Enlever Pricora problème

Résolu
J'ai suivis une parti de tes recommandations Malekal pour supprimer totalement Pricora.
J'ai mon rapport OTL et Extras mais je sais plus quoi en faire malekal. Un peu d'aide please !

18 réponses

  1. je l'avais avant maleware bytes (je sais plus trop pourquoi je m'en suis débarrassé ...)
    1. Plus d'anti-virus je crois (vu que mcafee désinstallé)

      ========== OTL ==========
      Service iSafeService stopped successfully!
      Service iSafeService deleted successfully!
      File C:\Program Files\iSafe\iSafeSvc.exe not found.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\skin folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\locale\en-US folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\locale folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\defaults\preferences folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\defaults folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome\content\core folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome\content\api folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome\content folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome folder moved successfully.
      C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@*** folder moved successfully.
      Folder C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\ not found.
      Folder C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins\ not found.
      Folder C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode\ not found.
      File C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider not found.
      File C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0 not found.
      C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl folder moved successfully.
      C:\Users\david\AppData\Local\Software\CrashReports folder moved successfully.
      C:\Users\david\AppData\Local\Software folder moved successfully.
      C:\Users\david\AppData\Roaming\wp_update folder moved successfully.
      C:\Users\david\AppData\Roaming\iSafe folder moved successfully.
      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC folder moved successfully.
      C:\Program Files\Pricora 2.0 folder moved successfully.
      C:\Users\david\AppData\Roaming\~jaazigi.exe moved successfully.
      C:\Users\david\AppData\Roaming\~mypvlwd.exe moved successfully.
      C:\Users\david\AppData\Roaming\~yljxxkf.exe moved successfully.

      OTL by OldTimer - Version 3.2.69.0 log created on 04102014_003012

      Merci beaucoup, t un boss
      1. Modérateur
        Désinstalle : McAfee Security Scan

        Relance OTL.
        o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
        Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

        :OTL
        SRV - File not found [Auto | Stopped] -- C:\Program Files\iSafe\iSafeSvc.exe -- (iSafeService)
        [2014/03/31 17:53:37 | 000,000,000 | ---D | M] (Pricora 2.0) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com
        [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com\extensionData
        [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com\extensionData\plugins
        [2014/03/31 17:53:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com\extensionData\userCode
        CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider
        CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\
        [2014/03/20 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
        [2014/03/20 20:40:26 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Software
        [2014/04/06 21:00:31 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\wp_update
        [2014/04/06 20:56:48 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\iSafe
        [2014/04/02 22:55:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
        [2014/03/31 17:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Pricora 2.0
        [2014/02/01 21:39:00 | 000,326,944 | ---- | C] () -- C:\Users\david\AppData\Roaming\~jaazigi.exe
        [2014/02/01 21:28:46 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~mypvlwd.exe
        [2014/03/12 21:56:29 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~yljxxkf.exe

        * poste le rapport ici

        Redémarre l'ordinateur

        tu as quoi comme antivirus ?
        1. Modérateur
          autant pour moi, il faut que tu envoies le rapport sur http://pjjoint.malekal.com car il est incomplet.
          Bref lis la fin de la procédure.
          1. OTL logfile created on: 09/04/2014 21:05:49 - Run 2
            OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\david\Downloads
            Professional (Version = 6.2.9200) - Type = NTWorkstation
            Internet Explorer (Version = 9.11.9600.16521)
            Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

            2,93 Gb Total Physical Memory | 1,57 Gb Available Physical Memory | 53,68% Memory free
            4,37 Gb Paging File | 2,94 Gb Available in Paging File | 67,42% Paging File free
            Paging file location(s): ?:\pagefile.sys [binary data]

            %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
            Drive C: | 283,40 Gb Total Space | 200,47 Gb Free Space | 70,74% Space Free | Partition Type: NTFS

            Computer Name: PC-DAVID | User Name: david | Logged in as Administrator.
            Boot Mode: Normal | Scan Mode: Current user
            Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

            [color=#E56717]========== Processes (SafeList) ==========[/color]

            PRC - [2014/04/06 21:01:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\david\Downloads\OTL.exe
            PRC - [2014/03/17 08:21:58 | 000,037,152 | ---- | M] (Glarysoft Ltd) -- C:\Program Files\Glary Utilities 4\StartupManager.exe
            PRC - [2014/03/17 08:19:52 | 000,785,184 | ---- | M] (Glarysoft Ltd) -- C:\Program Files\Glary Utilities 4\Integrator.exe
            PRC - [2014/03/15 02:50:42 | 000,859,976 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
            PRC - [2014/02/27 19:25:41 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x86__8wekyb3d8bbwe\LiveComm.exe
            PRC - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
            PRC - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
            PRC - [2014/01/16 02:40:24 | 000,277,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
            PRC - [2014/01/09 08:58:50 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SkyDrive.exe
            PRC - [2013/12/27 09:03:13 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SettingSyncHost.exe
            PRC - [2013/11/20 16:43:26 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
            PRC - [2013/11/20 16:43:14 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
            PRC - [2013/11/01 10:22:46 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe
            PRC - [2013/10/22 08:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
            PRC - [2013/10/16 11:34:26 | 000,518,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWAHost.exe
            PRC - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) -- C:\Windows\System32\valWBFPolicyService.exe
            PRC - [2013/08/22 08:15:13 | 000,188,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16470_none_9e05f679e2df8b7c\TiWorker.exe
            PRC - [2013/08/22 07:30:48 | 000,066,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhostex.exe
            PRC - [2013/08/22 07:21:42 | 000,029,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RuntimeBroker.exe
            PRC - [2013/08/22 05:38:22 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ThumbnailExtractionHost.exe
            PRC - [2013/08/22 04:45:10 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dasHost.exe
            PRC - [2012/07/18 13:02:42 | 000,313,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe
            PRC - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
            PRC - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
            PRC - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) -- C:\Windows\System32\lxducoms.exe

            [color=#E56717]========== Modules (No Company Name) ==========[/color]

            MOD - [2014/03/17 08:22:38 | 000,080,160 | ---- | M] () -- C:\Program Files\Glary Utilities 4\zlib1.dll
            MOD - [2014/03/15 02:50:40 | 000,394,568 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
            MOD - [2014/03/15 02:50:38 | 004,061,000 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll
            MOD - [2014/03/15 02:50:35 | 000,716,616 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
            MOD - [2014/03/15 02:50:34 | 000,100,168 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libegl.dll
            MOD - [2014/03/15 02:50:32 | 001,647,432 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
            MOD - [2014/03/15 02:50:30 | 000,051,016 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
            MOD - [2014/03/09 15:13:39 | 001,806,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\2bfb74c357b464512ac23cdb741e8bb9\System.Deployment.ni.dll
            MOD - [2014/03/09 15:13:36 | 000,310,784 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\089846a68fa746808f6f5ff49ada0cb0\System.Runtime.Serialization.Formatters.Soap.ni.dll
            MOD - [2014/02/14 15:10:00 | 011,926,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\102641775d6479119c61162a8a89bbff\System.Web.ni.dll
            MOD - [2014/02/14 15:09:38 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\465dac2a0ebb43fd93816404c1b03bc9\System.ServiceProcess.ni.dll
            MOD - [2014/02/14 15:09:37 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\32cb131358268f010b801e10cc87a76c\System.Runtime.Remoting.ni.dll
            MOD - [2014/02/14 15:09:17 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\97272e5adde36ea896d7216bf0270e15\System.Configuration.ni.dll
            MOD - [2014/02/14 15:08:30 | 005,463,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\672138dc2f47a077f59ef14290a6973e\System.Xml.ni.dll
            MOD - [2014/02/14 15:08:22 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a673aacf407b499981342bb709cce917\System.Windows.Forms.ni.dll
            MOD - [2014/02/14 15:08:04 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\d76ae95d56d39a59f727f5518ac8e396\System.Drawing.ni.dll
            MOD - [2014/02/14 15:06:32 | 007,993,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\20af51394609c937507288c2b1cf2c8c\System.ni.dll
            MOD - [2014/02/14 15:06:17 | 011,499,520 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\3de119146ed0e59408f896aa69cdfc42\mscorlib.ni.dll
            MOD - [2014/01/20 14:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
            MOD - [2014/01/20 14:16:38 | 001,044,808 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
            MOD - [2013/09/14 02:51:02 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
            MOD - [2013/09/14 02:50:36 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
            MOD - [2013/08/17 02:06:25 | 000,397,312 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
            MOD - [2013/08/17 02:06:25 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
            MOD - [2013/08/17 02:06:25 | 000,011,776 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
            MOD - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
            MOD - [2010/01/21 06:09:29 | 000,036,864 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Core.dll
            MOD - [2010/01/21 06:09:28 | 000,028,672 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Common.dll
            MOD - [2010/01/21 06:08:32 | 000,065,536 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.dll
            MOD - [2008/03/25 04:53:10 | 000,012,288 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll

            [color=#E56717]========== Services (SafeList) ==========[/color]

            SRV - File not found [Auto | Stopped] -- C:\Program Files\iSafe\iSafeSvc.exe -- (iSafeService)
            SRV - [2014/03/11 20:31:41 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
            SRV - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
            SRV - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
            SRV - [2014/02/13 02:36:33 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
            SRV - [2014/02/06 11:47:18 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
            SRV - [2014/01/16 02:39:44 | 000,235,696 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe -- (McComponentHostService)
            SRV - [2013/11/27 16:09:45 | 002,872,688 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\WSService.dll -- (WSService)
            SRV - [2013/11/27 11:01:56 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure)
            SRV - [2013/11/23 06:23:17 | 000,202,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
            SRV - [2013/11/08 05:30:03 | 001,128,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\AppXDeploymentServer.dll -- (AppXSvc)
            SRV - [2013/10/31 01:37:41 | 000,280,296 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
            SRV - [2013/10/31 01:37:40 | 000,022,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
            SRV - [2013/10/22 03:40:33 | 001,210,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\workfolderssvc.dll -- (workfolderssvc)
            SRV - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\System32\valWBFPolicyService.exe -- (valWBFPolicyService)
            SRV - [2013/10/04 10:00:53 | 000,409,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppReadiness.dll -- (AppReadiness)
            SRV - [2013/09/30 06:01:56 | 001,198,592 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc)
            SRV - [2013/09/30 06:01:56 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\GeofenceMonitorService.dll -- (lfsvc)
            SRV - [2013/09/30 06:01:56 | 000,301,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc)
            SRV - [2013/09/30 05:51:01 | 000,075,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\KeyboardFilterSvc.dll -- (MsKeyboardFilter)
            SRV - [2013/09/30 05:50:58 | 001,778,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
            SRV - [2013/09/30 05:50:54 | 000,174,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
            SRV - [2013/08/22 07:17:49 | 002,407,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll -- (PrintNotify)
            SRV - [2013/08/22 06:03:29 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wephostsvc.dll -- (WEPHOSTSVC)
            SRV - [2013/08/22 06:03:12 | 000,028,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\efssvc.dll -- (EFS)
            SRV - [2013/08/22 05:56:08 | 000,052,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc)
            SRV - [2013/08/22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
            SRV - [2013/08/22 05:54:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\svsvc.dll -- (svsvc)
            SRV - [2013/08/22 05:50:48 | 000,098,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fhsvc.dll -- (fhsvc)
            SRV - [2013/08/22 05:10:39 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc)
            SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicvss)
            SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmictimesync)
            SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown)
            SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicrdv)
            SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange)
            SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat)
            SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicguestinterface)
            SRV - [2013/08/22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\smphost.dll -- (smphost)
            SRV - [2013/08/22 04:49:34 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ScDeviceEnum.dll -- (ScDeviceEnum)
            SRV - [2013/08/22 04:48:12 | 000,044,032 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\keyiso.dll -- (KeyIso)
            SRV - [2013/08/22 04:45:36 | 000,173,056 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBroker)
            SRV - [2013/08/22 04:44:38 | 000,415,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm)
            SRV - [2013/08/22 04:41:55 | 000,124,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ncbservice.dll -- (NcbService)
            SRV - [2013/08/22 04:39:05 | 000,196,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\vaultsvc.dll -- (VaultSvc)
            SRV - [2013/08/22 04:38:43 | 000,306,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\das.dll -- (DeviceAssociationService)
            SRV - [2013/08/22 04:37:53 | 000,173,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
            SRV - [2013/08/22 04:36:04 | 000,614,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsm.dll -- (LSM)
            SRV - [2013/08/22 04:31:45 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc)
            SRV - [2013/08/22 04:21:32 | 000,064,000 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup)
            SRV - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) [Auto | Running] -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)
            SRV - [2011/10/17 16:51:54 | 000,013,824 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] -- C:\Program Files\HP\HPBDSService\HPBDSService.exe -- (HP DS Service)
            SRV - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxducoms.exe -- (lxdu_device)
            SRV - [2009/10/16 11:53:43 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe -- (lxduCATSCustConnectService)

            [color=#E56717]========== Driver Services (SafeList) ==========[/color]

            DRV - [2014/03/17 08:07:34 | 000,016,064 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BootDefragDriver.sys -- (BootDefragDriver)
            DRV - [2014/01/08 02:55:08 | 000,261,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBXHCI.SYS -- (USBXHCI)
            DRV - [2013/11/11 02:50:33 | 000,036,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\intelpep.sys -- (intelpep)
            DRV - [2013/11/01 12:17:26 | 000,077,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\pdc.sys -- (pdc)
            DRV - [2013/10/31 01:38:12 | 000,202,584 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\Drivers\WdFilter.sys -- (WdFilter)
            DRV - [2013/10/31 01:38:12 | 000,093,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WdNisDrv.sys -- (WdNisDrv)
            DRV - [2013/10/31 01:36:59 | 000,030,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\WdBoot.sys -- (WdBoot)
            DRV - [2013/10/26 22:28:41 | 000,120,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx2.sys -- (SerCx2)
            DRV - [2013/10/13 02:45:41 | 000,069,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\wfplwfs.sys -- (WFPLWFS)
            DRV - [2013/10/05 14:30:03 | 000,047,960 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\stornvme.sys -- (stornvme)
            DRV - [2013/10/05 14:30:02 | 000,321,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\spaceport.sys -- (spaceport)
            DRV - [2013/09/30 06:01:55 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBHUB3.SYS -- (USBHUB3)
            DRV - [2013/09/30 06:01:55 | 000,142,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VerifierExt.sys -- (VerifierExt)
            DRV - [2013/09/30 05:51:03 | 000,019,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\kbldfltr.sys -- (kbldfltr)
            DRV - [2013/09/30 05:51:01 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
            DRV - [2013/09/30 05:50:47 | 000,030,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\terminpt.sys -- (terminpt)
            DRV - [2013/08/22 08:13:53 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\condrv.sys -- (condrv)
            DRV - [2013/08/22 07:35:21 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\dam.sys -- (dam)
            DRV - [2013/08/22 07:35:20 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\acpiex.sys -- (acpiex)
            DRV - [2013/08/22 07:34:52 | 000,133,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tpm.sys -- (TPM)
            DRV - [2013/08/22 07:33:32 | 000,058,208 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\mvumis.sys -- (mvumis)
            DRV - [2013/08/22 07:33:31 | 000,033,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpiowin32.sys -- (msgpiowin32)
            DRV - [2013/08/22 07:33:30 | 000,122,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpioclx.sys -- (GPIOClx0101)
            DRV - [2013/08/22 07:33:30 | 000,068,960 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sas3.sys -- (LSI_SAS3)
            DRV - [2013/08/22 07:33:29 | 000,069,472 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sss.sys -- (LSI_SSS)
            DRV - [2013/08/22 07:33:26 | 000,086,368 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\3ware.sys -- (3ware)
            DRV - [2013/08/22 07:33:25 | 000,773,472 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\adp80xx.sys -- (ADP80XX)
            DRV - [2013/08/22 07:33:25 | 000,100,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
            DRV - [2013/08/22 07:33:24 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorClass.sys -- (EhStorClass)
            DRV - [2013/08/22 07:33:01 | 000,276,832 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\VSTXRAID.SYS -- (VSTXRAID)
            DRV - [2013/08/22 07:32:57 | 000,163,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\UCX01000.SYS -- (UCX01000)
            DRV - [2013/08/22 07:32:57 | 000,090,976 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\storahci.sys -- (storahci)
            DRV - [2013/08/22 07:32:57 | 000,064,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\sdstor.sys -- (sdstor)
            DRV - [2013/08/22 07:32:57 | 000,059,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SpbCx.sys -- (SpbCx)
            DRV - [2013/08/22 07:32:57 | 000,058,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx.sys -- (SerCx)
            DRV - [2013/08/22 07:32:57 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uaspstor.sys -- (UASPStor)
            DRV - [2013/08/22 07:32:38 | 000,031,584 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\Drivers\cnghwassist.sys -- (cnghwassist)
            DRV - [2013/08/22 07:25:38 | 000,046,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\wpcfltr.sys -- (wpcfltr)
            DRV - [2013/08/22 07:25:37 | 000,284,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\clfs.sys -- (CLFS)
            DRV - [2013/08/22 07:24:56 | 000,023,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uefi.sys -- (UEFI)
            DRV - [2013/08/22 07:24:36 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
            DRV - [2013/08/22 07:20:22 | 000,093,248 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmbus.sys -- (vmbus)
            DRV - [2013/08/22 07:20:22 | 000,045,376 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmstorfl.sys -- (storflt)
            DRV - [2013/08/22 07:20:22 | 000,042,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storvsc.sys -- (storvsc)
            DRV - [2013/08/22 06:11:37 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDPrint.sys -- (WSDPrintDevice)
            DRV - [2013/08/22 06:11:29 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\ahcache.sys -- (ahcache)
            DRV - [2013/08/22 06:11:26 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDScan.sys -- (WSDScan)
            DRV - [2013/08/22 06:11:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicDisplay.sys -- (BasicDisplay)
            DRV - [2013/08/22 06:10:58 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicRender.sys -- (BasicRender)
            DRV - [2013/08/22 06:10:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\HyperVideo.sys -- (HyperVideo)
            DRV - [2013/08/22 06:10:37 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mshidumdf.sys -- (mshidumdf)
            DRV - [2013/08/22 06:10:28 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpitime.sys -- (acpitime)
            DRV - [2013/08/22 06:10:21 | 000,009,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpipagr.sys -- (acpipagr)
            DRV - [2013/08/22 06:10:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\npsvctrig.sys -- (npsvctrig)
            DRV - [2013/08/22 06:10:01 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
            DRV - [2013/08/22 06:09:59 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\kdnic.sys -- (kdnic)
            DRV - [2013/08/22 06:09:57 | 000,006,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vms3cap.sys -- (s3cap)
            DRV - [2013/08/22 06:09:50 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vmgencounter.sys -- (gencounter)
            DRV - [2013/08/22 06:09:37 | 000,023,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthhfHid.sys -- (bthhfhid)
            DRV - [2013/08/22 06:09:23 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\winusb.sys -- (WinUsb)
            DRV - [2013/08/22 06:09:15 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bthhfenum.sys -- (BthHFEnum)
            DRV - [2013/08/22 06:09:10 | 000,026,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbGD.sys -- (TsUsbGD)
            DRV - [2013/08/22 06:09:09 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hyperkbd.sys -- (hyperkbd)
            DRV - [2013/08/22 06:09:03 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
            DRV - [2013/08/22 06:09:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hidi2c.sys -- (hidi2c)
            DRV - [2013/08/22 06:09:01 | 000,018,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VMBusHID.sys -- (VMBusHID)
            DRV - [2013/08/22 06:08:37 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\dmvsc.sys -- (dmvsc)
            DRV - [2013/08/22 06:08:18 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\netvsc63.sys -- (netvsc)
            DRV - [2013/08/22 06:08:06 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
            DRV - [2013/08/22 06:07:57 | 000,109,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
            DRV - [2013/08/22 06:07:55 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mslldp.sys -- (MsLldp)
            DRV - [2013/08/22 06:07:53 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\vwifimp.sys -- (vwifimp)
            DRV - [2013/08/22 06:07:19 | 000,091,136 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\Ndu.sys -- (Ndu)
            DRV - [2013/08/22 03:58:35 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\fxppm.sys -- (FxPPM)
            DRV - [2013/08/13 01:25:32 | 000,016,088 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bcmfn2.sys -- (bcmfn2)
            DRV - [2013/08/10 02:39:44 | 000,524,784 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\iaStorAV.sys -- (iaStorAV)
            DRV - [2013/07/23 23:18:30 | 000,061,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaioi2c.sys -- (iaioi2c)
            DRV - [2013/07/23 23:18:30 | 000,022,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaiogpio.sys -- (GPIO)
            DRV - [2013/07/01 18:50:13 | 007,783,600 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\BCMWL63.SYS -- (BCM43XX)
            DRV - [2013/06/18 14:23:13 | 000,490,496 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Rt630x86.sys -- (RTL8168)
            DRV - [2009/09/17 20:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\HECI.sys -- (HECI)
            DRV - [2004/02/04 11:27:56 | 000,049,536 | ---- | M] (Texas Instruments Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tiehdusb.sys -- (TIEHDUSB)

            [color=#E56717]========== Standard Registry (SafeList) ==========[/color]

            [color=#E56717]========== Internet Explorer ==========[/color]

            IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
            IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
            IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
            IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
            IE - HKLM\..\SearchScopes,DefaultScope =
            IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

            IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
            IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
            IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 26 E9 A3 0D 26 F1 CE 01 [binary data]
            IE - HKCU\..\SearchScopes,DefaultScope =
            IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
            IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
            IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

            [color=#E56717]========== FireFox ==========[/color]

            FF - prefs.js..browser.search.selectedEngine: ""
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.startup.homepage: ""
            FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - prefs.js..browser.search.update: false
            FF - user.js - File not found

            FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
            FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
            FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
            FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
            FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
            FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
            FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3522.0110: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
            FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
            FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
            FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

            FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
            FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

            [2014/03/07 13:21:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Extensions
            [2014/02/23 03:16:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\extensions
            [2014/03/31 17:53:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions
            [2014/03/31 17:53:37 | 000,000,000 | ---D | M] ("Pricora 2.0") -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***
            [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData
            [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins
            [2014/03/31 17:53:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode
            [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
            [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
            File not found (No name found) -- C:\PROGRAM FILES\MEDIAVIEWV1\MEDIAVIEWV1ALPHA4510\FF
            File not found (No name found) -- C:\PROGRAM FILES\MEDIAWATCHV1\MEDIAWATCHV1HOME837\FF

            [color=#E56717]========== Chrome ==========[/color]

            CHR - default_search_provider: Google (Enabled)
            CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
            CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
            CHR - homepage:
            CHR - plugin: Error reading preferences file
            CHR - Extension: Documents Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
            CHR - Extension: Google Drive = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
            CHR - Extension: YouTube = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
            CHR - Extension: Recherche Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
            CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider
            CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\
            CHR - Extension: Google Wallet = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
            CHR - Extension: Gmail = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

            O1 HOSTS File: ([2013/08/22 08:13:55 | 000,000,824 | ---- | M]) - C:\Windows\System32\Drivers\etc\hosts
            O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
            O2 - BHO: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
            O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
            O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
            O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
            O3 - HKLM\..\Toolbar: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
            O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
            O4 - HKLM..\Run: [] File not found
            O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
            O4 - HKLM..\Run: [lxduamon] C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe ()
            O4 - HKLM..\Run: [lxdumon.exe] C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe ()
            O4 - HKLM..\Run: [StatusAlerts] C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe (Hewlett-Packard Company)
            O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
            O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files\Glary Utilities 4\StartupManager.exe (Glarysoft Ltd)
            O4 - HKCU..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
            O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
            O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
            O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
            O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
            O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
            O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
            O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
            O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
            O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
            O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
            O13 - gopher Prefix: missing
            O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
            O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{64669DB8-203F-44AB-85AF-70C4EA2CC697}: DhcpNameServer = 192.168.1.254
            O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF06E942-E41D-448A-B4FE-FD3B4CDBAA5E}: DhcpNameServer = 192.168.1.254
            O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
            O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
            O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
            O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - igfxdev.dll (Intel Corporation)
            O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
            O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
            O32 - HKLM CDRom: AutoRun - 1
            O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
            O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell - "" = AutoRun
            O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell\AutoRun\command - "" = "F:\Autorun.exe"
            O34 - HKLM BootExecute: (autocheck autochk *)
            O35 - HKLM\..comfile [open] -- "%1" %*
            O35 - HKLM\..exefile [open] -- "%1" %*
            O37 - HKLM\...com [@ = comfile] -- "%1" %*
            O37 - HKLM\...exe [@ = exefile] -- "%1" %*
            O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
            O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

            [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

            [2014/04/06 21:00:31 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\wp_update
            [2014/04/06 20:56:48 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\iSafe
            [2014/04/02 22:55:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
            [2014/03/31 17:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Pricora 2.0
            [2014/03/28 13:12:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
            [2014/03/28 13:11:22 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Apps
            [2014/03/28 13:11:21 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Deployment
            [2014/03/26 00:14:49 | 000,000,000 | R--D | C] -- C:\Users\david\OneDrive
            [2014/03/26 00:14:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
            [2014/03/24 22:36:24 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
            [2014/03/24 22:35:43 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache
            [2014/03/20 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
            [2014/03/20 20:40:26 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Software
            [2014/03/20 08:55:15 | 000,000,000 | R--D | C] -- C:\Users\david\SkyDrive
            [2014/03/19 20:11:57 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\Identities
            [2014/03/14 01:51:16 | 000,202,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdFilter.sys
            [2014/03/14 01:51:14 | 000,030,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdBoot.sys
            [2014/03/14 01:51:13 | 000,093,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys
            [2014/03/14 01:50:45 | 003,486,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
            [2014/03/14 01:50:40 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncHost.exe
            [2014/03/14 01:50:37 | 013,949,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.dll
            [2014/03/14 01:50:34 | 000,588,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncCore.dll
            [2014/03/14 01:50:24 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSClient.dll
            [2014/03/14 01:50:22 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsGdiConverter.dll
            [2014/03/14 01:50:21 | 000,802,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFMediaEngine.dll
            [2014/03/14 01:50:20 | 000,770,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgent.dll
            [2014/03/14 01:50:19 | 000,381,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfsvr.dll
            [2014/03/14 01:50:18 | 000,320,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgmms1.sys
            [2014/03/14 01:50:17 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\halmacpi.dll
            [2014/03/14 01:50:17 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hal.dll
            [2014/03/14 01:50:16 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsSpellCheckingFacility.dll
            [2014/03/14 01:50:15 | 000,811,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reseteng.dll
            [2014/03/14 01:50:15 | 000,077,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easinvoker.exe
            [2014/03/14 01:50:09 | 000,261,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS
            [2014/03/14 01:50:09 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sti.dll
            [2014/03/14 01:50:09 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easwrt.dll
            [2014/03/14 01:50:00 | 002,143,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfcore.dll
            [2014/03/14 01:50:00 | 001,371,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\combase.dll
            [2014/03/14 01:49:59 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbgeng.dll
            [2014/03/14 01:49:59 | 000,669,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmpeg2srcsnk.dll
            [2014/03/14 01:49:59 | 000,408,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WerFault.exe
            [2014/03/14 01:49:59 | 000,369,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Faultrep.dll
            [2014/03/14 01:49:59 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpencom.dll
            [2014/03/14 01:49:58 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DWWIN.EXE
            [2014/03/14 01:49:58 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
            [2014/03/14 01:49:57 | 001,382,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.efi
            [2014/03/14 01:49:57 | 001,271,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.exe
            [2014/03/14 01:49:57 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdvidcrl.dll
            [2014/03/14 01:49:57 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qedit.dll
            [2014/03/14 01:49:57 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppcomapi.dll
            [2014/03/14 01:49:50 | 004,244,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9.dll
            [2014/03/14 01:49:49 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieapfltr.dll
            [2014/03/14 01:49:49 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
            [2014/03/14 01:49:49 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
            [2014/03/12 22:55:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
            [2014/03/12 22:55:53 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
            [2014/03/12 22:08:14 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\uTorrent
            [2014/03/12 11:36:42 | 000,000,000 | ---D | C] -- C:\ProgramData\GlarySoft

            [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

            [2014/04/09 21:09:33 | 000,812,350 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
            [2014/04/09 21:09:33 | 000,722,476 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
            [2014/04/09 21:09:33 | 000,159,412 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
            [2014/04/09 21:09:33 | 000,135,592 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
            [2014/04/09 21:05:16 | 000,002,147 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
            [2014/04/09 21:05:00 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
            [2014/04/09 21:04:29 | 000,000,338 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize 4.job
            [2014/04/09 21:03:40 | 000,003,120 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-3.job
            [2014/04/09 21:03:34 | 000,001,592 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-5.job
            [2014/04/09 21:03:32 | 000,002,328 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-4.job
            [2014/04/09 21:03:31 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
            [2014/04/09 21:03:28 | 000,001,498 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-1.job
            [2014/04/09 21:03:28 | 000,001,416 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-2.job
            [2014/04/09 21:02:58 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
            [2014/04/09 21:02:56 | 2515,468,288 | -HS- | M] () -- C:\hiberfil.sys
            [2014/04/09 19:31:04 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
            [2014/04/09 19:30:52 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_3
            [2014/04/09 19:30:51 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_2
            [2014/04/09 19:30:45 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_1
            [2014/04/09 19:30:35 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_4
            [2014/04/09 19:21:52 | 000,001,072 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
            [2014/04/09 18:57:12 | 000,000,125 | ---- | M] () -- C:\Users\david\AppData\Roaming\D2Info0
            [2014/04/06 21:20:37 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
            [2014/04/04 08:34:47 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_5
            [2014/04/02 23:05:24 | 000,367,896 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
            [2014/04/02 23:03:48 | 000,001,166 | ---- | M] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
            [2014/04/02 22:55:36 | 000,001,754 | ---- | M] () -- C:\Users\Public\Desktop\YAC.lnk
            [2014/04/01 20:16:46 | 000,033,898 | ---- | M] () -- C:\Users\david\Documents\Torah.odt
            [2014/03/29 21:12:36 | 000,002,247 | ---- | M] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
            [2014/03/27 00:39:49 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_6
            [2014/03/26 09:54:30 | 000,040,832 | ---- | M] () -- C:\Users\david\Documents\kinect.jpg
            [2014/03/24 19:43:54 | 000,001,078 | ---- | M] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 4.lnk
            [2014/03/24 19:43:54 | 000,001,054 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 4.lnk
            [2014/03/22 21:23:02 | 000,000,082 | ---- | M] () -- C:\Users\david\AppData\Roaming\WB.CFG
            [2014/03/22 21:09:01 | 000,001,046 | RHS- | M] () -- C:\ProgramData\ntuser.pol
            [2014/03/19 20:14:22 | 000,326,115 | ---- | M] () -- C:\Users\david\Documents\Scan.jpg
            [2014/03/17 08:23:10 | 000,101,664 | ---- | M] (Glarysoft Ltd) -- C:\WINDOWS\System32\BootDefrag.exe
            [2014/03/17 08:07:34 | 000,016,064 | ---- | M] (Glarysoft Ltd) -- C:\WINDOWS\System32\drivers\BootDefragDriver.sys
            [2014/03/12 22:09:09 | 000,000,897 | ---- | M] () -- C:\Users\david\Desktop\µTorrent.lnk
            [2014/03/12 21:56:42 | 000,493,272 | ---- | M] () -- C:\Users\david\AppData\Roaming\~yljxxkf.exe
            [2014/03/12 11:29:37 | 000,001,140 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
            [2014/03/11 22:21:16 | 000,001,038 | ---- | M] () -- C:\Users\david\Desktop\TPE.lnk

            [color=#E56717]========== Files Created - No Company Name ==========[/color]

            [2014/04/06 21:20:37 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
            [2014/04/02 22:55:36 | 000,001,754 | ---- | C] () -- C:\Users\Public\Desktop\YAC.lnk
            [2014/04/01 18:45:43 | 000,033,898 | ---- | C] () -- C:\Users\david\Documents\Torah.odt
            [2014/03/31 17:53:49 | 000,001,592 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-5.job
            [2014/03/31 17:53:46 | 000,001,416 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-2.job
            [2014/03/31 17:53:43 | 000,001,498 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-1.job
            [2014/03/31 17:53:24 | 000,002,328 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-4.job
            [2014/03/31 17:53:22 | 000,003,120 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-3.job
            [2014/03/28 13:12:35 | 000,002,247 | ---- | C] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
            [2014/03/28 13:12:35 | 000,002,147 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
            [2014/03/28 13:11:54 | 000,001,072 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
            [2014/03/28 13:11:53 | 000,001,068 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
            [2014/03/26 09:54:25 | 000,040,832 | ---- | C] () -- C:\Users\david\Documents\kinect.jpg
            [2014/03/24 23:25:34 | 000,002,573 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visionneuse Microsoft PowerPoint .lnk
            [2014/03/19 20:10:06 | 000,326,115 | ---- | C] () -- C:\Users\david\Documents\Scan.jpg
            [2014/03/14 01:50:24 | 000,103,936 | ---- | C] () -- C:\WINDOWS\System32\OEMLicense.dll
            [2014/03/14 01:49:58 | 000,386,722 | ---- | C] () -- C:\WINDOWS\System32\ApnDatabase.xml
            [2014/03/12 22:09:09 | 000,000,897 | ---- | C] () -- C:\Users\david\Desktop\µTorrent.lnk
            [2014/03/12 21:56:29 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~yljxxkf.exe
            [2014/03/11 22:20:55 | 000,001,038 | ---- | C] () -- C:\Users\david\Desktop\TPE.lnk
            [2014/03/09 18:36:27 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_8
            [2014/02/23 01:59:49 | 000,000,082 | ---- | C] () -- C:\Users\david\AppData\Roaming\WB.CFG
            [2014/02/17 19:58:27 | 000,001,046 | RHS- | C] () -- C:\ProgramData\ntuser.pol
            [2014/02/02 21:11:50 | 000,000,608 | -HS- | C] () -- C:\WINDOWS\System32\winzvprt5.sys
            [2014/02/02 21:11:50 | 000,000,230 | ---- | C] () -- C:\WINDOWS\System32\hppfaxprinter5.ini
            [2014/02/01 21:39:00 | 000,326,944 | ---- | C] () -- C:\Users\david\AppData\Roaming\~jaazigi.exe
            [2014/02/01 21:28:46 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~mypvlwd.exe
            [2014/01/26 16:56:07 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_7
            [2013/12/12 19:19:46 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_6
            [2013/12/10 18:32:17 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_5
            [2013/12/08 21:38:30 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxduvs.dll
            [2013/12/08 21:38:08 | 001,036,288 | ---- | C] () -- C:\WINDOWS\System32\lxdudrs.dll
            [2013/12/08 21:38:08 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\lxducaps.dll
            [2013/12/08 21:38:08 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxducnv4.dll
            [2013/12/08 21:37:58 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXDUPMON.DLL
            [2013/12/08 21:37:58 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXDUFXPU.DLL
            [2013/12/08 21:37:38 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\lxduoem.dll
            [2013/12/08 21:34:19 | 001,069,056 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduserv.dll
            [2013/12/08 21:34:19 | 000,860,160 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduusb1.dll
            [2013/12/08 21:34:19 | 000,446,464 | ---- | C] ( ) -- C:\WINDOWS\System32\LXDUhcp.dll
            [2013/12/08 21:34:19 | 000,389,120 | ---- | C] () -- C:\WINDOWS\System32\LXDUinst.dll
            [2013/12/08 21:34:19 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduinpa.dll
            [2013/12/08 21:34:19 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduiesc.dll
            [2013/12/08 21:34:18 | 000,651,264 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdupmui.dll
            [2013/12/08 21:34:18 | 000,577,536 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdulmpm.dll
            [2013/12/08 21:34:18 | 000,323,584 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduih.exe
            [2013/12/08 21:34:17 | 000,684,032 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduhbn3.dll
            [2013/12/08 21:34:17 | 000,589,824 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducoms.exe
            [2013/12/08 21:34:17 | 000,376,832 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducomm.dll
            [2013/12/08 21:34:17 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdugrd.dll
            [2013/12/08 21:34:16 | 000,761,856 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducomc.dll
            [2013/12/08 21:34:16 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducfg.exe
            [2013/12/08 21:30:56 | 000,409,600 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducoin.dll
            [2013/12/04 23:59:22 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_4
            [2013/12/04 23:59:16 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_3
            [2013/12/04 23:54:30 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_2
            [2013/12/04 23:54:07 | 000,000,125 | ---- | C] () -- C:\Users\david\AppData\Roaming\D2Info0
            [2013/12/04 23:54:07 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_1
            [2013/09/30 05:48:23 | 000,812,350 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
            [2013/09/30 05:48:23 | 000,350,772 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
            [2013/09/30 05:48:23 | 000,159,412 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
            [2013/09/30 05:48:23 | 000,040,528 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
            [2013/08/22 10:19:09 | 000,722,476 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
            [2013/08/22 10:19:09 | 000,296,742 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
            [2013/08/22 10:19:09 | 000,135,592 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
            [2013/08/22 10:19:09 | 000,033,362 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
            [2013/08/22 10:17:31 | 000,000,389 | ---- | C] () -- C:\WINDOWS\System32\AutoWorkplace.exe.config
            [2013/08/22 10:17:30 | 000,215,943 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
            [2013/08/22 10:17:29 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\NOISE.DAT
            [2013/08/22 09:24:03 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
            [2013/08/22 09:22:45 | 000,367,896 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
            [2013/08/22 05:33:54 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\BthpanContextHandler.dll
            [2013/08/22 05:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\BWContextHandler.dll
            [2013/08/22 01:57:03 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
            [2013/08/22 01:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
            [2013/08/22 01:52:35 | 001,520,828 | ---- | C] () -- C:\WINDOWS\System32\WpcNBModel.bin
            [2013/08/22 01:52:35 | 000,526,068 | ---- | C] () -- C:\WINDOWS\System32\staticurllist.bin
            [2013/08/22 01:50:57 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\settings.dat
            [2013/08/22 01:48:14 | 000,049,963 | ---- | C] () -- C:\WINDOWS\System32\srms.dat
            [2012/11/27 01:20:38 | 000,128,204 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng575.bin
            [2012/11/27 01:20:36 | 000,867,020 | ---- | C] () -- C:\WINDOWS\System32\igkrng575.bin
            [2012/11/27 01:20:36 | 000,105,608 | ---- | C] () -- C:\WINDOWS\System32\igfcg575m.bin
            [2012/11/27 01:03:36 | 013,913,600 | ---- | C] () -- C:\WINDOWS\System32\ig4icd32.dll
            [2012/11/27 00:56:12 | 000,004,096 | ---- | C] ( ) -- C:\WINDOWS\System32\IGFXDEVLib.dll
            [2012/11/27 00:54:56 | 000,000,146 |
            1. Modérateur
              Désinstalle isafe

              Sur Firefox : Menu Outils / Modules complémentaires
              Onglet Extension.
              Donne la liste.
              Supprime Picora si présent

              Sur Google Chrome : Menu en haut à droite puis Outils / Extensions
              Donne la liste.
              Supprime Picora si présent

              Relance OTL.
              o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
              Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

              :OTL
              [2014/04/06 21:00:31 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\wp_update
              [2014/04/06 20:56:48 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\iSafe
              [2014/04/02 22:55:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
              [2014/03/31 17:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Pricora 2.0
              [2014/03/28 13:12:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
              [2014/03/20 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
              [2014/03/20 20:40:26 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Software

              * poste le rapport ici

              1. Ah non je viens de voir
                http://pjjoint.malekal.com/files.php?id=20140407_p5v13s7f10p8
                1. http://pjjoint.malekal.com/uploader.php
                  Je ne vois pas trop quoi envoyer d'autre.
                  Sinon c'est pas grave je crois que pricora s'est enfin barré.
                  1. Modérateur
                    Incomplet, tu peux l'envoyer sur http://pjjoint.malekal.com et donner le lien ici.
                    1. Tu lis les fichiers OTL ?? Je comprend rien en fait.
                      Si tu donne des cours d'informatique (même crackage) sur Lyon se serait énorme x-)

                      OTL logfile created on: 06/04/2014 21:16:54 - Run 1
                      OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\david\Downloads
                      Professional (Version = 6.2.9200) - Type = NTWorkstation
                      Internet Explorer (Version = 9.11.9600.16521)
                      Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

                      2,93 Gb Total Physical Memory | 1,29 Gb Available Physical Memory | 44,22% Memory free
                      4,37 Gb Paging File | 2,26 Gb Available in Paging File | 51,80% Paging File free
                      Paging file location(s): ?:\pagefile.sys [binary data]

                      %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
                      Drive C: | 283,40 Gb Total Space | 200,73 Gb Free Space | 70,83% Space Free | Partition Type: NTFS

                      Computer Name: PC-DAVID | User Name: david | Logged in as Administrator.
                      Boot Mode: Normal | Scan Mode: Current user
                      Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

                      [color=#E56717]========== Processes (SafeList) ==========/color

                      PRC - [2014/04/06 21:01:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\david\Downloads\OTL.exe
                      PRC - [2014/03/17 08:19:52 | 000,785,184 | ---- | M] (Glarysoft Ltd) -- C:\Program Files\Glary Utilities 4\Integrator.exe
                      PRC - [2014/03/15 02:50:42 | 000,859,976 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
                      PRC - [2014/02/27 19:25:41 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x86__8wekyb3d8bbwe\LiveComm.exe
                      PRC - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
                      PRC - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
                      PRC - [2014/01/16 02:40:24 | 000,277,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
                      PRC - [2014/01/09 08:58:50 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SkyDrive.exe
                      PRC - [2013/12/27 09:03:13 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SettingSyncHost.exe
                      PRC - [2013/11/20 16:43:26 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
                      PRC - [2013/11/20 16:43:14 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
                      PRC - [2013/11/01 10:22:46 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe
                      PRC - [2013/10/22 08:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
                      PRC - [2013/10/16 11:34:26 | 000,518,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWAHost.exe
                      PRC - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) -- C:\Windows\System32\valWBFPolicyService.exe
                      PRC - [2013/08/22 07:30:48 | 000,066,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhostex.exe
                      PRC - [2013/08/22 07:30:48 | 000,064,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
                      PRC - [2013/08/22 07:21:42 | 000,029,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RuntimeBroker.exe
                      PRC - [2013/08/22 04:45:10 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dasHost.exe
                      PRC - [2012/07/18 13:02:42 | 000,313,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe
                      PRC - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
                      PRC - [2010/02/04 06:10:51 | 000,131,752 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 5600-6600 Series\ezprint.exe
                      PRC - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
                      PRC - [2010/02/04 06:10:44 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
                      PRC - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) -- C:\Windows\System32\lxducoms.exe

                      [color=#E56717]========== Modules (No Company Name) ==========/color

                      MOD - [2014/03/17 08:22:38 | 000,080,160 | ---- | M] () -- C:\Program Files\Glary Utilities 4\zlib1.dll
                      MOD - [2014/03/15 02:50:40 | 013,637,448 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll
                      MOD - [2014/03/15 02:50:40 | 000,394,568 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
                      MOD - [2014/03/15 02:50:38 | 004,061,000 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll
                      MOD - [2014/03/15 02:50:35 | 000,716,616 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
                      MOD - [2014/03/15 02:50:34 | 000,100,168 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libegl.dll
                      MOD - [2014/03/15 02:50:32 | 001,647,432 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
                      MOD - [2014/03/15 02:50:30 | 000,051,016 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
                      MOD - [2014/03/09 15:13:39 | 001,806,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\2bfb74c357b464512ac23cdb741e8bb9\System.Deployment.ni.dll
                      MOD - [2014/03/09 15:13:36 | 000,310,784 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\089846a68fa746808f6f5ff49ada0cb0\System.Runtime.Serialization.Formatters.Soap.ni.dll
                      MOD - [2014/02/14 15:10:00 | 011,926,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\102641775d6479119c61162a8a89bbff\System.Web.ni.dll
                      MOD - [2014/02/14 15:09:38 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\465dac2a0ebb43fd93816404c1b03bc9\System.ServiceProcess.ni.dll
                      MOD - [2014/02/14 15:09:37 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\32cb131358268f010b801e10cc87a76c\System.Runtime.Remoting.ni.dll
                      MOD - [2014/02/14 15:09:17 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\97272e5adde36ea896d7216bf0270e15\System.Configuration.ni.dll
                      MOD - [2014/02/14 15:08:30 | 005,463,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\672138dc2f47a077f59ef14290a6973e\System.Xml.ni.dll
                      MOD - [2014/02/14 15:08:22 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a673aacf407b499981342bb709cce917\System.Windows.Forms.ni.dll
                      MOD - [2014/02/14 15:08:04 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\d76ae95d56d39a59f727f5518ac8e396\System.Drawing.ni.dll
                      MOD - [2014/02/14 15:06:32 | 007,993,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\20af51394609c937507288c2b1cf2c8c\System.ni.dll
                      MOD - [2014/02/14 15:06:17 | 011,499,520 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\3de119146ed0e59408f896aa69cdfc42\mscorlib.ni.dll
                      MOD - [2014/01/20 14:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
                      MOD - [2014/01/20 14:16:38 | 001,044,808 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
                      MOD - [2013/09/14 02:51:02 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
                      MOD - [2013/09/14 02:50:36 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
                      MOD - [2013/08/17 02:06:25 | 000,397,312 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
                      MOD - [2013/08/17 02:06:25 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
                      MOD - [2013/08/17 02:06:25 | 000,011,776 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
                      MOD - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
                      MOD - [2010/02/04 06:10:44 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
                      MOD - [2010/02/04 05:28:36 | 000,081,920 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxducaps.dll
                      MOD - [2010/02/04 05:28:27 | 000,380,928 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduscw.dll
                      MOD - [2010/02/04 05:28:26 | 001,036,288 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduDRS.dll
                      MOD - [2010/02/04 05:27:21 | 000,380,928 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\iptk.dll
                      MOD - [2010/02/04 05:17:11 | 000,188,416 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxdudatr.dll
                      MOD - [2010/02/04 05:17:07 | 000,069,632 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxducnv4.dll
                      MOD - [2010/01/21 06:09:29 | 000,036,864 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Core.dll
                      MOD - [2010/01/21 06:09:28 | 000,028,672 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Common.dll
                      MOD - [2010/01/21 06:08:32 | 000,065,536 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.dll
                      MOD - [2008/03/25 04:53:10 | 000,012,288 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll
                      MOD - [2007/09/06 06:11:34 | 000,151,552 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduptp.dll

                      [color=#E56717]========== Services (SafeList) ==========/color

                      SRV - File not found [Auto | Stopped] -- C:\Program Files\iSafe\iSafeSvc.exe -- (iSafeService)
                      SRV - [2014/03/11 20:31:41 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
                      SRV - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
                      SRV - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
                      SRV - [2014/02/13 02:36:33 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
                      SRV - [2014/02/06 11:47:18 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
                      SRV - [2014/01/16 02:39:44 | 000,235,696 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe -- (McComponentHostService)
                      SRV - [2013/11/27 16:09:45 | 002,872,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WSService.dll -- (WSService)
                      SRV - [2013/11/27 11:01:56 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure)
                      SRV - [2013/11/23 06:23:17 | 000,202,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
                      SRV - [2013/11/08 05:30:03 | 001,128,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppXDeploymentServer.dll -- (AppXSvc)
                      SRV - [2013/10/31 01:37:41 | 000,280,296 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
                      SRV - [2013/10/31 01:37:40 | 000,022,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
                      SRV - [2013/10/22 03:40:33 | 001,210,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\workfolderssvc.dll -- (workfolderssvc)
                      SRV - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\System32\valWBFPolicyService.exe -- (valWBFPolicyService)
                      SRV - [2013/10/04 10:00:53 | 000,409,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppReadiness.dll -- (AppReadiness)
                      SRV - [2013/09/30 06:01:56 | 001,198,592 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc)
                      SRV - [2013/09/30 06:01:56 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\GeofenceMonitorService.dll -- (lfsvc)
                      SRV - [2013/09/30 06:01:56 | 000,301,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc)
                      SRV - [2013/09/30 05:51:01 | 000,075,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\KeyboardFilterSvc.dll -- (MsKeyboardFilter)
                      SRV - [2013/09/30 05:50:58 | 001,778,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
                      SRV - [2013/09/30 05:50:54 | 000,174,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
                      SRV - [2013/08/22 07:17:49 | 002,407,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll -- (PrintNotify)
                      SRV - [2013/08/22 06:03:29 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wephostsvc.dll -- (WEPHOSTSVC)
                      SRV - [2013/08/22 06:03:12 | 000,028,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\efssvc.dll -- (EFS)
                      SRV - [2013/08/22 05:56:08 | 000,052,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc)
                      SRV - [2013/08/22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
                      SRV - [2013/08/22 05:54:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\svsvc.dll -- (svsvc)
                      SRV - [2013/08/22 05:50:48 | 000,098,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fhsvc.dll -- (fhsvc)
                      SRV - [2013/08/22 05:10:39 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc)
                      SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicvss)
                      SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmictimesync)
                      SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown)
                      SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicrdv)
                      SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange)
                      SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat)
                      SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicguestinterface)
                      SRV - [2013/08/22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\smphost.dll -- (smphost)
                      SRV - [2013/08/22 04:49:34 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ScDeviceEnum.dll -- (ScDeviceEnum)
                      SRV - [2013/08/22 04:48:12 | 000,044,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\keyiso.dll -- (KeyIso)
                      SRV - [2013/08/22 04:45:36 | 000,173,056 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBroker)
                      SRV - [2013/08/22 04:44:38 | 000,415,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm)
                      SRV - [2013/08/22 04:41:55 | 000,124,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ncbservice.dll -- (NcbService)
                      SRV - [2013/08/22 04:39:05 | 000,196,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\vaultsvc.dll -- (VaultSvc)
                      SRV - [2013/08/22 04:38:43 | 000,306,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\das.dll -- (DeviceAssociationService)
                      SRV - [2013/08/22 04:37:53 | 000,173,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
                      SRV - [2013/08/22 04:36:04 | 000,614,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsm.dll -- (LSM)
                      SRV - [2013/08/22 04:31:45 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc)
                      SRV - [2013/08/22 04:21:32 | 000,064,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup)
                      SRV - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) [Auto | Running] -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)
                      SRV - [2011/10/17 16:51:54 | 000,013,824 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] -- C:\Program Files\HP\HPBDSService\HPBDSService.exe -- (HP DS Service)
                      SRV - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxducoms.exe -- (lxdu_device)
                      SRV - [2009/10/16 11:53:43 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe -- (lxduCATSCustConnectService)

                      [color=#E56717]========== Driver Services (SafeList) ==========/color

                      DRV - [2014/03/17 08:07:34 | 000,016,064 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BootDefragDriver.sys -- (BootDefragDriver)
                      DRV - [2014/01/08 02:55:08 | 000,261,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBXHCI.SYS -- (USBXHCI)
                      DRV - [2013/11/11 02:50:33 | 000,036,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\intelpep.sys -- (intelpep)
                      DRV - [2013/11/01 12:17:26 | 000,077,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\pdc.sys -- (pdc)
                      DRV - [2013/10/31 01:38:12 | 000,202,584 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\Drivers\WdFilter.sys -- (WdFilter)
                      DRV - [2013/10/31 01:38:12 | 000,093,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WdNisDrv.sys -- (WdNisDrv)
                      DRV - [2013/10/31 01:36:59 | 000,030,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\WdBoot.sys -- (WdBoot)
                      DRV - [2013/10/26 22:28:41 | 000,120,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx2.sys -- (SerCx2)
                      DRV - [2013/10/13 02:45:41 | 000,069,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\wfplwfs.sys -- (WFPLWFS)
                      DRV - [2013/10/05 14:30:03 | 000,047,960 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\stornvme.sys -- (stornvme)
                      DRV - [2013/10/05 14:30:02 | 000,321,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\spaceport.sys -- (spaceport)
                      DRV - [2013/09/30 06:01:55 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBHUB3.SYS -- (USBHUB3)
                      DRV - [2013/09/30 06:01:55 | 000,142,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VerifierExt.sys -- (VerifierExt)
                      DRV - [2013/09/30 05:51:03 | 000,019,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\kbldfltr.sys -- (kbldfltr)
                      DRV - [2013/09/30 05:51:01 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
                      DRV - [2013/09/30 05:50:47 | 000,030,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\terminpt.sys -- (terminpt)
                      DRV - [2013/08/22 08:13:53 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\condrv.sys -- (condrv)
                      DRV - [2013/08/22 07:35:21 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\dam.sys -- (dam)
                      DRV - [2013/08/22 07:35:20 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\acpiex.sys -- (acpiex)
                      DRV - [2013/08/22 07:34:52 | 000,133,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tpm.sys -- (TPM)
                      DRV - [2013/08/22 07:33:32 | 000,058,208 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\mvumis.sys -- (mvumis)
                      DRV - [2013/08/22 07:33:31 | 000,033,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpiowin32.sys -- (msgpiowin32)
                      DRV - [2013/08/22 07:33:30 | 000,122,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpioclx.sys -- (GPIOClx0101)
                      DRV - [2013/08/22 07:33:30 | 000,068,960 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sas3.sys -- (LSI_SAS3)
                      DRV - [2013/08/22 07:33:29 | 000,069,472 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sss.sys -- (LSI_SSS)
                      DRV - [2013/08/22 07:33:26 | 000,086,368 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\3ware.sys -- (3ware)
                      DRV - [2013/08/22 07:33:25 | 000,773,472 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\adp80xx.sys -- (ADP80XX)
                      DRV - [2013/08/22 07:33:25 | 000,100,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
                      DRV - [2013/08/22 07:33:24 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorClass.sys -- (EhStorClass)
                      DRV - [2013/08/22 07:33:01 | 000,276,832 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\VSTXRAID.SYS -- (VSTXRAID)
                      DRV - [2013/08/22 07:32:57 | 000,163,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\UCX01000.SYS -- (UCX01000)
                      DRV - [2013/08/22 07:32:57 | 000,090,976 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\storahci.sys -- (storahci)
                      DRV - [2013/08/22 07:32:57 | 000,064,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\sdstor.sys -- (sdstor)
                      DRV - [2013/08/22 07:32:57 | 000,059,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SpbCx.sys -- (SpbCx)
                      DRV - [2013/08/22 07:32:57 | 000,058,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx.sys -- (SerCx)
                      DRV - [2013/08/22 07:32:57 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uaspstor.sys -- (UASPStor)
                      DRV - [2013/08/22 07:32:38 | 000,031,584 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\Drivers\cnghwassist.sys -- (cnghwassist)
                      DRV - [2013/08/22 07:25:38 | 000,046,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\wpcfltr.sys -- (wpcfltr)
                      DRV - [2013/08/22 07:25:37 | 000,284,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\clfs.sys -- (CLFS)
                      DRV - [2013/08/22 07:24:56 | 000,023,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uefi.sys -- (UEFI)
                      DRV - [2013/08/22 07:24:36 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
                      DRV - [2013/08/22 07:20:22 | 000,093,248 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmbus.sys -- (vmbus)
                      DRV - [2013/08/22 07:20:22 | 000,045,376 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmstorfl.sys -- (storflt)
                      DRV - [2013/08/22 07:20:22 | 000,042,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storvsc.sys -- (storvsc)
                      DRV - [2013/08/22 06:11:37 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDPrint.sys -- (WSDPrintDevice)
                      DRV - [2013/08/22 06:11:29 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\ahcache.sys -- (ahcache)
                      DRV - [2013/08/22 06:11:26 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDScan.sys -- (WSDScan)
                      DRV - [2013/08/22 06:11:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicDisplay.sys -- (BasicDisplay)
                      DRV - [2013/08/22 06:10:58 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicRender.sys -- (BasicRender)
                      DRV - [2013/08/22 06:10:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\HyperVideo.sys -- (HyperVideo)
                      DRV - [2013/08/22 06:10:37 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mshidumdf.sys -- (mshidumdf)
                      DRV - [2013/08/22 06:10:28 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpitime.sys -- (acpitime)
                      DRV - [2013/08/22 06:10:21 | 000,009,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpipagr.sys -- (acpipagr)
                      DRV - [2013/08/22 06:10:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\npsvctrig.sys -- (npsvctrig)
                      DRV - [2013/08/22 06:10:01 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
                      DRV - [2013/08/22 06:09:59 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\kdnic.sys -- (kdnic)
                      DRV - [2013/08/22 06:09:57 | 000,006,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vms3cap.sys -- (s3cap)
                      DRV - [2013/08/22 06:09:50 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vmgencounter.sys -- (gencounter)
                      DRV - [2013/08/22 06:09:37 | 000,023,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthhfHid.sys -- (bthhfhid)
                      DRV - [2013/08/22 06:09:23 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\winusb.sys -- (WinUsb)
                      DRV - [2013/08/22 06:09:15 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bthhfenum.sys -- (BthHFEnum)
                      DRV - [2013/08/22 06:09:10 | 000,026,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbGD.sys -- (TsUsbGD)
                      DRV - [2013/08/22 06:09:09 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hyperkbd.sys -- (hyperkbd)
                      DRV - [2013/08/22 06:09:03 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
                      DRV - [2013/08/22 06:09:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hidi2c.sys -- (hidi2c)
                      DRV - [2013/08/22 06:09:01 | 000,018,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VMBusHID.sys -- (VMBusHID)
                      DRV - [2013/08/22 06:08:37 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\dmvsc.sys -- (dmvsc)
                      DRV - [2013/08/22 06:08:18 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\netvsc63.sys -- (netvsc)
                      DRV - [2013/08/22 06:08:06 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
                      DRV - [2013/08/22 06:07:57 | 000,109,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
                      DRV - [2013/08/22 06:07:55 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mslldp.sys -- (MsLldp)
                      DRV - [2013/08/22 06:07:53 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\vwifimp.sys -- (vwifimp)
                      DRV - [2013/08/22 06:07:19 | 000,091,136 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\Ndu.sys -- (Ndu)
                      DRV - [2013/08/22 03:58:35 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\fxppm.sys -- (FxPPM)
                      DRV - [2013/08/13 01:25:32 | 000,016,088 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bcmfn2.sys -- (bcmfn2)
                      DRV - [2013/08/10 02:39:44 | 000,524,784 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\iaStorAV.sys -- (iaStorAV)
                      DRV - [2013/07/23 23:18:30 | 000,061,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaioi2c.sys -- (iaioi2c)
                      DRV - [2013/07/23 23:18:30 | 000,022,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaiogpio.sys -- (GPIO)
                      DRV - [2013/07/01 18:50:13 | 007,783,600 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\BCMWL63.SYS -- (BCM43XX)
                      DRV - [2013/06/18 14:23:13 | 000,490,496 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Rt630x86.sys -- (RTL8168)
                      DRV - [2009/09/17 20:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\HECI.sys -- (HECI)
                      DRV - [2004/02/04 11:27:56 | 000,049,536 | ---- | M] (Texas Instruments Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tiehdusb.sys -- (TIEHDUSB)

                      [color=#E56717]========== Standard Registry (All) ==========/color

                      [color=#E56717]========== Internet Explorer ==========/color

                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
                      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
                      IE - HKLM\..\SearchScopes,DefaultScope =
                      IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

                      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
                      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
                      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
                      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 26 E9 A3 0D 26 F1 CE 01 [binary data]
                      IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
                      IE - HKCU\..\SearchScopes,DefaultScope =
                      IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
                      IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
                      IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

                      [color=#E56717]========== FireFox ==========/color

                      FF - prefs.js..browser.search.selectedEngine: ""
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.startup.homepage: ""
                      FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - prefs.js..browser.search.update: false
                      FF - user.js - File not found

                      FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
                      FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
                      FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
                      FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
                      FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
                      FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
                      FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3522.0110: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
                      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
                      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
                      FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

                      FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
                      FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

                      [2014/03/07 13:21:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Extensions
                      [2014/02/23 03:16:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\extensions
                      [2014/03/31 17:53:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions
                      [2014/03/31 17:53:37 | 000,000,000 | ---D | M] ("Pricora 2.0") -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***
                      [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData
                      [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins
                      [2014/03/31 17:53:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode
                      [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
                      [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
                      File not found (No name found) -- C:\PROGRAM FILES\MEDIAVIEWV1\MEDIAVIEWV1ALPHA4510\FF
                      File not found (No name found) -- C:\PROGRAM FILES\MEDIAWATCHV1\MEDIAWATCHV1HOME837\FF

                      [color=#E56717]========== Chrome ==========/color

                      CHR - default_search_provider: Google (Enabled)
                      CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
                      CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
                      CHR - homepage:
                      CHR - plugin: Error reading preferences file
                      CHR - Extension: Documents Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
                      CHR - Extension: Google Drive = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
                      CHR - Extension: YouTube = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
                      CHR - Extension: Recherche Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
                      CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider
                      CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\
                      CHR - Extension: Google Wallet = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
                      CHR - Extension: Gmail = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

                      O1 HOSTS File: ([2013/08/22 08:13:55 | 000,000,824 | ---- | M]) - C:\Windows\System32\Drivers\etc\hosts
                      O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
                      O2 - BHO: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
                      O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
                      O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
                      O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
                      O3 - HKLM\..\Toolbar: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
                      O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
                      O4 - HKLM..\Run: [] File not found
                      O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
                      O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
                      O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
                      O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
                      O4 - HKLM..\Run: [lxduamon] C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe ()
                      O4 - HKLM..\Run: [lxdumon.exe] C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe ()
                      O4 - HKLM..\Run: [StatusAlerts] C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe (Hewlett-Packard Company)
                      O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
                      O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files\Glary Utilities 4\StartupManager.exe (Glarysoft Ltd)
                      O4 - HKCU..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
                      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
                      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
                      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
                      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
                      O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
                      O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
                      O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
                      O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
                      O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
                      O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
                      O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
                      O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O10 - Protocol_Catalog9\Catalog_Entries\000000000036 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
                      O13 - gopher Prefix: missing
                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{64669DB8-203F-44AB-85AF-70C4EA2CC697}: DhcpNameServer = 192.168.1.1 192.168.1.1
                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF06E942-E41D-448A-B4FE-FD3B4CDBAA5E}: DhcpNameServer = 192.168.1.254
                      O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
                      O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
                      O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
                      O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
                      O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
                      O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
                      O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
                      O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
                      O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - igfxdev.dll (Intel Corporation)
                      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
                      O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
                      O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
                      O31 - SafeBoot: AlternateShell - cmd.exe
                      O32 - HKLM CDRom: AutoRun - 1
                      O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
                      O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell - "" = AutoRun
                      O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell\AutoRun\command - "" = "F:\Autorun.exe"
                      O34 - HKLM BootExecute: (autocheck autochk *)
                      O35 - HKLM\..comfile [open] -- "%1" %*
                      O35 - HKLM\..exefile [open] -- "%1" %*
                      O37 - HKLM\...com [@ = comfile] -- "%1" %*
                      O37 - HKLM\...exe [@ = exefile] -- "%1" %*
                      O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
                      O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

                      NetSvcs: wlidsvc - C:\Windows\System32\wlidsvc.dll (Microsoft Corporation)
                      NetSvcs: lfsvc - C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation)
                      NetSvcs: DsmSvc - C:\Windows\System32\DeviceSetupManager.dll (Microsoft Corporation)
                      NetSvcs: NcaSvc - C:\Windows\System32\NcaSvc.dll (Microsoft Corporation)
                      NetSvcs: FastUserSwitchingCompatibility - File not found
                      NetSvcs: Ias - C:\WINDOWS\System32\ias.dll (Microsoft Corporation)
                      NetSvcs: Nla - File not found
                      NetSvcs: Ntmssvc - File not found
                      NetSvcs: NWCWorkstation - File not found
                      NetSvcs: Nwsapagent - File not found
                      NetSvcs: SRService - File not found
                      NetSvcs: WmdmPmSp - File not found
                      NetSvcs: LogonHours - File not found
                      NetSvcs: PCAudit - File not found
                      NetSvcs: helpsvc - File not found
                      NetSvcs: uploadmgr - File not found
                      NetSvcs: MsKeyboardFilter - C:\Windows\System32\KeyboardFilterSvc.dll (Microsoft Corporation)

                      SafeBootMin: Base - Driver Group
                      SafeBootMin: BasicDisplay.sys - C:\Windows\System32\Drivers\BasicDisplay.sys (Microsoft Corporation)
                      SafeBootMin: BasicRender.sys - C:\Windows\System32\Drivers\BasicRender.sys (Microsoft Corporation)
                      SafeBootMin: Boot Bus Extender - Driver Group
                      SafeBootMin: Boot file system - Driver Group
                      SafeBootMin: BrokerInfrastructure - C:\Windows\System32\bisrv.dll (Microsoft Corporation)
                      SafeBootMin: EFS - C:\Windows\System32\efssvc.dll (Microsoft Corporation)
                      SafeBootMin: File system - Driver Group
                      SafeBootMin: Filter - Driver Group
                      SafeBootMin: HelpSvc - Service
                      SafeBootMin: iaioi2c.sys - C:\Windows\System32\Drivers\iaioi2c.sys (Intel Corporation)
                      SafeBootMin: KeyIso - C:\Windows\System32\keyiso.dll (Microsoft Corporation)
                      SafeBootMin: LSM - C:\Windows\System32\lsm.dll (Microsoft Corporation)
                      SafeBootMin: NTDS - File not found
                      SafeBootMin: PCI Configuration - Driver Group
                      SafeBootMin: PNP Filter - Driver Group
                      SafeBootMin: Primary disk - Driver Group
                      SafeBootMin: sacsvr - Service
                      SafeBootMin: SCSI Class - Driver Group
                      SafeBootMin: System Bus Extender - Driver Group
                      SafeBootMin: SystemEventsBroker - C:\Windows\System32\SystemEventsBrokerServer.dll (Microsoft Corporation)
                      SafeBootMin: TBS - Service
                      SafeBootMin: vmms - Service
                      SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
                      SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
                      SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
                      SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
                      SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
                      SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
                      SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
                      SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
                      SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
                      SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
                      SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
                      SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
                      SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
                      SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
                      SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
                      SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
                      SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
                      SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
                      SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
                      SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

                      SafeBootNet: Base - Driver Group
                      SafeBootNet: BasicDisplay.sys - C:\Windows\System32\Drivers\BasicDisplay.sys (Microsoft Corporation)
                      SafeBootNet: BasicRender.sys - C:\Windows\System32\Drivers\BasicRender.sys (Microsoft Corporation)
                      SafeBootNet: Boot Bus Extender - Driver Group
                      SafeBootNet: Boot file system - Driver Group
                      SafeBootNet: BrokerInfrastructure - C:\Windows\System32\bisrv.dll (Microsoft Corporation)
                      SafeBootNet: EFS - C:\Windows\System32\efssvc.dll (Microsoft Corporation)
                      SafeBootNet: File system - Driver Group
                      SafeBootNet: Filter - Driver Group
                      SafeBootNet: HelpSvc - Service
                      SafeBootNet: KeyIso - C:\Windows\System32\keyiso.dll (Microsoft Corporation)
                      SafeBootNet: LSM - C:\Windows\System32\lsm.dll (Microsoft Corporation)
                      SafeBootNet: Messenger - Service
                      SafeBootNet: NDIS Wrapper - Driver Group
                      SafeBootNet: NetBIOSGroup - Driver Group
                      SafeBootNet: NetDDEGroup - Driver Group
                      SafeBootNet: netprofm - C:\Windows\System32\netprofmsvc.dll (Microsoft Corporation)
                      SafeBootNet: Network - Driver Group
                      SafeBootNet: NetworkProvider - Driver Group
                      SafeBootNet: NTDS - File not found
                      SafeBootNet: PCI Configuration - Driver Group
                      SafeBootNet: PNP Filter - Driver Group
                      SafeBootNet: PNP_TDI - Driver Group
                      SafeBootNet: Primary disk - Driver Group
                      SafeBootNet: rdpencdd.sys - Driver
                      SafeBootNet: rdsessmgr - Service
                      SafeBootNet: sacsvr - Service
                      SafeBootNet: SCSI Class - Driver Group
                      SafeBootNet: SmartcardSimulator - Driver
                      SafeBootNet: Streams Drivers - Driver Group
                      SafeBootNet: System Bus Extender - Driver Group
                      SafeBootNet: SystemEventsBroker - C:\Windows\System32\SystemEventsBrokerServer.dll (Microsoft Corporation)
                      SafeBootNet: TBS - Service
                      SafeBootNet: TDI - Driver Group
                      SafeBootNet: VaultSvc - C:\Windows\System32\vaultsvc.dll (Microsoft Corporation)
                      SafeBootNet: VirtualSmartcardReader - Driver
                      SafeBootNet: vmms - Service
                      SafeBootNet: Wcmsvc - C:\Windows\System32\wcmsvc.dll (Microsoft Corporation)
                      SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (M
                      1. Modérateur
                        Mets le rapport OTL à disposition, histoire de voir :)
                        1. ça à l'air de marcher mais je suis pas sûr. Merci pour la rapidité de la réponse en tout cas
                          1. Modérateur
                            Salut,

                            Faut supprimer l'extension sur les navigateurs, sinon envoie les rapports sur http://pjjoint.malekal.com