Enlever Pricora problème

Résolu
J'ai suivis une parti de tes recommandations Malekal pour supprimer totalement Pricora.
J'ai mon rapport OTL et Extras mais je sais plus quoi en faire malekal. Un peu d'aide please !

18 réponses

  1. Modérateur
    Salut,

    Faut supprimer l'extension sur les navigateurs, sinon envoie les rapports sur http://pjjoint.malekal.com
    1. ça à l'air de marcher mais je suis pas sûr. Merci pour la rapidité de la réponse en tout cas
      1. Modérateur
        Mets le rapport OTL à disposition, histoire de voir :)
        1. Tu lis les fichiers OTL ?? Je comprend rien en fait.
          Si tu donne des cours d'informatique (même crackage) sur Lyon se serait énorme x-)

          OTL logfile created on: 06/04/2014 21:16:54 - Run 1
          OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\david\Downloads
          Professional (Version = 6.2.9200) - Type = NTWorkstation
          Internet Explorer (Version = 9.11.9600.16521)
          Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

          2,93 Gb Total Physical Memory | 1,29 Gb Available Physical Memory | 44,22% Memory free
          4,37 Gb Paging File | 2,26 Gb Available in Paging File | 51,80% Paging File free
          Paging file location(s): ?:\pagefile.sys [binary data]

          %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
          Drive C: | 283,40 Gb Total Space | 200,73 Gb Free Space | 70,83% Space Free | Partition Type: NTFS

          Computer Name: PC-DAVID | User Name: david | Logged in as Administrator.
          Boot Mode: Normal | Scan Mode: Current user
          Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

          [color=#E56717]========== Processes (SafeList) ==========/color

          PRC - [2014/04/06 21:01:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\david\Downloads\OTL.exe
          PRC - [2014/03/17 08:19:52 | 000,785,184 | ---- | M] (Glarysoft Ltd) -- C:\Program Files\Glary Utilities 4\Integrator.exe
          PRC - [2014/03/15 02:50:42 | 000,859,976 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
          PRC - [2014/02/27 19:25:41 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x86__8wekyb3d8bbwe\LiveComm.exe
          PRC - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
          PRC - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
          PRC - [2014/01/16 02:40:24 | 000,277,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
          PRC - [2014/01/09 08:58:50 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SkyDrive.exe
          PRC - [2013/12/27 09:03:13 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SettingSyncHost.exe
          PRC - [2013/11/20 16:43:26 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
          PRC - [2013/11/20 16:43:14 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
          PRC - [2013/11/01 10:22:46 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe
          PRC - [2013/10/22 08:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
          PRC - [2013/10/16 11:34:26 | 000,518,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWAHost.exe
          PRC - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) -- C:\Windows\System32\valWBFPolicyService.exe
          PRC - [2013/08/22 07:30:48 | 000,066,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhostex.exe
          PRC - [2013/08/22 07:30:48 | 000,064,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
          PRC - [2013/08/22 07:21:42 | 000,029,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RuntimeBroker.exe
          PRC - [2013/08/22 04:45:10 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dasHost.exe
          PRC - [2012/07/18 13:02:42 | 000,313,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe
          PRC - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
          PRC - [2010/02/04 06:10:51 | 000,131,752 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 5600-6600 Series\ezprint.exe
          PRC - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
          PRC - [2010/02/04 06:10:44 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
          PRC - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) -- C:\Windows\System32\lxducoms.exe

          [color=#E56717]========== Modules (No Company Name) ==========/color

          MOD - [2014/03/17 08:22:38 | 000,080,160 | ---- | M] () -- C:\Program Files\Glary Utilities 4\zlib1.dll
          MOD - [2014/03/15 02:50:40 | 013,637,448 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll
          MOD - [2014/03/15 02:50:40 | 000,394,568 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
          MOD - [2014/03/15 02:50:38 | 004,061,000 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll
          MOD - [2014/03/15 02:50:35 | 000,716,616 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
          MOD - [2014/03/15 02:50:34 | 000,100,168 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libegl.dll
          MOD - [2014/03/15 02:50:32 | 001,647,432 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
          MOD - [2014/03/15 02:50:30 | 000,051,016 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
          MOD - [2014/03/09 15:13:39 | 001,806,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\2bfb74c357b464512ac23cdb741e8bb9\System.Deployment.ni.dll
          MOD - [2014/03/09 15:13:36 | 000,310,784 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\089846a68fa746808f6f5ff49ada0cb0\System.Runtime.Serialization.Formatters.Soap.ni.dll
          MOD - [2014/02/14 15:10:00 | 011,926,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\102641775d6479119c61162a8a89bbff\System.Web.ni.dll
          MOD - [2014/02/14 15:09:38 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\465dac2a0ebb43fd93816404c1b03bc9\System.ServiceProcess.ni.dll
          MOD - [2014/02/14 15:09:37 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\32cb131358268f010b801e10cc87a76c\System.Runtime.Remoting.ni.dll
          MOD - [2014/02/14 15:09:17 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\97272e5adde36ea896d7216bf0270e15\System.Configuration.ni.dll
          MOD - [2014/02/14 15:08:30 | 005,463,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\672138dc2f47a077f59ef14290a6973e\System.Xml.ni.dll
          MOD - [2014/02/14 15:08:22 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a673aacf407b499981342bb709cce917\System.Windows.Forms.ni.dll
          MOD - [2014/02/14 15:08:04 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\d76ae95d56d39a59f727f5518ac8e396\System.Drawing.ni.dll
          MOD - [2014/02/14 15:06:32 | 007,993,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\20af51394609c937507288c2b1cf2c8c\System.ni.dll
          MOD - [2014/02/14 15:06:17 | 011,499,520 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\3de119146ed0e59408f896aa69cdfc42\mscorlib.ni.dll
          MOD - [2014/01/20 14:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
          MOD - [2014/01/20 14:16:38 | 001,044,808 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
          MOD - [2013/09/14 02:51:02 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
          MOD - [2013/09/14 02:50:36 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
          MOD - [2013/08/17 02:06:25 | 000,397,312 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
          MOD - [2013/08/17 02:06:25 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
          MOD - [2013/08/17 02:06:25 | 000,011,776 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
          MOD - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
          MOD - [2010/02/04 06:10:44 | 000,676,520 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
          MOD - [2010/02/04 05:28:36 | 000,081,920 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxducaps.dll
          MOD - [2010/02/04 05:28:27 | 000,380,928 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduscw.dll
          MOD - [2010/02/04 05:28:26 | 001,036,288 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduDRS.dll
          MOD - [2010/02/04 05:27:21 | 000,380,928 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\iptk.dll
          MOD - [2010/02/04 05:17:11 | 000,188,416 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxdudatr.dll
          MOD - [2010/02/04 05:17:07 | 000,069,632 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxducnv4.dll
          MOD - [2010/01/21 06:09:29 | 000,036,864 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Core.dll
          MOD - [2010/01/21 06:09:28 | 000,028,672 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Common.dll
          MOD - [2010/01/21 06:08:32 | 000,065,536 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.dll
          MOD - [2008/03/25 04:53:10 | 000,012,288 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll
          MOD - [2007/09/06 06:11:34 | 000,151,552 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduptp.dll

          [color=#E56717]========== Services (SafeList) ==========/color

          SRV - File not found [Auto | Stopped] -- C:\Program Files\iSafe\iSafeSvc.exe -- (iSafeService)
          SRV - [2014/03/11 20:31:41 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
          SRV - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
          SRV - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
          SRV - [2014/02/13 02:36:33 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
          SRV - [2014/02/06 11:47:18 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
          SRV - [2014/01/16 02:39:44 | 000,235,696 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe -- (McComponentHostService)
          SRV - [2013/11/27 16:09:45 | 002,872,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WSService.dll -- (WSService)
          SRV - [2013/11/27 11:01:56 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure)
          SRV - [2013/11/23 06:23:17 | 000,202,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
          SRV - [2013/11/08 05:30:03 | 001,128,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppXDeploymentServer.dll -- (AppXSvc)
          SRV - [2013/10/31 01:37:41 | 000,280,296 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
          SRV - [2013/10/31 01:37:40 | 000,022,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
          SRV - [2013/10/22 03:40:33 | 001,210,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\workfolderssvc.dll -- (workfolderssvc)
          SRV - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\System32\valWBFPolicyService.exe -- (valWBFPolicyService)
          SRV - [2013/10/04 10:00:53 | 000,409,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppReadiness.dll -- (AppReadiness)
          SRV - [2013/09/30 06:01:56 | 001,198,592 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc)
          SRV - [2013/09/30 06:01:56 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\GeofenceMonitorService.dll -- (lfsvc)
          SRV - [2013/09/30 06:01:56 | 000,301,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc)
          SRV - [2013/09/30 05:51:01 | 000,075,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\KeyboardFilterSvc.dll -- (MsKeyboardFilter)
          SRV - [2013/09/30 05:50:58 | 001,778,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
          SRV - [2013/09/30 05:50:54 | 000,174,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
          SRV - [2013/08/22 07:17:49 | 002,407,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll -- (PrintNotify)
          SRV - [2013/08/22 06:03:29 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wephostsvc.dll -- (WEPHOSTSVC)
          SRV - [2013/08/22 06:03:12 | 000,028,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\efssvc.dll -- (EFS)
          SRV - [2013/08/22 05:56:08 | 000,052,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc)
          SRV - [2013/08/22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
          SRV - [2013/08/22 05:54:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\svsvc.dll -- (svsvc)
          SRV - [2013/08/22 05:50:48 | 000,098,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fhsvc.dll -- (fhsvc)
          SRV - [2013/08/22 05:10:39 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc)
          SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicvss)
          SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmictimesync)
          SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown)
          SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicrdv)
          SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange)
          SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat)
          SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicguestinterface)
          SRV - [2013/08/22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\smphost.dll -- (smphost)
          SRV - [2013/08/22 04:49:34 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ScDeviceEnum.dll -- (ScDeviceEnum)
          SRV - [2013/08/22 04:48:12 | 000,044,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\keyiso.dll -- (KeyIso)
          SRV - [2013/08/22 04:45:36 | 000,173,056 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBroker)
          SRV - [2013/08/22 04:44:38 | 000,415,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm)
          SRV - [2013/08/22 04:41:55 | 000,124,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ncbservice.dll -- (NcbService)
          SRV - [2013/08/22 04:39:05 | 000,196,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\vaultsvc.dll -- (VaultSvc)
          SRV - [2013/08/22 04:38:43 | 000,306,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\das.dll -- (DeviceAssociationService)
          SRV - [2013/08/22 04:37:53 | 000,173,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
          SRV - [2013/08/22 04:36:04 | 000,614,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsm.dll -- (LSM)
          SRV - [2013/08/22 04:31:45 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc)
          SRV - [2013/08/22 04:21:32 | 000,064,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup)
          SRV - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) [Auto | Running] -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)
          SRV - [2011/10/17 16:51:54 | 000,013,824 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] -- C:\Program Files\HP\HPBDSService\HPBDSService.exe -- (HP DS Service)
          SRV - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxducoms.exe -- (lxdu_device)
          SRV - [2009/10/16 11:53:43 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe -- (lxduCATSCustConnectService)

          [color=#E56717]========== Driver Services (SafeList) ==========/color

          DRV - [2014/03/17 08:07:34 | 000,016,064 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BootDefragDriver.sys -- (BootDefragDriver)
          DRV - [2014/01/08 02:55:08 | 000,261,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBXHCI.SYS -- (USBXHCI)
          DRV - [2013/11/11 02:50:33 | 000,036,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\intelpep.sys -- (intelpep)
          DRV - [2013/11/01 12:17:26 | 000,077,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\pdc.sys -- (pdc)
          DRV - [2013/10/31 01:38:12 | 000,202,584 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\Drivers\WdFilter.sys -- (WdFilter)
          DRV - [2013/10/31 01:38:12 | 000,093,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WdNisDrv.sys -- (WdNisDrv)
          DRV - [2013/10/31 01:36:59 | 000,030,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\WdBoot.sys -- (WdBoot)
          DRV - [2013/10/26 22:28:41 | 000,120,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx2.sys -- (SerCx2)
          DRV - [2013/10/13 02:45:41 | 000,069,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\wfplwfs.sys -- (WFPLWFS)
          DRV - [2013/10/05 14:30:03 | 000,047,960 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\stornvme.sys -- (stornvme)
          DRV - [2013/10/05 14:30:02 | 000,321,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\spaceport.sys -- (spaceport)
          DRV - [2013/09/30 06:01:55 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBHUB3.SYS -- (USBHUB3)
          DRV - [2013/09/30 06:01:55 | 000,142,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VerifierExt.sys -- (VerifierExt)
          DRV - [2013/09/30 05:51:03 | 000,019,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\kbldfltr.sys -- (kbldfltr)
          DRV - [2013/09/30 05:51:01 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
          DRV - [2013/09/30 05:50:47 | 000,030,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\terminpt.sys -- (terminpt)
          DRV - [2013/08/22 08:13:53 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\condrv.sys -- (condrv)
          DRV - [2013/08/22 07:35:21 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\dam.sys -- (dam)
          DRV - [2013/08/22 07:35:20 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\acpiex.sys -- (acpiex)
          DRV - [2013/08/22 07:34:52 | 000,133,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tpm.sys -- (TPM)
          DRV - [2013/08/22 07:33:32 | 000,058,208 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\mvumis.sys -- (mvumis)
          DRV - [2013/08/22 07:33:31 | 000,033,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpiowin32.sys -- (msgpiowin32)
          DRV - [2013/08/22 07:33:30 | 000,122,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpioclx.sys -- (GPIOClx0101)
          DRV - [2013/08/22 07:33:30 | 000,068,960 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sas3.sys -- (LSI_SAS3)
          DRV - [2013/08/22 07:33:29 | 000,069,472 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sss.sys -- (LSI_SSS)
          DRV - [2013/08/22 07:33:26 | 000,086,368 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\3ware.sys -- (3ware)
          DRV - [2013/08/22 07:33:25 | 000,773,472 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\adp80xx.sys -- (ADP80XX)
          DRV - [2013/08/22 07:33:25 | 000,100,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
          DRV - [2013/08/22 07:33:24 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorClass.sys -- (EhStorClass)
          DRV - [2013/08/22 07:33:01 | 000,276,832 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\VSTXRAID.SYS -- (VSTXRAID)
          DRV - [2013/08/22 07:32:57 | 000,163,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\UCX01000.SYS -- (UCX01000)
          DRV - [2013/08/22 07:32:57 | 000,090,976 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\storahci.sys -- (storahci)
          DRV - [2013/08/22 07:32:57 | 000,064,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\sdstor.sys -- (sdstor)
          DRV - [2013/08/22 07:32:57 | 000,059,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SpbCx.sys -- (SpbCx)
          DRV - [2013/08/22 07:32:57 | 000,058,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx.sys -- (SerCx)
          DRV - [2013/08/22 07:32:57 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uaspstor.sys -- (UASPStor)
          DRV - [2013/08/22 07:32:38 | 000,031,584 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\Drivers\cnghwassist.sys -- (cnghwassist)
          DRV - [2013/08/22 07:25:38 | 000,046,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\wpcfltr.sys -- (wpcfltr)
          DRV - [2013/08/22 07:25:37 | 000,284,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\clfs.sys -- (CLFS)
          DRV - [2013/08/22 07:24:56 | 000,023,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uefi.sys -- (UEFI)
          DRV - [2013/08/22 07:24:36 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
          DRV - [2013/08/22 07:20:22 | 000,093,248 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmbus.sys -- (vmbus)
          DRV - [2013/08/22 07:20:22 | 000,045,376 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmstorfl.sys -- (storflt)
          DRV - [2013/08/22 07:20:22 | 000,042,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storvsc.sys -- (storvsc)
          DRV - [2013/08/22 06:11:37 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDPrint.sys -- (WSDPrintDevice)
          DRV - [2013/08/22 06:11:29 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\ahcache.sys -- (ahcache)
          DRV - [2013/08/22 06:11:26 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDScan.sys -- (WSDScan)
          DRV - [2013/08/22 06:11:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicDisplay.sys -- (BasicDisplay)
          DRV - [2013/08/22 06:10:58 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicRender.sys -- (BasicRender)
          DRV - [2013/08/22 06:10:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\HyperVideo.sys -- (HyperVideo)
          DRV - [2013/08/22 06:10:37 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mshidumdf.sys -- (mshidumdf)
          DRV - [2013/08/22 06:10:28 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpitime.sys -- (acpitime)
          DRV - [2013/08/22 06:10:21 | 000,009,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpipagr.sys -- (acpipagr)
          DRV - [2013/08/22 06:10:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\npsvctrig.sys -- (npsvctrig)
          DRV - [2013/08/22 06:10:01 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
          DRV - [2013/08/22 06:09:59 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\kdnic.sys -- (kdnic)
          DRV - [2013/08/22 06:09:57 | 000,006,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vms3cap.sys -- (s3cap)
          DRV - [2013/08/22 06:09:50 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vmgencounter.sys -- (gencounter)
          DRV - [2013/08/22 06:09:37 | 000,023,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthhfHid.sys -- (bthhfhid)
          DRV - [2013/08/22 06:09:23 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\winusb.sys -- (WinUsb)
          DRV - [2013/08/22 06:09:15 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bthhfenum.sys -- (BthHFEnum)
          DRV - [2013/08/22 06:09:10 | 000,026,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbGD.sys -- (TsUsbGD)
          DRV - [2013/08/22 06:09:09 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hyperkbd.sys -- (hyperkbd)
          DRV - [2013/08/22 06:09:03 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
          DRV - [2013/08/22 06:09:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hidi2c.sys -- (hidi2c)
          DRV - [2013/08/22 06:09:01 | 000,018,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VMBusHID.sys -- (VMBusHID)
          DRV - [2013/08/22 06:08:37 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\dmvsc.sys -- (dmvsc)
          DRV - [2013/08/22 06:08:18 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\netvsc63.sys -- (netvsc)
          DRV - [2013/08/22 06:08:06 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
          DRV - [2013/08/22 06:07:57 | 000,109,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
          DRV - [2013/08/22 06:07:55 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mslldp.sys -- (MsLldp)
          DRV - [2013/08/22 06:07:53 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\vwifimp.sys -- (vwifimp)
          DRV - [2013/08/22 06:07:19 | 000,091,136 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\Ndu.sys -- (Ndu)
          DRV - [2013/08/22 03:58:35 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\fxppm.sys -- (FxPPM)
          DRV - [2013/08/13 01:25:32 | 000,016,088 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bcmfn2.sys -- (bcmfn2)
          DRV - [2013/08/10 02:39:44 | 000,524,784 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\iaStorAV.sys -- (iaStorAV)
          DRV - [2013/07/23 23:18:30 | 000,061,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaioi2c.sys -- (iaioi2c)
          DRV - [2013/07/23 23:18:30 | 000,022,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaiogpio.sys -- (GPIO)
          DRV - [2013/07/01 18:50:13 | 007,783,600 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\BCMWL63.SYS -- (BCM43XX)
          DRV - [2013/06/18 14:23:13 | 000,490,496 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Rt630x86.sys -- (RTL8168)
          DRV - [2009/09/17 20:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\HECI.sys -- (HECI)
          DRV - [2004/02/04 11:27:56 | 000,049,536 | ---- | M] (Texas Instruments Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tiehdusb.sys -- (TIEHDUSB)

          [color=#E56717]========== Standard Registry (All) ==========/color

          [color=#E56717]========== Internet Explorer ==========/color

          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
          IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
          IE - HKLM\..\SearchScopes,DefaultScope =
          IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

          IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
          IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
          IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
          IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
          IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 26 E9 A3 0D 26 F1 CE 01 [binary data]
          IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
          IE - HKCU\..\SearchScopes,DefaultScope =
          IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
          IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
          IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

          [color=#E56717]========== FireFox ==========/color

          FF - prefs.js..browser.search.selectedEngine: ""
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.startup.homepage: ""
          FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - prefs.js..browser.search.update: false
          FF - user.js - File not found

          FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
          FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
          FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
          FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
          FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
          FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
          FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3522.0110: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
          FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
          FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
          FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

          FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
          FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

          [2014/03/07 13:21:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Extensions
          [2014/02/23 03:16:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\extensions
          [2014/03/31 17:53:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions
          [2014/03/31 17:53:37 | 000,000,000 | ---D | M] ("Pricora 2.0") -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***
          [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData
          [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins
          [2014/03/31 17:53:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode
          [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
          [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
          File not found (No name found) -- C:\PROGRAM FILES\MEDIAVIEWV1\MEDIAVIEWV1ALPHA4510\FF
          File not found (No name found) -- C:\PROGRAM FILES\MEDIAWATCHV1\MEDIAWATCHV1HOME837\FF

          [color=#E56717]========== Chrome ==========/color

          CHR - default_search_provider: Google (Enabled)
          CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
          CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
          CHR - homepage:
          CHR - plugin: Error reading preferences file
          CHR - Extension: Documents Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
          CHR - Extension: Google Drive = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
          CHR - Extension: YouTube = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
          CHR - Extension: Recherche Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
          CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider
          CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\
          CHR - Extension: Google Wallet = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
          CHR - Extension: Gmail = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

          O1 HOSTS File: ([2013/08/22 08:13:55 | 000,000,824 | ---- | M]) - C:\Windows\System32\Drivers\etc\hosts
          O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
          O2 - BHO: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
          O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
          O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
          O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
          O3 - HKLM\..\Toolbar: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
          O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
          O4 - HKLM..\Run: [] File not found
          O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
          O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
          O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
          O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
          O4 - HKLM..\Run: [lxduamon] C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe ()
          O4 - HKLM..\Run: [lxdumon.exe] C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe ()
          O4 - HKLM..\Run: [StatusAlerts] C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe (Hewlett-Packard Company)
          O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
          O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files\Glary Utilities 4\StartupManager.exe (Glarysoft Ltd)
          O4 - HKCU..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
          O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
          O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
          O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
          O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
          O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
          O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
          O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
          O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
          O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
          O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
          O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
          O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O10 - Protocol_Catalog9\Catalog_Entries\000000000036 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
          O13 - gopher Prefix: missing
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{64669DB8-203F-44AB-85AF-70C4EA2CC697}: DhcpNameServer = 192.168.1.1 192.168.1.1
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF06E942-E41D-448A-B4FE-FD3B4CDBAA5E}: DhcpNameServer = 192.168.1.254
          O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
          O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
          O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
          O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
          O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
          O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
          O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
          O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
          O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
          O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
          O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
          O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
          O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
          O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
          O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
          O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
          O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
          O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
          O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
          O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
          O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
          O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
          O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
          O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
          O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
          O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - igfxdev.dll (Intel Corporation)
          O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
          O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
          O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
          O31 - SafeBoot: AlternateShell - cmd.exe
          O32 - HKLM CDRom: AutoRun - 1
          O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
          O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell - "" = AutoRun
          O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell\AutoRun\command - "" = "F:\Autorun.exe"
          O34 - HKLM BootExecute: (autocheck autochk *)
          O35 - HKLM\..comfile [open] -- "%1" %*
          O35 - HKLM\..exefile [open] -- "%1" %*
          O37 - HKLM\...com [@ = comfile] -- "%1" %*
          O37 - HKLM\...exe [@ = exefile] -- "%1" %*
          O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
          O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

          NetSvcs: wlidsvc - C:\Windows\System32\wlidsvc.dll (Microsoft Corporation)
          NetSvcs: lfsvc - C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation)
          NetSvcs: DsmSvc - C:\Windows\System32\DeviceSetupManager.dll (Microsoft Corporation)
          NetSvcs: NcaSvc - C:\Windows\System32\NcaSvc.dll (Microsoft Corporation)
          NetSvcs: FastUserSwitchingCompatibility - File not found
          NetSvcs: Ias - C:\WINDOWS\System32\ias.dll (Microsoft Corporation)
          NetSvcs: Nla - File not found
          NetSvcs: Ntmssvc - File not found
          NetSvcs: NWCWorkstation - File not found
          NetSvcs: Nwsapagent - File not found
          NetSvcs: SRService - File not found
          NetSvcs: WmdmPmSp - File not found
          NetSvcs: LogonHours - File not found
          NetSvcs: PCAudit - File not found
          NetSvcs: helpsvc - File not found
          NetSvcs: uploadmgr - File not found
          NetSvcs: MsKeyboardFilter - C:\Windows\System32\KeyboardFilterSvc.dll (Microsoft Corporation)

          SafeBootMin: Base - Driver Group
          SafeBootMin: BasicDisplay.sys - C:\Windows\System32\Drivers\BasicDisplay.sys (Microsoft Corporation)
          SafeBootMin: BasicRender.sys - C:\Windows\System32\Drivers\BasicRender.sys (Microsoft Corporation)
          SafeBootMin: Boot Bus Extender - Driver Group
          SafeBootMin: Boot file system - Driver Group
          SafeBootMin: BrokerInfrastructure - C:\Windows\System32\bisrv.dll (Microsoft Corporation)
          SafeBootMin: EFS - C:\Windows\System32\efssvc.dll (Microsoft Corporation)
          SafeBootMin: File system - Driver Group
          SafeBootMin: Filter - Driver Group
          SafeBootMin: HelpSvc - Service
          SafeBootMin: iaioi2c.sys - C:\Windows\System32\Drivers\iaioi2c.sys (Intel Corporation)
          SafeBootMin: KeyIso - C:\Windows\System32\keyiso.dll (Microsoft Corporation)
          SafeBootMin: LSM - C:\Windows\System32\lsm.dll (Microsoft Corporation)
          SafeBootMin: NTDS - File not found
          SafeBootMin: PCI Configuration - Driver Group
          SafeBootMin: PNP Filter - Driver Group
          SafeBootMin: Primary disk - Driver Group
          SafeBootMin: sacsvr - Service
          SafeBootMin: SCSI Class - Driver Group
          SafeBootMin: System Bus Extender - Driver Group
          SafeBootMin: SystemEventsBroker - C:\Windows\System32\SystemEventsBrokerServer.dll (Microsoft Corporation)
          SafeBootMin: TBS - Service
          SafeBootMin: vmms - Service
          SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
          SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
          SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
          SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
          SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
          SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
          SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
          SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
          SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
          SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
          SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
          SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
          SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
          SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
          SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
          SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
          SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
          SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
          SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
          SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

          SafeBootNet: Base - Driver Group
          SafeBootNet: BasicDisplay.sys - C:\Windows\System32\Drivers\BasicDisplay.sys (Microsoft Corporation)
          SafeBootNet: BasicRender.sys - C:\Windows\System32\Drivers\BasicRender.sys (Microsoft Corporation)
          SafeBootNet: Boot Bus Extender - Driver Group
          SafeBootNet: Boot file system - Driver Group
          SafeBootNet: BrokerInfrastructure - C:\Windows\System32\bisrv.dll (Microsoft Corporation)
          SafeBootNet: EFS - C:\Windows\System32\efssvc.dll (Microsoft Corporation)
          SafeBootNet: File system - Driver Group
          SafeBootNet: Filter - Driver Group
          SafeBootNet: HelpSvc - Service
          SafeBootNet: KeyIso - C:\Windows\System32\keyiso.dll (Microsoft Corporation)
          SafeBootNet: LSM - C:\Windows\System32\lsm.dll (Microsoft Corporation)
          SafeBootNet: Messenger - Service
          SafeBootNet: NDIS Wrapper - Driver Group
          SafeBootNet: NetBIOSGroup - Driver Group
          SafeBootNet: NetDDEGroup - Driver Group
          SafeBootNet: netprofm - C:\Windows\System32\netprofmsvc.dll (Microsoft Corporation)
          SafeBootNet: Network - Driver Group
          SafeBootNet: NetworkProvider - Driver Group
          SafeBootNet: NTDS - File not found
          SafeBootNet: PCI Configuration - Driver Group
          SafeBootNet: PNP Filter - Driver Group
          SafeBootNet: PNP_TDI - Driver Group
          SafeBootNet: Primary disk - Driver Group
          SafeBootNet: rdpencdd.sys - Driver
          SafeBootNet: rdsessmgr - Service
          SafeBootNet: sacsvr - Service
          SafeBootNet: SCSI Class - Driver Group
          SafeBootNet: SmartcardSimulator - Driver
          SafeBootNet: Streams Drivers - Driver Group
          SafeBootNet: System Bus Extender - Driver Group
          SafeBootNet: SystemEventsBroker - C:\Windows\System32\SystemEventsBrokerServer.dll (Microsoft Corporation)
          SafeBootNet: TBS - Service
          SafeBootNet: TDI - Driver Group
          SafeBootNet: VaultSvc - C:\Windows\System32\vaultsvc.dll (Microsoft Corporation)
          SafeBootNet: VirtualSmartcardReader - Driver
          SafeBootNet: vmms - Service
          SafeBootNet: Wcmsvc - C:\Windows\System32\wcmsvc.dll (Microsoft Corporation)
          SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (M
          1. Modérateur
            Incomplet, tu peux l'envoyer sur http://pjjoint.malekal.com et donner le lien ici.
            1. http://pjjoint.malekal.com/uploader.php
              Je ne vois pas trop quoi envoyer d'autre.
              Sinon c'est pas grave je crois que pricora s'est enfin barré.
              1. Ah non je viens de voir
                http://pjjoint.malekal.com/files.php?id=20140407_p5v13s7f10p8
                1. Modérateur
                  Désinstalle isafe

                  Sur Firefox : Menu Outils / Modules complémentaires
                  Onglet Extension.
                  Donne la liste.
                  Supprime Picora si présent

                  Sur Google Chrome : Menu en haut à droite puis Outils / Extensions
                  Donne la liste.
                  Supprime Picora si présent

                  Relance OTL.
                  o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
                  Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

                  :OTL
                  [2014/04/06 21:00:31 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\wp_update
                  [2014/04/06 20:56:48 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\iSafe
                  [2014/04/02 22:55:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
                  [2014/03/31 17:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Pricora 2.0
                  [2014/03/28 13:12:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
                  [2014/03/20 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
                  [2014/03/20 20:40:26 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Software

                  * poste le rapport ici

                  1. OTL logfile created on: 09/04/2014 21:05:49 - Run 2
                    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\david\Downloads
                    Professional (Version = 6.2.9200) - Type = NTWorkstation
                    Internet Explorer (Version = 9.11.9600.16521)
                    Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

                    2,93 Gb Total Physical Memory | 1,57 Gb Available Physical Memory | 53,68% Memory free
                    4,37 Gb Paging File | 2,94 Gb Available in Paging File | 67,42% Paging File free
                    Paging file location(s): ?:\pagefile.sys [binary data]

                    %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
                    Drive C: | 283,40 Gb Total Space | 200,47 Gb Free Space | 70,74% Space Free | Partition Type: NTFS

                    Computer Name: PC-DAVID | User Name: david | Logged in as Administrator.
                    Boot Mode: Normal | Scan Mode: Current user
                    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

                    [color=#E56717]========== Processes (SafeList) ==========[/color]

                    PRC - [2014/04/06 21:01:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\david\Downloads\OTL.exe
                    PRC - [2014/03/17 08:21:58 | 000,037,152 | ---- | M] (Glarysoft Ltd) -- C:\Program Files\Glary Utilities 4\StartupManager.exe
                    PRC - [2014/03/17 08:19:52 | 000,785,184 | ---- | M] (Glarysoft Ltd) -- C:\Program Files\Glary Utilities 4\Integrator.exe
                    PRC - [2014/03/15 02:50:42 | 000,859,976 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
                    PRC - [2014/02/27 19:25:41 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x86__8wekyb3d8bbwe\LiveComm.exe
                    PRC - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
                    PRC - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
                    PRC - [2014/01/16 02:40:24 | 000,277,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
                    PRC - [2014/01/09 08:58:50 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SkyDrive.exe
                    PRC - [2013/12/27 09:03:13 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SettingSyncHost.exe
                    PRC - [2013/11/20 16:43:26 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
                    PRC - [2013/11/20 16:43:14 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
                    PRC - [2013/11/01 10:22:46 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe
                    PRC - [2013/10/22 08:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
                    PRC - [2013/10/16 11:34:26 | 000,518,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWAHost.exe
                    PRC - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) -- C:\Windows\System32\valWBFPolicyService.exe
                    PRC - [2013/08/22 08:15:13 | 000,188,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16470_none_9e05f679e2df8b7c\TiWorker.exe
                    PRC - [2013/08/22 07:30:48 | 000,066,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhostex.exe
                    PRC - [2013/08/22 07:21:42 | 000,029,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RuntimeBroker.exe
                    PRC - [2013/08/22 05:38:22 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ThumbnailExtractionHost.exe
                    PRC - [2013/08/22 04:45:10 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dasHost.exe
                    PRC - [2012/07/18 13:02:42 | 000,313,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe
                    PRC - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
                    PRC - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
                    PRC - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) -- C:\Windows\System32\lxducoms.exe

                    [color=#E56717]========== Modules (No Company Name) ==========[/color]

                    MOD - [2014/03/17 08:22:38 | 000,080,160 | ---- | M] () -- C:\Program Files\Glary Utilities 4\zlib1.dll
                    MOD - [2014/03/15 02:50:40 | 000,394,568 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
                    MOD - [2014/03/15 02:50:38 | 004,061,000 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll
                    MOD - [2014/03/15 02:50:35 | 000,716,616 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
                    MOD - [2014/03/15 02:50:34 | 000,100,168 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\libegl.dll
                    MOD - [2014/03/15 02:50:32 | 001,647,432 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
                    MOD - [2014/03/15 02:50:30 | 000,051,016 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
                    MOD - [2014/03/09 15:13:39 | 001,806,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\2bfb74c357b464512ac23cdb741e8bb9\System.Deployment.ni.dll
                    MOD - [2014/03/09 15:13:36 | 000,310,784 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\089846a68fa746808f6f5ff49ada0cb0\System.Runtime.Serialization.Formatters.Soap.ni.dll
                    MOD - [2014/02/14 15:10:00 | 011,926,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\102641775d6479119c61162a8a89bbff\System.Web.ni.dll
                    MOD - [2014/02/14 15:09:38 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\465dac2a0ebb43fd93816404c1b03bc9\System.ServiceProcess.ni.dll
                    MOD - [2014/02/14 15:09:37 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\32cb131358268f010b801e10cc87a76c\System.Runtime.Remoting.ni.dll
                    MOD - [2014/02/14 15:09:17 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\97272e5adde36ea896d7216bf0270e15\System.Configuration.ni.dll
                    MOD - [2014/02/14 15:08:30 | 005,463,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\672138dc2f47a077f59ef14290a6973e\System.Xml.ni.dll
                    MOD - [2014/02/14 15:08:22 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a673aacf407b499981342bb709cce917\System.Windows.Forms.ni.dll
                    MOD - [2014/02/14 15:08:04 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\d76ae95d56d39a59f727f5518ac8e396\System.Drawing.ni.dll
                    MOD - [2014/02/14 15:06:32 | 007,993,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\20af51394609c937507288c2b1cf2c8c\System.ni.dll
                    MOD - [2014/02/14 15:06:17 | 011,499,520 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\3de119146ed0e59408f896aa69cdfc42\mscorlib.ni.dll
                    MOD - [2014/01/20 14:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
                    MOD - [2014/01/20 14:16:38 | 001,044,808 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
                    MOD - [2013/09/14 02:51:02 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
                    MOD - [2013/09/14 02:50:36 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
                    MOD - [2013/08/17 02:06:25 | 000,397,312 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
                    MOD - [2013/08/17 02:06:25 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
                    MOD - [2013/08/17 02:06:25 | 000,011,776 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
                    MOD - [2010/02/04 06:10:48 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
                    MOD - [2010/01/21 06:09:29 | 000,036,864 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Core.dll
                    MOD - [2010/01/21 06:09:28 | 000,028,672 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\App4R.Monitor.Common.dll
                    MOD - [2010/01/21 06:08:32 | 000,065,536 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.dll
                    MOD - [2008/03/25 04:53:10 | 000,012,288 | ---- | M] () -- C:\Program Files\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll

                    [color=#E56717]========== Services (SafeList) ==========[/color]

                    SRV - File not found [Auto | Stopped] -- C:\Program Files\iSafe\iSafeSvc.exe -- (iSafeService)
                    SRV - [2014/03/11 20:31:41 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
                    SRV - [2014/02/25 10:19:08 | 000,108,032 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
                    SRV - [2014/02/17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
                    SRV - [2014/02/13 02:36:33 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
                    SRV - [2014/02/06 11:47:18 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
                    SRV - [2014/01/16 02:39:44 | 000,235,696 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe -- (McComponentHostService)
                    SRV - [2013/11/27 16:09:45 | 002,872,688 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\WSService.dll -- (WSService)
                    SRV - [2013/11/27 11:01:56 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure)
                    SRV - [2013/11/23 06:23:17 | 000,202,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
                    SRV - [2013/11/08 05:30:03 | 001,128,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\AppXDeploymentServer.dll -- (AppXSvc)
                    SRV - [2013/10/31 01:37:41 | 000,280,296 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
                    SRV - [2013/10/31 01:37:40 | 000,022,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
                    SRV - [2013/10/22 03:40:33 | 001,210,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\workfolderssvc.dll -- (workfolderssvc)
                    SRV - [2013/10/11 19:52:08 | 000,029,184 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\System32\valWBFPolicyService.exe -- (valWBFPolicyService)
                    SRV - [2013/10/04 10:00:53 | 000,409,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AppReadiness.dll -- (AppReadiness)
                    SRV - [2013/09/30 06:01:56 | 001,198,592 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc)
                    SRV - [2013/09/30 06:01:56 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\GeofenceMonitorService.dll -- (lfsvc)
                    SRV - [2013/09/30 06:01:56 | 000,301,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc)
                    SRV - [2013/09/30 05:51:01 | 000,075,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\KeyboardFilterSvc.dll -- (MsKeyboardFilter)
                    SRV - [2013/09/30 05:50:58 | 001,778,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
                    SRV - [2013/09/30 05:50:54 | 000,174,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
                    SRV - [2013/08/22 07:17:49 | 002,407,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll -- (PrintNotify)
                    SRV - [2013/08/22 06:03:29 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wephostsvc.dll -- (WEPHOSTSVC)
                    SRV - [2013/08/22 06:03:12 | 000,028,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\efssvc.dll -- (EFS)
                    SRV - [2013/08/22 05:56:08 | 000,052,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc)
                    SRV - [2013/08/22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
                    SRV - [2013/08/22 05:54:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\svsvc.dll -- (svsvc)
                    SRV - [2013/08/22 05:50:48 | 000,098,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fhsvc.dll -- (fhsvc)
                    SRV - [2013/08/22 05:10:39 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc)
                    SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicvss)
                    SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmictimesync)
                    SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown)
                    SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicrdv)
                    SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange)
                    SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat)
                    SRV - [2013/08/22 05:05:56 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicguestinterface)
                    SRV - [2013/08/22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\smphost.dll -- (smphost)
                    SRV - [2013/08/22 04:49:34 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ScDeviceEnum.dll -- (ScDeviceEnum)
                    SRV - [2013/08/22 04:48:12 | 000,044,032 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\keyiso.dll -- (KeyIso)
                    SRV - [2013/08/22 04:45:36 | 000,173,056 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBroker)
                    SRV - [2013/08/22 04:44:38 | 000,415,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm)
                    SRV - [2013/08/22 04:41:55 | 000,124,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ncbservice.dll -- (NcbService)
                    SRV - [2013/08/22 04:39:05 | 000,196,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\vaultsvc.dll -- (VaultSvc)
                    SRV - [2013/08/22 04:38:43 | 000,306,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\das.dll -- (DeviceAssociationService)
                    SRV - [2013/08/22 04:37:53 | 000,173,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
                    SRV - [2013/08/22 04:36:04 | 000,614,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsm.dll -- (LSM)
                    SRV - [2013/08/22 04:31:45 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc)
                    SRV - [2013/08/22 04:21:32 | 000,064,000 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup)
                    SRV - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) [Auto | Running] -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)
                    SRV - [2011/10/17 16:51:54 | 000,013,824 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] -- C:\Program Files\HP\HPBDSService\HPBDSService.exe -- (HP DS Service)
                    SRV - [2009/10/16 12:06:30 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxducoms.exe -- (lxdu_device)
                    SRV - [2009/10/16 11:53:43 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe -- (lxduCATSCustConnectService)

                    [color=#E56717]========== Driver Services (SafeList) ==========[/color]

                    DRV - [2014/03/17 08:07:34 | 000,016,064 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BootDefragDriver.sys -- (BootDefragDriver)
                    DRV - [2014/01/08 02:55:08 | 000,261,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBXHCI.SYS -- (USBXHCI)
                    DRV - [2013/11/11 02:50:33 | 000,036,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\intelpep.sys -- (intelpep)
                    DRV - [2013/11/01 12:17:26 | 000,077,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\pdc.sys -- (pdc)
                    DRV - [2013/10/31 01:38:12 | 000,202,584 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\Drivers\WdFilter.sys -- (WdFilter)
                    DRV - [2013/10/31 01:38:12 | 000,093,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WdNisDrv.sys -- (WdNisDrv)
                    DRV - [2013/10/31 01:36:59 | 000,030,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\WdBoot.sys -- (WdBoot)
                    DRV - [2013/10/26 22:28:41 | 000,120,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx2.sys -- (SerCx2)
                    DRV - [2013/10/13 02:45:41 | 000,069,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\wfplwfs.sys -- (WFPLWFS)
                    DRV - [2013/10/05 14:30:03 | 000,047,960 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\stornvme.sys -- (stornvme)
                    DRV - [2013/10/05 14:30:02 | 000,321,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\spaceport.sys -- (spaceport)
                    DRV - [2013/09/30 06:01:55 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBHUB3.SYS -- (USBHUB3)
                    DRV - [2013/09/30 06:01:55 | 000,142,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VerifierExt.sys -- (VerifierExt)
                    DRV - [2013/09/30 05:51:03 | 000,019,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\kbldfltr.sys -- (kbldfltr)
                    DRV - [2013/09/30 05:51:01 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
                    DRV - [2013/09/30 05:50:47 | 000,030,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\terminpt.sys -- (terminpt)
                    DRV - [2013/08/22 08:13:53 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\condrv.sys -- (condrv)
                    DRV - [2013/08/22 07:35:21 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\dam.sys -- (dam)
                    DRV - [2013/08/22 07:35:20 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\acpiex.sys -- (acpiex)
                    DRV - [2013/08/22 07:34:52 | 000,133,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tpm.sys -- (TPM)
                    DRV - [2013/08/22 07:33:32 | 000,058,208 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\mvumis.sys -- (mvumis)
                    DRV - [2013/08/22 07:33:31 | 000,033,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpiowin32.sys -- (msgpiowin32)
                    DRV - [2013/08/22 07:33:30 | 000,122,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpioclx.sys -- (GPIOClx0101)
                    DRV - [2013/08/22 07:33:30 | 000,068,960 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sas3.sys -- (LSI_SAS3)
                    DRV - [2013/08/22 07:33:29 | 000,069,472 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sss.sys -- (LSI_SSS)
                    DRV - [2013/08/22 07:33:26 | 000,086,368 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\3ware.sys -- (3ware)
                    DRV - [2013/08/22 07:33:25 | 000,773,472 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\adp80xx.sys -- (ADP80XX)
                    DRV - [2013/08/22 07:33:25 | 000,100,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
                    DRV - [2013/08/22 07:33:24 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorClass.sys -- (EhStorClass)
                    DRV - [2013/08/22 07:33:01 | 000,276,832 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\VSTXRAID.SYS -- (VSTXRAID)
                    DRV - [2013/08/22 07:32:57 | 000,163,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\UCX01000.SYS -- (UCX01000)
                    DRV - [2013/08/22 07:32:57 | 000,090,976 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\storahci.sys -- (storahci)
                    DRV - [2013/08/22 07:32:57 | 000,064,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\sdstor.sys -- (sdstor)
                    DRV - [2013/08/22 07:32:57 | 000,059,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SpbCx.sys -- (SpbCx)
                    DRV - [2013/08/22 07:32:57 | 000,058,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx.sys -- (SerCx)
                    DRV - [2013/08/22 07:32:57 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uaspstor.sys -- (UASPStor)
                    DRV - [2013/08/22 07:32:38 | 000,031,584 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\Drivers\cnghwassist.sys -- (cnghwassist)
                    DRV - [2013/08/22 07:25:38 | 000,046,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\wpcfltr.sys -- (wpcfltr)
                    DRV - [2013/08/22 07:25:37 | 000,284,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\clfs.sys -- (CLFS)
                    DRV - [2013/08/22 07:24:56 | 000,023,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uefi.sys -- (UEFI)
                    DRV - [2013/08/22 07:24:36 | 000,023,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
                    DRV - [2013/08/22 07:20:22 | 000,093,248 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmbus.sys -- (vmbus)
                    DRV - [2013/08/22 07:20:22 | 000,045,376 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmstorfl.sys -- (storflt)
                    DRV - [2013/08/22 07:20:22 | 000,042,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storvsc.sys -- (storvsc)
                    DRV - [2013/08/22 06:11:37 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDPrint.sys -- (WSDPrintDevice)
                    DRV - [2013/08/22 06:11:29 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\ahcache.sys -- (ahcache)
                    DRV - [2013/08/22 06:11:26 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WSDScan.sys -- (WSDScan)
                    DRV - [2013/08/22 06:11:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicDisplay.sys -- (BasicDisplay)
                    DRV - [2013/08/22 06:10:58 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicRender.sys -- (BasicRender)
                    DRV - [2013/08/22 06:10:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\HyperVideo.sys -- (HyperVideo)
                    DRV - [2013/08/22 06:10:37 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mshidumdf.sys -- (mshidumdf)
                    DRV - [2013/08/22 06:10:28 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpitime.sys -- (acpitime)
                    DRV - [2013/08/22 06:10:21 | 000,009,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpipagr.sys -- (acpipagr)
                    DRV - [2013/08/22 06:10:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\npsvctrig.sys -- (npsvctrig)
                    DRV - [2013/08/22 06:10:01 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
                    DRV - [2013/08/22 06:09:59 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\kdnic.sys -- (kdnic)
                    DRV - [2013/08/22 06:09:57 | 000,006,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vms3cap.sys -- (s3cap)
                    DRV - [2013/08/22 06:09:50 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vmgencounter.sys -- (gencounter)
                    DRV - [2013/08/22 06:09:37 | 000,023,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthhfHid.sys -- (bthhfhid)
                    DRV - [2013/08/22 06:09:23 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\winusb.sys -- (WinUsb)
                    DRV - [2013/08/22 06:09:15 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bthhfenum.sys -- (BthHFEnum)
                    DRV - [2013/08/22 06:09:10 | 000,026,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbGD.sys -- (TsUsbGD)
                    DRV - [2013/08/22 06:09:09 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hyperkbd.sys -- (hyperkbd)
                    DRV - [2013/08/22 06:09:03 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
                    DRV - [2013/08/22 06:09:01 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hidi2c.sys -- (hidi2c)
                    DRV - [2013/08/22 06:09:01 | 000,018,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VMBusHID.sys -- (VMBusHID)
                    DRV - [2013/08/22 06:08:37 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\dmvsc.sys -- (dmvsc)
                    DRV - [2013/08/22 06:08:18 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\netvsc63.sys -- (netvsc)
                    DRV - [2013/08/22 06:08:06 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
                    DRV - [2013/08/22 06:07:57 | 000,109,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
                    DRV - [2013/08/22 06:07:55 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mslldp.sys -- (MsLldp)
                    DRV - [2013/08/22 06:07:53 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\vwifimp.sys -- (vwifimp)
                    DRV - [2013/08/22 06:07:19 | 000,091,136 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\Ndu.sys -- (Ndu)
                    DRV - [2013/08/22 03:58:35 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\fxppm.sys -- (FxPPM)
                    DRV - [2013/08/13 01:25:32 | 000,016,088 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bcmfn2.sys -- (bcmfn2)
                    DRV - [2013/08/10 02:39:44 | 000,524,784 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\iaStorAV.sys -- (iaStorAV)
                    DRV - [2013/07/23 23:18:30 | 000,061,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaioi2c.sys -- (iaioi2c)
                    DRV - [2013/07/23 23:18:30 | 000,022,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\iaiogpio.sys -- (GPIO)
                    DRV - [2013/07/01 18:50:13 | 007,783,600 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\BCMWL63.SYS -- (BCM43XX)
                    DRV - [2013/06/18 14:23:13 | 000,490,496 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Rt630x86.sys -- (RTL8168)
                    DRV - [2009/09/17 20:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\HECI.sys -- (HECI)
                    DRV - [2004/02/04 11:27:56 | 000,049,536 | ---- | M] (Texas Instruments Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\tiehdusb.sys -- (TIEHDUSB)

                    [color=#E56717]========== Standard Registry (SafeList) ==========[/color]

                    [color=#E56717]========== Internet Explorer ==========[/color]

                    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
                    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
                    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
                    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
                    IE - HKLM\..\SearchScopes,DefaultScope =
                    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

                    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
                    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
                    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 26 E9 A3 0D 26 F1 CE 01 [binary data]
                    IE - HKCU\..\SearchScopes,DefaultScope =
                    IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
                    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
                    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

                    [color=#E56717]========== FireFox ==========[/color]

                    FF - prefs.js..browser.search.selectedEngine: ""
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.startup.homepage: ""
                    FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - prefs.js..browser.search.update: false
                    FF - user.js - File not found

                    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
                    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
                    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
                    FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
                    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
                    FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
                    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3522.0110: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
                    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
                    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
                    FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

                    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
                    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

                    [2014/03/07 13:21:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Extensions
                    [2014/02/23 03:16:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\extensions
                    [2014/03/31 17:53:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions
                    [2014/03/31 17:53:37 | 000,000,000 | ---D | M] ("Pricora 2.0") -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***
                    [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData
                    [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins
                    [2014/03/31 17:53:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode
                    [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
                    [2014/03/07 13:20:31 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
                    File not found (No name found) -- C:\PROGRAM FILES\MEDIAVIEWV1\MEDIAVIEWV1ALPHA4510\FF
                    File not found (No name found) -- C:\PROGRAM FILES\MEDIAWATCHV1\MEDIAWATCHV1HOME837\FF

                    [color=#E56717]========== Chrome ==========[/color]

                    CHR - default_search_provider: Google (Enabled)
                    CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
                    CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
                    CHR - homepage:
                    CHR - plugin: Error reading preferences file
                    CHR - Extension: Documents Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
                    CHR - Extension: Google Drive = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
                    CHR - Extension: YouTube = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
                    CHR - Extension: Recherche Google = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
                    CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider
                    CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\
                    CHR - Extension: Google Wallet = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
                    CHR - Extension: Gmail = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

                    O1 HOSTS File: ([2013/08/22 08:13:55 | 000,000,824 | ---- | M]) - C:\Windows\System32\Drivers\etc\hosts
                    O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
                    O2 - BHO: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
                    O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
                    O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
                    O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
                    O3 - HKLM\..\Toolbar: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
                    O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Barre d'outils) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
                    O4 - HKLM..\Run: [] File not found
                    O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
                    O4 - HKLM..\Run: [lxduamon] C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe ()
                    O4 - HKLM..\Run: [lxdumon.exe] C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe ()
                    O4 - HKLM..\Run: [StatusAlerts] C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe (Hewlett-Packard Company)
                    O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
                    O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files\Glary Utilities 4\StartupManager.exe (Glarysoft Ltd)
                    O4 - HKCU..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
                    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
                    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
                    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
                    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
                    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
                    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
                    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
                    O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
                    O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
                    O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
                    O13 - gopher Prefix: missing
                    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
                    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{64669DB8-203F-44AB-85AF-70C4EA2CC697}: DhcpNameServer = 192.168.1.254
                    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF06E942-E41D-448A-B4FE-FD3B4CDBAA5E}: DhcpNameServer = 192.168.1.254
                    O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
                    O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
                    O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
                    O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - igfxdev.dll (Intel Corporation)
                    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
                    O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
                    O32 - HKLM CDRom: AutoRun - 1
                    O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
                    O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell - "" = AutoRun
                    O33 - MountPoints2\{e0f61b4d-8a05-11e3-972a-f04da28a49d0}\Shell\AutoRun\command - "" = "F:\Autorun.exe"
                    O34 - HKLM BootExecute: (autocheck autochk *)
                    O35 - HKLM\..comfile [open] -- "%1" %*
                    O35 - HKLM\..exefile [open] -- "%1" %*
                    O37 - HKLM\...com [@ = comfile] -- "%1" %*
                    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
                    O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
                    O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

                    [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

                    [2014/04/06 21:00:31 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\wp_update
                    [2014/04/06 20:56:48 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\iSafe
                    [2014/04/02 22:55:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
                    [2014/03/31 17:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Pricora 2.0
                    [2014/03/28 13:12:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
                    [2014/03/28 13:11:22 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Apps
                    [2014/03/28 13:11:21 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Deployment
                    [2014/03/26 00:14:49 | 000,000,000 | R--D | C] -- C:\Users\david\OneDrive
                    [2014/03/26 00:14:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
                    [2014/03/24 22:36:24 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
                    [2014/03/24 22:35:43 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache
                    [2014/03/20 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
                    [2014/03/20 20:40:26 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Software
                    [2014/03/20 08:55:15 | 000,000,000 | R--D | C] -- C:\Users\david\SkyDrive
                    [2014/03/19 20:11:57 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\Identities
                    [2014/03/14 01:51:16 | 000,202,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdFilter.sys
                    [2014/03/14 01:51:14 | 000,030,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdBoot.sys
                    [2014/03/14 01:51:13 | 000,093,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys
                    [2014/03/14 01:50:45 | 003,486,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
                    [2014/03/14 01:50:40 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncHost.exe
                    [2014/03/14 01:50:37 | 013,949,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.UI.Xaml.dll
                    [2014/03/14 01:50:34 | 000,588,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncCore.dll
                    [2014/03/14 01:50:24 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSClient.dll
                    [2014/03/14 01:50:22 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsGdiConverter.dll
                    [2014/03/14 01:50:21 | 000,802,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFMediaEngine.dll
                    [2014/03/14 01:50:20 | 000,770,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgent.dll
                    [2014/03/14 01:50:19 | 000,381,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfsvr.dll
                    [2014/03/14 01:50:18 | 000,320,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgmms1.sys
                    [2014/03/14 01:50:17 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\halmacpi.dll
                    [2014/03/14 01:50:17 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hal.dll
                    [2014/03/14 01:50:16 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MsSpellCheckingFacility.dll
                    [2014/03/14 01:50:15 | 000,811,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reseteng.dll
                    [2014/03/14 01:50:15 | 000,077,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easinvoker.exe
                    [2014/03/14 01:50:09 | 000,261,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS
                    [2014/03/14 01:50:09 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sti.dll
                    [2014/03/14 01:50:09 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\easwrt.dll
                    [2014/03/14 01:50:00 | 002,143,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfcore.dll
                    [2014/03/14 01:50:00 | 001,371,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\combase.dll
                    [2014/03/14 01:49:59 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbgeng.dll
                    [2014/03/14 01:49:59 | 000,669,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfmpeg2srcsnk.dll
                    [2014/03/14 01:49:59 | 000,408,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WerFault.exe
                    [2014/03/14 01:49:59 | 000,369,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Faultrep.dll
                    [2014/03/14 01:49:59 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpencom.dll
                    [2014/03/14 01:49:58 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DWWIN.EXE
                    [2014/03/14 01:49:58 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
                    [2014/03/14 01:49:57 | 001,382,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.efi
                    [2014/03/14 01:49:57 | 001,271,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winload.exe
                    [2014/03/14 01:49:57 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdvidcrl.dll
                    [2014/03/14 01:49:57 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qedit.dll
                    [2014/03/14 01:49:57 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppcomapi.dll
                    [2014/03/14 01:49:50 | 004,244,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9.dll
                    [2014/03/14 01:49:49 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieapfltr.dll
                    [2014/03/14 01:49:49 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
                    [2014/03/14 01:49:49 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
                    [2014/03/12 22:55:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
                    [2014/03/12 22:55:53 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
                    [2014/03/12 22:08:14 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\uTorrent
                    [2014/03/12 11:36:42 | 000,000,000 | ---D | C] -- C:\ProgramData\GlarySoft

                    [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

                    [2014/04/09 21:09:33 | 000,812,350 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
                    [2014/04/09 21:09:33 | 000,722,476 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
                    [2014/04/09 21:09:33 | 000,159,412 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
                    [2014/04/09 21:09:33 | 000,135,592 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
                    [2014/04/09 21:05:16 | 000,002,147 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
                    [2014/04/09 21:05:00 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
                    [2014/04/09 21:04:29 | 000,000,338 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize 4.job
                    [2014/04/09 21:03:40 | 000,003,120 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-3.job
                    [2014/04/09 21:03:34 | 000,001,592 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-5.job
                    [2014/04/09 21:03:32 | 000,002,328 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-4.job
                    [2014/04/09 21:03:31 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
                    [2014/04/09 21:03:28 | 000,001,498 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-1.job
                    [2014/04/09 21:03:28 | 000,001,416 | ---- | M] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-2.job
                    [2014/04/09 21:02:58 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
                    [2014/04/09 21:02:56 | 2515,468,288 | -HS- | M] () -- C:\hiberfil.sys
                    [2014/04/09 19:31:04 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
                    [2014/04/09 19:30:52 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_3
                    [2014/04/09 19:30:51 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_2
                    [2014/04/09 19:30:45 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_1
                    [2014/04/09 19:30:35 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_4
                    [2014/04/09 19:21:52 | 000,001,072 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
                    [2014/04/09 18:57:12 | 000,000,125 | ---- | M] () -- C:\Users\david\AppData\Roaming\D2Info0
                    [2014/04/06 21:20:37 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
                    [2014/04/04 08:34:47 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_5
                    [2014/04/02 23:05:24 | 000,367,896 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
                    [2014/04/02 23:03:48 | 000,001,166 | ---- | M] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
                    [2014/04/02 22:55:36 | 000,001,754 | ---- | M] () -- C:\Users\Public\Desktop\YAC.lnk
                    [2014/04/01 20:16:46 | 000,033,898 | ---- | M] () -- C:\Users\david\Documents\Torah.odt
                    [2014/03/29 21:12:36 | 000,002,247 | ---- | M] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
                    [2014/03/27 00:39:49 | 000,000,008 | ---- | M] () -- C:\Users\david\AppData\Roaming\DofusAppId0_6
                    [2014/03/26 09:54:30 | 000,040,832 | ---- | M] () -- C:\Users\david\Documents\kinect.jpg
                    [2014/03/24 19:43:54 | 000,001,078 | ---- | M] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 4.lnk
                    [2014/03/24 19:43:54 | 000,001,054 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 4.lnk
                    [2014/03/22 21:23:02 | 000,000,082 | ---- | M] () -- C:\Users\david\AppData\Roaming\WB.CFG
                    [2014/03/22 21:09:01 | 000,001,046 | RHS- | M] () -- C:\ProgramData\ntuser.pol
                    [2014/03/19 20:14:22 | 000,326,115 | ---- | M] () -- C:\Users\david\Documents\Scan.jpg
                    [2014/03/17 08:23:10 | 000,101,664 | ---- | M] (Glarysoft Ltd) -- C:\WINDOWS\System32\BootDefrag.exe
                    [2014/03/17 08:07:34 | 000,016,064 | ---- | M] (Glarysoft Ltd) -- C:\WINDOWS\System32\drivers\BootDefragDriver.sys
                    [2014/03/12 22:09:09 | 000,000,897 | ---- | M] () -- C:\Users\david\Desktop\µTorrent.lnk
                    [2014/03/12 21:56:42 | 000,493,272 | ---- | M] () -- C:\Users\david\AppData\Roaming\~yljxxkf.exe
                    [2014/03/12 11:29:37 | 000,001,140 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
                    [2014/03/11 22:21:16 | 000,001,038 | ---- | M] () -- C:\Users\david\Desktop\TPE.lnk

                    [color=#E56717]========== Files Created - No Company Name ==========[/color]

                    [2014/04/06 21:20:37 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
                    [2014/04/02 22:55:36 | 000,001,754 | ---- | C] () -- C:\Users\Public\Desktop\YAC.lnk
                    [2014/04/01 18:45:43 | 000,033,898 | ---- | C] () -- C:\Users\david\Documents\Torah.odt
                    [2014/03/31 17:53:49 | 000,001,592 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-5.job
                    [2014/03/31 17:53:46 | 000,001,416 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-2.job
                    [2014/03/31 17:53:43 | 000,001,498 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-1.job
                    [2014/03/31 17:53:24 | 000,002,328 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-4.job
                    [2014/03/31 17:53:22 | 000,003,120 | ---- | C] () -- C:\WINDOWS\tasks\8d8db532-02b3-40c7-9062-c933d9fca1a5-3.job
                    [2014/03/28 13:12:35 | 000,002,247 | ---- | C] () -- C:\Users\david\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
                    [2014/03/28 13:12:35 | 000,002,147 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
                    [2014/03/28 13:11:54 | 000,001,072 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
                    [2014/03/28 13:11:53 | 000,001,068 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
                    [2014/03/26 09:54:25 | 000,040,832 | ---- | C] () -- C:\Users\david\Documents\kinect.jpg
                    [2014/03/24 23:25:34 | 000,002,573 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visionneuse Microsoft PowerPoint .lnk
                    [2014/03/19 20:10:06 | 000,326,115 | ---- | C] () -- C:\Users\david\Documents\Scan.jpg
                    [2014/03/14 01:50:24 | 000,103,936 | ---- | C] () -- C:\WINDOWS\System32\OEMLicense.dll
                    [2014/03/14 01:49:58 | 000,386,722 | ---- | C] () -- C:\WINDOWS\System32\ApnDatabase.xml
                    [2014/03/12 22:09:09 | 000,000,897 | ---- | C] () -- C:\Users\david\Desktop\µTorrent.lnk
                    [2014/03/12 21:56:29 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~yljxxkf.exe
                    [2014/03/11 22:20:55 | 000,001,038 | ---- | C] () -- C:\Users\david\Desktop\TPE.lnk
                    [2014/03/09 18:36:27 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_8
                    [2014/02/23 01:59:49 | 000,000,082 | ---- | C] () -- C:\Users\david\AppData\Roaming\WB.CFG
                    [2014/02/17 19:58:27 | 000,001,046 | RHS- | C] () -- C:\ProgramData\ntuser.pol
                    [2014/02/02 21:11:50 | 000,000,608 | -HS- | C] () -- C:\WINDOWS\System32\winzvprt5.sys
                    [2014/02/02 21:11:50 | 000,000,230 | ---- | C] () -- C:\WINDOWS\System32\hppfaxprinter5.ini
                    [2014/02/01 21:39:00 | 000,326,944 | ---- | C] () -- C:\Users\david\AppData\Roaming\~jaazigi.exe
                    [2014/02/01 21:28:46 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~mypvlwd.exe
                    [2014/01/26 16:56:07 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_7
                    [2013/12/12 19:19:46 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_6
                    [2013/12/10 18:32:17 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_5
                    [2013/12/08 21:38:30 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxduvs.dll
                    [2013/12/08 21:38:08 | 001,036,288 | ---- | C] () -- C:\WINDOWS\System32\lxdudrs.dll
                    [2013/12/08 21:38:08 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\lxducaps.dll
                    [2013/12/08 21:38:08 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxducnv4.dll
                    [2013/12/08 21:37:58 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXDUPMON.DLL
                    [2013/12/08 21:37:58 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXDUFXPU.DLL
                    [2013/12/08 21:37:38 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\lxduoem.dll
                    [2013/12/08 21:34:19 | 001,069,056 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduserv.dll
                    [2013/12/08 21:34:19 | 000,860,160 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduusb1.dll
                    [2013/12/08 21:34:19 | 000,446,464 | ---- | C] ( ) -- C:\WINDOWS\System32\LXDUhcp.dll
                    [2013/12/08 21:34:19 | 000,389,120 | ---- | C] () -- C:\WINDOWS\System32\LXDUinst.dll
                    [2013/12/08 21:34:19 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduinpa.dll
                    [2013/12/08 21:34:19 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduiesc.dll
                    [2013/12/08 21:34:18 | 000,651,264 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdupmui.dll
                    [2013/12/08 21:34:18 | 000,577,536 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdulmpm.dll
                    [2013/12/08 21:34:18 | 000,323,584 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduih.exe
                    [2013/12/08 21:34:17 | 000,684,032 | ---- | C] ( ) -- C:\WINDOWS\System32\lxduhbn3.dll
                    [2013/12/08 21:34:17 | 000,589,824 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducoms.exe
                    [2013/12/08 21:34:17 | 000,376,832 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducomm.dll
                    [2013/12/08 21:34:17 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdugrd.dll
                    [2013/12/08 21:34:16 | 000,761,856 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducomc.dll
                    [2013/12/08 21:34:16 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducfg.exe
                    [2013/12/08 21:30:56 | 000,409,600 | ---- | C] ( ) -- C:\WINDOWS\System32\lxducoin.dll
                    [2013/12/04 23:59:22 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_4
                    [2013/12/04 23:59:16 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_3
                    [2013/12/04 23:54:30 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_2
                    [2013/12/04 23:54:07 | 000,000,125 | ---- | C] () -- C:\Users\david\AppData\Roaming\D2Info0
                    [2013/12/04 23:54:07 | 000,000,008 | ---- | C] () -- C:\Users\david\AppData\Roaming\DofusAppId0_1
                    [2013/09/30 05:48:23 | 000,812,350 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
                    [2013/09/30 05:48:23 | 000,350,772 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
                    [2013/09/30 05:48:23 | 000,159,412 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
                    [2013/09/30 05:48:23 | 000,040,528 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
                    [2013/08/22 10:19:09 | 000,722,476 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
                    [2013/08/22 10:19:09 | 000,296,742 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
                    [2013/08/22 10:19:09 | 000,135,592 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
                    [2013/08/22 10:19:09 | 000,033,362 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
                    [2013/08/22 10:17:31 | 000,000,389 | ---- | C] () -- C:\WINDOWS\System32\AutoWorkplace.exe.config
                    [2013/08/22 10:17:30 | 000,215,943 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
                    [2013/08/22 10:17:29 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\NOISE.DAT
                    [2013/08/22 09:24:03 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
                    [2013/08/22 09:22:45 | 000,367,896 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
                    [2013/08/22 05:33:54 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\BthpanContextHandler.dll
                    [2013/08/22 05:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\BWContextHandler.dll
                    [2013/08/22 01:57:03 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
                    [2013/08/22 01:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
                    [2013/08/22 01:52:35 | 001,520,828 | ---- | C] () -- C:\WINDOWS\System32\WpcNBModel.bin
                    [2013/08/22 01:52:35 | 000,526,068 | ---- | C] () -- C:\WINDOWS\System32\staticurllist.bin
                    [2013/08/22 01:50:57 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\settings.dat
                    [2013/08/22 01:48:14 | 000,049,963 | ---- | C] () -- C:\WINDOWS\System32\srms.dat
                    [2012/11/27 01:20:38 | 000,128,204 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng575.bin
                    [2012/11/27 01:20:36 | 000,867,020 | ---- | C] () -- C:\WINDOWS\System32\igkrng575.bin
                    [2012/11/27 01:20:36 | 000,105,608 | ---- | C] () -- C:\WINDOWS\System32\igfcg575m.bin
                    [2012/11/27 01:03:36 | 013,913,600 | ---- | C] () -- C:\WINDOWS\System32\ig4icd32.dll
                    [2012/11/27 00:56:12 | 000,004,096 | ---- | C] ( ) -- C:\WINDOWS\System32\IGFXDEVLib.dll
                    [2012/11/27 00:54:56 | 000,000,146 |
                    1. Modérateur
                      autant pour moi, il faut que tu envoies le rapport sur http://pjjoint.malekal.com car il est incomplet.
                      Bref lis la fin de la procédure.
                      1. Modérateur
                        Désinstalle : McAfee Security Scan

                        Relance OTL.
                        o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
                        Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

                        :OTL
                        SRV - File not found [Auto | Stopped] -- C:\Program Files\iSafe\iSafeSvc.exe -- (iSafeService)
                        [2014/03/31 17:53:37 | 000,000,000 | ---D | M] (Pricora 2.0) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com
                        [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com\extensionData
                        [2014/03/31 17:53:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com\extensionData\plugins
                        [2014/03/31 17:53:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\c8fc5aa5-ee60-4adf-a5f4-b8ce72dcb8bd@6a0d5eea-5b10-4e7f-99b7-839d7b38ef14.com\extensionData\userCode
                        CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider
                        CHR - Extension: Pricora 2.0 = C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\
                        [2014/03/20 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
                        [2014/03/20 20:40:26 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Local\Software
                        [2014/04/06 21:00:31 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\wp_update
                        [2014/04/06 20:56:48 | 000,000,000 | ---D | C] -- C:\Users\david\AppData\Roaming\iSafe
                        [2014/04/02 22:55:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
                        [2014/03/31 17:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Pricora 2.0
                        [2014/02/01 21:39:00 | 000,326,944 | ---- | C] () -- C:\Users\david\AppData\Roaming\~jaazigi.exe
                        [2014/02/01 21:28:46 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~mypvlwd.exe
                        [2014/03/12 21:56:29 | 000,493,272 | ---- | C] () -- C:\Users\david\AppData\Roaming\~yljxxkf.exe

                        * poste le rapport ici

                        Redémarre l'ordinateur

                        tu as quoi comme antivirus ?
                        1. Plus d'anti-virus je crois (vu que mcafee désinstallé)

                          ========== OTL ==========
                          Service iSafeService stopped successfully!
                          Service iSafeService deleted successfully!
                          File C:\Program Files\iSafe\iSafeSvc.exe not found.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\skin folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\locale\en-US folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\locale folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\defaults\preferences folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\defaults folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome\content\core folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome\content\api folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome\content folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\chrome folder moved successfully.
                          C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@*** folder moved successfully.
                          Folder C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\ not found.
                          Folder C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\plugins\ not found.
                          Folder C:\Users\david\AppData\Roaming\mozilla\Firefox\Profiles\0f746ly5.default\extensions\***@***\extensionData\userCode\ not found.
                          File C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0\crossrider not found.
                          File C:\Users\david\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmookaamlkjilnemkglmedgieblahbcn\1.26.134_0 not found.
                          C:\Users\david\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl folder moved successfully.
                          C:\Users\david\AppData\Local\Software\CrashReports folder moved successfully.
                          C:\Users\david\AppData\Local\Software folder moved successfully.
                          C:\Users\david\AppData\Roaming\wp_update folder moved successfully.
                          C:\Users\david\AppData\Roaming\iSafe folder moved successfully.
                          C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC folder moved successfully.
                          C:\Program Files\Pricora 2.0 folder moved successfully.
                          C:\Users\david\AppData\Roaming\~jaazigi.exe moved successfully.
                          C:\Users\david\AppData\Roaming\~mypvlwd.exe moved successfully.
                          C:\Users\david\AppData\Roaming\~yljxxkf.exe moved successfully.

                          OTL by OldTimer - Version 3.2.69.0 log created on 04102014_003012

                          Merci beaucoup, t un boss
                          1. je l'avais avant maleware bytes (je sais plus trop pourquoi je m'en suis débarrassé ...)