B28A1D5}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
              "{13260A25-CAC8-4CA7-8C99-8DD05A4F4799}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
              "{1956CCBD-231D-45FB-A9ED-AA735DB6480D}" = protocol=6 | dir=in | app=c:\program files (x86)\gameforge4d\elsword_fr\data\x2.exe |
              "{2CF07021-DEAA-400C-AD57-6461A4F1E04A}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
              "{3670E738-650D-4C96-B17B-A6E2056D46CE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
              "{413A802C-9A13-4C3B-BD32-9A10D87959C7}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
              "{4C98EB13-4D4D-4B98-9CED-C1E1DCCB809B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
              "{4CDA4538-D890-47D1-BDCD-3AB3C91929F3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
              "{58A3D415-AC07-49B2-8933-7762B906F5D1}" = protocol=6 | dir=out | app=system |
              "{5941639A-57C9-45AD-84E2-44DC35F4A259}" = protocol=6 | dir=in | app=c:\program files (x86)\iahgames\counter-strike online\bin\cstrike-online.exe |
              "{5DB1023D-652E-42FC-A3A6-362130568808}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
              "{6321FE3D-BC56-45CF-848E-7A5E6B12BCAC}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
              "{7C799C97-5D62-4C21-9D65-F4CCC0267C68}" = protocol=6 | dir=in | app=c:\aeriagames\edeneternal-fr\_launcher.exe |
              "{8270E915-5C3B-4381-A19B-2DF6C5585637}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
              "{83933898-521F-4E60-B81B-589E175304F8}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
              "{960B2529-418A-42D3-BACF-003DE5E08178}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
              "{973427EE-1952-4135-9054-1D132DC6B58B}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
              "{98A3CA2E-7EB0-40E9-85E0-D4228065E805}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
              "{A6CF2BE7-388F-47BD-8600-5231C9D70BD2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
              "{AA10F88C-9F7C-4C14-AA6F-44D5EF23D0AC}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
              "{AA7DFC09-73A5-4423-83D8-49D5A3E6471F}" = protocol=17 | dir=in | app=c:\users\nathalie\appdata\local\akamai\netsession_win.exe |
              "{AB31A92B-D995-4E74-A368-47C9E80BCB18}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
              "{AB48CDA8-C8D5-4F7C-ACCB-DD5EACE75E64}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
              "{AC8B8F81-3D34-428A-9401-D4DA1AB61AA7}" = protocol=17 | dir=in | app=c:\users\nathalie\appdata\local\microsoft\windows\temporary internet files\content.ie5\se3utm3b\winrarsdm.exe |
              "{B0466F23-F5EC-402B-83FB-E9C5070170C0}" = protocol=6 | dir=in | app=c:\users\nathalie\appdata\local\microsoft\windows\temporary internet files\content.ie5\se3utm3b\winrarsdm.exe |
              "{B217DCDF-E9A6-47FA-87C0-5F67BE50FF59}" = protocol=17 | dir=in | app=c:\program files (x86)\gameforge4d\elsword_fr\data\x2.exe |
              "{BB63F01A-B347-4563-825F-BA032F4B8B32}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
              "{BCE00B27-0C8D-4744-99D0-753005295E7B}" = protocol=58 | dir=in | app=system |
              "{C2117C54-D07F-486B-9497-0A3CAC9A5F6E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
              "{C21D490F-F305-49B1-BB97-5C3A0DA5D535}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
              "{CDE4B66C-DF5A-46ED-8F6B-128058BCC538}" = protocol=17 | dir=in | app=c:\aeriagames\edeneternal-fr\_launcher.exe |
              "{DC63E1E9-4F91-409D-83F8-42324CDBFF89}" = protocol=17 | dir=in | app=c:\program files (x86)\iahgames\counter-strike online\bin\cstrike-online.exe |
              "{DCB046BB-CB7D-4CC8-90FB-A048092F9F17}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
              "{E3AD7688-313B-4460-85A9-8BC473B78291}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
              "{E3D20085-1F75-4481-A5E2-D77C04672E3C}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
              "{E924CEEF-3ED8-452C-99E7-2ABC5E643426}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
              "{F6FD2918-E9B2-4F47-B1B1-196E81921F0F}" = protocol=6 | dir=in | app=c:\aeriagames\edeneternal-fr\launcher.exe |
              "{F754147E-A2A9-439E-A953-C236A32F2388}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
              "TCP Query User{428CFEA2-527B-4728-BAF8-8774BB0BAEF9}C:\users\nathalie\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\nathalie\appdata\local\akamai\netsession_win.exe |
              "TCP Query User{7C9F3DA8-DFF9-448E-AE01-86E13202C6D3}C:\program files (x86)\tera\tera-launcher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tera\tera-launcher.exe |
              "UDP Query User{40222832-D4A7-4E51-9864-DAE912EB9608}C:\users\nathalie\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\nathalie\appdata\local\akamai\netsession_win.exe |
              "UDP Query User{812C673D-E8CF-42CE-AF11-51DC75759DA1}C:\program files (x86)\tera\tera-launcher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tera\tera-launcher.exe |

              [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

              64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
              "{0015DE8E-8D9F-403E-8E5A-4098410E6125}" = PSPPro64
              "{010FFE0B-4C25-4EDC-A44E-8B8C5A64AF68}" = O2Micro Flash Memory Card Windows Driver
              "{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
              "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
              "{20387B45-18A4-4D48-ABD9-A23D2CBE42B3}" = Dolby Control Center
              "{24811C12-F4A9-4D0F-8494-A7B8FE46123C}" = TOSHIBA ReelTime
              "{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
              "{563F041C-DFDB-437B-A1E8-E141E0906076}" = Microsoft IntelliPoint 8.0
              "{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
              "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
              "{63DA1F6A-2E65-4367-99B9-9E39FADEC446}" = HDMI Control Manager
              "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
              "{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
              "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
              "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
              "{90140000-006D-040C-1000-0000000FF1CE}" = Microsoft Office « Démarrer en un clic » 2010
              "{94A90C69-71C1-470A-88F5-AA47ECC96B40}" = TOSHIBA HDD Protection
              "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
              "{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}" = TOSHIBA PC Health Monitor
              "{A39AE3AE-9808-39D2-AB7B-FF5F0335095E}" = Microsoft .NET Framework 4 Extended FRA Language Pack
              "{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator
              "{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
              "{C14518AF-1A0F-4D39-8011-69BAA01CD380}" = TOSHIBA Bulletin Board
              "{C4FFA951-9678-4D51-84B4-AFD15D3C45AD}" = TOSHIBA Hardware Setup
              "{CBD6B23D-41D5-4A46-8019-6208516C9712}" = TOSHIBA Supervisor Password
              "{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
              "{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
              "{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
              "{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64
              "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
              "{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition
              "CCleaner" = CCleaner
              "CNXT_AUDIO" = Conexant HD Audio
              "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
              "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
              "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
              "Microsoft .NET Framework 4 Extended FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Extended FRA
              "NVIDIA Display Control Panel" = NVIDIA Display Control Panel
              "NVIDIA Drivers" = NVIDIA Drivers
              "SynTPDeinstKey" = Synaptics Pointing Device Driver

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
              "_{00580795-581C-4587-B9F2-37320D7AB37F}" = Corel PaintShop Pro X4
              "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
              "{003D3756-10DE-4CAA-9A59-705E041000BA}" = video-processor
              "{00580795-581C-4587-B9F2-37320D7AB37F}" = ICA
              "{006CAAEF-CA96-4181-AC22-FE56D61432E4}" = PSPPContent
              "{00AE1A2D-7BC2-4359-A0EC-E19F36E391BB}" = Corel PaintShop Pro X4
              "{00BEE329-BAAB-49FF-9B66-55E4B12B9ADD}" = IPM_PSP_COM
              "{00D13418-7DDF-4D3D-A237-E297B103BB6B}" = Setup
              "{00D74A7A-F7AD-4D00-ABD2-0973836292C7}" = PSPPHelp
              "{0420F95C-11FF-4E02-B967-6CC22B188F9F}" = Nero BackItUp
              "{053a5e96-b057-4ab4-9abc-f9f44f48565e}" = Nero 9 Essentials
              "{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
              "{0FB630AB-7BD8-40AE-B223-60397D57C3C9}" = Realtek WLAN Driver
              "{14DC0059-00F1-4F62-BD1A-AB23CD51A95E}" = Adobe AIR
              "{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
              "{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare
              "{2290A680-4083-410A-ADCC-7092C67FC052}" = TOSHIBA Online Product Information
              "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
              "{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
              "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
              "{397516AE-7DFE-4F90-84E0-BD616D559434}" = Nero BurnRights
              "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
              "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
              "{4634B21A-CC07-4396-890C-2B8168661FEA}" = Windows Live Writer
              "{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
              "{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live
              "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype(TM) 6.5
              "{51E2F9B3-A972-4F58-B4EF-4D9676D9F5D1}" = Nero RescueAgent
              "{53B20C18-D8D4-4588-8737-9BBFE303C354}" = Windows Live Movie Maker
              "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
              "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
              "{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail
              "{5E6F6CF3-BACC-4144-868C-E14622C658F3}" = TOSHIBA Web Camera Application
              "{63DA1F6A-2E65-4367-99B9-9E39FADEC446}" = HDMI Control Manager
              "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
              "{6C3CF7AC-5AB0-42D9-93C0-68166A57AFB6}" = Nero Express
              "{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
              "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
              "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
              "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
              "{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger
              "{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
              "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
              "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights
              "{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
              "{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
              "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
              "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
              "{8A809006-C25A-4A3A-9DAB-94659BCDB107}" = NVIDIA PhysX
              "{90140011-0066-040C-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Français
              "{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}" = Toshiba Manuals
              "{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
              "{97BBECCF-B1FD-4010-8D4B-EFC9E3CCEECF}" = Driver Whiz
              "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
              "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
              "{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1" = Gameforge Live 1.4.0 "Legend"
              "{9D3D8C60-A55F-4fed-B2B9-173001290E16}" = Realtek WLAN Driver
              "{A2F166A0-F031-4E27-A057-C69733219434}_is1" = TERA
              "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
              "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
              "{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station
              "{AC76BA86-7AD7-1036-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Français
              "{B131E59D-202C-43C6-84C9-68F0C37541F1}" = Galerie de photos Windows Live
              "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
              "{B73A66DB-7804-46EC-9A2F-BD534FDB6AD5}" = TOSHIBA ConfigFree
              "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
              "{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
              "{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
              "{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
              "{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
              "{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel(R) Turbo Boost Technology Driver
              "{DBB7021A-3437-446F-ACE5-7261644A972C}" = Toshiba TEMPRO
              "{E08CC458-41FB-4BB5-9B08-2C83DB55A5B9}" = Nero BackItUp and Burn
              "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
              "{E32B0931-C97B-48E1-A466-27D4088060EF}" = Install(Fr)
              "{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}" = TOSHIBA USB Sleep and Charge Utility
              "{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
              "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
              "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
              "{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
              "{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help
              "{FBC79D04-051E-4367-8051-1DB0C893FBE0}" = Nuvoton CIR Device Drivers
              "{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
              "{FEB650EB-7639-444E-9FC2-C33EE6ED1A37}" = TOSHIBA Remote Control Manager
              "Adobe AIR" = Adobe AIR
              "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
              "CopyRightLeft_is1" = CopyRightLeft 0.4 Beta
              "D'Fusion @Home Web Plug-In" = Total Immersion D'Fusion @Home Web Plug-In
              "Elsword_FR_is1" = Elsword_FR
              "exent_586350" = 7 Wonders II
              "exent_708650" = Unlikely Suspects
              "FormatFactory" = FormatFactory 2.95
              "GoodFrame_is1" = GoodFrame
              "Google Chrome" = Google Chrome
              "InstallShield_{010FFE0B-4C25-4EDC-A44E-8B8C5A64AF68}" = O2Micro Flash Memory Card Windows Driver
              "InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
              "InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}" = TOSHIBA ReelTime
              "InstallShield_{63DA1F6A-2E65-4367-99B9-9E39FADEC446}" = HDMI Control Manager
              "InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
              "InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}" = TOSHIBA Bulletin Board
              "InstallShield_{C4FFA951-9678-4D51-84B4-AFD15D3C45AD}" = TOSHIBA Hardware Setup
              "InstallShield_{CBD6B23D-41D5-4A46-8019-6208516C9712}" = TOSHIBA Supervisor Password
              "InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
              "InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
              "InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition
              "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
              "Metin2_is1" = Metin2
              "MSC" = McAfee Internet Security
              "Office14.Click2Run" = Microsoft Office « Démarrer en un clic » 2010
              "PandaPDFConverter" = PandaPDFConverter
              "WinGimp-2.0_is1" = GIMP 2.6.11
              "WinLiveSuite_Wave3" = Installation Windows Live

              [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

              [HKEY_USERS\S-1-5-21-265306646-2638300606-1389047012-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
              "PhotoFiltre" = PhotoFiltre

              [color=#E56717]========== Last 20 Event Log Errors ==========[/color]

              [ Application Events ]
              Error - 21/07/2013 04:51:58 | Computer Name = nathalie-TOSH | Source = SideBySide | ID = 16842787
              Description = La création du contexte d'activation a échoué pour « C:\Program Files
              (x86)\Windows Live\Photo Gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste
              ou de stratégie « C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL »
              à la ligne 8. L'identité de composant trouvé dans le manifeste ne correspond pas
              à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
              La
              définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
              Utilisez
              sxstrace.exe pour un diagnostic détaillé.

              Error - 21/07/2013 05:07:41 | Computer Name = nathalie-TOSH | Source = SideBySide | ID = 16842787
              Description = La création du contexte d'activation a échoué pour « C:\Program Files
              (x86)\Windows Live\Photo Gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste
              ou de stratégie « C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL »
              à la ligne 8. L'identité de composant trouvé dans le manifeste ne correspond pas
              à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
              La
              définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
              Utilisez
              sxstrace.exe pour un diagnostic détaillé.

              Error - 21/07/2013 05:07:41 | Computer Name = nathalie-TOSH | Source = SideBySide | ID = 16842787
              Description = La création du contexte d'activation a échoué pour « C:\Program Files
              (x86)\Windows Live\Photo Gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste
              ou de stratégie « C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL »
              à la ligne 8. L'identité de composant trouvé dans le manifeste ne correspond pas
              à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
              La
              définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
              Utilisez
              sxstrace.exe pour un diagnostic détaillé.

              Error - 21/07/2013 05:50:56 | Computer Name = nathalie-TOSH | Source = SideBySide | ID = 16842787
              Description = La création du contexte d'activation a échoué pour « C:\Program Files
              (x86)\Windows Live\Photo Gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste
              ou de stratégie « C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL »
              à la ligne 8. L'identité de composant trouvé dans le manifeste ne correspond pas
              à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
              La
              définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
              Utilisez
              sxstrace.exe pour un diagnostic détaillé.

              Error - 21/07/2013 05:50:57 | Computer Name = nathalie-TOSH | Source = SideBySide | ID = 16842787
              Description = La création du contexte d'activation a échoué pour « C:\Program Files
              (x86)\Windows Live\Photo Gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste
              ou de stratégie « C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL »
              à la ligne 8. L'identité de composant trouvé dans le manifeste ne correspond pas
              à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
              La
              définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
              Utilisez
              sxstrace.exe pour un diagnostic détaillé.

              Error - 21/07/2013 05:50:57 | Computer Name = nathalie-TOSH | Source = SideBySide | ID = 16842787
              Description = La création du contexte d'activation a échoué pour « C:\Program Files
              (x86)\Windows Live\Photo Gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste
              ou de stratégie « C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL »
              à la ligne 8. L'identité de composant trouvé dans le manifeste ne correspond pas
              à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
              La
              définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
              Utilisez
              sxstrace.exe pour un diagnostic détaillé.

              Error - 21/07/2013 05:50:58 | Computer Name = nathalie-TOSH | Source = SideBySide | ID = 16842787
              Description = La création du contexte d'activation a échoué pour « C:\Program Files
              (x86)\Windows Live\Photo Gallery\MovieMaker.Exe ». Erreur dans le fichier de manifeste
              ou de stratégie « C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL »
              à la ligne 8. L'identité de composant trouvé dans le manifeste ne correspond pas
              à celle du composant demandé. La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
              La
              définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
              Utilisez
              sxstrace.exe pour un diagnostic détaillé.

              Error - 21/07/2013 05:57:19 | Computer Name = nathalie-TOSH | Source = TOSHIBA Service Station | ID = 0
              Description = TSS Load: could not communicate with TMachInfo service

              Error - 21/07/2013 06:03:56 | Computer Name = nathalie-TOSH | Source = Application Hang | ID = 1002
              Description = Le programme IEXPLORE.EXE version 10.0.9200.16635 a cessé d'interagir
              avec Windows et a été fermé. Pour déterminer si des informations supplémentaires
              sont disponibles, consultez l'historique du problème dans le Centre de maintenance.

              ID
              de processus : 5ec Heure de début : 01ce85f9352e7758 Heure de fin : 46 Chemin d'accès
              de l'application : C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE ID de rapport
              :

              Error - 21/07/2013 06:03:59 | Computer Name = nathalie-TOSH | Source = Application Hang | ID = 1002
              Description = Le programme iexplore.exe version 10.0.9200.16635 a cessé d'interagir
              avec Windows et a été fermé. Pour déterminer si des informations supplémentaires
              sont disponibles, consultez l'historique du problème dans le Centre de maintenance.

              ID
              de processus : 13b8 Heure de début : 01ce85f913cceb41 Heure de fin : 0 Chemin d'accès
              de l'application : C:\Program Files\Internet Explorer\iexplore.exe ID de rapport
              : aae587cd-f1ec-11e2-8b54-60eb69b1a410

              [ System Events ]
              Error - 21/07/2013 05:09:40 | Computer Name = nathalie-TOSH | Source = DCOM | ID = 10005
              Description =

              Error - 21/07/2013 05:09:40 | Computer Name = nathalie-TOSH | Source = Service Control Manager | ID = 7001
              Description = Le service Service Liste des réseaux dépend du service Connaissance
              des emplacements réseau qui n'a pas pu démarrer en raison de l'erreur : %%1068

              Error - 21/07/2013 05:11:10 | Computer Name = nathalie-TOSH | Source = DCOM | ID = 10005
              Description =

              Error - 21/07/2013 05:44:00 | Computer Name = nathalie-TOSH | Source = Service Control Manager | ID = 7001
              Description = Le service Service Liste des réseaux dépend du service Connaissance
              des emplacements réseau qui n'a pas pu démarrer en raison de l'erreur : %%1068

              Error - 21/07/2013 05:49:49 | Computer Name = nathalie-TOSH | Source = Service Control Manager | ID = 7009
              Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de
              l'attente de la connexion du service Adobe Acrobat Update Service.

              Error - 21/07/2013 05:50:26 | Computer Name = nathalie-TOSH | Source = Service Control Manager | ID = 7000
              Description = Le service X5XSEx_Pr143 n'a pas pu démarrer en raison de l'erreur :
              %%3

              Error - 21/07/2013 05:56:28 | Computer Name = nathalie-TOSH | Source = Service Control Manager | ID = 7009
              Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de
              l'attente de la connexion du service Protection logicielle.

              Error - 21/07/2013 05:56:28 | Computer Name = nathalie-TOSH | Source = Service Control Manager | ID = 7000
              Description = Le service Protection logicielle n'a pas pu démarrer en raison de
              l'erreur : %%1053

              Error - 21/07/2013 05:58:33 | Computer Name = nathalie-TOSH | Source = DCOM | ID = 10010
              Description =

              Error - 21/07/2013 05:59:52 | Computer Name = nathalie-TOSH | Source = Service Control Manager | ID = 7022
              Description = Le service Windows Update est en attente de démarrage.

              < End of report >
              1. leelee64 Auteur
                OTL texte

                OTL logfile created on: 21/07/2013 18:12:05 - Run 2
                OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\nathalie\Desktop
                64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
                Internet Explorer (Version = 9.10.9200.16635)
                Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

                5,86 Gb Total Physical Memory | 4,08 Gb Available Physical Memory | 69,60% Memory free
                11,73 Gb Paging File | 9,28 Gb Available in Paging File | 79,15% Paging File free
                Paging file location(s): ?:\pagefile.sys [binary data]

                %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
                Drive C: | 297,45 Gb Total Space | 137,38 Gb Free Space | 46,19% Space Free | Partition Type: NTFS
                Drive D: | 298,33 Gb Total Space | 289,75 Gb Free Space | 97,12% Space Free | Partition Type: NTFS

                Computer Name: NATHALIE-TOSH | User Name: nathalie | Logged in as Administrator.
                Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
                Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

                [color=#E56717]========== Processes (All) ==========/color

                PRC - [2013/07/18 22:07:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\nathalie\Desktop\OTL.exe

                [color=#E56717]========== Modules (All) ==========/color

                MOD - [2013/07/18 22:07:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\nathalie\Desktop\OTL.exe
                MOD - [2013/05/22 10:30:48 | 000,017,632 | ---- | M] (McAfee, Inc.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\sahook.dll
                MOD - [2013/05/13 06:45:55 | 001,160,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll
                MOD - [2013/02/27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
                MOD - [2013/02/27 06:55:04 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
                MOD - [2012/11/30 06:53:59 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
                MOD - [2012/11/30 06:53:59 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
                MOD - [2012/11/22 06:45:03 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
                MOD - [2012/08/24 18:57:48 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll
                MOD - [2012/06/02 06:40:42 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
                MOD - [2012/06/02 06:34:09 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
                MOD - [2012/05/05 09:46:52 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
                MOD - [2011/12/16 09:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
                MOD - [2011/11/17 07:38:39 | 001,292,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
                MOD - [2011/08/27 06:26:27 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
                MOD - [2011/05/24 12:40:05 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
                MOD - [2011/05/24 12:39:38 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
                MOD - [2010/11/20 14:21:36 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
                MOD - [2010/11/20 14:21:34 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
                MOD - [2010/11/20 14:21:24 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
                MOD - [2010/11/20 14:21:19 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
                MOD - [2010/11/20 14:21:14 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
                MOD - [2010/11/20 14:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
                MOD - [2010/11/20 14:20:57 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
                MOD - [2010/11/20 14:20:49 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
                MOD - [2010/11/20 14:20:49 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
                MOD - [2010/11/20 14:20:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
                MOD - [2010/11/20 14:19:45 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll
                MOD - [2010/11/20 14:18:23 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
                MOD - [2010/11/20 14:18:03 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
                MOD - [2010/11/20 14:18:02 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
                MOD - [2010/11/20 14:16:50 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
                MOD - [2010/11/20 14:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
                MOD - [2010/11/20 14:08:57 | 000,663,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
                MOD - [2010/11/20 14:08:51 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
                MOD - [2010/11/20 14:08:51 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
                MOD - [2010/11/20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
                MOD - [2009/07/14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
                MOD - [2009/07/14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
                MOD - [2009/07/14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
                MOD - [2009/07/14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
                MOD - [2009/07/14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
                MOD - [2009/07/14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
                MOD - [2009/07/14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
                MOD - [2009/07/14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
                MOD - [2009/07/14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
                MOD - [2009/07/14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
                MOD - [2009/07/14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
                MOD - [2009/07/14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
                MOD - [2009/07/14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
                MOD - [2009/07/14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
                MOD - [2009/07/14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll

                [color=#E56717]========== Services (All) ==========/color

                SRV:[b]64bit:/b - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
                SRV:[b]64bit:/b - [2013/05/13 07:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
                SRV:[b]64bit:/b - [2013/03/19 07:53:58 | 000,230,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
                SRV:[b]64bit:/b - [2013/02/27 07:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
                SRV:[b]64bit:/b - [2013/02/19 14:56:14 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe -- (mfevtp)
                SRV:[b]64bit:/b - [2013/02/19 14:53:32 | 000,218,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
                SRV:[b]64bit:/b - [2013/02/19 14:51:54 | 000,241,456 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
                SRV:[b]64bit:/b - [2013/01/13 21:58:28 | 001,175,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
                SRV:[b]64bit:/b - [2012/11/16 22:10:22 | 000,383,608 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\mcafee\VirusScan\mcods.exe -- (McODS)
                SRV:[b]64bit:/b - [2012/10/03 19:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
                SRV:[b]64bit:/b - [2012/10/03 19:42:16 | 000,569,344 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\iphlpsvc.dll -- (iphlpsvc)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (MSK80Service)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McProxy)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McOobeSv)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNASvc)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNaiAnn)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (mcmscsvc)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc)
                SRV:[b]64bit:/b - [2012/08/31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service)
                SRV:[b]64bit:/b - [2012/07/26 05:08:14 | 000,084,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WUDFSvc.dll -- (wudfsvc)
                SRV:[b]64bit:/b - [2012/07/05 00:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
                SRV:[b]64bit:/b - [2012/06/03 00:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
                SRV:[b]64bit:/b - [2012/05/01 07:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
                SRV:[b]64bit:/b - [2012/02/11 08:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
                SRV:[b]64bit:/b - [2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (VaultSvc)
                SRV:[b]64bit:/b - [2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
                SRV:[b]64bit:/b - [2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
                SRV:[b]64bit:/b - [2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (Netlogon)
                SRV:[b]64bit:/b - [2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
                SRV:[b]64bit:/b - [2011/11/17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (EFS)
                SRV:[b]64bit:/b - [2011/05/24 13:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
                SRV:[b]64bit:/b - [2011/05/04 07:19:28 | 000,591,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SearchIndexer.exe -- (WSearch)
                SRV:[b]64bit:/b - [2011/03/03 08:24:16 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
                SRV:[b]64bit:/b - [2011/02/05 17:29:27 | 001,255,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Wat\WatAdminSvc.exe -- (WatAdminSvc)
                SRV:[b]64bit:/b - [2010/11/20 15:27:29 | 002,018,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WsmSvc.dll -- (WinRM)
                SRV:[b]64bit:/b - [2010/11/20 15:27:28 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
                SRV:[b]64bit:/b - [2010/11/20 15:27:28 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
                SRV:[b]64bit:/b - [2010/11/20 15:27:28 | 000,444,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\winhttp.dll -- (WinHttpAutoProxySvc)
                SRV:[b]64bit:/b - [2010/11/20 15:27:28 | 000,258,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WebClnt.dll -- (WebClient)
                SRV:[b]64bit:/b - [2010/11/20 15:27:28 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
                SRV:[b]64bit:/b - [2010/11/20 15:27:28 | 000,117,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpdbusenum.dll -- (WPDBusEnum)
                SRV:[b]64bit:/b - [2010/11/20 15:27:27 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wcncsvc.dll -- (wcncsvc)
                SRV:[b]64bit:/b - [2010/11/20 15:27:26 | 001,743,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\sysmain.dll -- (SysMain)
                SRV:[b]64bit:/b - [2010/11/20 15:27:26 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\termsrv.dll -- (TermService)
                SRV:[b]64bit:/b - [2010/11/20 15:27:26 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
                SRV:[b]64bit:/b - [2010/11/20 15:27:26 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
                SRV:[b]64bit:/b - [2010/11/20 15:27:26 | 000,092,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TabSvc.dll -- (TabletInputService)
                SRV:[b]64bit:/b - [2010/11/20 15:27:25 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
                SRV:[b]64bit:/b - [2010/11/20 15:27:25 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
                SRV:[b]64bit:/b - [2010/11/20 15:27:25 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
                SRV:[b]64bit:/b - [2010/11/20 15:27:25 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SessEnv.dll -- (SessionEnv)
                SRV:[b]64bit:/b - [2010/11/20 15:27:25 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
                SRV:[b]64bit:/b - [2010/11/20 15:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
                SRV:[b]64bit:/b - [2010/11/20 15:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
                SRV:[b]64bit:/b - [2010/11/20 15:27:24 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
                SRV:[b]64bit:/b - [2010/11/20 15:27:23 | 001,389,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pla.dll -- (pla)
                SRV:[b]64bit:/b - [2010/11/20 15:27:23 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
                SRV:[b]64bit:/b - [2010/11/20 15:27:23 | 000,476,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\QAGENTRT.DLL -- (napagent)
                SRV:[b]64bit:/b - [2010/11/20 15:27:23 | 000,187,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
                SRV:[b]64bit:/b - [2010/11/20 15:26:59 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
                SRV:[b]64bit:/b - [2010/11/20 15:26:50 | 000,084,992 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Mcx2Svc.dll -- (Mcx2Svc)
                SRV:[b]64bit:/b - [2010/11/20 15:26:46 | 000,232,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
                SRV:[b]64bit:/b - [2010/11/20 15:26:42 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\KMSVC.DLL -- (hkmsvc)
                SRV:[b]64bit:/b - [2010/11/20 15:26:39 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
                SRV:[b]64bit:/b - [2010/11/20 15:26:36 | 000,853,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\IKEEXT.DLL -- (IKEEXT)
                SRV:[b]64bit:/b - [2010/11/20 15:26:28 | 000,777,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\gpsvc.dll -- (gpsvc)
                SRV:[b]64bit:/b - [2010/11/20 15:26:07 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
                SRV:[b]64bit:/b - [2010/11/20 15:26:07 | 000,162,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dps.dll -- (DPS)
                SRV:[b]64bit:/b - [2010/11/20 15:26:04 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
                SRV:[b]64bit:/b - [2010/11/20 15:25:49 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (SCPolicySvc)
                SRV:[b]64bit:/b - [2010/11/20 15:25:49 | 000,080,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\certprop.dll -- (CertPropSvc)
                SRV:[b]64bit:/b - [2010/11/20 15:25:45 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
                SRV:[b]64bit:/b - [2010/11/20 15:25:44 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
                SRV:[b]64bit:/b - [2010/11/20 15:25:42 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
                SRV:[b]64bit:/b - [2010/11/20 15:25:42 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
                SRV:[b]64bit:/b - [2010/11/20 15:25:33 | 001,525,248 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
                SRV:[b]64bit:/b - [2010/11/20 15:25:28 | 001,504,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
                SRV:[b]64bit:/b - [2010/11/20 15:25:27 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
                SRV:[b]64bit:/b - [2010/11/20 15:25:25 | 000,533,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vds.exe -- (vds)
                SRV:[b]64bit:/b - [2010/11/20 15:25:04 | 003,524,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
                SRV:[b]64bit:/b - [2010/11/20 15:24:58 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
                SRV:[b]64bit:/b - [2010/11/20 15:24:47 | 000,689,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
                SRV:[b]64bit:/b - [2010/09/21 14:49:00 | 002,286,976 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
                SRV:[b]64bit:/b - [2010/07/27 00:56:48 | 000,159,336 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Windows\SysNative\nvvsvc.exe -- (nvsvc)
                SRV:[b]64bit:/b - [2010/07/22 17:36:16 | 000,822,192 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe -- (TPCHSrv)
                SRV:[b]64bit:/b - [2010/02/05 18:44:48 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
                SRV:[b]64bit:/b - [2010/01/09 21:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
                SRV:[b]64bit:/b - [2009/11/05 23:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
                SRV:[b]64bit:/b - [2009/10/21 10:30:36 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
                SRV:[b]64bit:/b - [2009/07/28 15:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
                SRV:[b]64bit:/b - [2009/07/14 03:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:57 | 000,012,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpcsvc.dll -- (WPCSvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,381,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\w32time.dll -- (W32Time)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,353,792 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\upnphost.dll -- (upnphost)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wecsvc.dll -- (Wecsvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,163,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpo.dll -- (Power)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wdi.dll -- (WdiSystemHost)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wdi.dll -- (WdiServiceHost)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,084,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wercplsupport.dll -- (wercplsupport)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,076,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wersvc.dll -- (WerSvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WcsPlugInService.dll -- (WcsPlugInService)
                SRV:[b]64bit:/b - [2009/07/14 03:41:56 | 000,038,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\uxsms.dll -- (UxSms)
                SRV:[b]64bit:/b - [2009/07/14 03:41:55 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\trkwks.dll -- (TrkWks)
                SRV:[b]64bit:/b - [2009/07/14 03:41:55 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tbssvc.dll -- (TBS)
                SRV:[b]64bit:/b - [2009/07/14 03:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
                SRV:[b]64bit:/b - [2009/07/14 03:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
                SRV:[b]64bit:/b - [2009/07/14 03:41:54 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ssdpsrv.dll -- (SSDPSRV)
                SRV:[b]64bit:/b - [2009/07/14 03:41:54 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sstpsvc.dll -- (SstpSvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:54 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
                SRV:[b]64bit:/b - [2009/07/14 03:41:54 | 000,029,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,438,784 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\p2psvc.dll -- (p2psvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,327,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,242,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\qwave.dll -- (QWAVE)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,190,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SCardSvr.dll -- (SCardSvr)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,186,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\pcasvc.dll -- (PcaSvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,159,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\regsvc.dll -- (RemoteRegistry)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,067,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,064,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\Sens.dll -- (SENS)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
                SRV:[b]64bit:/b - [2009/07/14 03:41:53 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
                SRV:[b]64bit:/b - [2009/07/14 03:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
                SRV:[b]64bit:/b - [2009/07/14 03:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
                SRV:[b]64bit:/b - [2009/07/14 03:41:28 | 000,368,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtckrm.dll -- (KtmRm)
                SRV:[b]64bit:/b - [2009/07/14 03:41:27 | 000,097,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\mprdim.dll -- (RemoteAccess)
                SRV:[b]64bit:/b - [2009/07/14 03:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (THREADORDER)
                SRV:[b]64bit:/b - [2009/07/14 03:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
                SRV:[b]64bit:/b - [2009/07/14 03:41:18 | 000,300,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lltdsvc.dll -- (lltdsvc)
                SRV:[b]64bit:/b - [2009/07/14 03:41:18 | 000,023,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lmhsvc.dll -- (lmhosts)
                SRV:[b]64bit:/b - [2009/07/14 03:41:11 | 000,156,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\iscsiexe.dll -- (MSiSCSI)
                SRV:[b]64bit:/b - [2009/07/14 03:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
                SRV:[b]64bit:/b - [2009/07/14 03:41:09 | 000,101,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IPBusEnum.dll -- (IPBusEnum)
                SRV:[b]64bit:/b - [2009/07/14 03:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
                SRV:[b]64bit:/b - [2009/07/14 03:40:52 | 000,034,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\FDResPub.dll -- (FDResPub)
                SRV:[b]64bit:/b - [2009/07/14 03:40:52 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\fdPHost.dll -- (fdPHost)
                SRV:[b]64bit:/b - [2009/07/14 03:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
                SRV:[b]64bit:/b - [2009/07/14 03:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
                SRV:[b]64bit:/b - [2009/07/14 03:40:28 | 000,291,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc)
                SRV:[b]64bit:/b - [2009/07/14 03:40:13 | 000,083,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
                SRV:[b]64bit:/b - [2009/07/14 03:40:10 | 000,100,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
                SRV:[b]64bit:/b - [2009/07/14 03:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
                SRV:[b]64bit:/b - [2009/07/14 03:40:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
                SRV:[b]64bit:/b - [2009/07/14 03:39:55 | 000,203,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wbem\WmiApSrv.exe -- (wmiApSrv)
                SRV:[b]64bit:/b - [2009/07/14 03:39:48 | 000,040,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\UI0Detect.exe -- (UI0Detect)
                SRV:[b]64bit:/b - [2009/07/14 03:39:41 | 000,014,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\snmptrap.exe -- (SNMPTRAP)
                SRV:[b]64bit:/b - [2009/07/14 03:39:21 | 000,141,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msdtc.exe -- (MSDTC)
                SRV:[b]64bit:/b - [2009/07/14 03:39:15 | 000,010,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Locator.exe -- (RpcLocator)
                SRV:[b]64bit:/b - [2009/07/14 03:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dllhost.exe -- (COMSysApp)
                SRV:[b]64bit:/b - [2009/07/14 03:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
                SRV:[b]64bit:/b - [2007/02/12 17:43:00 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Running] -- C:\Windows\SysNative\drivers\o2flash.exe -- (O2FLASH)
                SRV - [2013/07/12 16:17:09 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
                SRV - [2013/06/03 16:34:46 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
                SRV - [2013/05/13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
                SRV - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
                SRV - [2012/01/04 15:22:40 | 000,822,624 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE -- (cvhsvc)
                SRV - [2011/10/01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
                SRV - [2011/10/01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
                SRV - [2011/05/04 06:28:31 | 000,427,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWow64\SearchIndexer.exe -- (WSearch)
                SRV - [2011/02/11 13:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
                SRV - [2011/02/05 15:27:00 | 000,136,176 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdatem)
                SRV - [2011/02/05 15:27:00 | 000,136,176 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdate)
                SRV - [2011/01/19 07:40:00 | 004,225,592 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
                SRV - [2010/11/20 15:25:23 | 000,194,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\servicing\TrustedInstaller.exe -- (TrustedInstaller)
                SRV - [2010/11/20 15:24:42 | 000,696,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
                SRV - [2010/11/20 14:21:39 | 001,175,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WsmSvc.dll -- (WinRM)
                SRV - [2010/11/20 14:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\winhttp.dll -- (WinHttpAutoProxySvc)
                SRV - [2010/11/20 14:21:35 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\wcncsvc.dll -- (wcncsvc)
                SRV - [2010/11/20 14:21:35 | 000,204,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WebClnt.dll -- (WebClient)
                SRV - [2010/11/20 14:21:28 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
                SRV - [2010/11/20 14:21:19 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
                SRV - [2010/11/20 14:21:08 | 000,113,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\SessEnv.dll -- (SessionEnv)
                SRV - [2010/11/20 14:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
                SRV - [2010/11/20 14:20:54 | 001,508,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\pla.dll -- (pla)
                SRV - [2010/11/20 14:18:30 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
                SRV - [2010/11/20 14:17:22 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
                SRV - [2010/11/05 03:53:03 | 000,042,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
                SRV - [2010/11/05 03:52:14 | 000,856,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
                SRV - [2010/05/11 09:40:52 | 000,124,368 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
                SRV - [2010/03/18 18:23:04 | 000,044,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe -- (aspnet_state)
                SRV - [2010/03/18 15:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
                SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
                SRV - [2010/03/18 13:57:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
                SRV - [2010/03/18 13:56:56 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
                SRV - [2010/03/10 14:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
                SRV - [2010/01/28 17:44:40 | 000,249,200 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
                SRV - [2010/01/15 14:08:38 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
                SRV - [2010/01/09 21:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
                SRV - [2009/07/14 03:39:09 | 000,127,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehsched.exe -- (ehSched)
                SRV - [2009/07/14 03:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wpcsvc.dll -- (WPCSvc)
                SRV - [2009/07/14 03:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wdi.dll -- (WdiSystemHost)
                SRV - [2009/07/14 03:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\wdi.dll -- (WdiServiceHost)
                SRV - [2009/07/14 03:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WcsPlugInService.dll -- (WcsPlugInService)
                SRV - [2009/07/14 03:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\upnphost.dll -- (upnphost)
                SRV - [2009/07/14 03:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\Sens.dll -- (SENS)
                SRV - [2009/07/14 03:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\qwave.dll -- (QWAVE)
                SRV - [2009/07/14 03:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
                SRV - [2009/07/14 03:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess)
                SRV - [2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
                SRV - [2009/07/14 03:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
                SRV - [2009/07/14 03:14:28 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\perfhost.exe -- (PerfHost)
                SRV - [2009/07/14 03:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\dllhost.exe -- (COMSysApp)
                SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
                SRV - [2009/06/10 22:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
                SRV - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
                SRV - [2005/04/04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)

                [color=#E56717]========== Driver Services (All) ==========/color

                DRV:[b]64bit:/b - [2013/05/08 08:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tcpip.sys -- (TCPIP6)
                DRV:[b]64bit:/b - [2013/05/08 08:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tcpip.sys -- (Tcpip)
                DRV:[b]64bit:/b - [2013/04/12 16:45:08 | 001,656,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\ntfs.sys -- (Ntfs)
                DRV:[b]64bit:/b - [2013/04/10 08:01:53 | 000,983,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dxgkrnl.sys -- (DXGKrnl)
                DRV:[b]64bit:/b - [2013/02/19 14:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
                DRV:[b]64bit:/b - [2013/02/19 14:56:26 | 000,340,216 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
                DRV:[b]64bit:/b - [2013/02/19 14:55:14 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)
                DRV:[b]64bit:/b - [2013/02/19 14:54:32 | 000,771,536 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
                DRV:[b]64bit:/b - [2013/02/19 14:53:42 | 000,515,968 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek)
                DRV:[b]64bit:/b - [2013/02/19 14:53:02 | 000,309,840 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
                DRV:[b]64bit:/b - [2013/02/19 14:52:44 | 000,179,280 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
                DRV:[b]64bit:/b - [2013/01/24 08:01:01 | 000,223,752 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
                DRV:[b]64bit:/b - [2012/10/03 18:07:26 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tcpipreg.sys -- (tcpipreg)
                DRV:[b]64bit:/b - [2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ndis.sys -- (NDIS)
                DRV:[b]64bit:/b - [2012/07/26 06:55:47 | 000,785,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Wdf01000.sys -- (Wdf01000)
                DRV:[b]64bit:/b - [2012/07/26 04:26:45 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
                DRV:[b]64bit:/b - [2012/07/26 04:26:06 | 000,198,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WUDFRd.sys -- (WUDFRd)
                DRV:[b]64bit:/b - [2012/06/02 07:50:10 | 000,458,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
                DRV:[b]64bit:/b - [2012/06/02 07:48:16 | 000,151,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
                DRV:[b]64bit:/b - [2012/06/02 07:48:16 | 000,095,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ksecdd.sys -- (KSecDD)
                DRV:[b]64bit:/b - [2012/04/28 05:55:21 | 000,210,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpwd.sys -- (RDPWD)
                DRV:[b]64bit:/b - [2012/04/20 16:40:58 | 000,196,440 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HipShieldK.sys -- (HipShieldK)
                DRV:[b]64bit:/b - [2012/03/17 09:58:57 | 000,075,120 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\partmgr.sys -- (partmgr)
                DRV:[b]64bit:/b - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
                DRV:[b]64bit:/b - [2012/02/17 06:57:32 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tdtcp.sys -- (TDTCP)
                DRV:[b]64bit:/b - [2011/12/28 05:59:24 | 000,498,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\afd.sys -- (AFD)
                DRV:[b]64bit:/b - [2011/10/01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
                DRV:[b]64bit:/b - [2011/10/01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
                DRV:[b]64bit:/b - [2011/10/01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
                DRV:[b]64bit:/b - [2011/10/01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
                DRV:[b]64bit:/b - [2011/07/09 04:46:28 | 000,288,768 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mrxsmb10.sys -- (mrxsmb10)
                DRV:[b]64bit:/b - [2011/04/29 05:06:10 | 000,467,456 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\srv.sys -- (srv)
                DRV:[b]64bit:/b - [2011/04/29 05:05:49 | 000,410,112 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\srv2.sys -- (srv2)
                DRV:[b]64bit:/b - [2011/04/29 05:05:37 | 000,168,448 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\srvnet.sys -- (srvnet)
                DRV:[b]64bit:/b - [2011/04/27 04:40:40 | 000,158,208 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mrxsmb.sys -- (mrxsmb)
                DRV:[b]64bit:/b - [2011/04/27 04:39:37 | 000,128,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mrxsmb20.sys -- (mrxsmb20)
                DRV:[b]64bit:/b - [2011/03/25 05:29:26 | 000,343,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbhub.sys -- (usbhub)
                DRV:[b]64bit:/b - [2011/03/25 05:29:14 | 000,098,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbccgp.sys -- (usbccgp)
                DRV:[b]64bit:/b - [2011/03/25 05:29:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbehci.sys -- (usbehci)
                DRV:[b]64bit:/b - [2011/03/25 05:29:04 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbohci.sys -- (usbohci)
                DRV:[b]64bit:/b - [2011/03/25 05:29:03 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbuhci.sys -- (usbuhci)
                DRV:[b]64bit:/b - [2011/03/11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstor.sys -- (nvstor)
                DRV:[b]64bit:/b - [2011/03/11 08:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvraid.sys -- (nvraid)
                DRV:[b]64bit:/b - [2011/03/11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaStorV.sys -- (iaStorV)
                DRV:[b]64bit:/b - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
                DRV:[b]64bit:/b - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
                DRV:[b]64bit:/b - [2011/03/11 06:37:16 | 000,091,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBSTOR.SYS -- (USBSTOR)
                DRV:[b]64bit:/b - [2011/02/23 06:55:04 | 000,090,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\bowser.sys -- (bowser)
                DRV:[b]64bit:/b - [2010/12/17 16:04:28 | 001,221,224 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se)
                DRV:[b]64bit:/b - [2010/11/20 15:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volsnap.sys -- (volsnap)
                DRV:[b]64bit:/b - [2010/11/20 15:34:01 | 000,363,392 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgrx.sys -- (volmgrx)
                DRV:[b]64bit:/b - [2010/11/20 15:34:01 | 000,071,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volmgr.sys -- (volmgr)
                DRV:[b]64bit:/b - [2010/11/20 15:34:00 | 000,215,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
                DRV:[b]64bit:/b - [2010/11/20 15:33:57 | 000,063,360 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\termdd.sys -- (TermDD)
                DRV:[b]64bit:/b - [2010/11/20 15:33:54 | 000,103,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sbp2port.sys -- (sbp2port)
                DRV:[b]64bit:/b - [2010/11/20 15:33:53 | 000,213,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
                DRV:[b]64bit:/b - [2010/11/20 15:33:48 | 000,184,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pci.sys -- (pci)
                DRV:[b]64bit:/b - [2010/11/20 15:33:45 | 000,366,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msrpc.sys -- (MsRPC)
                DRV:[b]64bit:/b - [2010/11/20 15:33:45 | 000,273,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msiscsi.sys -- (iScsiPrt)
                DRV:[b]64bit:/b - [2010/11/20 15:33:44 | 000,155,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mpio.sys -- (mpio)
                DRV:[b]64bit:/b - [2010/11/20 15:33:44 | 000,140,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msdsm.sys -- (msdsm)
                DRV:[b]64bit:/b - [2010/11/20 15:33:44 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\msahci.sys -- (msahci)
                DRV:[b]64bit:/b - [2010/11/20 15:33:43 | 000,094,592 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mountmgr.sys -- (mountmgr)
                DRV:[b]64bit:/b - [2010/11/20 15:33:36 | 000,014,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
                DRV:[b]64bit:/b - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
                DRV:[b]64bit:/b - [2010/11/20 15:33:34 | 000,289,664 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\fltMgr.sys -- (FltMgr)
                DRV:[b]64bit:/b - [2010/11/20 15:32:46 | 000,334,208 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpi.sys -- (ACPI)
                DRV:[b]64bit:/b - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
                DRV:[b]64bit:/b - [2010/11/20 13:04:09 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tssecsrv.sys -- (tssecsrv)
                DRV:[b]64bit:/b - [2010/11/20 12:52:37 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wanarp.sys -- (Wanarpv6)
                DRV:[b]64bit:/b - [2010/11/20 12:52:37 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wanarp.sys -- (WANARP)
                DRV:[b]64bit:/b - [2010/11/20 12:52:35 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rasl2tp.sys -- (Rasl2tp)
                DRV:[b]64bit:/b - [2010/11/20 12:52:34 | 000,164,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ndiswan.sys -- (NdisWan)
                DRV:[b]64bit:/b - [2010/11/20 12:52:32 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\raspptp.sys -- (PptpMiniport)
                DRV:[b]64bit:/b - [2010/11/20 12:52:20 | 000,131,584 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pacer.sys -- (Psched)
                DRV:[b]64bit:/b - [2010/11/20 12:52:20 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ndproxy.sys -- (NDProxy)
                DRV:[b]64bit:/b - [2010/11/20 12:52:19 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipfltdrv.sys -- (IpFilterDriver)
                DRV:[b]64bit:/b - [2010/11/20 12:51:50 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tunnel.sys -- (tunnel)
                DRV:[b]64bit:/b - [2010/11/20 12:50:08 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ndisuio.sys -- (Ndisuio)
                DRV:[b]64bit:/b - [2010/11/20 12:44:56 | 000,229,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
                DRV:[b]64bit:/b - [2010/11/20 12:44:37 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\umbus.sys -- (umbus)
                DRV:[b]64bit:/b - [2010/11/20 12:44:34 | 000,184,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbvideo.sys -- (usbvideo)
                DRV:[b]64bit:/b - [2010/11/20 12:44:23 | 000,350,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
                DRV:[b]64bit:/b - [2010/11/20 12:43:56 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winusb.sys -- (WinUsb)
                DRV:[b]64bit:/b - [2010/11/20 12:43:49 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidusb.sys -- (HidUsb)
                DRV:[b]64bit:/b - [2010/11/20 12:43:43 | 000,122,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hdaudbus.sys -- (HDAudBus)
                DRV:[b]64bit:/b - [2010/11/20 12:34:00 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sffp_sd.sys -- (sffp_sd)
                DRV:[b]64bit:/b - [2010/11/20 12:33:25 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbdhid.sys -- (kbdhid)
                DRV:[b]64bit:/b - [2010/11/20 12:33:17 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
                DRV:[b]64bit:/b - [2010/11/20 12:14:37 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
                DRV:[b]64bit:/b - [2010/11/20 12:09:59 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
                DRV:[b]64bit:/b - [2010/11/20 12:04:53 | 000,078,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IPMIDrv.sys -- (IPMIDRV)
                DRV:[b]64bit:/b - [2010/11/20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
                DRV:[b]64bit:/b - [2010/11/20 11:30:42 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
                DRV:[b]64bit:/b - [2010/11/20 11:27:54 | 000,309,248 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\rdbss.sys -- (rdbss)
                DRV:[b]64bit:/b - [2010/11/20 11:26:42 | 000,140,800 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mrxdav.sys -- (MRxDAV)
                DRV:[b]64bit:/b - [2010/11/20 11:26:32 | 000,102,400 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\dfsc.sys -- (DfsC)
                DRV:[b]64bit:/b - [2010/11/20 11:26:11 | 000,328,192 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Sto
                4. leelee64 Auteur
                  Bonjour
                  Je l'ai fait en mode sans échec mais il n'y a pas ce fichier texte dans le c, j'ai fait "rechercher" sur l'ordinateur et il n'y a pas eue de résulat non plus. Par contre le diag s'est déroulé sans interruption.
                  • 1
                  • 2
                  • 3